Edit tour

Linux Analysis Report
armv5l.elf

Overview

General Information

Sample name:	armv5l.elf
Analysis ID:	1590158
MD5:	86030031c199609bf284227de6bce6ef
SHA1:	36d9aa8d170a387cf95f34efec5899e7efb56775
SHA256:	b6b760a8a84d05a8092ae27804f9cf735d728228fb8e8e109a3e9873e7c1f4fd
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590158
Start date and time:	2025-01-13 17:07:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	armv5l.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: 185.189.13.91:25565

Runtime Messages

Command:	/tmp/armv5l.elf
PID:	6221
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

armv5l.elf (PID: 6221, Parent: 6136, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/armv5l.elf

armv5l.elf New Fork (PID: 6223, Parent: 6221)

armv5l.elf New Fork (PID: 6225, Parent: 6223)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
armv5l.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
armv5l.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
armv5l.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xefa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf02c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf07c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf090:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf108:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf11c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf130:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6223.1.00007f81bc017000.00007f81bc028000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6223.1.00007f81bc017000.00007f81bc028000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xefa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf02c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf07c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf090:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf108:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf11c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf130:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6221.1.00007f81bc017000.00007f81bc028000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6221.1.00007f81bc017000.00007f81bc028000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xefa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xefdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf02c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf07c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf090:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf108:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf11c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf130:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: armv5l.elf PID: 6221	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv5l.elf PID: 6221	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12ade:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12af2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b06:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b1a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b2e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b42:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b56:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b6a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b7e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b92:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ba6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12be2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bf6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c0a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c1e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c32:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c46:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c5a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c6e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: armv5l.elf PID: 6223	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv5l.elf PID: 6223	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf654:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf668:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf67c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf690:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-13T17:07:49.309087+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35436	185.189.13.91	25565	TCP
2025-01-13T17:07:51.068952+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35438	185.189.13.91	25565	TCP
2025-01-13T17:07:52.796735+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35440	185.189.13.91	25565	TCP
2025-01-13T17:07:54.549048+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35442	185.189.13.91	25565	TCP
2025-01-13T17:07:56.326472+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35444	185.189.13.91	25565	TCP
2025-01-13T17:07:58.064379+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35446	185.189.13.91	25565	TCP
2025-01-13T17:07:59.834669+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35448	185.189.13.91	25565	TCP
2025-01-13T17:08:01.562652+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35450	185.189.13.91	25565	TCP
2025-01-13T17:08:03.313743+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35452	185.189.13.91	25565	TCP
2025-01-13T17:08:05.085707+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35454	185.189.13.91	25565	TCP
2025-01-13T17:08:06.845984+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35456	185.189.13.91	25565	TCP
2025-01-13T17:08:08.579557+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35458	185.189.13.91	25565	TCP
2025-01-13T17:08:10.314555+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35460	185.189.13.91	25565	TCP
2025-01-13T17:08:12.078257+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35462	185.189.13.91	25565	TCP
2025-01-13T17:08:13.833547+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35464	185.189.13.91	25565	TCP
2025-01-13T17:08:15.585182+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35466	185.189.13.91	25565	TCP
2025-01-13T17:08:17.312977+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35468	185.189.13.91	25565	TCP
2025-01-13T17:08:19.062421+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35470	185.189.13.91	25565	TCP
2025-01-13T17:08:20.821505+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35472	185.189.13.91	25565	TCP
2025-01-13T17:08:22.546091+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35474	185.189.13.91	25565	TCP
2025-01-13T17:08:24.301818+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35476	185.189.13.91	25565	TCP
2025-01-13T17:08:26.139148+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35478	185.189.13.91	25565	TCP
2025-01-13T17:08:27.876176+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35480	185.189.13.91	25565	TCP
2025-01-13T17:08:29.611914+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35482	185.189.13.91	25565	TCP
2025-01-13T17:08:31.346153+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35484	185.189.13.91	25565	TCP
2025-01-13T17:08:33.095744+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35486	185.189.13.91	25565	TCP
2025-01-13T17:08:34.867048+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35488	185.189.13.91	25565	TCP
2025-01-13T17:08:36.592985+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35490	185.189.13.91	25565	TCP
2025-01-13T17:08:38.327640+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35492	185.189.13.91	25565	TCP
2025-01-13T17:08:40.065728+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35494	185.189.13.91	25565	TCP
2025-01-13T17:08:41.817600+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35496	185.189.13.91	25565	TCP
2025-01-13T17:08:43.567727+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35498	185.189.13.91	25565	TCP
2025-01-13T17:08:45.338560+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35500	185.189.13.91	25565	TCP
2025-01-13T17:08:47.096643+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35502	185.189.13.91	25565	TCP
2025-01-13T17:08:48.846840+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35504	185.189.13.91	25565	TCP
2025-01-13T17:08:50.580533+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35506	185.189.13.91	25565	TCP
2025-01-13T17:08:52.333793+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35508	185.189.13.91	25565	TCP
2025-01-13T17:08:54.061109+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35510	185.189.13.91	25565	TCP
2025-01-13T17:08:55.820627+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35512	185.189.13.91	25565	TCP
2025-01-13T17:08:57.568924+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35514	185.189.13.91	25565	TCP
2025-01-13T17:08:59.313554+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35516	185.189.13.91	25565	TCP
2025-01-13T17:09:01.067202+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35518	185.189.13.91	25565	TCP
2025-01-13T17:09:02.814453+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35520	185.189.13.91	25565	TCP
2025-01-13T17:09:04.569782+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35522	185.189.13.91	25565	TCP
2025-01-13T17:09:06.355918+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35524	185.189.13.91	25565	TCP
2025-01-13T17:09:08.097200+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35526	185.189.13.91	25565	TCP
2025-01-13T17:09:09.860216+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35528	185.189.13.91	25565	TCP
2025-01-13T17:09:11.610381+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35530	185.189.13.91	25565	TCP
2025-01-13T17:09:13.345152+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35532	185.189.13.91	25565	TCP
2025-01-13T17:09:15.102461+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35534	185.189.13.91	25565	TCP
2025-01-13T17:09:16.879085+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35536	185.189.13.91	25565	TCP
2025-01-13T17:09:18.607522+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35538	185.189.13.91	25565	TCP
2025-01-13T17:09:20.351680+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35540	185.189.13.91	25565	TCP
2025-01-13T17:09:22.101097+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35542	185.189.13.91	25565	TCP
2025-01-13T17:09:23.849662+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35544	185.189.13.91	25565	TCP
2025-01-13T17:09:25.632928+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35546	185.189.13.91	25565	TCP
2025-01-13T17:09:27.379505+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35548	185.189.13.91	25565	TCP
2025-01-13T17:09:29.107428+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35550	185.189.13.91	25565	TCP
2025-01-13T17:09:30.846091+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35552	185.189.13.91	25565	TCP
2025-01-13T17:09:32.582533+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35554	185.189.13.91	25565	TCP
2025-01-13T17:09:34.345692+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35556	185.189.13.91	25565	TCP
2025-01-13T17:09:36.082463+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35558	185.189.13.91	25565	TCP
2025-01-13T17:09:37.893424+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35560	185.189.13.91	25565	TCP
2025-01-13T17:09:39.660640+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35562	185.189.13.91	25565	TCP
2025-01-13T17:09:41.423054+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35564	185.189.13.91	25565	TCP
2025-01-13T17:09:43.202933+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35566	185.189.13.91	25565	TCP
2025-01-13T17:09:44.939080+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35568	185.189.13.91	25565	TCP
2025-01-13T17:09:46.672197+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35570	185.189.13.91	25565	TCP
2025-01-13T17:09:48.410054+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35572	185.189.13.91	25565	TCP
2025-01-13T17:09:50.180335+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35574	185.189.13.91	25565	TCP
2025-01-13T17:09:51.907641+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35576	185.189.13.91	25565	TCP
2025-01-13T17:09:53.680451+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35578	185.189.13.91	25565	TCP
2025-01-13T17:09:55.541129+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35580	185.189.13.91	25565	TCP
2025-01-13T17:09:57.285051+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35582	185.189.13.91	25565	TCP
2025-01-13T17:09:59.089520+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35584	185.189.13.91	25565	TCP
2025-01-13T17:10:00.855924+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35586	185.189.13.91	25565	TCP
2025-01-13T17:10:02.599604+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35588	185.189.13.91	25565	TCP
2025-01-13T17:10:04.395661+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35590	185.189.13.91	25565	TCP
2025-01-13T17:10:06.146998+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35592	185.189.13.91	25565	TCP
2025-01-13T17:10:07.899053+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35594	185.189.13.91	25565	TCP
2025-01-13T17:10:09.662396+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35596	185.189.13.91	25565	TCP
2025-01-13T17:10:11.462464+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35598	185.189.13.91	25565	TCP
2025-01-13T17:10:13.212887+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35600	185.189.13.91	25565	TCP
2025-01-13T17:10:14.942443+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35602	185.189.13.91	25565	TCP
2025-01-13T17:10:16.710485+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35604	185.189.13.91	25565	TCP
2025-01-13T17:10:18.438029+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35606	185.189.13.91	25565	TCP
2025-01-13T17:10:20.207636+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35608	185.189.13.91	25565	TCP
2025-01-13T17:10:21.955335+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35610	185.189.13.91	25565	TCP
2025-01-13T17:10:23.692975+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35612	185.189.13.91	25565	TCP
2025-01-13T17:10:25.445710+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35614	185.189.13.91	25565	TCP
2025-01-13T17:10:27.210954+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35616	185.189.13.91	25565	TCP
2025-01-13T17:10:28.957012+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35618	185.189.13.91	25565	TCP
2025-01-13T17:10:30.852710+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35620	185.189.13.91	25565	TCP
2025-01-13T17:10:32.600585+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35622	185.189.13.91	25565	TCP
2025-01-13T17:10:34.346276+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35624	185.189.13.91	25565	TCP
2025-01-13T17:10:36.098774+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35626	185.189.13.91	25565	TCP
2025-01-13T17:10:37.828312+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35628	185.189.13.91	25565	TCP
2025-01-13T17:10:39.569525+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35630	185.189.13.91	25565	TCP
2025-01-13T17:10:41.337979+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35632	185.189.13.91	25565	TCP
2025-01-13T17:10:43.082654+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35634	185.189.13.91	25565	TCP
2025-01-13T17:10:44.831093+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35636	185.189.13.91	25565	TCP
2025-01-13T17:10:46.587209+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35638	185.189.13.91	25565	TCP
2025-01-13T17:10:48.346728+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35640	185.189.13.91	25565	TCP
2025-01-13T17:10:50.082427+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35642	185.189.13.91	25565	TCP
2025-01-13T17:10:51.832542+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35644	185.189.13.91	25565	TCP
2025-01-13T17:10:53.601433+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35646	185.189.13.91	25565	TCP
2025-01-13T17:10:55.401423+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35648	185.189.13.91	25565	TCP
2025-01-13T17:10:57.150120+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35650	185.189.13.91	25565	TCP
2025-01-13T17:10:58.928032+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35652	185.189.13.91	25565	TCP
2025-01-13T17:11:00.681106+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35654	185.189.13.91	25565	TCP
2025-01-13T17:11:02.425967+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35656	185.189.13.91	25565	TCP
2025-01-13T17:11:04.177005+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35658	185.189.13.91	25565	TCP
2025-01-13T17:11:05.909938+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35660	185.189.13.91	25565	TCP
2025-01-13T17:11:07.661990+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35662	185.189.13.91	25565	TCP
2025-01-13T17:11:09.431593+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35664	185.189.13.91	25565	TCP
2025-01-13T17:11:11.215983+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35666	185.189.13.91	25565	TCP
2025-01-13T17:11:12.992096+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35668	185.189.13.91	25565	TCP
2025-01-13T17:11:14.721185+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35670	185.189.13.91	25565	TCP
2025-01-13T17:11:16.475677+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35672	185.189.13.91	25565	TCP
2025-01-13T17:11:18.237359+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35674	185.189.13.91	25565	TCP
2025-01-13T17:11:19.987980+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35676	185.189.13.91	25565	TCP
2025-01-13T17:11:21.738359+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35678	185.189.13.91	25565	TCP
2025-01-13T17:11:23.483849+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35680	185.189.13.91	25565	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: armv5l.elf

Avira: detected

Found malware configuration

Source: armv5l.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.189.13.91:25565"}

Multi AV Scanner detection for submitted file

Source: armv5l.elf	Virustotal: Detection: 70%			Perma Link
Source: armv5l.elf	ReversingLabs: Detection: 73%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/armv5l.elf (PID: 6221)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35438 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35454 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35456 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35458 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35446 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35476 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35484 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35478 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35460 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35440 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35444 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35474 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35470 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35508 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35480 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35462 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35464 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35466 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35486 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35452 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35530 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35482 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35512 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35518 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35448 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35494 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35514 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35502 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35510 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35522 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35548 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35490 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35534 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35498 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35564 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35488 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35568 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35540 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35450 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35468 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35584 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35562 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35558 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35572 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35546 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35532 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35566 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35576 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35542 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35594 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35598 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35588 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35506 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35592 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35524 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35622 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35544 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35578 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35582 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35554 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35570 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35618 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35442 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35560 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35528 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35624 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35608 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35472 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35632 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35638 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35538 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35610 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35600 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35646 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35604 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35640 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35644 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35556 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35652 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35648 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35574 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35656 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35634 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35650 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35586 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35658 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35596 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35602 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35626 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35662 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35676 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35550 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35642 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35616 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35612 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35552 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35606 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35436 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35674 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35516 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35664 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35492 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35660 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35620 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35670 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35678 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35580 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35590 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35654 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35668 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35500 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35672 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35536 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35630 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35636 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35680 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35496 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35614 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35666 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35504 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35520 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35526 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35628 -> 185.189.13.91:25565

Source: global traffic

TCP traffic: 192.168.2.23:35436 -> 185.189.13.91:25565

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: armv5l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6223.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6221.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: armv5l.elf PID: 6221, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: armv5l.elf PID: 6223, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: armv5l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6223.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6221.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: armv5l.elf PID: 6221, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: armv5l.elf PID: 6223, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@0/0

Source: armv5l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv5l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv5l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv5l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv5l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv5l.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: armv5l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /tmp/armv5l.elf (PID: 6221)

Queries kernel information via 'uname':

Jump to behavior

Source: armv5l.elf, 6221.1.00005598e971a000.00005598e9848000.rw-.sdmp, armv5l.elf, 6223.1.00005598e971a000.00005598e9848000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: armv5l.elf, 6221.1.00005598e971a000.00005598e9848000.rw-.sdmp, armv5l.elf, 6223.1.00005598e971a000.00005598e9848000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: armv5l.elf, 6221.1.00007fffc3af4000.00007fffc3b15000.rw-.sdmp, armv5l.elf, 6223.1.00007fffc3af4000.00007fffc3b15000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: armv5l.elf, 6221.1.00007fffc3af4000.00007fffc3b15000.rw-.sdmp, armv5l.elf, 6223.1.00007fffc3af4000.00007fffc3b15000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/armv5l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/armv5l.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: armv5l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: armv5l.elf, type: SAMPLE
Source: Yara match	File source: 6223.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6221.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv5l.elf PID: 6221, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv5l.elf PID: 6223, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: armv5l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: armv5l.elf, type: SAMPLE
Source: Yara match	File source: 6223.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6221.1.00007f81bc017000.00007f81bc028000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv5l.elf PID: 6221, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv5l.elf PID: 6223, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.189.13.91:25565"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
armv5l.elf	70%	Virustotal		Browse
armv5l.elf	74%	ReversingLabs	Linux.Backdoor.Gafgyt
armv5l.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.189.13.91:25565	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.189.13.91	unknown	Russian Federation	50113	SUPERSERVERSDATACENTERRU	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	t3.elf	Get hash	malicious	Unknown	Browse
	t2.elf	Get hash	malicious	Unknown	Browse
	hikarm6.elf	Get hash	malicious	Unknown	Browse
	g6.elf	Get hash	malicious	Unknown	Browse
	t1.elf	Get hash	malicious	Unknown	Browse
	12.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	t3.elf	Get hash	malicious	Unknown	Browse
	t2.elf	Get hash	malicious	Unknown	Browse
	hikarm4.elf	Get hash	malicious	Unknown	Browse
	hikarm6.elf	Get hash	malicious	Unknown	Browse
	g6.elf	Get hash	malicious	Unknown	Browse
	t1.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	t3.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	t2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hikarm4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hikarm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	g6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
SUPERSERVERSDATACENTERRU	covid.arm7.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	covid.mips.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	covid.arm6.elf	Get hash	malicious	Unknown	Browse	185.255.135.104
	covid.x86.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	byte.mpsl.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	185.206.2.20
	http://osregist.xyz/tdrig/CNBR.html	Get hash	malicious	Unknown	Browse	185.255.135.223
	Clienter.dll.dll	Get hash	malicious	Unknown	Browse	185.40.4.94
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	147.78.65.71
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	147.78.65.71
INIT7CH	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	t3.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	t2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	hikarm4.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	hikarm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	g6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	t1.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	5.9630193872983215
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	armv5l.elf
File size:	100'871 bytes
MD5:	86030031c199609bf284227de6bce6ef
SHA1:	36d9aa8d170a387cf95f34efec5899e7efb56775
SHA256:	b6b760a8a84d05a8092ae27804f9cf735d728228fb8e8e109a3e9873e7c1f4fd
SHA512:	56cc3d616717ad8c09cd19e54634e8715c25bfd6016af3add264a86a00b8d20550d37768a854c4693b3265a72eff13d7601effcaa622b0aa4ad605b97f9d0277
SSDEEP:	3072:VSx+i6mqaObhNnnPNKV+qKmZuqQ4DPwXXtse:y6mRObnnnP7qKmZuqQ4DPwXXtse
TLSH:	B7A31A44F841872BC3D327BBE78E479D3B36569467DB33116A386EB42BC17C92E29520
File Content Preview:	.ELF...a..........(.........4....&......4. ...(..........................................................g..........Q.td..................................-...L."....9..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	75400
Section Header Size:	40
Number of Section Headers:	20
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0xe7c4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x16874	0xe874	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x16888	0xe888	0x2690	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x18f18	0x10f18	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x21000	0x11000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x21008	0x11008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x21010	0x11010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x21014	0x11014	0x3a0	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x213b4	0x113b4	0x635c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x113b4	0xa90	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x11e48	0xa0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x11ee8	0x30c	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x121f4	0x64	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x12258	0x2e7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x12540	0xa0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x125e0	0xa8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x129a8	0x3f10	0x10	0x0		19	572	4
.strtab	STRTAB	0x0	0x168b8	0x214f	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x10f1c	0x10f1c	6.0989	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x11000	0x21000	0x21000	0x3b4	0x6710	2.7469	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x16874	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x16888	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x18f18	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x21000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x21008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x21010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x21014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x213b4	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x16874	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16880	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x16838	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1686c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x16884	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x956c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb5e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeeb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf00c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf05c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf17c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf70c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfaac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1025c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1047c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1053c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1076c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1090c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1102c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11084	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1191c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12530	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12548	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1256c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12754	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13010	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1329c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1393c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13adc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1409c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14158	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1481c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ad4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1539c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1558c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15898	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1628c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16384	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x165b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16614	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21000	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x21008	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x2101c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16868	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x997c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa820	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d3c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa9a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb324	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb5dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcb1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdb24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf1f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf224	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21050	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x21058	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf230	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf704	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfca4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfe50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21060	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xff40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1024c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21168	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x102c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10350	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x103e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10464	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21180	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1068c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1075c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17ec0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21234	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10b40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10bec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10eb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2124c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10fc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11130	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25614	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x111bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21254	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x12564	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x125a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ac4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ad4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2126c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x17f44	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12c44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13574	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13934	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13c50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x213a8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x14808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ed0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16284	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16370	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164a4	0	NOTYPE	<unknown>	DEFAULT	2
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.111.5062	.symtab	0x16d3c	8	OBJECT	<unknown>	DEFAULT	4
C.148.5389	.symtab	0x176b8	24	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xf348	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xf364	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x213e8	16384	OBJECT	<unknown>	DEFAULT	10
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0xb328	340	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0xa83c	364	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0xb5e0	376	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x9d00	1228	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x21004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x21000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x21050	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x178c0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x213a8	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x17fa6	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x21058	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x17bc0	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x2100c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x21008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x18f18	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x18f18	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x21050	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x178c0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x213a8	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x17fa6	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x21058	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x17bc0	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x21054	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x213ac	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x2105c	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0xf228	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xef08	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x10114	328	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1256c	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xef5c	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xef88	44	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xfa80	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x25614	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x1090c	148	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x125d4	384	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x12bc0	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x12754	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xefb4	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x16378	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x16384	304	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x11000	44	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1102c	44	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x11058	44	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xefe0	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xfaac	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x11084	44	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x25618	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x13368	528	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10698	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xf00c	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x13210	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xf05c	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x165b0	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x16190	252	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xf250	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x117a0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1628c	236	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xf260	156	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x125a8	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x10260	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1053c	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xf0f4	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xfb08	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x110dc	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xf120	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xfb34	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0xfb60	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xf150	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x109a0	420	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xfbc4	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xf380	264	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xf488	28	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x131e0	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xf320	96	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x130c8	200	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x117b0	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x151c0	224	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x13190	80	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xf4a4	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xf59c	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x11868	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1076c	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xf17c	44	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x13f84	52	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xf1f4	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x13fec	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x11188	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x155d8	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x15648	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x15628	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xf1b0	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x21010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x21010	0	OBJECT	<unknown>	DEFAULT	8
__aeabi_idiv	.symtab	0x16614	0	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_idivmod	.symtab	0x1673c	24	FUNC	<unknown>	DEFAULT	2
__aeabi_ldiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xec14	0	FUNC	<unknown>	DEFAULT	2
__aeabi_uidivmod	.symtab	0xed0c	24	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x25608	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x21234	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__bss_end__	.symtab	0x27710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x213b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x213b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10c08	56	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x21054	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x213ac	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x2105c	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x25638	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x21014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x13b4c	220	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x154c0	204	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x13a24	184	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x10fd0	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x10fcc	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__divsi3	.symtab	0x16614	296	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x11a08	2060	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x16838	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x21018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x15418	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1393c	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x13adc	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x27710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x25600	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0xf228	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x255f8	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x21000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x21000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x124e8	72	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0xff58	148	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x10020	244	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0xffec	32	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1000c	20	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x21000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x21000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x1558c	76	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x13b38	20	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x165b0	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x255fc	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xf1b0	44	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x21060	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x255dc	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x276cc	24	OBJECT	<unknown>	DEFAULT	10
__modsi3	.symtab	0x16754	228	FUNC	<unknown>	DEFAULT	2
__muldi3	.symtab	0xedf4	80	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x276f4	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x27700	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x13c28	52	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x12214	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x25604	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x21000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x21000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x13c5c	808	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x21254	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x2560c	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x276e4	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x27704	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0xfccc	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xfcf0	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xfca8	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x21278	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x15704	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1409c	188	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x164b4	204	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x15760	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x12ac8	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3929	.symtab	0x17f44	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x15898	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x16580	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x158c4	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x15980	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x12b90	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2127c	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x10fd4	44	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x10c9c	588	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2124c	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xec14	248	FUNC	<unknown>	DEFAULT	2
__umodsi3	.symtab	0xed24	204	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_end__	.symtab	0x27710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x14158	76	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x12548	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x27708	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2770c	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x213b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x27710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x25614	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xef08	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x16874	4	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x25644	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x141a4	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x15b28	1640	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x25618	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	4	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x15a84	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x11310	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x1481c	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x14ad4	1220	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x148b4	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x148ec	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x14a88	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2764c	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x12760	760	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x12a58	112	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x21280	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x21284	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x12c54	320	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x25640	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x2129c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x2563c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x212b8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x12ad8	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x212b4	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x10774	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x15af4	52	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x18360	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x111c0	336	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x14228	1524	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x10114	328	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0xef30	44	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0xc8e8	356	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0xc278	1648	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0xbc64	1556	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0xf240	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x255f4	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2789	.symtab	0x25610	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x1256c	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
buf.2613	.symtab	0x253ec	16	OBJECT	<unknown>	DEFAULT	10
buf.4901	.symtab	0x253fc	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x21048	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x1686c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xef5c	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x21024	4	OBJECT	<unknown>	DEFAULT	9
completed.2555	.symtab	0x213b4	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x956c	640	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x9984	344	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x21044	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x21020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x25600	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x25614	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1090c	148	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x18ed0	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x125d4	384	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x12bc0	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x18ebc	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x12754	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x21014	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x213b0	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0xfe68	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x16378	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x16378	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x16384	304	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0xa1cc	1648	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xca4c	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91ac	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	740	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0xca68	204	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x11000	44	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1102c	44	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x11058	44	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xfaac	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xfad8	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x11084	44	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x213d4	4	OBJECT	<unknown>	DEFAULT	10
h.4900	.symtab	0x255c8	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x25618	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0xf5e0	36	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xf604	20	FUNC	<unknown>	DEFAULT	2
i.4126	.symtab	0x2104c	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x13578	356	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x13368	528	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1329c	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xe274	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x21064	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x10368	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10698	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xf00c	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x13210	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xf1dc	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xf05c	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x97ec	408	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x165b0	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x213e0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xe400	2068	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x213d0	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x9bec	276	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x9210	136	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xaaf4	312	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0xfd14	340	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x16190	252	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xf250	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x117a0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1628c	236	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xf260	156	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x21168	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x21180	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x2561c	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1066	.symtab	0x253e8	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0xf5a8	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xf5cc	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x213d8	8	OBJECT	<unknown>	DEFAULT	10
object.2636	.symtab	0x213b8	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x27644	4	OBJECT	<unknown>	DEFAULT	10
p.2553	.symtab	0x2101c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x27648	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4141	.symtab	0x182b8	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8cf4	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x891c	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b0c	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8988	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xcb34	5952	FUNC	<unknown>	DEFAULT	2
qual_chars.4147	.symtab	0x182cc	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x12530	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x1025c	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x10260	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x17ec0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1053c	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x211b4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9298	724	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0xb758	1292	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x110dc	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0xf150	44	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x102dc	140	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x109a0	420	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0xfbc4	44	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0xa9a8	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x90e4	200	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4146	.symtab	0x182e0	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4140	.symtab	0x182c4	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4143	.symtab	0x1830c	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4142	.symtab	0x18324	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4145	.symtab	0x182f0	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4144	.symtab	0x18300	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x21250	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x25634	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x21274	4	OBJECT	<unknown>	DEFAULT	9
stdhexflood	.symtab	0xb47c	356	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x2126c	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x21270	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0xf488	28	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x131e0	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0xf320	96	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x130c8	200	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x117b0	184	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x151c0	224	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x13190	80	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0xf4a4	248	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0xf59c	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x11868	116	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1076c	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x9adc	272	FUNC	<unknown>	DEFAULT	2
time	.symtab	0xf17c	44	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x13f84	52	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0xf1f4	52	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x87ec	304	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x1832c	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x18344	12	OBJECT	<unknown>	DEFAULT	4
unknown.1088	.symtab	0x18350	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x21198	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x21028	28	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x10b44	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0xac2c	1788	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x13fec	176	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x11188	44	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x155d8	80	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x15648	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x15628	32	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0xf1b0	44	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3041	.symtab	0x17f70	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-13T17:07:49.309087+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35436	185.189.13.91	25565	TCP
2025-01-13T17:07:51.068952+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35438	185.189.13.91	25565	TCP
2025-01-13T17:07:52.796735+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35440	185.189.13.91	25565	TCP
2025-01-13T17:07:54.549048+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35442	185.189.13.91	25565	TCP
2025-01-13T17:07:56.326472+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35444	185.189.13.91	25565	TCP
2025-01-13T17:07:58.064379+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35446	185.189.13.91	25565	TCP
2025-01-13T17:07:59.834669+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35448	185.189.13.91	25565	TCP
2025-01-13T17:08:01.562652+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35450	185.189.13.91	25565	TCP
2025-01-13T17:08:03.313743+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35452	185.189.13.91	25565	TCP
2025-01-13T17:08:05.085707+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35454	185.189.13.91	25565	TCP
2025-01-13T17:08:06.845984+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35456	185.189.13.91	25565	TCP
2025-01-13T17:08:08.579557+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35458	185.189.13.91	25565	TCP
2025-01-13T17:08:10.314555+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35460	185.189.13.91	25565	TCP
2025-01-13T17:08:12.078257+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35462	185.189.13.91	25565	TCP
2025-01-13T17:08:13.833547+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35464	185.189.13.91	25565	TCP
2025-01-13T17:08:15.585182+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35466	185.189.13.91	25565	TCP
2025-01-13T17:08:17.312977+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35468	185.189.13.91	25565	TCP
2025-01-13T17:08:19.062421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35470	185.189.13.91	25565	TCP
2025-01-13T17:08:20.821505+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35472	185.189.13.91	25565	TCP
2025-01-13T17:08:22.546091+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35474	185.189.13.91	25565	TCP
2025-01-13T17:08:24.301818+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35476	185.189.13.91	25565	TCP
2025-01-13T17:08:26.139148+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35478	185.189.13.91	25565	TCP
2025-01-13T17:08:27.876176+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35480	185.189.13.91	25565	TCP
2025-01-13T17:08:29.611914+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35482	185.189.13.91	25565	TCP
2025-01-13T17:08:31.346153+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35484	185.189.13.91	25565	TCP
2025-01-13T17:08:33.095744+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35486	185.189.13.91	25565	TCP
2025-01-13T17:08:34.867048+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35488	185.189.13.91	25565	TCP
2025-01-13T17:08:36.592985+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35490	185.189.13.91	25565	TCP
2025-01-13T17:08:38.327640+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35492	185.189.13.91	25565	TCP
2025-01-13T17:08:40.065728+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35494	185.189.13.91	25565	TCP
2025-01-13T17:08:41.817600+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35496	185.189.13.91	25565	TCP
2025-01-13T17:08:43.567727+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35498	185.189.13.91	25565	TCP
2025-01-13T17:08:45.338560+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35500	185.189.13.91	25565	TCP
2025-01-13T17:08:47.096643+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35502	185.189.13.91	25565	TCP
2025-01-13T17:08:48.846840+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35504	185.189.13.91	25565	TCP
2025-01-13T17:08:50.580533+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35506	185.189.13.91	25565	TCP
2025-01-13T17:08:52.333793+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35508	185.189.13.91	25565	TCP
2025-01-13T17:08:54.061109+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35510	185.189.13.91	25565	TCP
2025-01-13T17:08:55.820627+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35512	185.189.13.91	25565	TCP
2025-01-13T17:08:57.568924+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35514	185.189.13.91	25565	TCP
2025-01-13T17:08:59.313554+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35516	185.189.13.91	25565	TCP
2025-01-13T17:09:01.067202+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35518	185.189.13.91	25565	TCP
2025-01-13T17:09:02.814453+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35520	185.189.13.91	25565	TCP
2025-01-13T17:09:04.569782+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35522	185.189.13.91	25565	TCP
2025-01-13T17:09:06.355918+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35524	185.189.13.91	25565	TCP
2025-01-13T17:09:08.097200+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35526	185.189.13.91	25565	TCP
2025-01-13T17:09:09.860216+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35528	185.189.13.91	25565	TCP
2025-01-13T17:09:11.610381+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35530	185.189.13.91	25565	TCP
2025-01-13T17:09:13.345152+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35532	185.189.13.91	25565	TCP
2025-01-13T17:09:15.102461+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35534	185.189.13.91	25565	TCP
2025-01-13T17:09:16.879085+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35536	185.189.13.91	25565	TCP
2025-01-13T17:09:18.607522+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35538	185.189.13.91	25565	TCP
2025-01-13T17:09:20.351680+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35540	185.189.13.91	25565	TCP
2025-01-13T17:09:22.101097+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35542	185.189.13.91	25565	TCP
2025-01-13T17:09:23.849662+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35544	185.189.13.91	25565	TCP
2025-01-13T17:09:25.632928+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35546	185.189.13.91	25565	TCP
2025-01-13T17:09:27.379505+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35548	185.189.13.91	25565	TCP
2025-01-13T17:09:29.107428+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35550	185.189.13.91	25565	TCP
2025-01-13T17:09:30.846091+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35552	185.189.13.91	25565	TCP
2025-01-13T17:09:32.582533+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35554	185.189.13.91	25565	TCP
2025-01-13T17:09:34.345692+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35556	185.189.13.91	25565	TCP
2025-01-13T17:09:36.082463+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35558	185.189.13.91	25565	TCP
2025-01-13T17:09:37.893424+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35560	185.189.13.91	25565	TCP
2025-01-13T17:09:39.660640+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35562	185.189.13.91	25565	TCP
2025-01-13T17:09:41.423054+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35564	185.189.13.91	25565	TCP
2025-01-13T17:09:43.202933+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35566	185.189.13.91	25565	TCP
2025-01-13T17:09:44.939080+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35568	185.189.13.91	25565	TCP
2025-01-13T17:09:46.672197+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35570	185.189.13.91	25565	TCP
2025-01-13T17:09:48.410054+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35572	185.189.13.91	25565	TCP
2025-01-13T17:09:50.180335+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35574	185.189.13.91	25565	TCP
2025-01-13T17:09:51.907641+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35576	185.189.13.91	25565	TCP
2025-01-13T17:09:53.680451+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35578	185.189.13.91	25565	TCP
2025-01-13T17:09:55.541129+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35580	185.189.13.91	25565	TCP
2025-01-13T17:09:57.285051+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35582	185.189.13.91	25565	TCP
2025-01-13T17:09:59.089520+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35584	185.189.13.91	25565	TCP
2025-01-13T17:10:00.855924+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35586	185.189.13.91	25565	TCP
2025-01-13T17:10:02.599604+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35588	185.189.13.91	25565	TCP
2025-01-13T17:10:04.395661+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35590	185.189.13.91	25565	TCP
2025-01-13T17:10:06.146998+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35592	185.189.13.91	25565	TCP
2025-01-13T17:10:07.899053+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35594	185.189.13.91	25565	TCP
2025-01-13T17:10:09.662396+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35596	185.189.13.91	25565	TCP
2025-01-13T17:10:11.462464+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35598	185.189.13.91	25565	TCP
2025-01-13T17:10:13.212887+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35600	185.189.13.91	25565	TCP
2025-01-13T17:10:14.942443+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35602	185.189.13.91	25565	TCP
2025-01-13T17:10:16.710485+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35604	185.189.13.91	25565	TCP
2025-01-13T17:10:18.438029+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35606	185.189.13.91	25565	TCP
2025-01-13T17:10:20.207636+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35608	185.189.13.91	25565	TCP
2025-01-13T17:10:21.955335+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35610	185.189.13.91	25565	TCP
2025-01-13T17:10:23.692975+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35612	185.189.13.91	25565	TCP
2025-01-13T17:10:25.445710+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35614	185.189.13.91	25565	TCP
2025-01-13T17:10:27.210954+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35616	185.189.13.91	25565	TCP
2025-01-13T17:10:28.957012+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35618	185.189.13.91	25565	TCP
2025-01-13T17:10:30.852710+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35620	185.189.13.91	25565	TCP
2025-01-13T17:10:32.600585+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35622	185.189.13.91	25565	TCP
2025-01-13T17:10:34.346276+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35624	185.189.13.91	25565	TCP
2025-01-13T17:10:36.098774+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35626	185.189.13.91	25565	TCP
2025-01-13T17:10:37.828312+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35628	185.189.13.91	25565	TCP
2025-01-13T17:10:39.569525+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35630	185.189.13.91	25565	TCP
2025-01-13T17:10:41.337979+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35632	185.189.13.91	25565	TCP
2025-01-13T17:10:43.082654+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35634	185.189.13.91	25565	TCP
2025-01-13T17:10:44.831093+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35636	185.189.13.91	25565	TCP
2025-01-13T17:10:46.587209+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35638	185.189.13.91	25565	TCP
2025-01-13T17:10:48.346728+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35640	185.189.13.91	25565	TCP
2025-01-13T17:10:50.082427+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35642	185.189.13.91	25565	TCP
2025-01-13T17:10:51.832542+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35644	185.189.13.91	25565	TCP
2025-01-13T17:10:53.601433+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35646	185.189.13.91	25565	TCP
2025-01-13T17:10:55.401423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35648	185.189.13.91	25565	TCP
2025-01-13T17:10:57.150120+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35650	185.189.13.91	25565	TCP
2025-01-13T17:10:58.928032+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35652	185.189.13.91	25565	TCP
2025-01-13T17:11:00.681106+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35654	185.189.13.91	25565	TCP
2025-01-13T17:11:02.425967+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35656	185.189.13.91	25565	TCP
2025-01-13T17:11:04.177005+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35658	185.189.13.91	25565	TCP
2025-01-13T17:11:05.909938+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35660	185.189.13.91	25565	TCP
2025-01-13T17:11:07.661990+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35662	185.189.13.91	25565	TCP
2025-01-13T17:11:09.431593+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35664	185.189.13.91	25565	TCP
2025-01-13T17:11:11.215983+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35666	185.189.13.91	25565	TCP
2025-01-13T17:11:12.992096+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35668	185.189.13.91	25565	TCP
2025-01-13T17:11:14.721185+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35670	185.189.13.91	25565	TCP
2025-01-13T17:11:16.475677+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35672	185.189.13.91	25565	TCP
2025-01-13T17:11:18.237359+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35674	185.189.13.91	25565	TCP
2025-01-13T17:11:19.987980+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35676	185.189.13.91	25565	TCP
2025-01-13T17:11:21.738359+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35678	185.189.13.91	25565	TCP
2025-01-13T17:11:23.483849+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35680	185.189.13.91	25565	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 17:07:48.476758003 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 17:07:49.302726984 CET	35436	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:49.307684898 CET	25565	35436	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:49.307919025 CET	35436	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:49.309087038 CET	35436	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:49.313935995 CET	25565	35436	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:51.062975883 CET	25565	35436	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:51.063313961 CET	35436	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:51.063925982 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:51.068243980 CET	25565	35436	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:51.068845987 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:51.068914890 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:51.068952084 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:51.073776007 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:52.790709972 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:52.791223049 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:52.791790009 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:52.796108007 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:52.796618938 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:52.796672106 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:52.796735048 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:52.801531076 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:53.852252960 CET	42836	443	192.168.2.23	91.189.91.43
Jan 13, 2025 17:07:54.543435097 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:54.543728113 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:54.544150114 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:54.548728943 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:54.548963070 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:54.549047947 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:54.549047947 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:54.553916931 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:55.643806934 CET	42516	80	192.168.2.23	109.202.202.202
Jan 13, 2025 17:07:56.320799112 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:56.321327925 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:56.321521044 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:56.326133966 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:56.326363087 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:56.326421022 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:56.326472044 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:56.331265926 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:58.058430910 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:58.058809042 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:58.059485912 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:58.063875914 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:58.064282894 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:58.064335108 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:58.064378977 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:58.070745945 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:59.828648090 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:59.828895092 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:59.829642057 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:59.833827972 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:59.834559917 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:07:59.834605932 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:59.834669113 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:07:59.839406013 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:01.554744959 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:01.555368900 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:01.557331085 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:01.560730934 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:01.562203884 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:01.562527895 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:01.562652111 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:01.567554951 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:03.306725025 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:03.307064056 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:03.308660984 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:03.312069893 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:03.313503027 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:03.313669920 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:03.313743114 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:03.318523884 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:05.078645945 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:05.079058886 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:05.080591917 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:05.084100008 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:05.085458040 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:05.085539103 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:05.085706949 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:05.090518951 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:06.839368105 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:06.839807987 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:06.840923071 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:06.844641924 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:06.845701933 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:06.845771074 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:06.845983982 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:06.850728989 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:08.441989899 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 17:08:08.572700977 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:08.573213100 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:08.574357986 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:08.578697920 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:08.579375029 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:08.579447031 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:08.579556942 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:08.584441900 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:10.308403969 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:10.308775902 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:10.309452057 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:10.313671112 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:10.314373016 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:10.314449072 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:10.314554930 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:10.321165085 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:12.072526932 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:12.072815895 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:12.073434114 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:12.077605009 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:12.078162909 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:12.078206062 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:12.078257084 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:12.082987070 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:13.825061083 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:13.825735092 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:13.828031063 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:13.831069946 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:13.833338022 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:13.833441973 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:13.833547115 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:13.838437080 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:15.577878952 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:15.578623056 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:15.579632998 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:15.583842993 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:15.584932089 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:15.585082054 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:15.585181952 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:15.590034962 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:17.307032108 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:17.307310104 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:17.307951927 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:17.312191010 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:17.312859058 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:17.312922955 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:17.312977076 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:17.317775011 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:19.055562019 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:19.055998087 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:19.057121038 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:19.060946941 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:19.062221050 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:19.062304974 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:19.062421083 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:19.067260981 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:20.728291988 CET	42836	443	192.168.2.23	91.189.91.43
Jan 13, 2025 17:08:20.815212965 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:20.815520048 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:20.816461086 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:20.820374966 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:20.821305990 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:20.821439981 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:20.821505070 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:20.826255083 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:22.539551973 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:22.539858103 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:22.541013956 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:22.544760942 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:22.545897007 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:22.546000957 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:22.546091080 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:22.550931931 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:24.293570995 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:24.294184923 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:24.296245098 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:24.299364090 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:24.301470995 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:24.301598072 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:24.301817894 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:24.306936979 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:26.131444931 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:26.131900072 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:26.133622885 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:26.137093067 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:26.138878107 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:26.138994932 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:26.139147997 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:26.144342899 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:26.871650934 CET	42516	80	192.168.2.23	109.202.202.202
Jan 13, 2025 17:08:27.869997025 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:27.870322943 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:27.871028900 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:27.875241995 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:27.875988007 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:27.876069069 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:27.876176119 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:27.880978107 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:29.605973959 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:29.606374025 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:29.606837988 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:29.611377001 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:29.611774921 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:29.611913919 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:29.611913919 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:29.616806030 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:31.339135885 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:31.339632988 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:31.340565920 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:31.344716072 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:31.345943928 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:31.346050024 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:31.346153021 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:31.350966930 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:33.088874102 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:33.089354038 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:33.090626001 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:33.094388008 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:33.095451117 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:33.095546961 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:33.095743895 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:33.100711107 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:34.859472036 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:34.859946966 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:34.860995054 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:34.865165949 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:34.866806030 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:34.866955042 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:34.867048025 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:34.871860981 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:36.586456060 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:36.586956978 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:36.587902069 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:36.591967106 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:36.592719078 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:36.592799902 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:36.592984915 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:36.597753048 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:38.321131945 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:38.321516037 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:38.322287083 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:38.326406002 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:38.327183962 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:38.327337027 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:38.327640057 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:38.332504988 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:40.059453964 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:40.059756994 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:40.060600996 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:40.064656019 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:40.065560102 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:40.065644026 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:40.065727949 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:40.070530891 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:41.809624910 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:41.810267925 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:41.812176943 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:41.815265894 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:41.817158937 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:41.817342997 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:41.817600012 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:41.822411060 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:43.561698914 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:43.562042952 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:43.562717915 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:43.566977978 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:43.567615032 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:43.567675114 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:43.567727089 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:43.572603941 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:45.331583977 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:45.332083941 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:45.333415985 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:45.337049961 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:45.338376045 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:45.338453054 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:45.338560104 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:45.343529940 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:47.090009928 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:47.090449095 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:47.091562033 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:47.095558882 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:47.096467018 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:47.096539974 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:47.096642971 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:47.101875067 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:48.840289116 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:48.840712070 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:48.841710091 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:48.845637083 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:48.846607924 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:48.846745014 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:48.846839905 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:48.852247953 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:49.396321058 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 17:08:50.574815035 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:50.575098991 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:50.575561047 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:50.580368996 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:50.580385923 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:50.580490112 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:50.580533028 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:50.585304976 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:52.327485085 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:52.327748060 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:52.328620911 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:52.332695961 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:52.333641052 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:52.333730936 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:52.333792925 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:52.338696957 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:54.054786921 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:54.055212021 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:54.056004047 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:54.060225010 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:54.060906887 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:54.060986996 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:54.061109066 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:54.065963984 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:55.813652992 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:55.814332008 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:55.815603018 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:55.819256067 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:55.820424080 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:55.820517063 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:55.820626974 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:55.825427055 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:57.562649012 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:57.563028097 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:57.563890934 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:57.567905903 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:57.568675041 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:57.568764925 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:57.568923950 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:57.573699951 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:59.307413101 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:59.307686090 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:59.308456898 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:59.313357115 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:59.313390017 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:08:59.313509941 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:59.313554049 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:08:59.319406986 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:01.060125113 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:01.060395002 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:01.062103033 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:01.065361023 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:01.066996098 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:01.067202091 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:01.067202091 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:01.072017908 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:02.808151960 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:02.808574915 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:02.809277058 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:02.813494921 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:02.814186096 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:02.814327955 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:02.814452887 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:02.819266081 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:04.563774109 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:04.563965082 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:04.564728022 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:04.568785906 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:04.569593906 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:04.569669962 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:04.569782019 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:04.574738026 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:06.345700979 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:06.345895052 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:06.345895052 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:06.346688032 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:06.351006985 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:06.355716944 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:06.355819941 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:06.355917931 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:06.360750914 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:08.091192007 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:08.091485023 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:08.092242956 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:08.096513033 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:08.097099066 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:08.097155094 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:08.097199917 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:08.101972103 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:09.854407072 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:09.854732037 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:09.855252028 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:09.859576941 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:09.860116959 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:09.860162973 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:09.860215902 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:09.865076065 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:11.604648113 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:11.604845047 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:11.605305910 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:11.610129118 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:11.610146046 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:11.610312939 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:11.610380888 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:11.615077972 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:13.339437962 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:13.339653969 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:13.340205908 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:13.344475031 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:13.345026016 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:13.345082045 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:13.345151901 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:13.349931955 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:15.095424891 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:15.095947027 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:15.097258091 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:15.100812912 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:15.102127075 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:15.102215052 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:15.102461100 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:15.107335091 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:16.872525930 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:16.872751951 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:16.873251915 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:16.878906012 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:16.878921986 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:16.879050970 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:16.879085064 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:16.885140896 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:18.601236105 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:18.601546049 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:18.602420092 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:18.606581926 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:18.607350111 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:18.607453108 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:18.607522011 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:18.612390041 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:20.342736959 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:20.342972040 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:20.343491077 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:20.351085901 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:20.351571083 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:20.351654053 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:20.351680040 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:20.356997013 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:22.094527006 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:22.095022917 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:22.096154928 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:22.099853039 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:22.100910902 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:22.101039886 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:22.101097107 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:22.105901957 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:23.842895031 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:23.843399048 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:23.844577074 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:23.848221064 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:23.849473953 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:23.849556923 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:23.849662066 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:23.854433060 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:25.626844883 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:25.627253056 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:25.627293110 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:25.627978086 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:25.632025957 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:25.632735968 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:25.632927895 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:25.632927895 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:25.637715101 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:27.372564077 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:27.373125076 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:27.373889923 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:27.378920078 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:27.379344940 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:27.379405975 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:27.379504919 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:27.384349108 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:29.101094007 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:29.101418972 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:29.102471113 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:29.106436014 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:29.107297897 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:29.107393026 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:29.107428074 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:29.112330914 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:30.839266062 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:30.839704990 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:30.840750933 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:30.844578981 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:30.845895052 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:30.845969915 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:30.846091032 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:30.850908995 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:32.574197054 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:32.574448109 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:32.575573921 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:32.581186056 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:32.582341909 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:32.582420111 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:32.582532883 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:32.589509010 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:34.340245962 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:34.340419054 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:34.340851068 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:34.345199108 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:34.345613003 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:34.345652103 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:34.345691919 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:34.350411892 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:36.075810909 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:36.076204062 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:36.077265024 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:36.081137896 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:36.082278013 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:36.082374096 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:36.082463026 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:36.088287115 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:37.886569023 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:37.887105942 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:37.888387918 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:37.891972065 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:37.893235922 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:37.893316031 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:37.893424034 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:37.898261070 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:39.653980970 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:39.654329062 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:39.655494928 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:39.659297943 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:39.660429001 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:39.660518885 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:39.660640001 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:39.666378975 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:41.416338921 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:41.416759968 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:41.417798042 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:41.421674013 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:41.422841072 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:41.422956944 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:41.423053980 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:41.427875996 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:43.196541071 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:43.196855068 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:43.196855068 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:43.197698116 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:43.201826096 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:43.202819109 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:43.202874899 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:43.202933073 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:43.207690001 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:44.930907965 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:44.931302071 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:44.932051897 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:44.938869953 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:44.938879967 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:44.938994884 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:44.939080000 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:44.945173979 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:46.665756941 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:46.666179895 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:46.667191029 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:46.671056986 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:46.672003984 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:46.672149897 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:46.672197104 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:46.676911116 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:48.403903008 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:48.404445887 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:48.405116081 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:48.409279108 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:48.409881115 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:48.409965038 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:48.410053968 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:48.414849043 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:50.174180031 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:50.174634933 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:50.175440073 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:50.179430008 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:50.180187941 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:50.180282116 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:50.180335045 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:50.185076952 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:51.899883032 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:51.900450945 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:51.901473999 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:51.906320095 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:51.907438040 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:51.907540083 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:51.907640934 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:51.913522959 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:53.674218893 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:53.674525976 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:53.675470114 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:53.679299116 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:53.680260897 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:53.680354118 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:53.680450916 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:53.685139894 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:55.534872055 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:55.535295963 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:55.536115885 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:55.540163994 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:55.540967941 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:55.541066885 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:55.541129112 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:55.545942068 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:57.278496027 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:57.278983116 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:57.278983116 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:57.280036926 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:57.283940077 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:57.284851074 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:57.284964085 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:57.285051107 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:57.289818048 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:59.082619905 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:59.083066940 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:59.084178925 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:59.088056087 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:59.089131117 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:09:59.089317083 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:59.089519978 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:09:59.094396114 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:00.848119974 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:00.848694086 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:00.850671053 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:00.853974104 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:00.855803967 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:00.855923891 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:00.855923891 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:00.860903025 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:02.591516972 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:02.592123985 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:02.594141006 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:02.597414017 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:02.599221945 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:02.599349976 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:02.599603891 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:02.604619026 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:04.388925076 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:04.389461040 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:04.390451908 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:04.394695997 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:04.395392895 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:04.395545959 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:04.395661116 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:04.400722027 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:06.139049053 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:06.139625072 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:06.141680956 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:06.144788980 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:06.146696091 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:06.146912098 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:06.146997929 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:06.151810884 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:07.892885923 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:07.893234968 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:07.893985033 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:07.898160934 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:07.898854971 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:07.898937941 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:07.899053097 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:07.903873920 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:09.656371117 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:09.656660080 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:09.657454967 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:09.661515951 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:09.662223101 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:09.662283897 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:09.662395954 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:09.667162895 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:11.456497908 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:11.456722021 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:11.457459927 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:11.461554050 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:11.462264061 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:11.462342978 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:11.462464094 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:11.467235088 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:13.207007885 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:13.207186937 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:13.207870007 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:13.212013960 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:13.212707043 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:13.212848902 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:13.212887049 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:13.217628002 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:14.934232950 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:14.934640884 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:14.935492039 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:14.941829920 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:14.942111969 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:14.942212105 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:14.942442894 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:14.947211981 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:16.703912973 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:16.704278946 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:16.705281019 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:16.709286928 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:16.710283995 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:16.710381985 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:16.710484982 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:16.715334892 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:18.432095051 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:18.432405949 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:18.433128119 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:18.437216997 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:18.437864065 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:18.437947035 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:18.438029051 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:18.442779064 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:20.201154947 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:20.201473951 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:20.202461004 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:20.206460953 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:20.207402945 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:20.207525015 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:20.207636118 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:20.212475061 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:21.948062897 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:21.948472977 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:21.949454069 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:21.954066038 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:21.955167055 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:21.955274105 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:21.955334902 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:21.960133076 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:23.686175108 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:23.686747074 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:23.687834024 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:23.691714048 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:23.692775965 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:23.692877054 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:23.692975044 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:23.697767973 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:25.438344955 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:25.438781023 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:25.440411091 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:25.443747044 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:25.445364952 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:25.445600033 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:25.445709944 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:25.450645924 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:27.204252958 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:27.204708099 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:27.205938101 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:27.209522963 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:27.210763931 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:27.210840940 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:27.210953951 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:27.215929985 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:28.950861931 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:28.951138020 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:28.951951027 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:28.956065893 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:28.956828117 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:28.956911087 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:28.957011938 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:28.961889982 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:30.843219995 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:30.843673944 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:30.844824076 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:30.852370024 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:30.852528095 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:30.852621078 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:30.852710009 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:30.857620955 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:32.595104933 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:32.595190048 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:32.595541954 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:32.600076914 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:32.600488901 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:32.600536108 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:32.600584984 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:32.605381012 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:34.340516090 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:34.340770960 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:34.341244936 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:34.345693111 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:34.346174002 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:34.346237898 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:34.346276045 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:34.351130009 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:36.093154907 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:36.093502998 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:36.093914032 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:36.098256111 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:36.098660946 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:36.098715067 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:36.098773956 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:36.103527069 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:37.822594881 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:37.822829008 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:37.823323965 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:37.827717066 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:37.828197002 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:37.828253984 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:37.828311920 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:37.833121061 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:39.563474894 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:39.564321041 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:39.564321041 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:39.569276094 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:39.569308043 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:39.569525003 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:39.569525003 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:39.574382067 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:41.331018925 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:41.331341028 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:41.333070993 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:41.336200953 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:41.337819099 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:41.337977886 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:41.337979078 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:41.342829943 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:43.076652050 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:43.077060938 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:43.077560902 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:43.081899881 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:43.082529068 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:43.082653999 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:43.082653999 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:43.087599993 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:44.825073957 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:44.825472116 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:44.826143980 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:44.830264091 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:44.830868006 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:44.830984116 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:44.831093073 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:44.835822105 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:46.580722094 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:46.581403971 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:46.582133055 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:46.586246014 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:46.586997032 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:46.587101936 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:46.587208986 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:46.592051983 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:48.339958906 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:48.340769053 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:48.341600895 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:48.345676899 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:48.346541882 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:48.346642017 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:48.346728086 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:48.351547003 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:50.076380014 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:50.076816082 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:50.077472925 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:50.081572056 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:50.082261086 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:50.082329035 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:50.082427025 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:50.087239981 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:51.826054096 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:51.826378107 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:51.827301979 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:51.831301928 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:51.832343102 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:51.832437992 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:51.832541943 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:51.837378979 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:53.595017910 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:53.595351934 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:53.596009970 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:53.600354910 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:53.601094007 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:53.601433039 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:53.601433039 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:53.606287956 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:55.393621922 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:55.393846035 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:55.394725084 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:55.398663044 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:55.401298046 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:55.401361942 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:55.401422977 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:55.406160116 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:57.143984079 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:57.144267082 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:57.145050049 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:57.149169922 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:57.149921894 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:57.150001049 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:57.150120020 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:57.154985905 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:58.921205044 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:58.921401024 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:58.921879053 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:58.927136898 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:58.927767038 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:10:58.927917004 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:58.928031921 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:10:58.932765961 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:00.674772978 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:00.675111055 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:00.675919056 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:00.680119991 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:00.680895090 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:00.680984020 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:00.681106091 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:00.685933113 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:02.419847012 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:02.420166969 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:02.420914888 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:02.425077915 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:02.425870895 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:02.425932884 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:02.425966978 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:02.430800915 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:04.171307087 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:04.171593904 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:04.172019005 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:04.176487923 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:04.176919937 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:04.176964998 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:04.177005053 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:04.181834936 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:05.903650045 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:05.904015064 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:05.904896021 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:05.908844948 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:05.909751892 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:05.909823895 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:05.909938097 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:05.914769888 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:07.655596972 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:07.656110048 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:07.656838894 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:07.661292076 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:07.661784887 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:07.661868095 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:07.661989927 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:07.666821957 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:09.425445080 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:09.425724030 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:09.426462889 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:09.430679083 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:09.431370020 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:09.431512117 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:09.431592941 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:09.436444998 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:11.209059954 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:11.209621906 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:11.210570097 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:11.214915991 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:11.215635061 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:11.215754986 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:11.215982914 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:11.220854044 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:12.986448050 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:12.986762047 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:12.987179041 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:12.991641045 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:12.991962910 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:12.992057085 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:12.992095947 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:12.996824026 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:14.714647055 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:14.714975119 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:14.716082096 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:14.719876051 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:14.720993996 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:14.721096039 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:14.721184969 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:14.726013899 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:16.468817949 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:16.468966961 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:16.469445944 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:16.474874020 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:16.475471973 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:16.475545883 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:16.475677013 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:16.481496096 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:18.230648994 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:18.231200933 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:18.232187986 CET	35674	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:18.236156940 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:18.237149954 CET	25565	35674	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:18.237245083 CET	35674	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:18.237359047 CET	35674	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:18.242202044 CET	25565	35674	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:19.982270956 CET	25565	35674	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:19.982595921 CET	35674	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:19.983073950 CET	35676	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:19.987356901 CET	25565	35674	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:19.987840891 CET	25565	35676	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:19.987926960 CET	35676	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:19.987979889 CET	35676	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:19.992747068 CET	25565	35676	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:21.732564926 CET	25565	35676	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:21.732778072 CET	35676	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:21.733294010 CET	35678	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:21.737754107 CET	25565	35676	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:21.738198042 CET	25565	35678	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:21.738281965 CET	35678	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:21.738358974 CET	35678	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:21.743242979 CET	25565	35678	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:23.478306055 CET	25565	35678	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:23.478511095 CET	35678	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:23.479017973 CET	35680	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:23.483340979 CET	25565	35678	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:23.483756065 CET	25565	35680	185.189.13.91	192.168.2.23
Jan 13, 2025 17:11:23.483805895 CET	35680	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:23.483849049 CET	35680	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:11:23.488606930 CET	25565	35680	185.189.13.91	192.168.2.23

System Behavior

Analysis Process: armv5l.elf PID: 6221, Parent PID: 6136

General

Start time (UTC):	16:07:47
Start date (UTC):	13/01/2025
Path:	/tmp/armv5l.elf
Arguments:	/tmp/armv5l.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv5l.elf PID: 6223, Parent PID: 6221

General

Start time (UTC):	16:07:48
Start date (UTC):	13/01/2025
Path:	/tmp/armv5l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv5l.elf PID: 6225, Parent PID: 6223

General

Start time (UTC):	16:07:48
Start date (UTC):	13/01/2025
Path:	/tmp/armv5l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report armv5l.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: armv5l.elf PID: 6221, Parent PID: 6136

General

Chronological Activities

Analysis Process: armv5l.elf PID: 6223, Parent PID: 6221

General

Chronological Activities

Analysis Process: armv5l.elf PID: 6225, Parent PID: 6223

General

Chronological Activities

Linux Analysis Report
armv5l.elf