Edit tour

Linux Analysis Report
camp.mips.elf

Overview

General Information

Sample name:	camp.mips.elf
Analysis ID:	1590321
MD5:	c6c14dc6fbc05361ff7c98995f161cba
SHA1:	0d8d6b3304fa714d462f6a1d332c385c57a5da47
SHA256:	3fb29ca6184afd70cbab4b67f483bd8bfea0be22cefe97929e84f49e14fbe1fe
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

Sample contains only a LOAD segment without any section mappings

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590321
Start date and time:	2025-01-13 23:25:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	camp.mips.elf
Detection:	MAL
Classification:	mal68.troj.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/camp.mips.elf
PID:	5436
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

camp.mips.elf (PID: 5436, Parent: 5356, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/camp.mips.elf

camp.mips.elf New Fork (PID: 5438, Parent: 5436)

camp.mips.elf New Fork (PID: 5440, Parent: 5438)

camp.mips.elf New Fork (PID: 5442, Parent: 5438)

camp.mips.elf New Fork (PID: 5452, Parent: 5436)

camp.mips.elf New Fork (PID: 5454, Parent: 5436)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
5440.1.00007fa930400000.00007fa930418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5440.1.00007fa930400000.00007fa930418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1470c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1475c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14810:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14824:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14838:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1484c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14860:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14874:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14888:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1489c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5436.1.00007fa930400000.00007fa930418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5436.1.00007fa930400000.00007fa930418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1470c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1475c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14810:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14824:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14838:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1484c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14860:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14874:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14888:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1489c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5452.1.00007fa930400000.00007fa930418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5452.1.00007fa930400000.00007fa930418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1470c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1475c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14810:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14824:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14838:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1484c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14860:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14874:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14888:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1489c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5438.1.00007fa930400000.00007fa930418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5438.1.00007fa930400000.00007fa930418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1470c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1475c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14810:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14824:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14838:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1484c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14860:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14874:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14888:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1489c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mips.elf PID: 5436	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.mips.elf PID: 5436	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xaedd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaef1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf05:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf19:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf2d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf41:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf55:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf69:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf7d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf91:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xafa5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xafb9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xafcd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xafe1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaff5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb009:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb01d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb031:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb045:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb059:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb06d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mips.elf PID: 5438	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6d5e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d72:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d86:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d9a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dc2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dd6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6dfe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e12:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e26:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e3a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e4e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e62:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e76:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e8a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e9e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eb2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ec6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eda:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mips.elf PID: 5440	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.mips.elf PID: 5440	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x308:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x31c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x330:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x344:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x358:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x380:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x394:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x40c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mips.elf PID: 5452	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.mips.elf PID: 5452	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xbc40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbc54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbc68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbc7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbc90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbcb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbcf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbda8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbdbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbdd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 10 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: camp.mips.elf	ReversingLabs: Detection: 47%
Source: camp.mips.elf	Virustotal: Detection: 40%			Perma Link

Source: global traffic

TCP traffic: 192.168.2.13:60402 -> 154.213.187.11:3778

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11

Source: camp.mips.elf

String found in binary or memory: http://upx.sf.net

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 5440.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5436.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5452.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5438.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mips.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mips.elf PID: 5438, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mips.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mips.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: LOAD without section mappings

Program segment: 0x100000

Source: 5440.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5436.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5452.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5438.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mips.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mips.elf PID: 5438, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mips.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mips.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal68.troj.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3640/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/230/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/110/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/231/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3638/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/111/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/232/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3639/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/112/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/233/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/113/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/234/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/114/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/235/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/115/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/236/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/116/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/237/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/117/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/238/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/118/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/239/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/119/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/914/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/10/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/917/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/11/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/5272/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/12/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/13/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/14/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/15/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/16/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/17/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/18/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/19/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/240/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3095/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/120/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/241/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/121/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/242/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/1/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/122/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/243/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/2/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/123/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/244/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/124/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/245/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/1588/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/125/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/4/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/246/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/126/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/5/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/247/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/127/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/6/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/248/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/128/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/7/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/249/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/129/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/8/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/800/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/9/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/1906/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3642/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/802/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3643/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/803/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/20/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/21/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/22/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/23/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/24/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/25/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/26/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/27/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/28/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/29/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3420/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/1482/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/490/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/1480/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/250/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/371/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/130/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/251/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/131/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/252/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/132/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/253/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/254/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/1238/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/134/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/255/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/256/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/257/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/378/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/3413/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/258/status	Jump to behavior
Source: /tmp/camp.mips.elf (PID: 5436)	File opened: /proc/259/status	Jump to behavior

Source: camp.mips.elf

Submission file: segment LOAD with 7.9335 entropy (max. 8.0)

Source: /tmp/camp.mips.elf (PID: 5436)

Queries kernel information via 'uname':

Jump to behavior

Source: camp.mips.elf, 5436.1.0000558f9100f000.0000558f910b6000.rw-.sdmp, camp.mips.elf, 5438.1.0000558f9100f000.0000558f910b6000.rw-.sdmp, camp.mips.elf, 5440.1.0000558f9100f000.0000558f910b6000.rw-.sdmp, camp.mips.elf, 5452.1.0000558f9100f000.0000558f910b6000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: camp.mips.elf, 5436.1.0000558f9100f000.0000558f910b6000.rw-.sdmp, camp.mips.elf, 5438.1.0000558f9100f000.0000558f910b6000.rw-.sdmp, camp.mips.elf, 5440.1.0000558f9100f000.0000558f910b6000.rw-.sdmp, camp.mips.elf, 5452.1.0000558f9100f000.0000558f910b6000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: camp.mips.elf, 5436.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp, camp.mips.elf, 5438.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp, camp.mips.elf, 5440.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp, camp.mips.elf, 5452.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: camp.mips.elf, 5436.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp, camp.mips.elf, 5438.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp, camp.mips.elf, 5440.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp, camp.mips.elf, 5452.1.00007ffe4c25c000.00007ffe4c27d000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/camp.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/camp.mips.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5440.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5436.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5452.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5438.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: camp.mips.elf PID: 5436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.mips.elf PID: 5440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.mips.elf PID: 5452, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5440.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5436.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5452.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5438.1.00007fa930400000.00007fa930418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: camp.mips.elf PID: 5436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.mips.elf PID: 5440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.mips.elf PID: 5452, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
camp.mips.elf	47%	ReversingLabs	Linux.Trojan.Mirai
camp.mips.elf	41%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	camp.mips.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false
154.213.187.11	unknown	Seychelles		22769	DDOSING-BGP-NETWORKUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.125.190.26	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse
	t6.elf	Get hash	malicious	Unknown	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse
	t5.elf	Get hash	malicious	Unknown	Browse
	t6.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
154.213.187.11	camp.arm.elf	Get hash	malicious	Mirai	Browse
	camp.ppc.elf	Get hash	malicious	Mirai	Browse
	camp.mpsl.elf	Get hash	malicious	Mirai	Browse
	camp.arm7.elf	Get hash	malicious	Mirai	Browse
	camp.x86_64.elf	Get hash	malicious	Mirai	Browse
	camp.i686.elf	Get hash	malicious	Mirai	Browse
	camp.sh4.elf	Get hash	malicious	Mirai	Browse
	camp.spc.elf	Get hash	malicious	Mirai	Browse
	camp.x86.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	camp.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	camp.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	dlr.x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	armv4l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
DDOSING-BGP-NETWORKUS	camp.arm.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.ppc.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.mpsl.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.arm7.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.x86_64.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.i686.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	hikarm4.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	hikarm7.elf	Get hash	malicious	Mirai	Browse	154.213.187.125
	hikarm5.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	gx86.elf	Get hash	malicious	Unknown	Browse	154.213.187.125

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, no section header
Entropy (8bit):	7.930539046327742
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	camp.mips.elf
File size:	38'076 bytes
MD5:	c6c14dc6fbc05361ff7c98995f161cba
SHA1:	0d8d6b3304fa714d462f6a1d332c385c57a5da47
SHA256:	3fb29ca6184afd70cbab4b67f483bd8bfea0be22cefe97929e84f49e14fbe1fe
SHA512:	eaf8bd0acd20169168d6174327668714341277bd7b4e3af8e29eec951421af9ff575c802e8ce108c64e9f1418ece9a966b4808159f54519106298441dd1ee899
SSDEEP:	768:cgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P5zTqUJgGlzDpbuR1JW:q9xJZZNKNFjBfRUMQMVJuk
TLSH:	8C03E03C490514E4E57FC17FE2E947D0B136079A1942CE563254FA97FA0D8AC78A2BEC
File Content Preview:	.ELF.......................@...4.........4. ...(...........................................`.E.`.E.`....................UPX!.d.........D...D.......U.......?.E.h4...@b..) ..]....E..n\rc.. ....M.4Xk8....I.......K......{.1.Z..9..+nj.....8Y...r\|..{...........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x108040
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	2
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x100000	0x100000	0x9384	0x9384	7.9335	0x5	R E	0x10000
LOAD	0xaf60	0x45af60	0x45af60	0x0	0x0	0.0000	0x6	RW	0x10000

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 23:26:25.814764977 CET	60402	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:25.819874048 CET	3778	60402	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:25.819935083 CET	60402	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:25.880494118 CET	60402	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:25.885549068 CET	3778	60402	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:25.885596991 CET	60402	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:25.890494108 CET	3778	60402	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:27.450994968 CET	3778	60402	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:27.451476097 CET	60402	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:27.456398964 CET	3778	60402	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:28.455502033 CET	60404	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:28.460505962 CET	3778	60404	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:28.460624933 CET	60404	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:28.461357117 CET	60404	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:28.466219902 CET	3778	60404	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:28.466330051 CET	60404	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:28.471240044 CET	3778	60404	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:30.089756012 CET	3778	60404	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:30.090122938 CET	60404	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:30.095026970 CET	3778	60404	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:31.092066050 CET	60406	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.096997976 CET	3778	60406	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:31.097071886 CET	60406	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.097889900 CET	60406	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.102685928 CET	3778	60406	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:31.102722883 CET	60406	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.107536077 CET	3778	60406	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:31.831562042 CET	60408	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.836756945 CET	3778	60408	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:31.836829901 CET	60408	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.849221945 CET	60408	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.854199886 CET	3778	60408	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:31.854309082 CET	60408	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:31.859222889 CET	3778	60408	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:32.728198051 CET	3778	60406	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:32.728674889 CET	60406	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:32.733581066 CET	3778	60406	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:33.468123913 CET	3778	60408	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:33.468627930 CET	60408	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:33.473594904 CET	3778	60408	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:33.732763052 CET	60410	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:33.738012075 CET	3778	60410	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:33.738101006 CET	60410	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:33.738766909 CET	60410	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:33.743731976 CET	3778	60410	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:33.743782043 CET	60410	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:33.748686075 CET	3778	60410	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:34.471388102 CET	60412	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:34.478281975 CET	3778	60412	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:34.478373051 CET	60412	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:34.479062080 CET	60412	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:34.485569000 CET	3778	60412	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:34.485637903 CET	60412	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:34.492134094 CET	3778	60412	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:34.984704018 CET	48202	443	192.168.2.13	185.125.190.26
Jan 13, 2025 23:26:35.352961063 CET	3778	60410	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:35.353219032 CET	60410	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:35.358230114 CET	3778	60410	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:36.107769012 CET	3778	60412	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:36.107999086 CET	60412	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:36.112934113 CET	3778	60412	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:36.355407953 CET	60414	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:36.360625029 CET	3778	60414	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:36.360703945 CET	60414	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:36.363409042 CET	60414	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:36.368246078 CET	3778	60414	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:36.368324041 CET	60414	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:36.373126984 CET	3778	60414	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:37.110114098 CET	60416	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:37.115235090 CET	3778	60416	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:37.115334034 CET	60416	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:37.116039038 CET	60416	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:37.120848894 CET	3778	60416	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:37.120913029 CET	60416	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:37.125747919 CET	3778	60416	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:37.999794006 CET	3778	60414	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:38.000405073 CET	60414	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:38.005326986 CET	3778	60414	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:38.744116068 CET	3778	60416	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:38.744565010 CET	60416	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:38.749664068 CET	3778	60416	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:39.003365040 CET	60418	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.008651018 CET	3778	60418	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:39.008742094 CET	60418	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.010185003 CET	60418	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.015049934 CET	3778	60418	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:39.015105963 CET	60418	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.019937992 CET	3778	60418	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:39.748106003 CET	60420	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.753283978 CET	3778	60420	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:39.753381968 CET	60420	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.754580975 CET	60420	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.759429932 CET	3778	60420	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:39.759495020 CET	60420	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:39.764323950 CET	3778	60420	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:40.636857986 CET	3778	60418	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:40.637340069 CET	60418	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:40.642374039 CET	3778	60418	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:41.368629932 CET	3778	60420	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:41.369014025 CET	60420	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:41.373931885 CET	3778	60420	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:41.641072989 CET	60422	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:41.646089077 CET	3778	60422	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:41.646222115 CET	60422	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:41.647806883 CET	60422	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:41.652549982 CET	3778	60422	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:41.652615070 CET	60422	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:41.657464027 CET	3778	60422	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:42.372833967 CET	60424	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:42.378304958 CET	3778	60424	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:42.378417969 CET	60424	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:42.380089998 CET	60424	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:42.385044098 CET	3778	60424	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:42.385123014 CET	60424	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:42.389921904 CET	3778	60424	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:43.276316881 CET	3778	60422	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:43.276680946 CET	60422	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:43.281646967 CET	3778	60422	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:44.012411118 CET	3778	60424	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:44.012751102 CET	60424	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:44.012751102 CET	60424	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:44.017648935 CET	3778	60424	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:44.280148029 CET	60426	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:44.290215015 CET	3778	60426	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:44.290348053 CET	60426	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:44.291601896 CET	60426	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:44.301222086 CET	3778	60426	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:44.301280022 CET	60426	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:44.307940960 CET	3778	60426	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:45.016263008 CET	60428	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:45.021636963 CET	3778	60428	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:45.021882057 CET	60428	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:45.023540020 CET	60428	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:45.028428078 CET	3778	60428	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:45.028507948 CET	60428	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:45.033353090 CET	3778	60428	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:45.917246103 CET	3778	60426	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:45.917627096 CET	60426	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:45.922569036 CET	3778	60426	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:46.670181036 CET	3778	60428	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:46.670654058 CET	60428	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:46.675710917 CET	3778	60428	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:46.921561003 CET	60430	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:46.926505089 CET	3778	60430	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:46.926636934 CET	60430	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:46.928097963 CET	60430	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:46.933028936 CET	3778	60430	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:46.933090925 CET	60430	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:46.937999964 CET	3778	60430	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:47.674158096 CET	60432	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:47.679472923 CET	3778	60432	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:47.679572105 CET	60432	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:47.680959940 CET	60432	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:47.685838938 CET	3778	60432	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:47.685902119 CET	60432	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:47.690767050 CET	3778	60432	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:48.540796995 CET	3778	60430	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:48.541243076 CET	60430	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:48.546206951 CET	3778	60430	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:49.312823057 CET	3778	60432	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:49.313254118 CET	60432	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:49.318231106 CET	3778	60432	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:49.544537067 CET	60434	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:49.549995899 CET	3778	60434	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:49.550369978 CET	60434	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:49.551976919 CET	60434	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:49.558249950 CET	3778	60434	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:49.563518047 CET	60434	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:49.568547964 CET	3778	60434	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:50.316366911 CET	60436	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:50.321815968 CET	3778	60436	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:50.321924925 CET	60436	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:50.323518991 CET	60436	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:50.328418016 CET	3778	60436	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:50.328496933 CET	60436	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:50.333374023 CET	3778	60436	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:51.247016907 CET	3778	60434	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:51.247359037 CET	60434	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:51.252357006 CET	3778	60434	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:52.250842094 CET	60438	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:52.256113052 CET	3778	60438	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:52.256266117 CET	60438	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:52.257677078 CET	60438	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:52.262686968 CET	3778	60438	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:52.262752056 CET	60438	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:52.267765999 CET	3778	60438	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:53.886985064 CET	3778	60438	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:53.887679100 CET	60438	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:53.892755032 CET	3778	60438	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:54.891433954 CET	60440	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:54.896780968 CET	3778	60440	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:54.896918058 CET	60440	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:54.898001909 CET	60440	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:54.902856112 CET	3778	60440	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:54.902935028 CET	60440	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:54.908397913 CET	3778	60440	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:56.651571989 CET	3778	60440	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:56.652004004 CET	60440	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:56.656966925 CET	3778	60440	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:57.338743925 CET	3778	60436	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:57.339205027 CET	60436	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:57.344219923 CET	3778	60436	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:57.655813932 CET	60442	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:57.661222935 CET	3778	60442	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:57.661375046 CET	60442	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:57.662556887 CET	60442	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:57.667444944 CET	3778	60442	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:57.667509079 CET	60442	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:57.672352076 CET	3778	60442	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:58.342833042 CET	60444	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:58.348294973 CET	3778	60444	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:58.348381996 CET	60444	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:58.349721909 CET	60444	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:58.354605913 CET	3778	60444	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:58.354660034 CET	60444	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:58.359492064 CET	3778	60444	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:59.277101040 CET	3778	60442	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:59.277725935 CET	60442	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:59.282670975 CET	3778	60442	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:59.963807106 CET	3778	60444	154.213.187.11	192.168.2.13
Jan 13, 2025 23:26:59.964179039 CET	60444	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:26:59.969110966 CET	3778	60444	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:00.282372952 CET	60446	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.287981033 CET	3778	60446	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:00.288058996 CET	60446	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.289747953 CET	60446	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.294708014 CET	3778	60446	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:00.294765949 CET	60446	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.299599886 CET	3778	60446	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:00.969069958 CET	60448	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.974363089 CET	3778	60448	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:00.974505901 CET	60448	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.976434946 CET	60448	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.981476068 CET	3778	60448	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:00.981715918 CET	60448	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:00.986589909 CET	3778	60448	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:02.589183092 CET	3778	60448	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:02.589493990 CET	60448	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:02.594477892 CET	3778	60448	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:03.594115019 CET	60450	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:03.599348068 CET	3778	60450	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:03.599535942 CET	60450	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:03.602197886 CET	60450	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:03.607121944 CET	3778	60450	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:03.607332945 CET	60450	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:03.612215042 CET	3778	60450	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:04.340776920 CET	3778	60446	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:04.341129065 CET	60446	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:04.345988035 CET	3778	60446	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:05.193913937 CET	3778	60450	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:05.194591999 CET	60450	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:05.199604988 CET	3778	60450	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:05.345668077 CET	60452	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:05.350713015 CET	3778	60452	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:05.350812912 CET	60452	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:05.352108955 CET	60452	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:05.356863022 CET	3778	60452	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:05.356934071 CET	60452	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:05.361773014 CET	3778	60452	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:05.960956097 CET	48202	443	192.168.2.13	185.125.190.26
Jan 13, 2025 23:27:06.198514938 CET	60454	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:06.203512907 CET	3778	60454	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:06.203670979 CET	60454	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:06.205218077 CET	60454	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:06.210032940 CET	3778	60454	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:06.210236073 CET	60454	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:06.215156078 CET	3778	60454	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:06.974093914 CET	3778	60452	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:06.974486113 CET	60452	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:06.979341984 CET	3778	60452	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:07.803481102 CET	3778	60454	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:07.804068089 CET	60454	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:07.809078932 CET	3778	60454	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:07.979305983 CET	60456	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:07.984596014 CET	3778	60456	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:07.984869003 CET	60456	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:07.986397028 CET	60456	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:07.991280079 CET	3778	60456	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:07.991394043 CET	60456	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:07.996247053 CET	3778	60456	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:08.809959888 CET	60458	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:08.815251112 CET	3778	60458	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:08.815346956 CET	60458	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:08.817394972 CET	60458	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:08.822252035 CET	3778	60458	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:08.822457075 CET	60458	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:08.827244997 CET	3778	60458	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:09.639231920 CET	3778	60456	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:09.639899969 CET	60456	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:09.644824982 CET	3778	60456	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:10.413270950 CET	3778	60458	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:10.413727045 CET	60458	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:10.419229984 CET	3778	60458	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:10.646467924 CET	60460	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:10.652035952 CET	3778	60460	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:10.652376890 CET	60460	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:10.654828072 CET	60460	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:10.660120964 CET	3778	60460	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:10.660336018 CET	60460	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:10.665745020 CET	3778	60460	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:11.418463945 CET	60462	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:11.423531055 CET	3778	60462	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:11.423609972 CET	60462	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:11.424740076 CET	60462	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:11.429575920 CET	3778	60462	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:11.429646969 CET	60462	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:11.434514046 CET	3778	60462	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:12.370604992 CET	3778	60460	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:12.371246099 CET	60460	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:12.376280069 CET	3778	60460	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:13.039665937 CET	3778	60462	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:13.040143967 CET	60462	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:13.045053005 CET	3778	60462	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:13.376377106 CET	60464	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:13.381656885 CET	3778	60464	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:13.381767988 CET	60464	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:13.383718014 CET	60464	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:13.388654947 CET	3778	60464	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:13.388916969 CET	60464	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:13.393817902 CET	3778	60464	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:14.045838118 CET	60466	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:14.051126957 CET	3778	60466	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:14.051259995 CET	60466	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:14.053597927 CET	60466	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:14.058423042 CET	3778	60466	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:14.058643103 CET	60466	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:14.063481092 CET	3778	60466	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:14.994879007 CET	3778	60464	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:14.995368958 CET	60464	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:15.002330065 CET	3778	60464	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:15.663656950 CET	3778	60466	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:15.664098978 CET	60466	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:15.669111967 CET	3778	60466	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:16.000643015 CET	60468	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.006253004 CET	3778	60468	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:16.006361008 CET	60468	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.008677959 CET	60468	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.014753103 CET	3778	60468	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:16.015070915 CET	60468	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.020204067 CET	3778	60468	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:16.669148922 CET	60470	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.674312115 CET	3778	60470	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:16.674452066 CET	60470	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.676301003 CET	60470	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.681180954 CET	3778	60470	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:16.681262970 CET	60470	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:16.686085939 CET	3778	60470	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:17.639702082 CET	3778	60468	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:17.640367985 CET	60468	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:17.645349026 CET	3778	60468	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:18.272185087 CET	3778	60470	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:18.272943974 CET	60470	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:18.277811050 CET	3778	60470	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:18.645500898 CET	60472	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:18.650468111 CET	3778	60472	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:18.650573015 CET	60472	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:18.652316093 CET	60472	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:18.657222986 CET	3778	60472	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:18.657304049 CET	60472	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:18.662097931 CET	3778	60472	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:19.277393103 CET	60474	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:19.282289982 CET	3778	60474	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:19.282424927 CET	60474	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:19.284199953 CET	60474	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:19.289033890 CET	3778	60474	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:19.289266109 CET	60474	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:19.294105053 CET	3778	60474	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:20.240569115 CET	3778	60472	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:20.240914106 CET	60472	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:20.245774984 CET	3778	60472	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:21.245565891 CET	60476	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:21.251391888 CET	3778	60476	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:21.251615047 CET	60476	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:21.253499031 CET	60476	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:21.258439064 CET	3778	60476	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:21.258721113 CET	60476	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:21.263617039 CET	3778	60476	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:26.319395065 CET	3778	60474	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:26.319894075 CET	60474	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:26.324803114 CET	3778	60474	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:27.323889017 CET	60478	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:27.328788042 CET	3778	60478	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:27.328927994 CET	60478	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:27.330260038 CET	60478	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:27.335191011 CET	3778	60478	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:27.335277081 CET	60478	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:27.340203047 CET	3778	60478	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:28.295908928 CET	3778	60476	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:28.296670914 CET	60476	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:28.301542044 CET	3778	60476	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:28.929224968 CET	3778	60478	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:28.930027008 CET	60478	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:28.934998989 CET	3778	60478	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:29.300463915 CET	60480	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.305452108 CET	3778	60480	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:29.305577993 CET	60480	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.307581902 CET	60480	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.312453985 CET	3778	60480	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:29.312537909 CET	60480	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.317493916 CET	3778	60480	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:29.935448885 CET	60482	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.940470934 CET	3778	60482	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:29.940762043 CET	60482	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.943434954 CET	60482	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.948271036 CET	3778	60482	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:29.948483944 CET	60482	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:29.953345060 CET	3778	60482	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:30.913166046 CET	3778	60480	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:30.913876057 CET	60480	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:30.918818951 CET	3778	60480	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:31.918309927 CET	60484	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:31.923290968 CET	3778	60484	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:31.923501015 CET	60484	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:31.925318003 CET	60484	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:31.930128098 CET	3778	60484	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:31.930458069 CET	60484	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:31.935353041 CET	3778	60484	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:34.010632038 CET	3778	60482	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:34.011049986 CET	60482	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:34.016021967 CET	3778	60482	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:35.018279076 CET	60486	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:35.023194075 CET	3778	60486	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:35.023292065 CET	60486	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:35.025847912 CET	60486	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:35.031548977 CET	3778	60486	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:35.031794071 CET	60486	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:35.037722111 CET	3778	60486	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:35.981384039 CET	3778	60484	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:35.981898069 CET	60484	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:35.986809015 CET	3778	60484	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:36.653318882 CET	3778	60486	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:36.653886080 CET	60486	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:36.659276962 CET	3778	60486	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:36.987166882 CET	60488	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:36.992197990 CET	3778	60488	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:36.992264986 CET	60488	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:36.994252920 CET	60488	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:36.999730110 CET	3778	60488	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:36.999963999 CET	60488	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:37.005017996 CET	3778	60488	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:37.659137964 CET	60490	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:37.664120913 CET	3778	60490	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:37.664222956 CET	60490	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:37.665710926 CET	60490	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:37.670593023 CET	3778	60490	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:37.670670033 CET	60490	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:37.675590992 CET	3778	60490	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:38.623919964 CET	3778	60488	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:38.624438047 CET	60488	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:38.629354000 CET	3778	60488	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:39.313390970 CET	3778	60490	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:39.313921928 CET	60490	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:39.318774939 CET	3778	60490	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:39.629499912 CET	60492	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:39.634366989 CET	3778	60492	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:39.634474993 CET	60492	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:39.636244059 CET	60492	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:39.641093969 CET	3778	60492	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:39.641207933 CET	60492	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:39.646100044 CET	3778	60492	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:40.318994045 CET	60494	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:40.323836088 CET	3778	60494	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:40.324203014 CET	60494	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:40.326814890 CET	60494	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:40.331614017 CET	3778	60494	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:40.331880093 CET	60494	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:40.336731911 CET	3778	60494	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:41.257930040 CET	3778	60492	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:41.258677006 CET	60492	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:41.263602972 CET	3778	60492	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:41.944375038 CET	3778	60494	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:41.944962978 CET	60494	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:41.950031042 CET	3778	60494	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:42.264826059 CET	60496	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.269717932 CET	3778	60496	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:42.269819021 CET	60496	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.271930933 CET	60496	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.276706934 CET	3778	60496	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:42.276791096 CET	60496	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.281619072 CET	3778	60496	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:42.951992035 CET	60498	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.956948996 CET	3778	60498	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:42.957055092 CET	60498	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.959564924 CET	60498	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.964412928 CET	3778	60498	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:42.964488983 CET	60498	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:42.969357967 CET	3778	60498	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:43.907216072 CET	3778	60496	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:43.907752991 CET	60496	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:43.912708044 CET	3778	60496	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:44.594533920 CET	3778	60498	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:44.595061064 CET	60498	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:44.600097895 CET	3778	60498	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:44.913723946 CET	60500	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:44.918720961 CET	3778	60500	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:44.918823004 CET	60500	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:44.920089960 CET	60500	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:44.924961090 CET	3778	60500	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:44.925046921 CET	60500	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:44.929912090 CET	3778	60500	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:45.601583958 CET	60502	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:45.608161926 CET	3778	60502	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:45.608264923 CET	60502	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:45.609884024 CET	60502	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:45.615729094 CET	3778	60502	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:45.615813017 CET	60502	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:45.620650053 CET	3778	60502	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:46.546152115 CET	3778	60500	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:46.546353102 CET	60500	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:46.551285028 CET	3778	60500	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:47.231411934 CET	3778	60502	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:47.231879950 CET	60502	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:47.236712933 CET	3778	60502	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:47.552433968 CET	60504	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:47.559525013 CET	3778	60504	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:47.559645891 CET	60504	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:47.562424898 CET	60504	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:47.569217920 CET	3778	60504	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:47.569364071 CET	60504	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:47.576055050 CET	3778	60504	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:48.238368034 CET	60506	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:48.243388891 CET	3778	60506	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:48.243477106 CET	60506	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:48.245378017 CET	60506	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:48.251398087 CET	3778	60506	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:48.251478910 CET	60506	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:48.257478952 CET	3778	60506	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:49.183473110 CET	3778	60504	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:49.184093952 CET	60504	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:49.191425085 CET	3778	60504	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:49.874176979 CET	3778	60506	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:49.874542952 CET	60506	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:49.879489899 CET	3778	60506	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:50.189069986 CET	60508	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.193921089 CET	3778	60508	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:50.194041014 CET	60508	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.195509911 CET	60508	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.200303078 CET	3778	60508	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:50.200395107 CET	60508	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.205302954 CET	3778	60508	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:50.877099991 CET	60510	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.882069111 CET	3778	60510	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:50.882154942 CET	60510	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.883111000 CET	60510	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.888008118 CET	3778	60510	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:50.888066053 CET	60510	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:50.892971992 CET	3778	60510	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:51.808177948 CET	3778	60508	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:51.808609962 CET	60508	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:51.814075947 CET	3778	60508	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:52.495352030 CET	3778	60510	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:52.495790958 CET	60510	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:52.501384020 CET	3778	60510	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:52.813322067 CET	60512	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:52.818456888 CET	3778	60512	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:52.818685055 CET	60512	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:52.820764065 CET	60512	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:52.825743914 CET	3778	60512	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:52.825958967 CET	60512	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:52.831002951 CET	3778	60512	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:53.500463009 CET	60514	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:53.505445004 CET	3778	60514	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:53.505525112 CET	60514	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:53.507122040 CET	60514	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:53.512489080 CET	3778	60514	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:53.512633085 CET	60514	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:53.518172979 CET	3778	60514	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:54.433047056 CET	3778	60512	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:54.433552980 CET	60512	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:54.439414024 CET	3778	60512	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:55.101418018 CET	3778	60514	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:55.101792097 CET	60514	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:55.106791973 CET	3778	60514	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:55.440067053 CET	60516	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:55.445283890 CET	3778	60516	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:55.445398092 CET	60516	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:55.446930885 CET	60516	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:55.451812983 CET	3778	60516	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:55.451886892 CET	60516	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:55.456747055 CET	3778	60516	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:56.106756926 CET	60518	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:56.111682892 CET	3778	60518	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:56.111805916 CET	60518	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:56.114876032 CET	60518	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:56.119839907 CET	3778	60518	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:56.120053053 CET	60518	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:56.124907970 CET	3778	60518	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:57.083847046 CET	3778	60516	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:57.084239960 CET	60516	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:57.089097977 CET	3778	60516	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:57.761425018 CET	3778	60518	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:57.761832952 CET	60518	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:57.766808033 CET	3778	60518	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:58.091443062 CET	60520	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.096545935 CET	3778	60520	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:58.096795082 CET	60520	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.099113941 CET	60520	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.103979111 CET	3778	60520	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:58.104195118 CET	60520	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.109093904 CET	3778	60520	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:58.769156933 CET	60522	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.774102926 CET	3778	60522	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:58.774339914 CET	60522	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.777746916 CET	60522	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.782733917 CET	3778	60522	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:58.782942057 CET	60522	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:58.787781000 CET	3778	60522	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:59.782110929 CET	3778	60520	154.213.187.11	192.168.2.13
Jan 13, 2025 23:27:59.782910109 CET	60520	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:27:59.787890911 CET	3778	60520	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:00.407493114 CET	3778	60522	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:00.408175945 CET	60522	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:00.413364887 CET	3778	60522	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:00.787717104 CET	60524	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:00.818406105 CET	3778	60524	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:00.818772078 CET	60524	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:00.820971966 CET	60524	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:00.828901052 CET	3778	60524	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:00.829174042 CET	60524	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:00.835927963 CET	3778	60524	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:01.415491104 CET	60526	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:01.420499086 CET	3778	60526	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:01.420629025 CET	60526	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:01.423082113 CET	60526	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:01.427905083 CET	3778	60526	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:01.428154945 CET	60526	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:01.432965040 CET	3778	60526	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:02.447623014 CET	3778	60524	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:02.448420048 CET	60524	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:02.453948975 CET	3778	60524	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:03.040811062 CET	3778	60526	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:03.041342974 CET	60526	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:03.046243906 CET	3778	60526	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:03.454149008 CET	60528	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:03.459338903 CET	3778	60528	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:03.459574938 CET	60528	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:03.462317944 CET	60528	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:03.467196941 CET	3778	60528	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:03.467288971 CET	60528	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:03.472073078 CET	3778	60528	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:04.045880079 CET	60530	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:04.050679922 CET	3778	60530	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:04.050746918 CET	60530	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:04.052685976 CET	60530	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:04.057585955 CET	3778	60530	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:04.057657003 CET	60530	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:04.065579891 CET	3778	60530	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:05.143783092 CET	3778	60528	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:05.144392967 CET	60528	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:05.149279118 CET	3778	60528	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:05.731302977 CET	3778	60530	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:05.731913090 CET	60530	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:05.736867905 CET	3778	60530	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:06.149460077 CET	60532	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.154556036 CET	3778	60532	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:06.154711962 CET	60532	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.156698942 CET	60532	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.161576986 CET	3778	60532	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:06.161679029 CET	60532	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.166539907 CET	3778	60532	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:06.739370108 CET	60534	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.744261026 CET	3778	60534	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:06.744381905 CET	60534	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.746886015 CET	60534	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.751764059 CET	3778	60534	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:06.751924038 CET	60534	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:06.756817102 CET	3778	60534	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:07.759661913 CET	3778	60532	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:07.760215998 CET	60532	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:07.765487909 CET	3778	60532	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:08.371550083 CET	3778	60534	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:08.371893883 CET	60534	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:08.377324104 CET	3778	60534	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:08.767853022 CET	60536	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:08.773041010 CET	3778	60536	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:08.773147106 CET	60536	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:08.775949001 CET	60536	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:08.780855894 CET	3778	60536	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:08.780956030 CET	60536	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:08.785782099 CET	3778	60536	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:09.378465891 CET	60538	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:09.383724928 CET	3778	60538	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:09.383824110 CET	60538	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:09.386214018 CET	60538	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:09.391079903 CET	3778	60538	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:09.391277075 CET	60538	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:09.397037029 CET	3778	60538	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:13.383089066 CET	3778	60538	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:13.383737087 CET	60538	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:13.388689041 CET	3778	60538	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:14.390516996 CET	60540	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:14.395900965 CET	3778	60540	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:14.396127939 CET	60540	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:14.399049997 CET	60540	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:14.403903008 CET	3778	60540	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:14.404098988 CET	60540	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:14.409019947 CET	3778	60540	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:15.808511972 CET	3778	60536	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:15.809027910 CET	60536	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:15.813991070 CET	3778	60536	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:16.012943983 CET	3778	60540	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:16.013570070 CET	60540	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:16.018821001 CET	3778	60540	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:16.816051006 CET	60542	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:16.822232962 CET	3778	60542	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:16.822354078 CET	60542	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:16.824898958 CET	60542	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:16.832371950 CET	3778	60542	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:16.832703114 CET	60542	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:16.839768887 CET	3778	60542	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:17.021563053 CET	60544	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:17.027751923 CET	3778	60544	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:17.028031111 CET	60544	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:17.031021118 CET	60544	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:17.035892010 CET	3778	60544	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:17.035959005 CET	60544	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:17.040807962 CET	3778	60544	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:18.433435917 CET	3778	60542	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:18.433989048 CET	60542	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:18.439007044 CET	3778	60542	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:18.671190977 CET	3778	60544	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:18.671566963 CET	60544	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:18.678045034 CET	3778	60544	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:19.438606977 CET	60546	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.443726063 CET	3778	60546	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:19.443806887 CET	60546	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.445064068 CET	60546	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.449913979 CET	3778	60546	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:19.450035095 CET	60546	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.454838037 CET	3778	60546	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:19.678262949 CET	60548	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.683248043 CET	3778	60548	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:19.683382034 CET	60548	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.685954094 CET	60548	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.690831900 CET	3778	60548	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:19.691068888 CET	60548	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:19.695928097 CET	3778	60548	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:21.090370893 CET	3778	60546	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:21.090848923 CET	60546	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:21.095757008 CET	3778	60546	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:21.383455038 CET	3778	60548	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:21.383837938 CET	60548	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:21.388720989 CET	3778	60548	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:22.096581936 CET	60550	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.101895094 CET	3778	60550	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:22.102025986 CET	60550	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.104262114 CET	60550	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.109103918 CET	3778	60550	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:22.109431028 CET	60550	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.114372969 CET	3778	60550	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:22.387828112 CET	60552	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.392744064 CET	3778	60552	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:22.392827988 CET	60552	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.394216061 CET	60552	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.399055958 CET	3778	60552	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:22.399117947 CET	60552	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:22.403947115 CET	3778	60552	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:23.736689091 CET	3778	60550	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:23.737214088 CET	60550	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:23.742242098 CET	3778	60550	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:23.994199991 CET	3778	60552	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:23.994767904 CET	60552	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:23.999754906 CET	3778	60552	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:24.742299080 CET	60554	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:24.747335911 CET	3778	60554	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:24.747483015 CET	60554	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:24.750204086 CET	60554	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:24.754996061 CET	3778	60554	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:24.755168915 CET	60554	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:24.760061979 CET	3778	60554	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:25.001410007 CET	60556	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:25.006711006 CET	3778	60556	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:25.006911039 CET	60556	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:25.009767056 CET	60556	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:25.014636993 CET	3778	60556	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:25.014885902 CET	60556	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:25.019785881 CET	3778	60556	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:26.450020075 CET	3778	60554	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:26.450407028 CET	60554	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:26.455404043 CET	3778	60554	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:26.680380106 CET	3778	60556	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:26.680830956 CET	60556	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:26.685748100 CET	3778	60556	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:27.456933022 CET	60558	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.462016106 CET	3778	60558	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:27.462225914 CET	60558	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.464745045 CET	60558	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.469851971 CET	3778	60558	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:27.470143080 CET	60558	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.475239992 CET	3778	60558	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:27.686965942 CET	60560	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.691873074 CET	3778	60560	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:27.692133904 CET	60560	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.693851948 CET	60560	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.698731899 CET	3778	60560	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:27.698962927 CET	60560	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:27.703843117 CET	3778	60560	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:29.075198889 CET	3778	60558	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:29.075797081 CET	60558	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:29.080739021 CET	3778	60558	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:29.329443932 CET	3778	60560	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:29.330154896 CET	60560	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:29.335164070 CET	3778	60560	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:30.081561089 CET	60562	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.086833954 CET	3778	60562	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:30.087122917 CET	60562	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.088732958 CET	60562	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.093617916 CET	3778	60562	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:30.093831062 CET	60562	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.098790884 CET	3778	60562	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:30.336630106 CET	60564	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.341619968 CET	3778	60564	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:30.341723919 CET	60564	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.344036102 CET	60564	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.348861933 CET	3778	60564	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:30.349071980 CET	60564	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:30.353916883 CET	3778	60564	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:31.731059074 CET	3778	60562	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:31.731379032 CET	60562	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:31.736284018 CET	3778	60562	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:32.029048920 CET	3778	60564	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:32.029448986 CET	60564	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:32.034398079 CET	3778	60564	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:32.733874083 CET	60566	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:32.738945961 CET	3778	60566	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:32.739041090 CET	60566	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:32.740019083 CET	60566	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:32.744829893 CET	3778	60566	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:32.744975090 CET	60566	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:32.749766111 CET	3778	60566	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:33.035355091 CET	60568	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:33.040352106 CET	3778	60568	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:33.040467024 CET	60568	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:33.042264938 CET	60568	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:33.047271967 CET	3778	60568	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:33.047481060 CET	60568	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:33.052336931 CET	3778	60568	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:34.393920898 CET	3778	60566	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:34.394284964 CET	60566	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:34.399116993 CET	3778	60566	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:34.750610113 CET	3778	60568	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:34.751029015 CET	60568	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:34.756016016 CET	3778	60568	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:35.399971962 CET	60570	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.405189037 CET	3778	60570	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:35.405432940 CET	60570	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.407845974 CET	60570	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.412714005 CET	3778	60570	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:35.412801027 CET	60570	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.417602062 CET	3778	60570	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:35.756925106 CET	60572	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.762093067 CET	3778	60572	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:35.762211084 CET	60572	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.764098883 CET	60572	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.768935919 CET	3778	60572	154.213.187.11	192.168.2.13
Jan 13, 2025 23:28:35.769148111 CET	60572	3778	192.168.2.13	154.213.187.11
Jan 13, 2025 23:28:35.774019003 CET	3778	60572	154.213.187.11	192.168.2.13

System Behavior

Analysis Process: camp.mips.elf PID: 5436, Parent PID: 5356

General

Start time (UTC):	22:26:24
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mips.elf
Arguments:	/tmp/camp.mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: camp.mips.elf PID: 5438, Parent PID: 5436

General

Start time (UTC):	22:26:24
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: camp.mips.elf PID: 5440, Parent PID: 5438

General

Start time (UTC):	22:26:24
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: camp.mips.elf PID: 5442, Parent PID: 5438

General

Start time (UTC):	22:26:24
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: camp.mips.elf PID: 5452, Parent PID: 5436

General

Start time (UTC):	22:26:30
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: camp.mips.elf PID: 5454, Parent PID: 5436

General

Start time (UTC):	22:26:30
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report camp.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: camp.mips.elf PID: 5436, Parent PID: 5356

General

Chronological Activities

Analysis Process: camp.mips.elf PID: 5438, Parent PID: 5436

General

Chronological Activities

Analysis Process: camp.mips.elf PID: 5440, Parent PID: 5438

General

Chronological Activities

Analysis Process: camp.mips.elf PID: 5442, Parent PID: 5438

General

Chronological Activities

Analysis Process: camp.mips.elf PID: 5452, Parent PID: 5436

General

Chronological Activities

Analysis Process: camp.mips.elf PID: 5454, Parent PID: 5436

General

Chronological Activities

Linux Analysis Report
camp.mips.elf