Edit tour

Linux Analysis Report
byte.x86.elf

Overview

General Information

Sample name:	byte.x86.elf
Analysis ID:	1592433
MD5:	68945c8d25a8717a3435259129c4924f
SHA1:	1f5d14aac12a2dca6f0f4f01007045325d43cdb6
SHA256:	17529ec36be870b9c139f4c7a5d09ce2b8a8c213423f5a28dbc830c7580af4a4
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Okiru

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Sample tries to kill a massive number of system processes

Yara detected Mirai

Yara detected Okiru

Machine Learning detection for sample

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads the 'hosts' file potentially containing internal network hosts

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1592433
Start date and time:	2025-01-16 06:12:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	byte.x86.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/20@206/0

Warnings

Connection to analysis system has been lost, crash info: Unknown

Process Tree

system is lnxubuntu20

byte.x86.elf (PID: 5426, Parent: 5345, MD5: 68945c8d25a8717a3435259129c4924f) Arguments: /tmp/byte.x86.elf

byte.x86.elf New Fork (PID: 5427, Parent: 5426)

byte.x86.elf New Fork (PID: 5428, Parent: 5426)

byte.x86.elf New Fork (PID: 5429, Parent: 5426)

byte.x86.elf New Fork (PID: 5430, Parent: 5429)

byte.x86.elf New Fork (PID: 5431, Parent: 5429)

gdm3 New Fork (PID: 5457, Parent: 1400)

Default (PID: 5457, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5463, Parent: 1)

dbus-daemon (PID: 5463, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5466, Parent: 1400)

Default (PID: 5466, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5467, Parent: 1)

rsyslogd (PID: 5467, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5468, Parent: 2935)

pulseaudio (PID: 5468, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

gdm3 New Fork (PID: 5469, Parent: 1400)

Default (PID: 5469, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gvfsd-fuse New Fork (PID: 5470, Parent: 3122)

fusermount (PID: 5470, Parent: 3122, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5476, Parent: 1)

dbus-daemon (PID: 5476, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5477, Parent: 1)

rsyslogd (PID: 5477, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5485, Parent: 1)

systemd-logind (PID: 5485, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5542, Parent: 1)

gpu-manager (PID: 5542, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5543, Parent: 5542)

sh (PID: 5543, Parent: 5542, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 5545, Parent: 1)

generate-config (PID: 5545, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5546, Parent: 5545)

pkill (PID: 5546, Parent: 5545, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5547, Parent: 1)

rsyslogd (PID: 5547, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5553, Parent: 1)

rsyslogd (PID: 5553, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5557, Parent: 1)

gpu-manager (PID: 5557, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5558, Parent: 5557)

sh (PID: 5558, Parent: 5557, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5559, Parent: 5558)

grep (PID: 5559, Parent: 5558, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5560, Parent: 5557)

sh (PID: 5560, Parent: 5557, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5561, Parent: 5560)

grep (PID: 5561, Parent: 5560, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5562, Parent: 5557)

sh (PID: 5562, Parent: 5557, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5565, Parent: 5562)

grep (PID: 5565, Parent: 5562, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5566, Parent: 5557)

sh (PID: 5566, Parent: 5557, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5567, Parent: 5566)

grep (PID: 5567, Parent: 5566, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5568, Parent: 1)

generate-config (PID: 5568, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5569, Parent: 5568)

pkill (PID: 5569, Parent: 5568, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5570, Parent: 1)

rsyslogd (PID: 5570, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5574, Parent: 1)

rsyslogd (PID: 5574, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5578, Parent: 1)

gpu-manager (PID: 5578, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5581, Parent: 5578)

sh (PID: 5581, Parent: 5578, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5582, Parent: 5581)

grep (PID: 5582, Parent: 5581, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5583, Parent: 5578)

sh (PID: 5583, Parent: 5578, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5584, Parent: 5583)

grep (PID: 5584, Parent: 5583, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5585, Parent: 5578)

sh (PID: 5585, Parent: 5578, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5586, Parent: 5585)

grep (PID: 5586, Parent: 5585, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5587, Parent: 5578)

sh (PID: 5587, Parent: 5578, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5588, Parent: 5587)

grep (PID: 5588, Parent: 5587, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5589, Parent: 5578)

sh (PID: 5589, Parent: 5578, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5590, Parent: 5589)

grep (PID: 5590, Parent: 5589, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5591, Parent: 5578)

sh (PID: 5591, Parent: 5578, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5592, Parent: 5591)

grep (PID: 5592, Parent: 5591, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5593, Parent: 1)

generate-config (PID: 5593, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5594, Parent: 5593)

systemd New Fork (PID: 5595, Parent: 1)

rsyslogd (PID: 5595, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5599, Parent: 1)

gpu-manager (PID: 5599, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5600, Parent: 5599)

sh (PID: 5600, Parent: 5599, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5601, Parent: 5600)

grep (PID: 5601, Parent: 5600, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5602, Parent: 5599)

sh (PID: 5602, Parent: 5599, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5603, Parent: 5602)

grep (PID: 5603, Parent: 5602, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5604, Parent: 1)

generate-config (PID: 5604, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5605, Parent: 5604)

pkill (PID: 5605, Parent: 5604, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5606, Parent: 1)

rsyslogd (PID: 5606, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5612, Parent: 1)

rsyslogd (PID: 5612, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5616, Parent: 1)

gpu-manager (PID: 5616, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 5617, Parent: 1)

rsyslogd (PID: 5617, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5618, Parent: 1)

generate-config (PID: 5618, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 5619, Parent: 1)

rsyslogd (PID: 5619, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5620, Parent: 1)

systemd New Fork (PID: 5621, Parent: 1)

rsyslogd (PID: 5621, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5622, Parent: 1)

gpu-manager (PID: 5622, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 5623, Parent: 1)

generate-config (PID: 5623, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 5626, Parent: 1)

gpu-manager (PID: 5626, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 5627, Parent: 1)

generate-config (PID: 5627, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 5628, Parent: 1)

gpu-manager (PID: 5628, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 5629, Parent: 1)

plymouth (PID: 5629, Parent: 1, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: /bin/plymouth quit

systemd New Fork (PID: 5655, Parent: 2935)

dbus-daemon (PID: 5655, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5660, Parent: 1)

systemd-logind (PID: 5660, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5736, Parent: 1)

systemd New Fork (PID: 5737, Parent: 1)

dbus-daemon (PID: 5737, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5738, Parent: 1)

dbus-daemon (PID: 5738, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5740, Parent: 1)

systemd New Fork (PID: 5741, Parent: 1)

dbus-daemon (PID: 5741, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
byte.x86.elf	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
byte.x86.elf	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
byte.x86.elf	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
byte.x86.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
byte.x86.elf	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
byte.x86.elf	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
byte.x86.elf	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
byte.x86.elf	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
byte.x86.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
byte.x86.elf	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
byte.x86.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
byte.x86.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
byte.x86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
byte.x86.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdc0:$s1: LCOGQGPTGP
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5428.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
5428.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5426.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5426.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
5428.1.0000000008048000.000000000805a000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdc0:$s1: LCOGQGPTGP
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5426.1.0000000008048000.000000000805a000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdc0:$s1: LCOGQGPTGP
5431.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
5431.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5431.1.0000000008048000.000000000805a000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdc0:$s1: LCOGQGPTGP
Process Memory Space: byte.x86.elf PID: 5426	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: byte.x86.elf PID: 5426	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
Process Memory Space: byte.x86.elf PID: 5428	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: byte.x86.elf PID: 5428	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
Process Memory Space: byte.x86.elf PID: 5431	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: byte.x86.elf PID: 5431	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
Click to see the 43 entries

String: byte/proc//proc/%s/exe/proc/self/exe/proc/proc/%d/cmdlinenetstatwgettftpcurlreboot/bin/busyboxvar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdvar/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemdshellmnt/sys/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/soraJoshohajime902i13BzSxLxBxeYHOHO-LUGO7HOHO-U79OLJuYfouyf87NiGGeR69xdSO190Ij1XLOLKIKEEEDDEekjheory98escansh4MDMAfdevalvexscanspcMELTEDNINJAREALZflexsonskidsscanx86MISAKI-U79OLfoAxi102kxeswodjwodjwojMmKiy7f87lfreecookiex86sysgpufrgegesysupdater0DnAzepdNiGGeRD0nks69frgreu0x766f6964NiGGeRd0nks1337gafturasgbsigboa120i3UI49OaF3geaevaiolmao123123aOfurain0n4H34DggTrexewwasads1293194hjXDOthLaLosnggtwget-log1337SoraLOADERSAIAKINAggtq1378bfp919GRB1Q2SAIAKUSOggtr14FaSEXSLAVE1337ggtt1902a3u912u3u4haetrghbr19ju3dSORAojkf120hehahejeje922U2JDJA901F91SlaVLav12helpmedaddthhhhh2wgg9qphbqSlav3Th3seD3viceshzSmYZjYMQ5GbfSoRAxD123LOLiaGv5aA3SoRAxD420LOLinsomni640277SoraBeReppin1337ipcamCache66tlGg9QjUYfouyf876ke3TOKYO3lyEeaXul2dULCVxh93OfjHZ2zTY2gD6MZvKc7KU6rmMkiy6f87lA023UU4U24UIUTheWeekndmioribitchesA5p9TheWeekndsmnblkjpoiAbAdTokyosnebAkiruU8inTznetstatsAlexW9RCAKM20TnewnetwordAyo215WordnloadsWordmanenotyakuzaaBelchWordnetsobpBigN0gg0r420X0102I34fofhasfhiafhoiX19I239124UIUoismXSHJEHHEIIHWOolsVNwo12DeportedDeportedXkTer0GbA1onry0v03FortniteDownLOLZY0urM0mGaypussyfartlmaojkGrAcEnIgGeRaNnYvdGkqndCOqGeoRBe6BEGuiltyCrownZEuS69s4beBsEQhdHOHO-KSNDOZEuz69sat1234aj93hJ23scanHAalie293z0k2LscanJoshoARMHellInSideayyyGangShitscanJoshoARM5HighFryb1glscanJoshoARM6IWhPyucDbJboatnetzscanJoshoARM7IuYgujeIqnbtbatrtahzexsexscanJoshoM68KJJDUHEWBBBIBscanJoshoMIPSJSDGIEVIVAVIGcKbVkzGOPascanJoshoMPSLccADscanJoshoPPCKAZEN-OIU97chickenxingsscanJoshoSH4yakuskzm8KAZEN-PO78HcleanerscanJoshoSPCKAZEN-U79OLdbeefscanJoshoX86yakuz4c24KETASHI32ddrwelperscanarm5zPnr6HpQj2Kaishi-Iz90Ydeexecscanarm6zdrtfxcgyKatrina32doCP3fVjscanarm7zxcfhuioKsif91je39scanm68kKuasadvrhelperl33t_feetl33tl33tfeetscanmipsKuasaBinsMateeQnOhRk85rscanmpslLOLHHHOHOHBUIeXK20CL12ZnyamezyQBotBladeSPOOKYhikariwasherep4029x91xx32uhj4gbejhwizardzhra.outboatnetcondiheroshimaskid.dbglzrdPownedSecurity69.aresfxlyazsxhyUNSTABLEmoobotjnsd9sdoilayourmomgaeissdfjiougsiojOasisSEGRJIJHFVNHSNHEIHFOSapep999KOWAI-BAdAsVKOWAI-SADjHKipU7Ylairdropmalwareyour_verry_fucking_gayBig-Bro-Brightsefaexecshirololieagle.For-Gai-Mezy0x6axNLcloqkisvspookymythSwergjmioGKILLEJW(IU(JIWERGFJGJWJRGHetrhwewrtheIuFdKssCxzjSDFJIjioOnrYoXd666ewrtkjokethajbdf89wu823AAaasrdgsWsGA4@F6FGhostWuzHere666BOGOMIPSbeastmodedvrHelperbestmodesfc6aJfIuYDemon.xeno-is-godICY-P-0ODIJgSHUIHIfhwrgLhu87VhvQPzlunadakuexecbinTacoBellGodYololigangExecutionorbitclientAmnesiaOwariUnHAnaAWz3hirobbomiorieagledoxxRollielessie.hax.yakuzawordminerminerwordSinixV4hohog0dbu7tuorphicfurasshuhorizonassailantAresKawaiihelperECHOBOTDEMONS

Source: global traffic

TCP traffic: 192.168.2.13:45942 -> 193.143.1.66:2222

Source: /usr/sbin/rsyslogd (PID: 5467)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5477)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5547)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5553)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5570)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5574)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5595)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5606)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5612)	Reads hosts file: /etc/hosts	Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26

Source: global traffic

DNS traffic detected: DNS query: krkrdoskslansldkalsd.o-r.kr

Source: syslog.73.dr, syslog.124.dr, syslog.47.dr, syslog.35.dr, syslog.122.dr, syslog.106.dr, syslog.49.dr, syslog.75.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth

Sample tries to kill a massive number of system processes

Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 5, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 7, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 8, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 19, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 86, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 129, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 131, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 134, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 142, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 145, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 158, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 239, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 240, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 241, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 242, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 244, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 245, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 246, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 247, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 268, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 271, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 273, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 275, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 276, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 298, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 299, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 310, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 311, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 312, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 313, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 314, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 315, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 319, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 321, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 323, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 325, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 332, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 347, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 371, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 378, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 418, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 660, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 672, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 678, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 679, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 680, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 726, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 778, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 5, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 7, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 8, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 19, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 86, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 129, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 131, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 134, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 142, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 145, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 158, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 239, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 240, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 241, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 242, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 244, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 245, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 246, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 247, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 268, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 271, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 273, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 275, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 276, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 298, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 299, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 310, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 311, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 312, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 313, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 314, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 315, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 319, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 321, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 323, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 325, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 332, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 347, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 371, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 378, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 418, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 660, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 672, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 678, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 679, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 680, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 726, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 727, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 778, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 783, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 790, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 795, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent to PID below 1000: pid: 936, result: successful	Jump to behavior

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 7, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 8, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 19, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 86, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 129, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 131, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 134, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 142, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 145, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 158, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 239, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 240, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 241, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 242, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 244, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 245, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 246, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 247, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 268, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 271, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 273, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 275, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 276, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 298, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 299, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 310, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 311, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 312, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 313, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 314, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 315, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 319, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 321, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 323, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 325, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 332, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 347, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 371, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 378, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 418, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 672, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 678, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 679, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 680, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1805, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 2496, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3442, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3455, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3594, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3700, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3701, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3702, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3703, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5409, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5463, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5468, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5476, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5477, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5542, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5545, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5547, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5553, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5557, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5568, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5570, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5574, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5578, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5595, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5599, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5604, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5606, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 7, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 8, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 19, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 86, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 129, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 131, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 134, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 142, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 145, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 158, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 239, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 240, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 241, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 242, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 244, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 245, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 246, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 247, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 268, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 271, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 273, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 275, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 276, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 298, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 299, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 310, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 311, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 312, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 313, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 314, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 315, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 319, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 321, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 323, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 325, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 332, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 347, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 371, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 378, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 418, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 672, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 678, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 679, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 680, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1432, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1805, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 2496, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3442, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3455, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3594, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3700, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3701, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3702, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3703, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5409, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5463, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5468, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5593, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5612, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: busyboxxx
Source: Initial sample	String containing 'busybox' found: busyboxx
Source: Initial sample	String containing 'busybox' found: byte/proc//proc/%s/exe/proc/self/exe/proc/proc/%d/cmdlinenetstatwgettftpcurlreboot/bin/busyboxvar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdvar/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemdshellmnt/sys/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/soraJoshohajime902i13BzSxLxBxeYHOHO-LUGO7HOHO-U79OLJuYfouyf87NiGGeR69xdSO190Ij1XLOLKIKEEEDDEekjheory98escansh4MDMAfdevalvexscanspcMELTEDNINJAREALZflexsonskidsscanx86MISAKI-U79OLfoAxi102kxeswodjwodjwojMmKiy7f87lfreecookiex86sysgpufrgegesysupdater0DnAzepdNiGGeRD0nks69frgreu0x766f6964NiGGeRd0nks1337gafturasgbsigboa120i3UI49OaF3geaevaiolmao123123aOfurain0n4H34DggTrexewwasads1293194hjXDOthLaLosnggtwget-log1337SoraLOADERSAIAKINAggtq1378bfp919GRB1Q2SAIAKUSOggtr14FaSEXSLAVE1337ggtt1902a3u912u3u4haetrghbr19ju3dSORAojkf120hehahejeje922U2JDJA901F91SlaVLav12

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 7, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 8, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 19, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 86, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 129, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 131, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 134, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 142, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 145, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 158, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 239, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 240, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 241, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 242, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 244, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 245, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 246, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 247, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 268, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 271, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 273, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 275, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 276, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 298, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 299, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 310, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 311, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 312, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 313, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 314, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 315, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 319, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 321, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 323, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 325, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 332, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 347, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 371, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 378, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 418, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 672, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 678, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 679, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 680, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 1805, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 2496, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3442, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3455, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3594, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3700, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3701, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3702, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3703, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5409, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5463, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5468, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5476, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5477, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5542, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5545, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5547, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5553, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5557, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5568, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5570, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5574, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5578, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5595, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5599, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5604, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5427)	SIGKILL sent: pid: 5606, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 7, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 8, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 19, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 86, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 129, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 131, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 134, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 142, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 145, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 158, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 239, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 240, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 241, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 242, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 244, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 245, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 246, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 247, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 268, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 271, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 273, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 275, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 276, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 298, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 299, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 310, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 311, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 312, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 313, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 314, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 315, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 319, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 321, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 323, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 325, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 332, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 347, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 371, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 378, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 418, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 672, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 678, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 679, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 680, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1238, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1432, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 1805, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 2496, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3442, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3455, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3594, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3700, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3701, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3702, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3703, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5409, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5463, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5468, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5593, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	SIGKILL sent: pid: 5612, result: successful	Jump to behavior

Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: byte.x86.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/20@206/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5463)	File: /proc/5463/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5470)	File: /proc/5470/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5476)	File: /proc/5476/mounts	Jump to behavior

Source: /lib/systemd/systemd-logind (PID: 5485)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5485)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5485)	File: /run/systemd/seats/.#seat072D10V	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5660)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5660)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5660)	File: /run/systemd/seats/.#seat0U0b7ia	Jump to behavior

Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/5266/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/3760/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/238/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/239/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/240/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/241/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/242/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/244/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/245/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/247/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/371/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/134/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/260/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/261/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/262/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/142/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/263/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/264/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/265/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/145/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 5430)	File opened: /proc/266/cmdline	Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5543)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5558)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5560)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5562)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5566)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5581)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5583)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5585)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5587)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5589)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5591)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5600)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5602)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior

Source: /bin/sh (PID: 5559)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5561)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5565)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5567)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5582)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5584)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5586)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5588)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5590)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5592)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5601)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5603)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior

Source: /usr/share/gdm/generate-config (PID: 5546)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5569)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5605)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 5477)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5477)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5547)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5547)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 5553)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5570)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5574)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5595)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5606)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5612)	Log file created: /var/log/kern.log	Jump to dropped file

Source: /usr/bin/gpu-manager (PID: 5542)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5557)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5578)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5599)	Truncated file: /var/log/gpu-manager.log	Jump to behavior

Source: /usr/bin/pkill (PID: 5546)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5569)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5605)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 5467)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5477)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5547)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5553)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5570)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5574)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5595)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5606)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5612)	Queries kernel information via 'uname':	Jump to behavior

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5426, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5428, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5431, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5426, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5428, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5431, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5426, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5428, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5431, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5426.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5431.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5426, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5428, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 5431, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	2 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
byte.x86.elf	74%	ReversingLabs	Linux.Trojan.Mirai
byte.x86.elf	66%	Virustotal		Browse
byte.x86.elf	100%	Avira	EXP/ELF.Mirai.M
byte.x86.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
krkrdoskslansldkalsd.o-r.kr	193.143.1.66	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.73.dr, syslog.124.dr, syslog.47.dr, syslog.35.dr, syslog.122.dr, syslog.106.dr, syslog.49.dr, syslog.75.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
193.143.1.66	krkrdoskslansldkalsd.o-r.kr	unknown		57271	BITWEB-ASRU	false
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
193.143.1.66	dlr.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	/bins/byte.x86
	dlr.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	/bins/byte.arm6
	dlr.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	/bins/byte.arm6
	dlr.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	/bins/byte.x86
185.125.190.26	boatnet.spc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	res.arc.elf	Get hash	malicious	Unknown	Browse
	disbot.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.arm7.elf	Get hash	malicious	Unknown	Browse
	boooooos.arm7.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm6.elf	Get hash	malicious	Unknown	Browse
	Mozi.m.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	arm6.elf	Get hash	malicious	Mirai	Browse
	main_arm.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
krkrdoskslansldkalsd.o-r.kr	dlr.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	dlr.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.mips.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	dlr.arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dlr.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	dlr.sh4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	byte.mips.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	sshd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
BITWEB-ASRU	dlr.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	dlr.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.mips.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	http://app-antiriciclaggio-mps.com/dati.html	Get hash	malicious	Unknown	Browse	193.143.1.14
	1647911459241874440.js	Get hash	malicious	Strela Downloader	Browse	193.143.1.205
	21033090848109083.js	Get hash	malicious	Strela Downloader	Browse	193.143.1.205
	373320438246114031.js	Get hash	malicious	Strela Downloader	Browse	193.143.1.205
	1025029660567011705.js	Get hash	malicious	Strela Downloader	Browse	193.143.1.205

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0U0b7ia

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	402
Entropy (8bit):	4.900762013901762
Encrypted:	false
SSDEEP:	6:LWWF6+WLCnAvmlsWWF6+WLCnAbKRkFVlWWF6+W3kjLIWWF6+WRMVgOlkan:1FjAvm8FjA2+VXF9CFmha
MD5:	4E5902466499EF3F8549D59BEDEB27DD
SHA1:	7FDF2AFD189CE843E96BAE7127408A05408B8E08
SHA-256:	C238CF5CE297AFB921BD8E7A25AD30545CA6689C2C2D7DFAFC65333137371432
SHA-512:	E8A3D88880940797680DBE861E53B97135B19528B1D6A75E81D60720FC3C856DADEDEBA3E64CB517F4CD599407999C78ECC550609089A32DDB64B245283248F7
Malicious:	false
Reputation:	low
Preview:	Jan 15 23:12:57 galassia systemd-logind[5485]: Watching system buttons on /dev/input/event0 (Power Button).Jan 15 23:12:57 galassia systemd-logind[5485]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Jan 15 23:12:57 galassia systemd-logind[5485]: New seat seat0..Jan 15 23:12:57 galassia systemd-logind[5485]: Failed to start autovt@tty2.service: Connection reset by peer.

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1392
Entropy (8bit):	4.685732750071061
Encrypted:	false
SSDEEP:	24:3kcjZOkcX+kczmkcGAIvCb3kcajAIvCjukcgAIkCQMkcpfkcQawkc89kcDXkcodS:VO8wYka99eTTQteJq1ZHRq
MD5:	1441D3A1476C7FD3654116C869577A1E
SHA1:	1EB7759BCBE0D6B16B88118AC4D73507C518D401
SHA-256:	3A2B9C36D2572671608C29178D99A990555B69A10430673B911E8E4934B36703
SHA-512:	15FA44828F18897F7F56890F2E819C3ECB790C634D8FB4EF91EC368D57702DD3E63BB48A5CADA249F5FE5FB205F27903D344B6C76735218C52CD881FD74B2DB8
Malicious:	false
Reputation:	low
Preview:	Jan 15 23:13:15 galassia kernel: [ 129.917916] blocking signal 9: 5430 -> 3132.Jan 15 23:13:15 galassia kernel: [ 130.005170] blocking signal 9: 5427 -> 1.Jan 15 23:13:15 galassia kernel: [ 130.041387] blocking signal 9: 5430 -> 1.Jan 15 23:13:15 galassia kernel: [ 130.675120] New task spawned: old: (tgid 5612, tid 5612), new (tgid: 5612, tid: 5613).Jan 15 23:13:15 galassia kernel: [ 130.675841] New task spawned: old: (tgid 5612, tid 5612), new (tgid: 5612, tid: 5614).Jan 15 23:13:15 galassia kernel: [ 130.687538] New task spawned: old: (tgid 5612, tid 5613), new (tgid: 5612, tid: 5615).Jan 15 23:13:15 galassia kernel: [ 130.826373] blocking signal 9: 5430 -> 660.Jan 15 23:13:15 galassia kernel: [ 130.853412] blocking signal 9: 5430 -> 726.Jan 15 23:13:15 galassia kernel: [ 130.855949] blocking signal 9: 5430 -> 778.Jan 15 23:13:15 galassia kernel: [ 130.856787] blocking signal 9: 5427 -> 660.Jan 15 23:13:15 galassia kernel: [ 130.859390] blocking signal 9: 5430 -> 936.Jan 1

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	2373
Entropy (8bit):	4.95629714290061
Encrypted:	false
SSDEEP:	48:M34ZP9RQO8wYka9Qc7CjeTTQteJq1ZHRqp:V9Ry3
MD5:	308A7886F879714B4B54B9042A6DEF09
SHA1:	6CD199DDB73D739C5E1DA5A50C9185F479221102
SHA-256:	2C44BF9CBDC09F7ED44F3A5B899E72FE2733430C2F3CE2779517D1D0EC53D4FC
SHA-512:	1E93FCA07AB3E42067581139E8F2931A23A0861D4C5DFD99C3E69BAD0D0742D66DB9C6981325F1A716C5D262517183F68E508FC76C195C0C55331BDC2975ED7B
Malicious:	false
Reputation:	low
Preview:	Jan 15 23:13:14 galassia systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Jan 15 23:13:14 galassia systemd[1]: rsyslog.service: Failed with result 'signal'..Jan 15 23:13:14 galassia systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 9..Jan 15 23:13:14 galassia systemd[1]: Stopped System Logging Service..Jan 15 23:13:14 galassia systemd[1]: Starting System Logging Service....Jan 15 23:13:15 galassia systemd[1]: Started System Logging Service..Jan 15 23:13:15 galassia kernel: [ 129.917916] blocking signal 9: 5430 -> 3132.Jan 15 23:13:15 galassia kernel: [ 130.005170] blocking signal 9: 5427 -> 1.Jan 15 23:13:15 galassia kernel: [ 130.041387] blocking signal 9: 5430 -> 1.Jan 15 23:13:15 galassia kernel: [ 130.675120] New task spawned: old: (tgid 5612, tid 5612), new (tgid: 5612, tid: 5613).Jan 15 23:13:15 galassia kernel: [ 130.675841] New task spawned: old: (tgid 5612, tid 5612), new (tgid: 5612, tid: 5614).Jan 15 23:13:15 galassia

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.605332585907466
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	byte.x86.elf
File size:	75'120 bytes
MD5:	68945c8d25a8717a3435259129c4924f
SHA1:	1f5d14aac12a2dca6f0f4f01007045325d43cdb6
SHA256:	17529ec36be870b9c139f4c7a5d09ce2b8a8c213423f5a28dbc830c7580af4a4
SHA512:	69d61f1e6077a45255a44f01bc25280e37acaf66330318ac4998b248ae63f4ba30a28ec1e5fd0cccbd85824740382c310a9336090072922ea148d4ce6e03840d
SSDEEP:	1536:aSYXBbJKbFe5AQZqOtRjX1lxW7//S2xnLs+IJrF/DOn/YUTB/:ybIbFe5wOtB3k7XS2xLCJdinJt/
TLSH:	C0736DC9A683E8F6FC1606751173EF329A77E17F2019DA83C7989D72D906A02E51339C
File Content Preview:	.ELF....................d...4....#......4. ...(..........................................................3..........Q.td............................U..S.......7'...h........[]...$.............U......=.....t..5...................u........t....h............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74720
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xe9a6	0x0	0x6	AX	16
.fini	PROGBITS	0x8056a56	0xea56	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8056a80	0xea80	0x2d3c	0x0	0x2	A	32
.ctors	PROGBITS	0x805a7c0	0x117c0	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x805a7c8	0x117c8	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x805a7e0	0x117e0	0xbc0	0x0	0x3	WA	32
.bss	NOBITS	0x805b3a0	0x123a0	0x2800	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x123a0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x117bc	0x117bc	6.6251	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x117c0	0x805a7c0	0x805a7c0	0xbe0	0x33e0	4.9310	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 16, 2025 06:12:52.128679037 CET	45942	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:52.133598089 CET	2222	45942	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:52.133662939 CET	45942	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:52.133702040 CET	45942	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:52.138550043 CET	2222	45942	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:52.138591051 CET	45942	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:52.143451929 CET	2222	45942	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:52.837384939 CET	2222	45942	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:52.837480068 CET	45942	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:52.837518930 CET	45942	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.082871914 CET	45944	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.087845087 CET	2222	45944	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:53.088134050 CET	45944	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.088134050 CET	45944	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.093040943 CET	2222	45944	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:53.093458891 CET	45944	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.098332882 CET	2222	45944	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:53.784473896 CET	2222	45944	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:53.784656048 CET	45944	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.784657001 CET	45944	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.791831017 CET	45946	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.796736002 CET	2222	45946	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:53.796866894 CET	45946	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.796866894 CET	45946	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.801714897 CET	2222	45946	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:53.801806927 CET	45946	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:53.806643009 CET	2222	45946	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:54.512720108 CET	2222	45946	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:54.512794971 CET	45946	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:54.512820005 CET	45946	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:54.520675898 CET	45950	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:54.525641918 CET	2222	45950	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:54.525713921 CET	45950	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:54.525713921 CET	45950	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:54.530606985 CET	2222	45950	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:54.530662060 CET	45950	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:54.535480976 CET	2222	45950	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.228549004 CET	2222	45950	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.228636026 CET	45950	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.228727102 CET	45950	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.235605955 CET	45952	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.240534067 CET	2222	45952	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.240592003 CET	45952	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.240611076 CET	45952	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.245462894 CET	2222	45952	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.245517015 CET	45952	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.250442982 CET	2222	45952	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.930947065 CET	2222	45952	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.931068897 CET	45952	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.931068897 CET	45952	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.938205004 CET	45954	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.943135023 CET	2222	45954	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.943219900 CET	45954	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.943219900 CET	45954	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.948103905 CET	2222	45954	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:55.948164940 CET	45954	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:55.952999115 CET	2222	45954	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:56.653945923 CET	2222	45954	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:56.654901028 CET	45954	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:56.656119108 CET	45954	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:56.663072109 CET	45956	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:56.668040991 CET	2222	45956	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:56.668262005 CET	45956	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:56.668848038 CET	45956	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:56.673715115 CET	2222	45956	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:56.674021959 CET	45956	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:56.678940058 CET	2222	45956	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:57.342852116 CET	2222	45956	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:57.342943907 CET	45956	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:57.342943907 CET	45956	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:57.350295067 CET	45958	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:57.355163097 CET	2222	45958	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:57.355261087 CET	45958	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:57.355294943 CET	45958	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:57.360203028 CET	2222	45958	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:57.360269070 CET	45958	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:57.365082979 CET	2222	45958	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:58.054615974 CET	2222	45958	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:58.054692030 CET	45958	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:58.054730892 CET	45958	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:58.294648886 CET	45960	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:58.299637079 CET	2222	45960	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:58.299706936 CET	45960	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:58.299751997 CET	45960	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:58.304599047 CET	2222	45960	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:58.304702044 CET	45960	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:58.309550047 CET	2222	45960	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.003793001 CET	2222	45960	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.003914118 CET	45960	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.004004955 CET	45960	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.011081934 CET	45962	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.016946077 CET	2222	45962	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.017047882 CET	45962	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.017047882 CET	45962	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.022468090 CET	2222	45962	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.022527933 CET	45962	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.028110981 CET	2222	45962	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.737731934 CET	2222	45962	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.737869024 CET	45962	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.737869024 CET	45962	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.745378017 CET	45964	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.750341892 CET	2222	45964	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.750483990 CET	45964	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.750511885 CET	45964	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.755398035 CET	2222	45964	193.143.1.66	192.168.2.13
Jan 16, 2025 06:12:59.755458117 CET	45964	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:12:59.760333061 CET	2222	45964	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:00.441199064 CET	2222	45964	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:00.441263914 CET	45964	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:00.441359043 CET	45964	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:00.448777914 CET	45966	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:00.453706980 CET	2222	45966	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:00.453787088 CET	45966	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:00.453787088 CET	45966	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:00.458694935 CET	2222	45966	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:00.458818913 CET	45966	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:00.463706017 CET	2222	45966	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.109375000 CET	48202	443	192.168.2.13	185.125.190.26
Jan 16, 2025 06:13:01.183764935 CET	2222	45966	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.183875084 CET	45966	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.183875084 CET	45966	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.191103935 CET	45968	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.195957899 CET	2222	45968	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.196163893 CET	45968	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.196163893 CET	45968	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.201306105 CET	2222	45968	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.201378107 CET	45968	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.206207991 CET	2222	45968	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.890696049 CET	2222	45968	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.890794039 CET	45968	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.890794039 CET	45968	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.898427010 CET	45970	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.903356075 CET	2222	45970	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.903512955 CET	45970	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.903512955 CET	45970	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.908400059 CET	2222	45970	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:01.908466101 CET	45970	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:01.913397074 CET	2222	45970	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:02.602174044 CET	2222	45970	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:02.602293968 CET	45970	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:02.602293968 CET	45970	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:02.609493971 CET	45972	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:02.614453077 CET	2222	45972	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:02.614522934 CET	45972	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:02.614542007 CET	45972	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:02.619402885 CET	2222	45972	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:02.619491100 CET	45972	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:02.624291897 CET	2222	45972	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:03.325351954 CET	2222	45972	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:03.325464010 CET	45972	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:03.325464010 CET	45972	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:03.332771063 CET	45974	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:03.337714911 CET	2222	45974	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:03.337804079 CET	45974	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:03.337804079 CET	45974	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:03.342643976 CET	2222	45974	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:03.342693090 CET	45974	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:03.347610950 CET	2222	45974	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.011945963 CET	2222	45974	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.012001991 CET	45974	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.012026072 CET	45974	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.254393101 CET	45976	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.259463072 CET	2222	45976	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.259516001 CET	45976	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.259577990 CET	45976	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.264461994 CET	2222	45976	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.264520884 CET	45976	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.269392967 CET	2222	45976	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.981919050 CET	2222	45976	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.982115984 CET	45976	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.982116938 CET	45976	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.989335060 CET	45978	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.994268894 CET	2222	45978	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.994402885 CET	45978	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.994402885 CET	45978	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:04.999274015 CET	2222	45978	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:04.999347925 CET	45978	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:05.004652977 CET	2222	45978	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:05.711755991 CET	2222	45978	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:05.711919069 CET	45978	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:05.711919069 CET	45978	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:05.719566107 CET	45980	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:05.724585056 CET	2222	45980	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:05.724643946 CET	45980	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:05.724684954 CET	45980	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:05.729533911 CET	2222	45980	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:05.729592085 CET	45980	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:05.734406948 CET	2222	45980	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:06.427603006 CET	2222	45980	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:06.427690029 CET	45980	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:06.427776098 CET	45980	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:06.434865952 CET	45982	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:06.439867020 CET	2222	45982	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:06.440412045 CET	45982	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:06.440412045 CET	45982	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:06.445291996 CET	2222	45982	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:06.445374966 CET	45982	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:06.450284004 CET	2222	45982	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.139878988 CET	2222	45982	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.140119076 CET	45982	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.140120029 CET	45982	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.146876097 CET	45984	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.151844025 CET	2222	45984	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.151909113 CET	45984	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.152004957 CET	45984	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.156791925 CET	2222	45984	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.156873941 CET	45984	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.161768913 CET	2222	45984	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.858319998 CET	2222	45984	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.858397007 CET	45984	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.858397007 CET	45984	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.867233038 CET	45986	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.873656034 CET	2222	45986	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.873722076 CET	45986	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.873722076 CET	45986	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.880004883 CET	2222	45986	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:07.880079031 CET	45986	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:07.885914087 CET	2222	45986	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:08.566493034 CET	2222	45986	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:08.566791058 CET	45986	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:08.566791058 CET	45986	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:08.574132919 CET	45988	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:08.578994036 CET	2222	45988	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:08.579078913 CET	45988	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:08.579165936 CET	45988	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:08.584042072 CET	2222	45988	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:08.584283113 CET	45988	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:08.589149952 CET	2222	45988	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.280503035 CET	2222	45988	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.280630112 CET	45988	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.280630112 CET	45988	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.287914038 CET	45990	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.292788029 CET	2222	45990	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.292865038 CET	45990	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.292865038 CET	45990	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.297720909 CET	2222	45990	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.297780991 CET	45990	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.302587986 CET	2222	45990	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.974929094 CET	2222	45990	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.974983931 CET	45990	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.975018978 CET	45990	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.982757092 CET	45992	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.987669945 CET	2222	45992	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.987735033 CET	45992	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.987777948 CET	45992	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.992569923 CET	2222	45992	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:09.992624998 CET	45992	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:09.997528076 CET	2222	45992	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:10.710961103 CET	2222	45992	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:10.711149931 CET	45992	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:10.711149931 CET	45992	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:10.718215942 CET	45994	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:10.723083019 CET	2222	45994	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:10.723198891 CET	45994	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:10.723198891 CET	45994	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:10.728087902 CET	2222	45994	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:10.728152037 CET	45994	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:10.732988119 CET	2222	45994	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:11.423182011 CET	2222	45994	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:11.423397064 CET	45994	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:11.423397064 CET	45994	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:11.430862904 CET	45996	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:11.435806990 CET	2222	45996	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:11.435910940 CET	45996	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:11.435910940 CET	45996	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:11.440794945 CET	2222	45996	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:11.440850019 CET	45996	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:11.445677042 CET	2222	45996	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.163593054 CET	2222	45996	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.163656950 CET	45996	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.163716078 CET	45996	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.171245098 CET	45998	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.176044941 CET	2222	45998	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.176115990 CET	45998	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.176115990 CET	45998	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.180984974 CET	2222	45998	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.181078911 CET	45998	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.185842991 CET	2222	45998	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.858402967 CET	2222	45998	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.858494997 CET	45998	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.858495951 CET	45998	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.865705013 CET	46000	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.870671988 CET	2222	46000	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.870748997 CET	46000	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.870748997 CET	46000	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.875665903 CET	2222	46000	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:12.876360893 CET	46000	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:12.881278038 CET	2222	46000	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:13.587086916 CET	2222	46000	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:13.587198973 CET	46000	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:13.587199926 CET	46000	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:13.594357967 CET	46002	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:13.599184036 CET	2222	46002	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:13.599281073 CET	46002	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:13.599282026 CET	46002	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:13.604198933 CET	2222	46002	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:13.604255915 CET	46002	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:13.609092951 CET	2222	46002	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:14.284785986 CET	2222	46002	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:14.284892082 CET	46002	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:14.284892082 CET	46002	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:14.292452097 CET	46004	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:14.297342062 CET	2222	46004	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:14.297410965 CET	46004	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:14.297410965 CET	46004	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:14.302231073 CET	2222	46004	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:14.302275896 CET	46004	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:14.307054996 CET	2222	46004	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:14.994808912 CET	2222	46004	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:14.994894981 CET	46004	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:14.994894981 CET	46004	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.002376080 CET	46006	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.007297993 CET	2222	46006	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:15.007358074 CET	46006	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.007373095 CET	46006	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.012341976 CET	2222	46006	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:15.012394905 CET	46006	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.017222881 CET	2222	46006	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:15.679694891 CET	2222	46006	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:15.679754972 CET	46006	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.679781914 CET	46006	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.688318968 CET	46008	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.694050074 CET	2222	46008	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:15.694113016 CET	46008	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.694221020 CET	46008	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.699768066 CET	2222	46008	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:15.699816942 CET	46008	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:15.705725908 CET	2222	46008	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:16.386297941 CET	2222	46008	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:16.386497021 CET	46008	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:16.386497021 CET	46008	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:16.393301010 CET	46010	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:16.398287058 CET	2222	46010	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:16.398371935 CET	46010	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:16.398371935 CET	46010	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:16.403301001 CET	2222	46010	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:16.403378010 CET	46010	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:16.408318043 CET	2222	46010	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.126779079 CET	2222	46010	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.127008915 CET	46010	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.127008915 CET	46010	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.134516954 CET	46012	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.139561892 CET	2222	46012	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.139632940 CET	46012	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.139632940 CET	46012	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.144534111 CET	2222	46012	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.144685030 CET	46012	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.149596930 CET	2222	46012	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.845788002 CET	2222	46012	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.845930099 CET	46012	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.845987082 CET	46012	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.853033066 CET	46014	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.857968092 CET	2222	46014	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.858046055 CET	46014	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.858046055 CET	46014	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.862953901 CET	2222	46014	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:17.863073111 CET	46014	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:17.867922068 CET	2222	46014	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:18.543577909 CET	2222	46014	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:18.543704033 CET	46014	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:18.543704033 CET	46014	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:18.551213026 CET	46016	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:18.556143999 CET	2222	46016	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:18.556370020 CET	46016	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:18.556370020 CET	46016	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:18.561296940 CET	2222	46016	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:18.561364889 CET	46016	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:18.566200972 CET	2222	46016	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.262677908 CET	2222	46016	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.262743950 CET	46016	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.262840033 CET	46016	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.269485950 CET	46018	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.274450064 CET	2222	46018	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.274498940 CET	46018	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.274622917 CET	46018	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.279485941 CET	2222	46018	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.279619932 CET	46018	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.284424067 CET	2222	46018	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.955965996 CET	2222	46018	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.956077099 CET	46018	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.956077099 CET	46018	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.963207960 CET	46020	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.968055964 CET	2222	46020	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.968147993 CET	46020	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.968147993 CET	46020	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.973048925 CET	2222	46020	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:19.973191977 CET	46020	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:19.977998018 CET	2222	46020	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:20.670470953 CET	2222	46020	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:20.670600891 CET	46020	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:20.670600891 CET	46020	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:20.677926064 CET	46022	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:20.682840109 CET	2222	46022	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:20.682976961 CET	46022	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:20.682976961 CET	46022	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:20.688024998 CET	2222	46022	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:20.688133955 CET	46022	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:20.692959070 CET	2222	46022	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:21.378302097 CET	2222	46022	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:21.378670931 CET	46022	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:21.378670931 CET	46022	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:21.387706041 CET	46024	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:21.394407034 CET	2222	46024	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:21.394640923 CET	46024	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:21.394642115 CET	46024	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:21.401350021 CET	2222	46024	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:21.401525974 CET	46024	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:21.406420946 CET	2222	46024	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.111438990 CET	2222	46024	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.111516953 CET	46024	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.111517906 CET	46024	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.119585991 CET	46026	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.124528885 CET	2222	46026	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.124608040 CET	46026	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.124608040 CET	46026	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.129487038 CET	2222	46026	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.129553080 CET	46026	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.134419918 CET	2222	46026	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.836862087 CET	2222	46026	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.836956978 CET	46026	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.836956978 CET	46026	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.844322920 CET	46028	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.849298000 CET	2222	46028	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.849373102 CET	46028	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.849436998 CET	46028	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.854254961 CET	2222	46028	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:22.854305029 CET	46028	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:22.859127998 CET	2222	46028	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:23.553390026 CET	2222	46028	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:23.553668022 CET	46028	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:23.553736925 CET	46028	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:23.564311028 CET	46030	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:23.569288969 CET	2222	46030	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:23.569380045 CET	46030	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:23.569411039 CET	46030	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:23.574270010 CET	2222	46030	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:23.574332952 CET	46030	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:23.579370022 CET	2222	46030	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.259911060 CET	2222	46030	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.259994984 CET	46030	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.259994984 CET	46030	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.267503977 CET	46032	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.272418976 CET	2222	46032	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.272469044 CET	46032	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.272485971 CET	46032	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.277328968 CET	2222	46032	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.277369022 CET	46032	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.282227039 CET	2222	46032	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.975260019 CET	2222	46032	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.975377083 CET	46032	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.975424051 CET	46032	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.982940912 CET	46034	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.987792015 CET	2222	46034	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.987842083 CET	46034	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.987895012 CET	46034	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.992708921 CET	2222	46034	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:24.992760897 CET	46034	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:24.997612953 CET	2222	46034	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:25.693202019 CET	2222	46034	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:25.693272114 CET	46034	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:25.693309069 CET	46034	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:25.700640917 CET	46036	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:25.705626011 CET	2222	46036	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:25.705717087 CET	46036	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:25.705740929 CET	46036	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:25.710674047 CET	2222	46036	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:25.710745096 CET	46036	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:25.715786934 CET	2222	46036	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:26.428776979 CET	2222	46036	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:26.429011106 CET	46036	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:26.429011106 CET	46036	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:26.436188936 CET	46038	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:26.441210985 CET	2222	46038	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:26.441306114 CET	46038	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:26.441306114 CET	46038	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:26.446240902 CET	2222	46038	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:26.446439981 CET	46038	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:26.451517105 CET	2222	46038	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.145415068 CET	2222	46038	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.145612955 CET	46038	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.145613909 CET	46038	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.152880907 CET	46040	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.157964945 CET	2222	46040	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.158010006 CET	46040	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.158041954 CET	46040	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.162895918 CET	2222	46040	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.162944078 CET	46040	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.167867899 CET	2222	46040	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.879420996 CET	2222	46040	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.879478931 CET	46040	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.879561901 CET	46040	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.887037992 CET	46042	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.892995119 CET	2222	46042	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.893085957 CET	46042	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.893141985 CET	46042	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.898583889 CET	2222	46042	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:27.898638964 CET	46042	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:27.903589010 CET	2222	46042	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:28.604883909 CET	2222	46042	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:28.604940891 CET	46042	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:28.604974031 CET	46042	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:28.612402916 CET	46044	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:28.617243052 CET	2222	46044	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:28.617407084 CET	46044	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:28.617408037 CET	46044	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:28.622277021 CET	2222	46044	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:28.622423887 CET	46044	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:28.627235889 CET	2222	46044	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:29.306181908 CET	2222	46044	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:29.306406021 CET	46044	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:29.306406021 CET	46044	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:29.313577890 CET	46046	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:29.318545103 CET	2222	46046	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:29.318701982 CET	46046	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:29.318701982 CET	46046	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:29.323781013 CET	2222	46046	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:29.323976994 CET	46046	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:29.328963041 CET	2222	46046	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.026803970 CET	2222	46046	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.026978016 CET	46046	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.026978016 CET	46046	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.034153938 CET	46048	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.038959026 CET	2222	46048	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.039002895 CET	46048	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.039021015 CET	46048	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.043862104 CET	2222	46048	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.043898106 CET	46048	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.048760891 CET	2222	46048	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.744914055 CET	2222	46048	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.744966984 CET	46048	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.744990110 CET	46048	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.752777100 CET	46050	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.757791042 CET	2222	46050	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.757843018 CET	46050	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.757863045 CET	46050	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.762763977 CET	2222	46050	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:30.762936115 CET	46050	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:30.767847061 CET	2222	46050	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:31.486959934 CET	2222	46050	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:31.487011909 CET	46050	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:31.487046957 CET	46050	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:31.494502068 CET	46052	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:31.499789953 CET	2222	46052	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:31.499980927 CET	46052	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:31.499980927 CET	46052	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:31.505117893 CET	2222	46052	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:31.505295038 CET	46052	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:31.510570049 CET	2222	46052	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.174125910 CET	2222	46052	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.174314976 CET	46052	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.174314976 CET	46052	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.183183908 CET	46054	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.189579010 CET	2222	46054	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.189769030 CET	46054	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.189769030 CET	46054	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.195177078 CET	2222	46054	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.196649075 CET	46054	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.202064991 CET	2222	46054	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.341371059 CET	48202	443	192.168.2.13	185.125.190.26
Jan 16, 2025 06:13:32.904930115 CET	2222	46054	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.905109882 CET	46054	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.905109882 CET	46054	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.913419008 CET	46056	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.918319941 CET	2222	46056	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.918361902 CET	46056	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.918375969 CET	46056	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.924356937 CET	2222	46056	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:32.924397945 CET	46056	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:32.929306984 CET	2222	46056	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:33.631931067 CET	2222	46056	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:33.631978989 CET	46056	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:33.632006884 CET	46056	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:33.639861107 CET	46058	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:33.645347118 CET	2222	46058	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:33.645396948 CET	46058	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:33.645418882 CET	46058	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:33.651052952 CET	2222	46058	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:33.651097059 CET	46058	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:33.656724930 CET	2222	46058	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:34.328398943 CET	2222	46058	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:34.328460932 CET	46058	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:34.328495979 CET	46058	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:34.335396051 CET	46060	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:34.340302944 CET	2222	46060	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:34.341236115 CET	46060	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:34.341237068 CET	46060	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:34.346640110 CET	2222	46060	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:34.346807003 CET	46060	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:34.352591991 CET	2222	46060	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.058765888 CET	2222	46060	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.058990955 CET	46060	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.058991909 CET	46060	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.066289902 CET	46062	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.071300983 CET	2222	46062	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.071412086 CET	46062	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.071412086 CET	46062	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.076387882 CET	2222	46062	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.076561928 CET	46062	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.081456900 CET	2222	46062	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.775372028 CET	2222	46062	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.775465965 CET	46062	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.775466919 CET	46062	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.783019066 CET	46064	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.787911892 CET	2222	46064	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.788048029 CET	46064	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.788048983 CET	46064	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.792937994 CET	2222	46064	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:35.792982101 CET	46064	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:35.797827005 CET	2222	46064	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:36.498212099 CET	2222	46064	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:36.498266935 CET	46064	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:36.498296976 CET	46064	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:36.505530119 CET	46066	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:36.510324001 CET	2222	46066	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:36.510374069 CET	46066	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:36.510401011 CET	46066	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:36.515219927 CET	2222	46066	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:36.515274048 CET	46066	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:36.520133018 CET	2222	46066	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.194875956 CET	2222	46066	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.196959019 CET	46066	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.196997881 CET	46066	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.205430984 CET	46068	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.210335016 CET	2222	46068	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.210391045 CET	46068	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.210408926 CET	46068	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.215293884 CET	2222	46068	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.215338945 CET	46068	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.220196009 CET	2222	46068	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.912581921 CET	2222	46068	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.912651062 CET	46068	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.912687063 CET	46068	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.928807974 CET	46070	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.933811903 CET	2222	46070	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.933865070 CET	46070	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.933880091 CET	46070	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.938714027 CET	2222	46070	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:37.938756943 CET	46070	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:37.943624973 CET	2222	46070	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:38.645220995 CET	2222	46070	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:38.645279884 CET	46070	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:38.645311117 CET	46070	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:38.653510094 CET	46072	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:38.658876896 CET	2222	46072	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:38.658953905 CET	46072	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:38.658953905 CET	46072	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:38.664285898 CET	2222	46072	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:38.664453030 CET	46072	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:38.669795990 CET	2222	46072	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:39.352443933 CET	2222	46072	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:39.352530003 CET	46072	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:39.352530003 CET	46072	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:39.360054016 CET	46074	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:39.364995003 CET	2222	46074	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:39.365185022 CET	46074	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:39.365185022 CET	46074	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:39.370114088 CET	2222	46074	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:39.370281935 CET	46074	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:39.375196934 CET	2222	46074	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.068624973 CET	2222	46074	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.068847895 CET	46074	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.068847895 CET	46074	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.076076031 CET	46076	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.080960989 CET	2222	46076	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.081023932 CET	46076	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.081068039 CET	46076	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.085999966 CET	2222	46076	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.087311983 CET	46076	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.093029976 CET	2222	46076	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.768596888 CET	2222	46076	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.768794060 CET	46076	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.768794060 CET	46076	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.776957989 CET	46078	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.781863928 CET	2222	46078	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.781924963 CET	46078	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.781960011 CET	46078	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.789885044 CET	2222	46078	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:40.789933920 CET	46078	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:40.795545101 CET	2222	46078	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:41.489442110 CET	2222	46078	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:41.489526033 CET	46078	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:41.489526033 CET	46078	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:41.497397900 CET	46080	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:41.502366066 CET	2222	46080	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:41.502414942 CET	46080	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:41.502434015 CET	46080	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:41.507271051 CET	2222	46080	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:41.507322073 CET	46080	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:41.512192011 CET	2222	46080	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.223908901 CET	2222	46080	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.224064112 CET	46080	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.224064112 CET	46080	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.231363058 CET	46082	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.236280918 CET	2222	46082	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.237375975 CET	46082	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.237417936 CET	46082	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.242280006 CET	2222	46082	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.242902040 CET	46082	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.247832060 CET	2222	46082	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.959501028 CET	2222	46082	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.959561110 CET	46082	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.959609032 CET	46082	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.966784000 CET	46084	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.971679926 CET	2222	46084	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.971736908 CET	46084	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.971754074 CET	46084	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.976566076 CET	2222	46084	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:42.976608992 CET	46084	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:42.981751919 CET	2222	46084	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:43.669286966 CET	2222	46084	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:43.669353962 CET	46084	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:43.669382095 CET	46084	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:43.676947117 CET	46086	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:43.681814909 CET	2222	46086	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:43.681870937 CET	46086	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:43.681888103 CET	46086	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:43.686680079 CET	2222	46086	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:43.686724901 CET	46086	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:43.691601038 CET	2222	46086	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:44.365578890 CET	2222	46086	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:44.365637064 CET	46086	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:44.365672112 CET	46086	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:44.373352051 CET	46088	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:44.378283978 CET	2222	46088	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:44.378448963 CET	46088	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:44.378448963 CET	46088	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:44.383430958 CET	2222	46088	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:44.383670092 CET	46088	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:44.388592958 CET	2222	46088	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.079504013 CET	2222	46088	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.081254005 CET	46088	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.081254959 CET	46088	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.088583946 CET	46090	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.093480110 CET	2222	46090	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.093642950 CET	46090	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.093642950 CET	46090	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.098932981 CET	2222	46090	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.099152088 CET	46090	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.104700089 CET	2222	46090	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.775243998 CET	2222	46090	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.775430918 CET	46090	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.775430918 CET	46090	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.782500982 CET	46092	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.787467003 CET	2222	46092	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.787524939 CET	46092	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.787564039 CET	46092	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.792423964 CET	2222	46092	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:45.792993069 CET	46092	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:45.797895908 CET	2222	46092	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:46.507205963 CET	2222	46092	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:46.507388115 CET	46092	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:46.507389069 CET	46092	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:46.516535997 CET	46094	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:46.521454096 CET	2222	46094	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:46.521529913 CET	46094	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:46.521529913 CET	46094	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:46.526427984 CET	2222	46094	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:46.526479006 CET	46094	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:46.531371117 CET	2222	46094	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.246690035 CET	2222	46094	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.246774912 CET	46094	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.246774912 CET	46094	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.254795074 CET	46096	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.259748936 CET	2222	46096	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.259799004 CET	46096	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.259816885 CET	46096	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.264630079 CET	2222	46096	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.264673948 CET	46096	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.269505978 CET	2222	46096	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.970725060 CET	2222	46096	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.970815897 CET	46096	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.970815897 CET	46096	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.978935957 CET	46098	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.983851910 CET	2222	46098	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.985378981 CET	46098	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.985378981 CET	46098	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.990238905 CET	2222	46098	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:47.990289927 CET	46098	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:47.995124102 CET	2222	46098	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:48.704062939 CET	2222	46098	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:48.704139948 CET	46098	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:48.704139948 CET	46098	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:48.712879896 CET	46100	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:48.718585968 CET	2222	46100	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:48.718683958 CET	46100	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:48.718684912 CET	46100	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:48.723592043 CET	2222	46100	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:48.723643064 CET	46100	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:48.729811907 CET	2222	46100	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:49.419748068 CET	2222	46100	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:49.419837952 CET	46100	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:49.419837952 CET	46100	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:49.429445982 CET	46102	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:49.435025930 CET	2222	46102	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:49.435105085 CET	46102	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:49.435106039 CET	46102	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:49.440716982 CET	2222	46102	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:49.441404104 CET	46102	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:49.447133064 CET	2222	46102	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.147018909 CET	2222	46102	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.147104025 CET	46102	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.147104979 CET	46102	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.155299902 CET	46104	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.160959959 CET	2222	46104	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.161011934 CET	46104	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.161021948 CET	46104	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.166676044 CET	2222	46104	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.166721106 CET	46104	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.172662020 CET	2222	46104	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.892810106 CET	2222	46104	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.892868996 CET	46104	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.892898083 CET	46104	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.899552107 CET	46106	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.904388905 CET	2222	46106	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.904447079 CET	46106	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.904460907 CET	46106	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.909313917 CET	2222	46106	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:50.909344912 CET	46106	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:50.914179087 CET	2222	46106	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:51.629559040 CET	2222	46106	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:51.629609108 CET	46106	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:51.629641056 CET	46106	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:51.637835026 CET	46108	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:51.643724918 CET	2222	46108	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:51.643896103 CET	46108	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:51.643897057 CET	46108	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:51.648854017 CET	2222	46108	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:51.649055958 CET	46108	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:51.653932095 CET	2222	46108	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:52.327903986 CET	2222	46108	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:52.328107119 CET	46108	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:52.328107119 CET	46108	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:52.335426092 CET	46110	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:52.340702057 CET	2222	46110	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:52.340899944 CET	46110	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:52.340899944 CET	46110	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:52.347273111 CET	2222	46110	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:52.347382069 CET	46110	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:52.352272987 CET	2222	46110	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.027452946 CET	2222	46110	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.027539968 CET	46110	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.027540922 CET	46110	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.035690069 CET	46112	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.040647984 CET	2222	46112	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.040693045 CET	46112	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.040709972 CET	46112	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.045543909 CET	2222	46112	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.045581102 CET	46112	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.050383091 CET	2222	46112	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.744560003 CET	2222	46112	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.744636059 CET	46112	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.744680882 CET	46112	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.752079010 CET	46114	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.757002115 CET	2222	46114	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.757074118 CET	46114	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.757074118 CET	46114	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.761967897 CET	2222	46114	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:53.762018919 CET	46114	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:53.766891956 CET	2222	46114	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:54.453480005 CET	2222	46114	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:54.453550100 CET	46114	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:54.453551054 CET	46114	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:54.460985899 CET	46116	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:54.465979099 CET	2222	46116	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:54.466238022 CET	46116	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:54.466238022 CET	46116	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:54.471170902 CET	2222	46116	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:54.471272945 CET	46116	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:54.476224899 CET	2222	46116	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.149265051 CET	2222	46116	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.149486065 CET	46116	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.149486065 CET	46116	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.156332016 CET	46118	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.161319017 CET	2222	46118	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.161545038 CET	46118	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.161545038 CET	46118	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.166516066 CET	2222	46118	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.166727066 CET	46118	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.171917915 CET	2222	46118	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.874406099 CET	2222	46118	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.874584913 CET	46118	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.874584913 CET	46118	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.881788969 CET	46120	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.886642933 CET	2222	46120	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.886691093 CET	46120	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.886797905 CET	46120	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.891613960 CET	2222	46120	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:55.891661882 CET	46120	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:55.896425009 CET	2222	46120	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:56.594882011 CET	2222	46120	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:56.594938993 CET	46120	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:56.594938993 CET	46120	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:56.604073048 CET	46122	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:56.609448910 CET	2222	46122	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:56.609491110 CET	46122	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:56.609509945 CET	46122	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:56.614356041 CET	2222	46122	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:56.614402056 CET	46122	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:56.619227886 CET	2222	46122	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:57.329184055 CET	2222	46122	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:57.329251051 CET	46122	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:57.329294920 CET	46122	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:57.336030006 CET	46124	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:57.340938091 CET	2222	46124	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:57.341186047 CET	46124	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:57.341186047 CET	46124	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:57.346113920 CET	2222	46124	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:57.346314907 CET	46124	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:57.351241112 CET	2222	46124	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.044569016 CET	2222	46124	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.044758081 CET	46124	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.044759035 CET	46124	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.051759005 CET	46126	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.056683064 CET	2222	46126	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.056911945 CET	46126	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.056911945 CET	46126	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.061934948 CET	2222	46126	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.062131882 CET	46126	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.067054033 CET	2222	46126	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.749718904 CET	2222	46126	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.749911070 CET	46126	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.749911070 CET	46126	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.757118940 CET	46128	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.762065887 CET	2222	46128	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.762134075 CET	46128	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.762176991 CET	46128	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.766993046 CET	2222	46128	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:58.767144918 CET	46128	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:58.772021055 CET	2222	46128	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:59.448779106 CET	2222	46128	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:59.448865891 CET	46128	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:59.448865891 CET	46128	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:59.456043959 CET	46130	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:59.460925102 CET	2222	46130	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:59.461009026 CET	46130	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:59.461009026 CET	46130	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:59.465914011 CET	2222	46130	193.143.1.66	192.168.2.13
Jan 16, 2025 06:13:59.466052055 CET	46130	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:13:59.470947027 CET	2222	46130	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.170685053 CET	2222	46130	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.170744896 CET	46130	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.170778036 CET	46130	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.178178072 CET	46132	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.183049917 CET	2222	46132	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.183110952 CET	46132	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.183123112 CET	46132	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.188040972 CET	2222	46132	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.188090086 CET	46132	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.192918062 CET	2222	46132	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.887649059 CET	2222	46132	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.887710094 CET	46132	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.887734890 CET	46132	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.895236969 CET	46134	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.900058985 CET	2222	46134	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.900116920 CET	46134	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.900130987 CET	46134	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.904916048 CET	2222	46134	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:00.904958963 CET	46134	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:00.909790039 CET	2222	46134	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:01.686968088 CET	2222	46134	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:01.687015057 CET	46134	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:01.687037945 CET	46134	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:01.693783998 CET	46136	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:01.698756933 CET	2222	46136	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:01.698926926 CET	46136	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:01.698926926 CET	46136	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:01.703879118 CET	2222	46136	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:01.704073906 CET	46136	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:01.709000111 CET	2222	46136	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:02.381984949 CET	2222	46136	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:02.382143021 CET	46136	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:02.382143021 CET	46136	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:02.388797998 CET	46138	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:02.393769979 CET	2222	46138	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:02.393831015 CET	46138	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:02.393868923 CET	46138	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:02.398746014 CET	2222	46138	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:02.398793936 CET	46138	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:02.403626919 CET	2222	46138	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.103425026 CET	2222	46138	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.103635073 CET	46138	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.103636026 CET	46138	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.110809088 CET	46140	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.115736961 CET	2222	46140	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.115797043 CET	46140	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.115797043 CET	46140	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.120767117 CET	2222	46140	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.120817900 CET	46140	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.125659943 CET	2222	46140	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.844922066 CET	2222	46140	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.844996929 CET	46140	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.844996929 CET	46140	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.852268934 CET	46142	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.857140064 CET	2222	46142	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.857203960 CET	46142	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.857238054 CET	46142	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.862101078 CET	2222	46142	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:03.862166882 CET	46142	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:03.866985083 CET	2222	46142	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:04.564737082 CET	2222	46142	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:04.564826965 CET	46142	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:04.564826965 CET	46142	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:04.572477102 CET	46144	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:04.577606916 CET	2222	46144	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:04.577804089 CET	46144	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:04.577804089 CET	46144	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:04.583074093 CET	2222	46144	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:04.583250046 CET	46144	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:04.588274956 CET	2222	46144	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:05.260324955 CET	2222	46144	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:05.260507107 CET	46144	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:05.260508060 CET	46144	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:05.267385960 CET	46146	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:05.272407055 CET	2222	46146	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:05.272598982 CET	46146	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:05.272598982 CET	46146	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:05.277504921 CET	2222	46146	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:05.277666092 CET	46146	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:05.282674074 CET	2222	46146	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:05.998931885 CET	2222	46146	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:05.999114037 CET	46146	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:05.999114990 CET	46146	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.005649090 CET	46148	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.010510921 CET	2222	46148	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:06.010569096 CET	46148	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.010610104 CET	46148	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.015372038 CET	2222	46148	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:06.015424013 CET	46148	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.020198107 CET	2222	46148	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:06.713558912 CET	2222	46148	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:06.713625908 CET	46148	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.713691950 CET	46148	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.721820116 CET	46150	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.726871967 CET	2222	46150	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:06.726941109 CET	46150	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.726941109 CET	46150	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.731920958 CET	2222	46150	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:06.731954098 CET	46150	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:06.736951113 CET	2222	46150	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:07.412961960 CET	2222	46150	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:07.413147926 CET	46150	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:07.413147926 CET	46150	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:07.421181917 CET	46152	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:07.427098989 CET	2222	46152	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:07.427295923 CET	46152	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:07.427295923 CET	46152	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:07.432337999 CET	2222	46152	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:07.432535887 CET	46152	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:07.437426090 CET	2222	46152	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.150876045 CET	2222	46152	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.150969028 CET	46152	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.150969028 CET	46152	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.158169985 CET	46154	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.163139105 CET	2222	46154	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.163345098 CET	46154	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.163345098 CET	46154	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.168414116 CET	2222	46154	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.168597937 CET	46154	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.173594952 CET	2222	46154	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.859469891 CET	2222	46154	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.859643936 CET	46154	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.859644890 CET	46154	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.866477966 CET	46156	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.871337891 CET	2222	46156	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.871381044 CET	46156	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.871403933 CET	46156	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.876183987 CET	2222	46156	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:08.876220942 CET	46156	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:08.881035089 CET	2222	46156	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:09.604456902 CET	2222	46156	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:09.604501963 CET	46156	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:09.604531050 CET	46156	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:09.611860991 CET	46158	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:09.616656065 CET	2222	46158	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:09.616698027 CET	46158	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:09.616714954 CET	46158	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:09.621512890 CET	2222	46158	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:09.621546030 CET	46158	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:09.626311064 CET	2222	46158	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:10.326519966 CET	2222	46158	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:10.326576948 CET	46158	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:10.326617002 CET	46158	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:10.333199024 CET	46160	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:10.338038921 CET	2222	46160	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:10.338083029 CET	46160	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:10.338095903 CET	46160	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:10.342849970 CET	2222	46160	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:10.342900991 CET	46160	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:10.347721100 CET	2222	46160	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.042782068 CET	2222	46160	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.042861938 CET	46160	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.042920113 CET	46160	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.050231934 CET	46162	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.055088043 CET	2222	46162	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.055133104 CET	46162	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.055269957 CET	46162	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.060825109 CET	2222	46162	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.060869932 CET	46162	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.066564083 CET	2222	46162	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.738482952 CET	2222	46162	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.738522053 CET	46162	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.738571882 CET	46162	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.745949984 CET	46164	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.750830889 CET	2222	46164	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.750999928 CET	46164	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.750999928 CET	46164	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.755878925 CET	2222	46164	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:11.756068945 CET	46164	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:11.760968924 CET	2222	46164	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:12.443696976 CET	2222	46164	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:12.443837881 CET	46164	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:12.443837881 CET	46164	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:12.450218916 CET	46166	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:12.455163002 CET	2222	46166	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:12.455210924 CET	46166	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:12.455230951 CET	46166	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:12.460047960 CET	2222	46166	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:12.460098982 CET	46166	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:12.464890003 CET	2222	46166	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.141436100 CET	2222	46166	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.141573906 CET	46166	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.141573906 CET	46166	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.149422884 CET	46168	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.155473948 CET	2222	46168	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.155538082 CET	46168	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.155538082 CET	46168	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.163049936 CET	2222	46168	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.163098097 CET	46168	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.167907000 CET	2222	46168	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.876123905 CET	2222	46168	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.876192093 CET	46168	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.876192093 CET	46168	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.883936882 CET	46170	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.889337063 CET	2222	46170	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.889388084 CET	46170	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.889462948 CET	46170	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.895037889 CET	2222	46170	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:13.895106077 CET	46170	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:13.900588036 CET	2222	46170	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:14.593488932 CET	2222	46170	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:14.593558073 CET	46170	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:14.593617916 CET	46170	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:14.600357056 CET	46172	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:14.605266094 CET	2222	46172	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:14.605478048 CET	46172	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:14.605478048 CET	46172	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:14.610461950 CET	2222	46172	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:14.610619068 CET	46172	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:14.615714073 CET	2222	46172	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:15.285038948 CET	2222	46172	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:15.285233021 CET	46172	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:15.285233021 CET	46172	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:15.293925047 CET	46174	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:15.300683022 CET	2222	46174	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:15.300879955 CET	46174	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:15.300879955 CET	46174	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:15.307929993 CET	2222	46174	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:15.308015108 CET	46174	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:15.312896013 CET	2222	46174	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.002585888 CET	2222	46174	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.002815008 CET	46174	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.002815008 CET	46174	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.010246992 CET	46176	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.021713972 CET	2222	46176	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.021770954 CET	46176	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.021799088 CET	46176	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.035010099 CET	2222	46176	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.035064936 CET	46176	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.039985895 CET	2222	46176	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.739896059 CET	2222	46176	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.739964962 CET	46176	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.739999056 CET	46176	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.746634960 CET	46178	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.751502991 CET	2222	46178	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.751554966 CET	46178	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.751569033 CET	46178	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.756395102 CET	2222	46178	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:16.756445885 CET	46178	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:16.761312962 CET	2222	46178	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:17.461961985 CET	2222	46178	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:17.462014914 CET	46178	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:17.462048054 CET	46178	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:17.469150066 CET	46180	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:17.474037886 CET	2222	46180	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:17.474097967 CET	46180	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:17.474111080 CET	46180	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:17.479005098 CET	2222	46180	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:17.479062080 CET	46180	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:17.484496117 CET	2222	46180	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.187285900 CET	2222	46180	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.187352896 CET	46180	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.187382936 CET	46180	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.194519997 CET	46182	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.199444056 CET	2222	46182	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.199505091 CET	46182	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.199534893 CET	46182	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.204425097 CET	2222	46182	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.204471111 CET	46182	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.209336996 CET	2222	46182	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.899907112 CET	2222	46182	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.899971962 CET	46182	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.899997950 CET	46182	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.907779932 CET	46184	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.912764072 CET	2222	46184	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.912832975 CET	46184	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.912832975 CET	46184	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.917798042 CET	2222	46184	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:18.917845011 CET	46184	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:18.922729969 CET	2222	46184	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:19.631061077 CET	2222	46184	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:19.631125927 CET	46184	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:19.631180048 CET	46184	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:19.639606953 CET	46186	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:19.644467115 CET	2222	46186	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:19.644525051 CET	46186	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:19.644566059 CET	46186	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:19.649336100 CET	2222	46186	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:19.649422884 CET	46186	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:19.654232979 CET	2222	46186	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:20.351986885 CET	2222	46186	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:20.352178097 CET	46186	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:20.352179050 CET	46186	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:20.358799934 CET	46188	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:20.363785028 CET	2222	46188	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:20.363950968 CET	46188	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:20.363950968 CET	46188	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:20.368900061 CET	2222	46188	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:20.368951082 CET	46188	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:20.373913050 CET	2222	46188	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.076148033 CET	2222	46188	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.076236963 CET	46188	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.076236963 CET	46188	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.083718061 CET	46190	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.088658094 CET	2222	46190	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.088716030 CET	46190	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.088752031 CET	46190	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.094063997 CET	2222	46190	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.094115973 CET	46190	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.099118948 CET	2222	46190	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.774010897 CET	2222	46190	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.774214029 CET	46190	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.774214029 CET	46190	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.780735016 CET	46192	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.785597086 CET	2222	46192	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.785661936 CET	46192	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.785661936 CET	46192	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.790504932 CET	2222	46192	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:21.790678024 CET	46192	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:21.795458078 CET	2222	46192	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:22.498209953 CET	2222	46192	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:22.498301029 CET	46192	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:22.498301029 CET	46192	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:22.505672932 CET	46194	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:22.511557102 CET	2222	46194	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:22.511617899 CET	46194	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:22.511653900 CET	46194	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:22.516602993 CET	2222	46194	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:22.516664982 CET	46194	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:22.521524906 CET	2222	46194	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.211654902 CET	2222	46194	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.211828947 CET	46194	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.211828947 CET	46194	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.218589067 CET	46196	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.223501921 CET	2222	46196	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.223599911 CET	46196	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.223663092 CET	46196	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.228524923 CET	2222	46196	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.228590965 CET	46196	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.233423948 CET	2222	46196	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.943408966 CET	2222	46196	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.943492889 CET	46196	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.943492889 CET	46196	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.950053930 CET	46198	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.954920053 CET	2222	46198	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.954992056 CET	46198	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.954992056 CET	46198	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.959867954 CET	2222	46198	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:23.959923029 CET	46198	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:23.964818001 CET	2222	46198	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:24.656924009 CET	2222	46198	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:24.657016039 CET	46198	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:24.657016993 CET	46198	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:24.666347980 CET	46200	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:24.673723936 CET	2222	46200	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:24.673791885 CET	46200	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:24.673791885 CET	46200	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:24.678894997 CET	2222	46200	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:24.678950071 CET	46200	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:24.683851957 CET	2222	46200	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:25.408711910 CET	2222	46200	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:25.408802032 CET	46200	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:25.408802986 CET	46200	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:25.416073084 CET	46202	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:25.421799898 CET	2222	46202	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:25.421993017 CET	46202	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:25.421993971 CET	46202	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:25.428283930 CET	2222	46202	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:25.428472042 CET	46202	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:25.433737993 CET	2222	46202	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.114597082 CET	2222	46202	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.114824057 CET	46202	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.114824057 CET	46202	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.121463060 CET	46204	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.126375914 CET	2222	46204	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.126425982 CET	46204	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.126436949 CET	46204	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.131223917 CET	2222	46204	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.131268024 CET	46204	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.136194944 CET	2222	46204	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.845179081 CET	2222	46204	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.845248938 CET	46204	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.845277071 CET	46204	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.851808071 CET	46206	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.856687069 CET	2222	46206	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.856738091 CET	46206	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.856754065 CET	46206	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.861577034 CET	2222	46206	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:26.861834049 CET	46206	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:26.866759062 CET	2222	46206	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:27.531121969 CET	2222	46206	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:27.531177044 CET	46206	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:27.531213999 CET	46206	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:27.539695024 CET	46208	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:27.544698000 CET	2222	46208	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:27.545413017 CET	46208	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:27.545413017 CET	46208	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:27.550350904 CET	2222	46208	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:27.552877903 CET	46208	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:27.557818890 CET	2222	46208	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.235451937 CET	2222	46208	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.235527039 CET	46208	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.235527039 CET	46208	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.242645025 CET	46210	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.247536898 CET	2222	46210	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.247735023 CET	46210	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.247735977 CET	46210	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.252566099 CET	2222	46210	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.252811909 CET	46210	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.257719994 CET	2222	46210	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.949664116 CET	2222	46210	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.949729919 CET	46210	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.949773073 CET	46210	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.957532883 CET	46212	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.963732004 CET	2222	46212	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.963788033 CET	46212	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.963829041 CET	46212	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.969002962 CET	2222	46212	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:28.969084978 CET	46212	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:28.973951101 CET	2222	46212	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:29.676286936 CET	2222	46212	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:29.676347971 CET	46212	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:29.676386118 CET	46212	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:29.683036089 CET	46214	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:29.688951015 CET	2222	46214	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:29.689007044 CET	46214	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:29.689023972 CET	46214	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:29.694122076 CET	2222	46214	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:29.694170952 CET	46214	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:29.700011969 CET	2222	46214	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:30.419145107 CET	2222	46214	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:30.419219971 CET	46214	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:30.419256926 CET	46214	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:30.426239967 CET	46216	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:30.431175947 CET	2222	46216	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:30.431246042 CET	46216	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:30.431246042 CET	46216	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:30.436145067 CET	2222	46216	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:30.436357975 CET	46216	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:30.441325903 CET	2222	46216	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.121825933 CET	2222	46216	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.121901035 CET	46216	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.121901035 CET	46216	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.128608942 CET	46218	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.133904934 CET	2222	46218	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.134099007 CET	46218	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.134099007 CET	46218	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.139527082 CET	2222	46218	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.139581919 CET	46218	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.144443989 CET	2222	46218	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.845716000 CET	2222	46218	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.845937014 CET	46218	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.845937967 CET	46218	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.853204966 CET	46220	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.858150959 CET	2222	46220	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.858218908 CET	46220	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.858218908 CET	46220	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.863064051 CET	2222	46220	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:31.863117933 CET	46220	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:31.867922068 CET	2222	46220	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:32.549226999 CET	2222	46220	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:32.549307108 CET	46220	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:32.549307108 CET	46220	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:32.556519985 CET	46222	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:32.561381102 CET	2222	46222	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:32.561445951 CET	46222	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:32.561446905 CET	46222	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:32.566337109 CET	2222	46222	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:32.566384077 CET	46222	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:32.571170092 CET	2222	46222	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.257081032 CET	2222	46222	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.257138968 CET	46222	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.257179976 CET	46222	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.265414953 CET	46224	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.270258904 CET	2222	46224	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.270311117 CET	46224	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.270354033 CET	46224	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.275180101 CET	2222	46224	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.275226116 CET	46224	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.280046940 CET	2222	46224	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.973601103 CET	2222	46224	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.973680019 CET	46224	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.973742962 CET	46224	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.980421066 CET	46226	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.985308886 CET	2222	46226	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.985364914 CET	46226	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.985398054 CET	46226	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.990268946 CET	2222	46226	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:33.990324974 CET	46226	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:33.995516062 CET	2222	46226	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:34.675607920 CET	2222	46226	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:34.675678968 CET	46226	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:34.675729036 CET	46226	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:34.682477951 CET	46228	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:34.687380075 CET	2222	46228	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:34.687453985 CET	46228	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:34.687454939 CET	46228	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:34.692318916 CET	2222	46228	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:34.692563057 CET	46228	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:34.697428942 CET	2222	46228	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:35.369585991 CET	2222	46228	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:35.369676113 CET	46228	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:35.369677067 CET	46228	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:35.376946926 CET	46230	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:35.381880045 CET	2222	46230	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:35.382087946 CET	46230	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:35.382088900 CET	46230	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:35.387015104 CET	2222	46230	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:35.387197018 CET	46230	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:35.392098904 CET	2222	46230	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.073296070 CET	2222	46230	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.073532104 CET	46230	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.073532104 CET	46230	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.080596924 CET	46232	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.085513115 CET	2222	46232	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.085562944 CET	46232	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.085575104 CET	46232	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.090426922 CET	2222	46232	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.090470076 CET	46232	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.095349073 CET	2222	46232	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.791101933 CET	2222	46232	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.791182041 CET	46232	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.791205883 CET	46232	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.798595905 CET	46234	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.803381920 CET	2222	46234	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.803435087 CET	46234	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.803451061 CET	46234	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.808379889 CET	2222	46234	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:36.808425903 CET	46234	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:36.813215971 CET	2222	46234	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:37.526962996 CET	2222	46234	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:37.527020931 CET	46234	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:37.527055979 CET	46234	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:37.535523891 CET	46236	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:37.541676998 CET	2222	46236	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:37.541882992 CET	46236	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:37.541882992 CET	46236	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:37.548012018 CET	2222	46236	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:37.548149109 CET	46236	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:37.555042982 CET	2222	46236	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.241036892 CET	2222	46236	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.241264105 CET	46236	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.241265059 CET	46236	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.248548985 CET	46238	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.253633022 CET	2222	46238	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.253813982 CET	46238	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.253813982 CET	46238	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.258908987 CET	2222	46238	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.259098053 CET	46238	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.263943911 CET	2222	46238	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.942186117 CET	2222	46238	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.942255020 CET	46238	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.942332983 CET	46238	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.949544907 CET	46240	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.954468966 CET	2222	46240	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.954526901 CET	46240	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.954569101 CET	46240	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.959403992 CET	2222	46240	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:38.959453106 CET	46240	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:38.964318991 CET	2222	46240	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:39.694153070 CET	2222	46240	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:39.694222927 CET	46240	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:39.694222927 CET	46240	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:39.701013088 CET	46242	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:39.705985069 CET	2222	46242	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:39.706052065 CET	46242	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:39.706084967 CET	46242	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:39.711272001 CET	2222	46242	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:39.711348057 CET	46242	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:39.717128038 CET	2222	46242	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:40.408320904 CET	2222	46242	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:40.408406973 CET	46242	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:40.408467054 CET	46242	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:40.415349960 CET	46244	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:40.420286894 CET	2222	46244	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:40.420454025 CET	46244	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:40.420454025 CET	46244	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:40.425365925 CET	2222	46244	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:40.425520897 CET	46244	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:40.430423021 CET	2222	46244	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.129307985 CET	2222	46244	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.129518986 CET	46244	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.129518986 CET	46244	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.136588097 CET	46246	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.141972065 CET	2222	46246	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.142148972 CET	46246	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.142148972 CET	46246	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.147624969 CET	2222	46246	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.147789955 CET	46246	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.152740002 CET	2222	46246	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.873779058 CET	2222	46246	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.873908043 CET	46246	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.873908043 CET	46246	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.880944014 CET	46248	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.886373997 CET	2222	46248	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.886426926 CET	46248	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.886445999 CET	46248	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.891249895 CET	2222	46248	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:41.891295910 CET	46248	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:41.897373915 CET	2222	46248	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:42.606101990 CET	2222	46248	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:42.606184006 CET	46248	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:42.606209993 CET	46248	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:42.650559902 CET	46250	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:42.655503988 CET	2222	46250	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:42.655567884 CET	46250	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:42.655586958 CET	46250	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:42.660479069 CET	2222	46250	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:42.660530090 CET	46250	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:42.665402889 CET	2222	46250	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:43.380892038 CET	2222	46250	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:43.380950928 CET	46250	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:43.380986929 CET	46250	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:43.389684916 CET	46252	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:43.394625902 CET	2222	46252	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:43.394800901 CET	46252	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:43.394802094 CET	46252	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:43.399784088 CET	2222	46252	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:43.399993896 CET	46252	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:43.404891014 CET	2222	46252	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.103511095 CET	2222	46252	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.103666067 CET	46252	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.103666067 CET	46252	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.113261938 CET	46254	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.118990898 CET	2222	46254	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.119069099 CET	46254	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.119069099 CET	46254	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.124891043 CET	2222	46254	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.124962091 CET	46254	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.130654097 CET	2222	46254	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.848951101 CET	2222	46254	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.849035025 CET	46254	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.849035978 CET	46254	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.857183933 CET	46256	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.862131119 CET	2222	46256	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.862199068 CET	46256	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.862199068 CET	46256	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.867084026 CET	2222	46256	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:44.867141008 CET	46256	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:44.873785973 CET	2222	46256	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:45.568630934 CET	2222	46256	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:45.568717957 CET	46256	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:45.568717957 CET	46256	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:45.577171087 CET	46258	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:45.583492994 CET	2222	46258	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:45.583564043 CET	46258	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:45.583599091 CET	46258	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:45.590111971 CET	2222	46258	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:45.590168953 CET	46258	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:45.595361948 CET	2222	46258	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:46.286845922 CET	2222	46258	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:46.287039042 CET	46258	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:46.287039995 CET	46258	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:46.294728994 CET	46260	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:46.299614906 CET	2222	46260	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:46.299666882 CET	46260	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:46.299684048 CET	46260	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:46.304631948 CET	2222	46260	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:46.304680109 CET	46260	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:46.309557915 CET	2222	46260	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.007589102 CET	2222	46260	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.007663965 CET	46260	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.007723093 CET	46260	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.015141964 CET	46262	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.020029068 CET	2222	46262	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.020111084 CET	46262	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.020179987 CET	46262	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.025078058 CET	2222	46262	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.025135994 CET	46262	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.029943943 CET	2222	46262	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.733604908 CET	2222	46262	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.733678102 CET	46262	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.733716011 CET	46262	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.741108894 CET	46264	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.746078968 CET	2222	46264	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.746258974 CET	46264	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.746259928 CET	46264	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.751171112 CET	2222	46264	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:47.751224995 CET	46264	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:47.756138086 CET	2222	46264	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:48.429682970 CET	2222	46264	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:48.429867983 CET	46264	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:48.429868937 CET	46264	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:48.436995983 CET	46266	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:48.441936016 CET	2222	46266	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:48.442151070 CET	46266	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:48.442151070 CET	46266	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:48.447079897 CET	2222	46266	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:48.447237968 CET	46266	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:48.452230930 CET	2222	46266	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.128135920 CET	2222	46266	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.128324032 CET	46266	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.128324032 CET	46266	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.135716915 CET	46268	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.140687943 CET	2222	46268	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.140755892 CET	46268	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.140794992 CET	46268	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.145704031 CET	2222	46268	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.145759106 CET	46268	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.150578022 CET	2222	46268	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.842566013 CET	2222	46268	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.842861891 CET	46268	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.842863083 CET	46268	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.852406979 CET	46270	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.861839056 CET	2222	46270	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.861900091 CET	46270	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.861939907 CET	46270	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.871279001 CET	2222	46270	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:49.871335983 CET	46270	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:49.880462885 CET	2222	46270	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:50.565743923 CET	2222	46270	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:50.565931082 CET	46270	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:50.565931082 CET	46270	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:50.573518038 CET	46272	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:50.579524994 CET	2222	46272	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:50.579693079 CET	46272	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:50.579693079 CET	46272	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:50.585582018 CET	2222	46272	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:50.585649967 CET	46272	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:50.591741085 CET	2222	46272	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:51.288259029 CET	2222	46272	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:51.288459063 CET	46272	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.288460016 CET	46272	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.295615911 CET	46274	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.300566912 CET	2222	46274	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:51.300766945 CET	46274	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.300767899 CET	46274	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.305717945 CET	2222	46274	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:51.305807114 CET	46274	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.310751915 CET	2222	46274	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:51.983504057 CET	2222	46274	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:51.983792067 CET	46274	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.983792067 CET	46274	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.990376949 CET	46276	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.995299101 CET	2222	46276	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:51.995362997 CET	46276	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:51.995421886 CET	46276	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.000602961 CET	2222	46276	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:52.000654936 CET	46276	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.005542040 CET	2222	46276	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:52.712085962 CET	2222	46276	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:52.712157965 CET	46276	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.712435007 CET	46276	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.719121933 CET	46278	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.724590063 CET	2222	46278	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:52.724677086 CET	46278	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.724733114 CET	46278	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.729674101 CET	2222	46278	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:52.729737043 CET	46278	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:52.735558033 CET	2222	46278	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:53.436527014 CET	2222	46278	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:53.436652899 CET	46278	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:53.436744928 CET	46278	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:53.444436073 CET	46280	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:53.449393034 CET	2222	46280	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:53.449462891 CET	46280	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:53.449532032 CET	46280	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:53.454365969 CET	2222	46280	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:53.454437017 CET	46280	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:53.459341049 CET	2222	46280	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.130604029 CET	2222	46280	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.130810022 CET	46280	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.130810022 CET	46280	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.138015985 CET	46282	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.142937899 CET	2222	46282	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.143007994 CET	46282	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.143093109 CET	46282	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.148267984 CET	2222	46282	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.148327112 CET	46282	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.153867960 CET	2222	46282	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.871997118 CET	2222	46282	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.872191906 CET	46282	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.872193098 CET	46282	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.878912926 CET	46284	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.883848906 CET	2222	46284	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.884006023 CET	46284	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.884048939 CET	46284	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.888886929 CET	2222	46284	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:54.888937950 CET	46284	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:54.893745899 CET	2222	46284	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:55.583183050 CET	2222	46284	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:55.583400011 CET	46284	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:55.583435059 CET	46284	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:55.591012955 CET	46286	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:55.595829010 CET	2222	46286	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:55.595877886 CET	46286	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:55.595935106 CET	46286	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:55.600761890 CET	2222	46286	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:55.600805998 CET	46286	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:55.605678082 CET	2222	46286	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:56.307416916 CET	2222	46286	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:56.307476044 CET	46286	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:56.307503939 CET	46286	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:56.315141916 CET	46288	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:56.323381901 CET	2222	46288	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:56.323432922 CET	46288	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:56.323581934 CET	46288	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:56.330041885 CET	2222	46288	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:56.330085039 CET	46288	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:56.336508036 CET	2222	46288	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.057065010 CET	2222	46288	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.057224035 CET	46288	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.057297945 CET	46288	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.064802885 CET	46290	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.069905043 CET	2222	46290	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.069976091 CET	46290	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.070038080 CET	46290	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.074853897 CET	2222	46290	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.074934006 CET	46290	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.079787016 CET	2222	46290	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.760293007 CET	2222	46290	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.760375023 CET	46290	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.760405064 CET	46290	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.770519018 CET	46292	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.776243925 CET	2222	46292	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.776303053 CET	46292	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.776346922 CET	46292	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.781212091 CET	2222	46292	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:57.781265974 CET	46292	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:57.786155939 CET	2222	46292	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:58.455641031 CET	2222	46292	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:58.455715895 CET	46292	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:58.455715895 CET	46292	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:58.462822914 CET	46294	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:58.467645884 CET	2222	46294	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:58.467737913 CET	46294	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:58.467737913 CET	46294	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:58.472590923 CET	2222	46294	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:58.472644091 CET	46294	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:58.477433920 CET	2222	46294	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.175832033 CET	2222	46294	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.175930023 CET	46294	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.175930023 CET	46294	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.182393074 CET	46296	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.187262058 CET	2222	46296	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.187349081 CET	46296	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.187413931 CET	46296	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.192184925 CET	2222	46296	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.192253113 CET	46296	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.197007895 CET	2222	46296	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.905030966 CET	2222	46296	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.905123949 CET	46296	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.905184031 CET	46296	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.911948919 CET	46298	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.916997910 CET	2222	46298	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.917049885 CET	46298	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.917081118 CET	46298	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.922053099 CET	2222	46298	193.143.1.66	192.168.2.13
Jan 16, 2025 06:14:59.922111034 CET	46298	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:14:59.927022934 CET	2222	46298	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:00.624722958 CET	2222	46298	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:00.624777079 CET	46298	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:00.624820948 CET	46298	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:00.631934881 CET	46300	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:00.636821032 CET	2222	46300	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:00.636890888 CET	46300	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:00.636934042 CET	46300	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:00.641714096 CET	2222	46300	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:00.641772985 CET	46300	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:00.646586895 CET	2222	46300	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:01.325614929 CET	2222	46300	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:01.325723886 CET	46300	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:01.325813055 CET	46300	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:01.334657907 CET	46302	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:01.341494083 CET	2222	46302	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:01.341551065 CET	46302	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:01.341590881 CET	46302	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:01.348041058 CET	2222	46302	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:01.348088980 CET	46302	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:01.355170965 CET	2222	46302	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.053639889 CET	2222	46302	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.053708076 CET	46302	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.053801060 CET	46302	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.064518929 CET	46304	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.070513964 CET	2222	46304	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.070570946 CET	46304	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.070611000 CET	46304	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.076402903 CET	2222	46304	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.076452017 CET	46304	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.082278013 CET	2222	46304	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.800800085 CET	2222	46304	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.800854921 CET	46304	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.800879955 CET	46304	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.808876991 CET	46306	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.813769102 CET	2222	46306	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.813817978 CET	46306	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.813841105 CET	46306	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.818972111 CET	2222	46306	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:02.819015980 CET	46306	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:02.825609922 CET	2222	46306	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:03.496809959 CET	2222	46306	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:03.496870995 CET	46306	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:03.496901035 CET	46306	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:03.504884005 CET	46308	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:03.509814024 CET	2222	46308	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:03.509867907 CET	46308	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:03.509902954 CET	46308	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:03.514758110 CET	2222	46308	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:03.514808893 CET	46308	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:03.519783020 CET	2222	46308	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:04.249264002 CET	2222	46308	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:04.249408007 CET	46308	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.249464989 CET	46308	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.256145000 CET	46310	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.261043072 CET	2222	46310	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:04.261167049 CET	46310	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.261167049 CET	46310	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.266048908 CET	2222	46310	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:04.266102076 CET	46310	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.270950079 CET	2222	46310	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:04.989528894 CET	2222	46310	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:04.989605904 CET	46310	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.989605904 CET	46310	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:04.997672081 CET	46312	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.003735065 CET	2222	46312	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:05.003793001 CET	46312	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.003853083 CET	46312	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.009771109 CET	2222	46312	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:05.009820938 CET	46312	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.015741110 CET	2222	46312	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:05.724045038 CET	2222	46312	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:05.724127054 CET	46312	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.724127054 CET	46312	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.731374025 CET	46314	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.736196995 CET	2222	46314	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:05.736249924 CET	46314	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.736284018 CET	46314	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.741931915 CET	2222	46314	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:05.741977930 CET	46314	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:05.747420073 CET	2222	46314	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:06.467907906 CET	2222	46314	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:06.468002081 CET	46314	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:06.468002081 CET	46314	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:06.475914001 CET	46316	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:06.482177019 CET	2222	46316	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:06.482235909 CET	46316	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:06.482275009 CET	46316	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:06.488095999 CET	2222	46316	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:06.488146067 CET	46316	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:06.493890047 CET	2222	46316	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.181891918 CET	2222	46316	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.182075024 CET	46316	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.182075024 CET	46316	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.189512968 CET	46318	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.195631027 CET	2222	46318	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.195694923 CET	46318	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.195753098 CET	46318	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.201627016 CET	2222	46318	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.201682091 CET	46318	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.207901955 CET	2222	46318	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.898988008 CET	2222	46318	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.899069071 CET	46318	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.899070024 CET	46318	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.907002926 CET	46320	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.912133932 CET	2222	46320	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.912194967 CET	46320	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.912252903 CET	46320	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.917340994 CET	2222	46320	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:07.917392015 CET	46320	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:07.922384977 CET	2222	46320	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:08.651798964 CET	2222	46320	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:08.651947975 CET	46320	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:08.651948929 CET	46320	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:08.658736944 CET	46322	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:08.663775921 CET	2222	46322	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:08.663845062 CET	46322	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:08.663916111 CET	46322	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:08.668773890 CET	2222	46322	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:08.668873072 CET	46322	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:08.673681021 CET	2222	46322	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:09.359371901 CET	2222	46322	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:09.359596968 CET	46322	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:09.359596968 CET	46322	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:09.366688013 CET	46324	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:09.371731043 CET	2222	46324	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:09.371798992 CET	46324	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:09.371838093 CET	46324	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:09.376768112 CET	2222	46324	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:09.376820087 CET	46324	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:09.381994963 CET	2222	46324	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.077792883 CET	2222	46324	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.077975988 CET	46324	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.077976942 CET	46324	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.085138083 CET	46326	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.090102911 CET	2222	46326	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.090204000 CET	46326	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.090238094 CET	46326	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.095105886 CET	2222	46326	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.095166922 CET	46326	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.100104094 CET	2222	46326	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.813662052 CET	2222	46326	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.813749075 CET	46326	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.813750029 CET	46326	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.821432114 CET	46328	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.826359034 CET	2222	46328	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.826467037 CET	46328	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.826505899 CET	46328	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.831444025 CET	2222	46328	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:10.831496954 CET	46328	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:10.836358070 CET	2222	46328	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:11.541178942 CET	2222	46328	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:11.541275024 CET	46328	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:11.541275978 CET	46328	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:11.548813105 CET	46330	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:11.553736925 CET	2222	46330	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:11.553930044 CET	46330	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:11.553930044 CET	46330	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:11.558870077 CET	2222	46330	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:11.559119940 CET	46330	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:11.563983917 CET	2222	46330	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:12.257240057 CET	2222	46330	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:12.257314920 CET	46330	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:12.257316113 CET	46330	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:12.264096975 CET	46332	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:12.268990040 CET	2222	46332	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:12.269042015 CET	46332	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:12.269057035 CET	46332	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:12.273936033 CET	2222	46332	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:12.273981094 CET	46332	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:12.278750896 CET	2222	46332	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.001667976 CET	2222	46332	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.001739025 CET	46332	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.001770973 CET	46332	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.008980036 CET	46334	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.013823032 CET	2222	46334	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.013859987 CET	46334	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.013880014 CET	46334	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.018697977 CET	2222	46334	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.018743038 CET	46334	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.023540020 CET	2222	46334	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.698312044 CET	2222	46334	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.698357105 CET	46334	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.698379993 CET	46334	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.706115007 CET	46336	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.711018085 CET	2222	46336	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.711091042 CET	46336	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.711091042 CET	46336	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.716007948 CET	2222	46336	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:13.716061115 CET	46336	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:13.720887899 CET	2222	46336	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:14.389440060 CET	2222	46336	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:14.389625072 CET	46336	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:14.389625072 CET	46336	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:14.400476933 CET	46338	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:14.408771038 CET	2222	46338	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:14.408888102 CET	46338	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:14.408888102 CET	46338	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:14.414467096 CET	2222	46338	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:14.414567947 CET	46338	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:14.420114040 CET	2222	46338	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.112685919 CET	2222	46338	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.112869978 CET	46338	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.112869978 CET	46338	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.119647026 CET	46340	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.124531984 CET	2222	46340	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.124603987 CET	46340	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.124641895 CET	46340	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.129443884 CET	2222	46340	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.129489899 CET	46340	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.134334087 CET	2222	46340	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.827203989 CET	2222	46340	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.827281952 CET	46340	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.827282906 CET	46340	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.834928036 CET	46342	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.840908051 CET	2222	46342	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.840969086 CET	46342	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.840969086 CET	46342	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.845769882 CET	2222	46342	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:15.845817089 CET	46342	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:15.850687981 CET	2222	46342	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:16.543332100 CET	2222	46342	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:16.543410063 CET	46342	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:16.543410063 CET	46342	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:16.550739050 CET	46344	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:16.555690050 CET	2222	46344	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:16.555757046 CET	46344	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:16.555757999 CET	46344	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:16.560600042 CET	2222	46344	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:16.560658932 CET	46344	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:16.565495014 CET	2222	46344	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:17.279373884 CET	2222	46344	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:17.279433966 CET	46344	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:17.279514074 CET	46344	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:17.286473989 CET	46346	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:17.291357040 CET	2222	46346	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:17.291450024 CET	46346	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:17.291450024 CET	46346	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:17.296291113 CET	2222	46346	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:17.296448946 CET	46346	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:17.301279068 CET	2222	46346	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.013612032 CET	2222	46346	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.013703108 CET	46346	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.013704062 CET	46346	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.020855904 CET	46348	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.025856018 CET	2222	46348	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.025904894 CET	46348	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.025928020 CET	46348	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.030770063 CET	2222	46348	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.030814886 CET	46348	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.035703897 CET	2222	46348	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.729177952 CET	2222	46348	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.729238987 CET	46348	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.729316950 CET	46348	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.736366987 CET	46350	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.741385937 CET	2222	46350	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.741440058 CET	46350	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.741462946 CET	46350	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.746300936 CET	2222	46350	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:18.746345997 CET	46350	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:18.751343966 CET	2222	46350	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:19.464505911 CET	2222	46350	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:19.464607954 CET	46350	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:19.464607954 CET	46350	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:19.471332073 CET	46352	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:19.476351023 CET	2222	46352	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:19.476407051 CET	46352	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:19.476423979 CET	46352	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:19.481328011 CET	2222	46352	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:19.481378078 CET	46352	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:19.486356020 CET	2222	46352	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:20.171741962 CET	2222	46352	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:20.171844959 CET	46352	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:20.171896935 CET	46352	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:20.178481102 CET	46354	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:20.183382988 CET	2222	46354	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:20.183438063 CET	46354	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:20.183511019 CET	46354	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:20.188429117 CET	2222	46354	193.143.1.66	192.168.2.13
Jan 16, 2025 06:15:20.188478947 CET	46354	2222	192.168.2.13	193.143.1.66
Jan 16, 2025 06:15:20.193334103 CET	2222	46354	193.143.1.66	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 16, 2025 06:12:51.874433041 CET	50422	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:52.128568888 CET	53	50422	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:52.837634087 CET	60100	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:53.077545881 CET	53	60100	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:53.784657001 CET	42612	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:53.791745901 CET	53	42612	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:54.512861967 CET	48558	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:54.520587921 CET	53	48558	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:55.228683949 CET	33758	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:55.235519886 CET	53	33758	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:55.931174040 CET	47672	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:55.938119888 CET	53	47672	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:56.656120062 CET	39670	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:56.662942886 CET	53	39670	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:57.342997074 CET	60398	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:57.350199938 CET	53	60398	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:58.054781914 CET	37389	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:58.294487000 CET	53	37389	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:59.003993034 CET	41395	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:59.010963917 CET	53	41395	8.8.8.8	192.168.2.13
Jan 16, 2025 06:12:59.737900019 CET	52336	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:12:59.745166063 CET	53	52336	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:00.441376925 CET	39310	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:00.448654890 CET	53	39310	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:01.183926105 CET	42400	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:01.190917969 CET	53	42400	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:01.890870094 CET	49066	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:01.898166895 CET	53	49066	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:02.602293968 CET	53851	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:02.609402895 CET	53	53851	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:03.325517893 CET	46659	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:03.332649946 CET	53	46659	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:04.012128115 CET	48488	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:04.254268885 CET	53	48488	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:04.982176065 CET	41292	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:04.989216089 CET	53	41292	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:05.711911917 CET	32865	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:05.719464064 CET	53	32865	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:06.427825928 CET	43946	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:06.434778929 CET	53	43946	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:07.140018940 CET	49479	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:07.146806955 CET	53	49479	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:07.858449936 CET	50070	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:07.867099047 CET	53	50070	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:08.566947937 CET	56969	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:08.573940039 CET	53	56969	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:09.280853033 CET	58852	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:09.287795067 CET	53	58852	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:09.975187063 CET	58558	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:09.982552052 CET	53	58558	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:10.711111069 CET	60577	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:10.718101978 CET	53	60577	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:11.423331022 CET	58639	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:11.430758953 CET	53	58639	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:12.163718939 CET	40745	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:12.171143055 CET	53	40745	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:12.858546972 CET	58044	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:12.865602970 CET	53	58044	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:13.587270021 CET	58026	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:13.594260931 CET	53	58026	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:14.284976006 CET	56400	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:14.292373896 CET	53	56400	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:14.994951010 CET	59326	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:15.002271891 CET	53	59326	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:15.679850101 CET	40376	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:15.687664032 CET	53	40376	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:16.386480093 CET	36122	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:16.393193960 CET	53	36122	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:17.126970053 CET	33275	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:17.134442091 CET	53	33275	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:17.846007109 CET	36561	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:17.852962971 CET	53	36561	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:18.543767929 CET	54167	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:18.551101923 CET	53	54167	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:19.262861967 CET	37690	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:19.269282103 CET	53	37690	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:19.956156969 CET	34995	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:19.963145018 CET	53	34995	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:20.670665026 CET	54372	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:20.677680016 CET	53	54372	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:21.378751993 CET	47753	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:21.387490988 CET	53	47753	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:22.111603975 CET	49174	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:22.118794918 CET	53	49174	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:22.837125063 CET	34323	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:22.844235897 CET	53	34323	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:23.554888964 CET	47047	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:23.563005924 CET	53	47047	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:24.260153055 CET	33194	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:24.267425060 CET	53	33194	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:24.975531101 CET	33023	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:24.982822895 CET	53	33023	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:25.693459034 CET	49830	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:25.700516939 CET	53	49830	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:26.429011106 CET	33658	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:26.435998917 CET	53	33658	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:27.145613909 CET	54207	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:27.152771950 CET	53	54207	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:27.879679918 CET	56685	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:27.886957884 CET	53	56685	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:28.605119944 CET	54844	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:28.612204075 CET	53	54844	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:29.306358099 CET	59531	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:29.313483953 CET	53	59531	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:30.027093887 CET	51150	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:30.034077883 CET	53	51150	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:30.745167017 CET	38369	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:30.751470089 CET	53	38369	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:31.487226009 CET	42515	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:31.494282007 CET	53	42515	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:32.174314976 CET	34479	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:32.182535887 CET	53	34479	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:32.905109882 CET	33247	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:32.913280010 CET	53	33247	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:33.632098913 CET	46595	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:33.639796019 CET	53	46595	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:34.328675985 CET	37564	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:34.335201025 CET	53	37564	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:35.058983088 CET	50846	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:35.066076994 CET	53	50846	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:35.775537968 CET	53292	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:35.782737970 CET	53	53292	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:36.498449087 CET	53024	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:36.505397081 CET	53	53024	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:37.197139025 CET	41301	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:37.204978943 CET	53	41301	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:37.912717104 CET	49140	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:37.928738117 CET	53	49140	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:38.645433903 CET	58050	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:38.652040958 CET	53	58050	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:39.352659941 CET	50379	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:39.359858990 CET	53	50379	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:40.068774939 CET	43451	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:40.075877905 CET	53	43451	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:40.768852949 CET	51787	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:40.775774956 CET	53	51787	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:41.489711046 CET	54600	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:41.496691942 CET	53	54600	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:42.224040031 CET	51153	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:42.231280088 CET	53	51153	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:42.959741116 CET	38859	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:42.966717005 CET	53	38859	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:43.669538975 CET	34559	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:43.676490068 CET	53	34559	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:44.365859032 CET	59046	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:44.372828960 CET	53	59046	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:45.081285000 CET	42635	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:45.088381052 CET	53	42635	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:45.775615931 CET	50233	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:45.782407045 CET	53	50233	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:46.507361889 CET	57300	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:46.514904022 CET	53	57300	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:47.246936083 CET	39774	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:47.254719973 CET	53	39774	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:47.971021891 CET	42494	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:47.978221893 CET	53	42494	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:48.704184055 CET	35657	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:48.712790012 CET	53	35657	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:49.419933081 CET	43696	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:49.427300930 CET	53	43696	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:50.147197008 CET	55923	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:50.155222893 CET	53	55923	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:50.893047094 CET	34876	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:50.899478912 CET	53	34876	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:51.629781961 CET	46882	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:51.637645006 CET	53	46882	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:52.328154087 CET	35257	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:52.335338116 CET	53	35257	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:53.027585983 CET	32856	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:53.035590887 CET	53	32856	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:53.744787931 CET	34322	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:53.751988888 CET	53	34322	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:54.453689098 CET	47682	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:54.460783958 CET	53	47682	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:55.149584055 CET	50832	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:55.156120062 CET	53	50832	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:55.874586105 CET	60261	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:55.881649017 CET	53	60261	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:56.595124006 CET	37130	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:56.603960991 CET	53	37130	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:57.329454899 CET	32797	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:57.335935116 CET	53	32797	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:58.044843912 CET	42791	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:58.051527023 CET	53	42791	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:58.749977112 CET	45868	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:58.757031918 CET	53	45868	8.8.8.8	192.168.2.13
Jan 16, 2025 06:13:59.449018002 CET	44601	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:13:59.455863953 CET	53	44601	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:00.170950890 CET	56669	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:00.178106070 CET	53	56669	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:00.887904882 CET	41522	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:00.895163059 CET	53	41522	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:01.687073946 CET	51593	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:01.693581104 CET	53	51593	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:02.382112980 CET	50297	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:02.388715982 CET	53	50297	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:03.103744030 CET	38599	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:03.110728025 CET	53	38599	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:03.845155001 CET	54474	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:03.852186918 CET	53	54474	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:04.564977884 CET	39657	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:04.572272062 CET	53	39657	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:05.260508060 CET	50483	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:05.267185926 CET	53	50483	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:05.999114990 CET	42863	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:06.005569935 CET	53	42863	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:06.713800907 CET	36423	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:06.721755028 CET	53	36423	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:07.413213968 CET	43328	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:07.420964956 CET	53	43328	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:08.151021004 CET	60395	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:08.158076048 CET	53	60395	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:08.859704018 CET	57590	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:08.866406918 CET	53	57590	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:09.604657888 CET	36463	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:09.611799955 CET	53	36463	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:10.326742887 CET	42541	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:10.333129883 CET	53	42541	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:11.043165922 CET	45484	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:11.050132990 CET	53	45484	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:11.738734007 CET	37295	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:11.745790005 CET	53	37295	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:12.443936110 CET	44077	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:12.450145960 CET	53	44077	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:13.141639948 CET	39054	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:13.149346113 CET	53	39054	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:13.876405954 CET	36866	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:13.883866072 CET	53	36866	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:14.593662977 CET	37367	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:14.600157976 CET	53	37367	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:15.285159111 CET	49427	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:15.293730021 CET	53	49427	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:16.002851009 CET	51689	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:16.010165930 CET	53	51689	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:16.740035057 CET	50984	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:16.746566057 CET	53	50984	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:17.462100029 CET	35302	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:17.468987942 CET	53	35302	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:18.187423944 CET	56749	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:18.194442034 CET	53	56749	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:18.900099993 CET	38033	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:18.907686949 CET	53	38033	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:19.631181955 CET	42299	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:19.639520884 CET	53	42299	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:20.352127075 CET	46348	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:20.358603001 CET	53	46348	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:21.076391935 CET	39148	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:21.083640099 CET	53	39148	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:21.774246931 CET	33671	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:21.780654907 CET	53	33671	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:22.498389959 CET	40089	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:22.505584955 CET	53	40089	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:23.211936951 CET	40246	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:23.218492985 CET	53	40246	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:23.943620920 CET	38160	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:23.949970007 CET	53	38160	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:24.657073975 CET	42429	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:24.666250944 CET	53	42429	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:25.408832073 CET	59557	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:25.415853977 CET	53	59557	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:26.114845037 CET	36530	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:26.121387005 CET	53	36530	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:26.845443010 CET	57437	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:26.851744890 CET	53	57437	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:27.531353951 CET	43728	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:27.538238049 CET	53	43728	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:28.235586882 CET	51551	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:28.242558956 CET	53	51551	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:28.949959993 CET	37564	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:28.957441092 CET	53	37564	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:29.676582098 CET	39310	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:29.682959080 CET	53	39310	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:30.419394970 CET	57710	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:30.426058054 CET	53	57710	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:31.121994972 CET	60344	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:31.128416061 CET	53	60344	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:31.845937967 CET	45553	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:31.853120089 CET	53	45553	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:32.549381971 CET	36110	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:32.556418896 CET	53	36110	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:33.257208109 CET	46634	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:33.265271902 CET	53	46634	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:33.973970890 CET	36063	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:33.980351925 CET	53	36063	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:34.675826073 CET	50289	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:34.682389021 CET	53	50289	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:35.369725943 CET	46561	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:35.376761913 CET	53	46561	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:36.073560953 CET	38691	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:36.080522060 CET	53	38691	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:36.791344881 CET	43760	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:36.798521042 CET	53	43760	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:37.527235031 CET	35808	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:37.535331964 CET	53	35808	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:38.241328001 CET	40246	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:38.248351097 CET	53	40246	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:38.942383051 CET	32840	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:38.949455976 CET	53	32840	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:39.694278955 CET	51909	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:39.700930119 CET	53	51909	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:40.408473015 CET	56821	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:40.415139914 CET	53	56821	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:41.129549980 CET	44544	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:41.136394024 CET	53	44544	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:41.874057055 CET	45786	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:41.880865097 CET	53	45786	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:42.606405973 CET	56643	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:42.650482893 CET	53	56643	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:43.381129026 CET	43339	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:43.389482975 CET	53	43339	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:44.103755951 CET	53190	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:44.113054037 CET	53	53190	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:44.849092960 CET	39186	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:44.857085943 CET	53	39186	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:45.568788052 CET	37649	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:45.577075005 CET	53	37649	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:46.287111998 CET	57753	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:46.294657946 CET	53	57753	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:47.007937908 CET	60393	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:47.015033960 CET	53	60393	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:47.733851910 CET	49787	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:47.740886927 CET	53	49787	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:48.429868937 CET	38781	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:48.436892986 CET	53	38781	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:49.128324032 CET	47076	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:49.135632992 CET	53	47076	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:49.842818975 CET	59961	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:49.852315903 CET	53	59961	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:50.565896988 CET	58749	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:50.573328972 CET	53	58749	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:51.288467884 CET	33579	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:51.295346975 CET	53	33579	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:51.983872890 CET	39565	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:51.990284920 CET	53	39565	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:52.712551117 CET	33516	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:52.719029903 CET	53	33516	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:53.436784029 CET	45284	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:53.444228888 CET	53	45284	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:54.130783081 CET	50563	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:54.137788057 CET	53	50563	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:54.872349977 CET	35140	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:54.878809929 CET	53	35140	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:55.583575010 CET	36222	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:55.590931892 CET	53	36222	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:56.307693958 CET	56536	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:56.315036058 CET	53	56536	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:57.057507992 CET	46115	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:57.064481974 CET	53	46115	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:57.760458946 CET	45018	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:57.770426989 CET	53	45018	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:58.455770016 CET	56707	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:58.462730885 CET	53	56707	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:59.175983906 CET	45206	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:59.182296991 CET	53	45206	8.8.8.8	192.168.2.13
Jan 16, 2025 06:14:59.905208111 CET	33805	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:14:59.911863089 CET	53	33805	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:00.624991894 CET	58124	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:00.631834984 CET	53	58124	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:01.325840950 CET	58789	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:01.334570885 CET	53	58789	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:02.053850889 CET	36206	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:02.064402103 CET	53	36206	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:02.800955057 CET	56298	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:02.808798075 CET	53	56298	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:03.496939898 CET	33728	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:03.504786015 CET	53	33728	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:04.249643087 CET	55245	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:04.256011009 CET	53	55245	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:04.989650965 CET	37026	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:04.997581005 CET	53	37026	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:05.724282026 CET	57073	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:05.731307030 CET	53	57073	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:06.468080997 CET	37702	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:06.475836992 CET	53	37702	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:07.182075977 CET	40257	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:07.189438105 CET	53	40257	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:07.899171114 CET	60635	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:07.906898975 CET	53	60635	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:08.652049065 CET	38214	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:08.658588886 CET	53	38214	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:09.359524012 CET	33076	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:09.366596937 CET	53	33076	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:10.078031063 CET	39429	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:10.085057974 CET	53	39429	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:10.813801050 CET	35005	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:10.821345091 CET	53	35005	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:11.541438103 CET	33869	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:11.548708916 CET	53	33869	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:12.257551908 CET	49867	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:12.264020920 CET	53	49867	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:13.001796007 CET	53392	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:13.008903980 CET	53	53392	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:13.698544025 CET	35766	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:13.706028938 CET	53	35766	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:14.389663935 CET	44467	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:14.400263071 CET	53	44467	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:15.112903118 CET	41147	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:15.119570017 CET	53	41147	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:15.827393055 CET	32865	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:15.834855080 CET	53	32865	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:16.543601990 CET	37818	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:16.550648928 CET	53	37818	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:17.279634953 CET	41289	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:17.286241055 CET	53	41289	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:18.013858080 CET	46412	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:18.020782948 CET	53	46412	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:18.729619980 CET	51032	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:18.736284018 CET	53	51032	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:19.464653969 CET	47179	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:19.471239090 CET	53	47179	8.8.8.8	192.168.2.13
Jan 16, 2025 06:15:20.172009945 CET	44935	53	192.168.2.13	8.8.8.8
Jan 16, 2025 06:15:20.178369045 CET	53	44935	8.8.8.8	192.168.2.13

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 16, 2025 06:12:59.917970896 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable
Jan 16, 2025 06:14:19.940037966 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 16, 2025 06:12:51.874433041 CET	192.168.2.13	8.8.8.8	0x8e51	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:52.837634087 CET	192.168.2.13	8.8.8.8	0xd5dc	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:53.784657001 CET	192.168.2.13	8.8.8.8	0xa426	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:54.512861967 CET	192.168.2.13	8.8.8.8	0x7943	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:55.228683949 CET	192.168.2.13	8.8.8.8	0xc48b	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:55.931174040 CET	192.168.2.13	8.8.8.8	0xf467	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:56.656120062 CET	192.168.2.13	8.8.8.8	0x6977	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:57.342997074 CET	192.168.2.13	8.8.8.8	0x7613	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:58.054781914 CET	192.168.2.13	8.8.8.8	0x7e1b	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:59.003993034 CET	192.168.2.13	8.8.8.8	0x258e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:59.737900019 CET	192.168.2.13	8.8.8.8	0x498d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:00.441376925 CET	192.168.2.13	8.8.8.8	0x47d1	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:01.183926105 CET	192.168.2.13	8.8.8.8	0xa9da	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:01.890870094 CET	192.168.2.13	8.8.8.8	0xd6a4	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:02.602293968 CET	192.168.2.13	8.8.8.8	0x5871	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:03.325517893 CET	192.168.2.13	8.8.8.8	0x2a0e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:04.012128115 CET	192.168.2.13	8.8.8.8	0x580c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:04.982176065 CET	192.168.2.13	8.8.8.8	0xab16	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:05.711911917 CET	192.168.2.13	8.8.8.8	0xa0f1	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:06.427825928 CET	192.168.2.13	8.8.8.8	0x2085	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:07.140018940 CET	192.168.2.13	8.8.8.8	0x9512	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:07.858449936 CET	192.168.2.13	8.8.8.8	0xbbf0	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:08.566947937 CET	192.168.2.13	8.8.8.8	0x3cd8	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:09.280853033 CET	192.168.2.13	8.8.8.8	0x80f6	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:09.975187063 CET	192.168.2.13	8.8.8.8	0x137f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:10.711111069 CET	192.168.2.13	8.8.8.8	0x5a49	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:11.423331022 CET	192.168.2.13	8.8.8.8	0x1dba	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:12.163718939 CET	192.168.2.13	8.8.8.8	0x189f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:12.858546972 CET	192.168.2.13	8.8.8.8	0xe3e2	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:13.587270021 CET	192.168.2.13	8.8.8.8	0xc91e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:14.284976006 CET	192.168.2.13	8.8.8.8	0xdd94	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:14.994951010 CET	192.168.2.13	8.8.8.8	0xba7b	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:15.679850101 CET	192.168.2.13	8.8.8.8	0x504d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:16.386480093 CET	192.168.2.13	8.8.8.8	0x469f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:17.126970053 CET	192.168.2.13	8.8.8.8	0xc362	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:17.846007109 CET	192.168.2.13	8.8.8.8	0x765d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:18.543767929 CET	192.168.2.13	8.8.8.8	0x41da	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:19.262861967 CET	192.168.2.13	8.8.8.8	0xe6d5	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:19.956156969 CET	192.168.2.13	8.8.8.8	0x7a0f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:20.670665026 CET	192.168.2.13	8.8.8.8	0x3061	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:21.378751993 CET	192.168.2.13	8.8.8.8	0x73a9	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:22.111603975 CET	192.168.2.13	8.8.8.8	0x1bbe	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:22.837125063 CET	192.168.2.13	8.8.8.8	0xa7dc	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:23.554888964 CET	192.168.2.13	8.8.8.8	0xa470	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:24.260153055 CET	192.168.2.13	8.8.8.8	0x8f3	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:24.975531101 CET	192.168.2.13	8.8.8.8	0x6162	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:25.693459034 CET	192.168.2.13	8.8.8.8	0x64dd	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:26.429011106 CET	192.168.2.13	8.8.8.8	0xbc1d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:27.145613909 CET	192.168.2.13	8.8.8.8	0xf446	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:27.879679918 CET	192.168.2.13	8.8.8.8	0xe32e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:28.605119944 CET	192.168.2.13	8.8.8.8	0x73d7	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:29.306358099 CET	192.168.2.13	8.8.8.8	0x9887	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:30.027093887 CET	192.168.2.13	8.8.8.8	0xb231	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:30.745167017 CET	192.168.2.13	8.8.8.8	0xd1e3	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:31.487226009 CET	192.168.2.13	8.8.8.8	0x601a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:32.174314976 CET	192.168.2.13	8.8.8.8	0x549d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:32.905109882 CET	192.168.2.13	8.8.8.8	0xfa25	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:33.632098913 CET	192.168.2.13	8.8.8.8	0x128e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:34.328675985 CET	192.168.2.13	8.8.8.8	0xac80	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:35.058983088 CET	192.168.2.13	8.8.8.8	0x9d8a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:35.775537968 CET	192.168.2.13	8.8.8.8	0x8ad8	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:36.498449087 CET	192.168.2.13	8.8.8.8	0x60a4	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:37.197139025 CET	192.168.2.13	8.8.8.8	0x48b7	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:37.912717104 CET	192.168.2.13	8.8.8.8	0x8806	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:38.645433903 CET	192.168.2.13	8.8.8.8	0x1fd4	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:39.352659941 CET	192.168.2.13	8.8.8.8	0x42bb	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:40.068774939 CET	192.168.2.13	8.8.8.8	0x6497	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:40.768852949 CET	192.168.2.13	8.8.8.8	0x2636	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:41.489711046 CET	192.168.2.13	8.8.8.8	0x3f7c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:42.224040031 CET	192.168.2.13	8.8.8.8	0x1a17	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:42.959741116 CET	192.168.2.13	8.8.8.8	0x557a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:43.669538975 CET	192.168.2.13	8.8.8.8	0xec3a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:44.365859032 CET	192.168.2.13	8.8.8.8	0xb03c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:45.081285000 CET	192.168.2.13	8.8.8.8	0x4516	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:45.775615931 CET	192.168.2.13	8.8.8.8	0x9570	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:46.507361889 CET	192.168.2.13	8.8.8.8	0x97fc	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:47.246936083 CET	192.168.2.13	8.8.8.8	0xaf63	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:47.971021891 CET	192.168.2.13	8.8.8.8	0xaa54	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:48.704184055 CET	192.168.2.13	8.8.8.8	0x8334	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:49.419933081 CET	192.168.2.13	8.8.8.8	0xb559	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:50.147197008 CET	192.168.2.13	8.8.8.8	0x3398	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:50.893047094 CET	192.168.2.13	8.8.8.8	0x9254	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:51.629781961 CET	192.168.2.13	8.8.8.8	0x1dd4	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:52.328154087 CET	192.168.2.13	8.8.8.8	0x2b31	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:53.027585983 CET	192.168.2.13	8.8.8.8	0x693c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:53.744787931 CET	192.168.2.13	8.8.8.8	0xcc0f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:54.453689098 CET	192.168.2.13	8.8.8.8	0x468	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:55.149584055 CET	192.168.2.13	8.8.8.8	0x136	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:55.874586105 CET	192.168.2.13	8.8.8.8	0x5a4f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:56.595124006 CET	192.168.2.13	8.8.8.8	0xb801	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:57.329454899 CET	192.168.2.13	8.8.8.8	0x18ba	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:58.044843912 CET	192.168.2.13	8.8.8.8	0x1ba	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:58.749977112 CET	192.168.2.13	8.8.8.8	0x55fa	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:59.449018002 CET	192.168.2.13	8.8.8.8	0xe607	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:00.170950890 CET	192.168.2.13	8.8.8.8	0xd0a7	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:00.887904882 CET	192.168.2.13	8.8.8.8	0x423	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:01.687073946 CET	192.168.2.13	8.8.8.8	0x8552	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:02.382112980 CET	192.168.2.13	8.8.8.8	0x8394	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:03.103744030 CET	192.168.2.13	8.8.8.8	0x4303	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:03.845155001 CET	192.168.2.13	8.8.8.8	0x1447	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:04.564977884 CET	192.168.2.13	8.8.8.8	0x50de	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:05.260508060 CET	192.168.2.13	8.8.8.8	0xb7f0	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:05.999114990 CET	192.168.2.13	8.8.8.8	0x9272	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:06.713800907 CET	192.168.2.13	8.8.8.8	0xa405	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:07.413213968 CET	192.168.2.13	8.8.8.8	0xfe09	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:08.151021004 CET	192.168.2.13	8.8.8.8	0xa352	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:08.859704018 CET	192.168.2.13	8.8.8.8	0x2c7f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:09.604657888 CET	192.168.2.13	8.8.8.8	0xd81a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:10.326742887 CET	192.168.2.13	8.8.8.8	0xdafb	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:11.043165922 CET	192.168.2.13	8.8.8.8	0xabe0	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:11.738734007 CET	192.168.2.13	8.8.8.8	0xd604	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:12.443936110 CET	192.168.2.13	8.8.8.8	0x6487	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:13.141639948 CET	192.168.2.13	8.8.8.8	0xcd93	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:13.876405954 CET	192.168.2.13	8.8.8.8	0x7e10	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:14.593662977 CET	192.168.2.13	8.8.8.8	0xa53d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:15.285159111 CET	192.168.2.13	8.8.8.8	0xe9d7	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:16.002851009 CET	192.168.2.13	8.8.8.8	0xafbe	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:16.740035057 CET	192.168.2.13	8.8.8.8	0xe36f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:17.462100029 CET	192.168.2.13	8.8.8.8	0xbf57	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:18.187423944 CET	192.168.2.13	8.8.8.8	0xa687	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:18.900099993 CET	192.168.2.13	8.8.8.8	0xc38	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:19.631181955 CET	192.168.2.13	8.8.8.8	0xe687	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:20.352127075 CET	192.168.2.13	8.8.8.8	0xf595	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:21.076391935 CET	192.168.2.13	8.8.8.8	0x5301	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:21.774246931 CET	192.168.2.13	8.8.8.8	0xb54e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:22.498389959 CET	192.168.2.13	8.8.8.8	0xe53e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:23.211936951 CET	192.168.2.13	8.8.8.8	0x8795	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:23.943620920 CET	192.168.2.13	8.8.8.8	0xd6f7	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:24.657073975 CET	192.168.2.13	8.8.8.8	0xc87f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:25.408832073 CET	192.168.2.13	8.8.8.8	0x1cf5	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:26.114845037 CET	192.168.2.13	8.8.8.8	0x915f	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:26.845443010 CET	192.168.2.13	8.8.8.8	0xc62d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:27.531353951 CET	192.168.2.13	8.8.8.8	0x88ec	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:28.235586882 CET	192.168.2.13	8.8.8.8	0x5b5a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:28.949959993 CET	192.168.2.13	8.8.8.8	0x58d2	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:29.676582098 CET	192.168.2.13	8.8.8.8	0xfb2	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:30.419394970 CET	192.168.2.13	8.8.8.8	0x27f3	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:31.121994972 CET	192.168.2.13	8.8.8.8	0x64ee	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:31.845937967 CET	192.168.2.13	8.8.8.8	0x202a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:32.549381971 CET	192.168.2.13	8.8.8.8	0x1c32	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:33.257208109 CET	192.168.2.13	8.8.8.8	0x60de	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:33.973970890 CET	192.168.2.13	8.8.8.8	0x2627	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:34.675826073 CET	192.168.2.13	8.8.8.8	0x7803	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:35.369725943 CET	192.168.2.13	8.8.8.8	0x390c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:36.073560953 CET	192.168.2.13	8.8.8.8	0xf575	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:36.791344881 CET	192.168.2.13	8.8.8.8	0xb8ab	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:37.527235031 CET	192.168.2.13	8.8.8.8	0xa30e	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:38.241328001 CET	192.168.2.13	8.8.8.8	0xbc7c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:38.942383051 CET	192.168.2.13	8.8.8.8	0x76ab	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:39.694278955 CET	192.168.2.13	8.8.8.8	0x9407	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:40.408473015 CET	192.168.2.13	8.8.8.8	0xbf56	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:41.129549980 CET	192.168.2.13	8.8.8.8	0x9a8c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:41.874057055 CET	192.168.2.13	8.8.8.8	0xd595	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:42.606405973 CET	192.168.2.13	8.8.8.8	0x5ffd	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:43.381129026 CET	192.168.2.13	8.8.8.8	0x2ffc	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:44.103755951 CET	192.168.2.13	8.8.8.8	0x2d82	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:44.849092960 CET	192.168.2.13	8.8.8.8	0x61ee	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:45.568788052 CET	192.168.2.13	8.8.8.8	0x6ea2	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:46.287111998 CET	192.168.2.13	8.8.8.8	0xae0c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:47.007937908 CET	192.168.2.13	8.8.8.8	0x21ec	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:47.733851910 CET	192.168.2.13	8.8.8.8	0x1916	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:48.429868937 CET	192.168.2.13	8.8.8.8	0xe25a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:49.128324032 CET	192.168.2.13	8.8.8.8	0xc0b0	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:49.842818975 CET	192.168.2.13	8.8.8.8	0x1893	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:50.565896988 CET	192.168.2.13	8.8.8.8	0xac5	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:51.288467884 CET	192.168.2.13	8.8.8.8	0xa2b8	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:51.983872890 CET	192.168.2.13	8.8.8.8	0xd692	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:52.712551117 CET	192.168.2.13	8.8.8.8	0xe81d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:53.436784029 CET	192.168.2.13	8.8.8.8	0x71d6	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:54.130783081 CET	192.168.2.13	8.8.8.8	0x9c94	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:54.872349977 CET	192.168.2.13	8.8.8.8	0xe4e9	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:55.583575010 CET	192.168.2.13	8.8.8.8	0x5fde	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:56.307693958 CET	192.168.2.13	8.8.8.8	0x3180	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:57.057507992 CET	192.168.2.13	8.8.8.8	0x16a4	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:57.760458946 CET	192.168.2.13	8.8.8.8	0xe31c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:58.455770016 CET	192.168.2.13	8.8.8.8	0xc163	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:59.175983906 CET	192.168.2.13	8.8.8.8	0x89e9	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:59.905208111 CET	192.168.2.13	8.8.8.8	0x3a2d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:00.624991894 CET	192.168.2.13	8.8.8.8	0xa074	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:01.325840950 CET	192.168.2.13	8.8.8.8	0xc1ae	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:02.053850889 CET	192.168.2.13	8.8.8.8	0x575d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:02.800955057 CET	192.168.2.13	8.8.8.8	0xb68d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:03.496939898 CET	192.168.2.13	8.8.8.8	0x53eb	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:04.249643087 CET	192.168.2.13	8.8.8.8	0xaf34	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:04.989650965 CET	192.168.2.13	8.8.8.8	0xbe0d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:05.724282026 CET	192.168.2.13	8.8.8.8	0xb83c	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:06.468080997 CET	192.168.2.13	8.8.8.8	0x4544	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:07.182075977 CET	192.168.2.13	8.8.8.8	0x7305	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:07.899171114 CET	192.168.2.13	8.8.8.8	0xd396	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:08.652049065 CET	192.168.2.13	8.8.8.8	0x2e20	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:09.359524012 CET	192.168.2.13	8.8.8.8	0x39c2	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:10.078031063 CET	192.168.2.13	8.8.8.8	0xf805	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:10.813801050 CET	192.168.2.13	8.8.8.8	0xe680	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:11.541438103 CET	192.168.2.13	8.8.8.8	0xcf4b	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:12.257551908 CET	192.168.2.13	8.8.8.8	0xf0c4	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:13.001796007 CET	192.168.2.13	8.8.8.8	0xf1ef	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:13.698544025 CET	192.168.2.13	8.8.8.8	0x1ae0	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:14.389663935 CET	192.168.2.13	8.8.8.8	0xe5ed	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:15.112903118 CET	192.168.2.13	8.8.8.8	0x4d1a	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:15.827393055 CET	192.168.2.13	8.8.8.8	0xdf7d	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:16.543601990 CET	192.168.2.13	8.8.8.8	0xa391	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:17.279634953 CET	192.168.2.13	8.8.8.8	0xcb64	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:18.013858080 CET	192.168.2.13	8.8.8.8	0x332b	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:18.729619980 CET	192.168.2.13	8.8.8.8	0xb25b	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:19.464653969 CET	192.168.2.13	8.8.8.8	0xcfdb	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:20.172009945 CET	192.168.2.13	8.8.8.8	0xbce8	Standard query (0)	krkrdoskslansldkalsd.o-r.kr	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 16, 2025 06:12:52.128568888 CET	8.8.8.8	192.168.2.13	0x8e51	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:53.077545881 CET	8.8.8.8	192.168.2.13	0xd5dc	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:53.791745901 CET	8.8.8.8	192.168.2.13	0xa426	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:54.520587921 CET	8.8.8.8	192.168.2.13	0x7943	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:55.235519886 CET	8.8.8.8	192.168.2.13	0xc48b	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:55.938119888 CET	8.8.8.8	192.168.2.13	0xf467	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:56.662942886 CET	8.8.8.8	192.168.2.13	0x6977	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:57.350199938 CET	8.8.8.8	192.168.2.13	0x7613	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:58.294487000 CET	8.8.8.8	192.168.2.13	0x7e1b	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:59.010963917 CET	8.8.8.8	192.168.2.13	0x258e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:12:59.745166063 CET	8.8.8.8	192.168.2.13	0x498d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:00.448654890 CET	8.8.8.8	192.168.2.13	0x47d1	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:01.190917969 CET	8.8.8.8	192.168.2.13	0xa9da	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:01.898166895 CET	8.8.8.8	192.168.2.13	0xd6a4	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:02.609402895 CET	8.8.8.8	192.168.2.13	0x5871	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:03.332649946 CET	8.8.8.8	192.168.2.13	0x2a0e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:04.254268885 CET	8.8.8.8	192.168.2.13	0x580c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:04.989216089 CET	8.8.8.8	192.168.2.13	0xab16	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:05.719464064 CET	8.8.8.8	192.168.2.13	0xa0f1	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:06.434778929 CET	8.8.8.8	192.168.2.13	0x2085	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:07.146806955 CET	8.8.8.8	192.168.2.13	0x9512	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:07.867099047 CET	8.8.8.8	192.168.2.13	0xbbf0	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:08.573940039 CET	8.8.8.8	192.168.2.13	0x3cd8	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:09.287795067 CET	8.8.8.8	192.168.2.13	0x80f6	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:09.982552052 CET	8.8.8.8	192.168.2.13	0x137f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:10.718101978 CET	8.8.8.8	192.168.2.13	0x5a49	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:11.430758953 CET	8.8.8.8	192.168.2.13	0x1dba	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:12.171143055 CET	8.8.8.8	192.168.2.13	0x189f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:12.865602970 CET	8.8.8.8	192.168.2.13	0xe3e2	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:13.594260931 CET	8.8.8.8	192.168.2.13	0xc91e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:14.292373896 CET	8.8.8.8	192.168.2.13	0xdd94	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:15.002271891 CET	8.8.8.8	192.168.2.13	0xba7b	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:15.687664032 CET	8.8.8.8	192.168.2.13	0x504d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:16.393193960 CET	8.8.8.8	192.168.2.13	0x469f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:17.134442091 CET	8.8.8.8	192.168.2.13	0xc362	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:17.852962971 CET	8.8.8.8	192.168.2.13	0x765d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:18.551101923 CET	8.8.8.8	192.168.2.13	0x41da	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:19.269282103 CET	8.8.8.8	192.168.2.13	0xe6d5	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:19.963145018 CET	8.8.8.8	192.168.2.13	0x7a0f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:20.677680016 CET	8.8.8.8	192.168.2.13	0x3061	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:21.387490988 CET	8.8.8.8	192.168.2.13	0x73a9	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:22.118794918 CET	8.8.8.8	192.168.2.13	0x1bbe	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:22.844235897 CET	8.8.8.8	192.168.2.13	0xa7dc	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:23.563005924 CET	8.8.8.8	192.168.2.13	0xa470	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:24.267425060 CET	8.8.8.8	192.168.2.13	0x8f3	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:24.982822895 CET	8.8.8.8	192.168.2.13	0x6162	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:25.700516939 CET	8.8.8.8	192.168.2.13	0x64dd	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:26.435998917 CET	8.8.8.8	192.168.2.13	0xbc1d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:27.152771950 CET	8.8.8.8	192.168.2.13	0xf446	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:27.886957884 CET	8.8.8.8	192.168.2.13	0xe32e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:28.612204075 CET	8.8.8.8	192.168.2.13	0x73d7	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:29.313483953 CET	8.8.8.8	192.168.2.13	0x9887	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:30.034077883 CET	8.8.8.8	192.168.2.13	0xb231	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:30.751470089 CET	8.8.8.8	192.168.2.13	0xd1e3	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:31.494282007 CET	8.8.8.8	192.168.2.13	0x601a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:32.182535887 CET	8.8.8.8	192.168.2.13	0x549d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:32.913280010 CET	8.8.8.8	192.168.2.13	0xfa25	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:33.639796019 CET	8.8.8.8	192.168.2.13	0x128e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:34.335201025 CET	8.8.8.8	192.168.2.13	0xac80	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:35.066076994 CET	8.8.8.8	192.168.2.13	0x9d8a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:35.782737970 CET	8.8.8.8	192.168.2.13	0x8ad8	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:36.505397081 CET	8.8.8.8	192.168.2.13	0x60a4	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:37.204978943 CET	8.8.8.8	192.168.2.13	0x48b7	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:37.928738117 CET	8.8.8.8	192.168.2.13	0x8806	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:38.652040958 CET	8.8.8.8	192.168.2.13	0x1fd4	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:39.359858990 CET	8.8.8.8	192.168.2.13	0x42bb	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:40.075877905 CET	8.8.8.8	192.168.2.13	0x6497	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:40.775774956 CET	8.8.8.8	192.168.2.13	0x2636	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:41.496691942 CET	8.8.8.8	192.168.2.13	0x3f7c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:42.231280088 CET	8.8.8.8	192.168.2.13	0x1a17	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:42.966717005 CET	8.8.8.8	192.168.2.13	0x557a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:43.676490068 CET	8.8.8.8	192.168.2.13	0xec3a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:44.372828960 CET	8.8.8.8	192.168.2.13	0xb03c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:45.088381052 CET	8.8.8.8	192.168.2.13	0x4516	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:45.782407045 CET	8.8.8.8	192.168.2.13	0x9570	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:46.514904022 CET	8.8.8.8	192.168.2.13	0x97fc	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:47.254719973 CET	8.8.8.8	192.168.2.13	0xaf63	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:47.978221893 CET	8.8.8.8	192.168.2.13	0xaa54	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:48.712790012 CET	8.8.8.8	192.168.2.13	0x8334	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:49.427300930 CET	8.8.8.8	192.168.2.13	0xb559	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:50.155222893 CET	8.8.8.8	192.168.2.13	0x3398	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:50.899478912 CET	8.8.8.8	192.168.2.13	0x9254	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:51.637645006 CET	8.8.8.8	192.168.2.13	0x1dd4	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:52.335338116 CET	8.8.8.8	192.168.2.13	0x2b31	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:53.035590887 CET	8.8.8.8	192.168.2.13	0x693c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:53.751988888 CET	8.8.8.8	192.168.2.13	0xcc0f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:54.460783958 CET	8.8.8.8	192.168.2.13	0x468	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:55.156120062 CET	8.8.8.8	192.168.2.13	0x136	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:55.881649017 CET	8.8.8.8	192.168.2.13	0x5a4f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:56.603960991 CET	8.8.8.8	192.168.2.13	0xb801	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:57.335935116 CET	8.8.8.8	192.168.2.13	0x18ba	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:58.051527023 CET	8.8.8.8	192.168.2.13	0x1ba	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:58.757031918 CET	8.8.8.8	192.168.2.13	0x55fa	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:13:59.455863953 CET	8.8.8.8	192.168.2.13	0xe607	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:00.178106070 CET	8.8.8.8	192.168.2.13	0xd0a7	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:00.895163059 CET	8.8.8.8	192.168.2.13	0x423	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:01.693581104 CET	8.8.8.8	192.168.2.13	0x8552	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:02.388715982 CET	8.8.8.8	192.168.2.13	0x8394	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:03.110728025 CET	8.8.8.8	192.168.2.13	0x4303	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:03.852186918 CET	8.8.8.8	192.168.2.13	0x1447	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:04.572272062 CET	8.8.8.8	192.168.2.13	0x50de	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:05.267185926 CET	8.8.8.8	192.168.2.13	0xb7f0	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:06.005569935 CET	8.8.8.8	192.168.2.13	0x9272	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:06.721755028 CET	8.8.8.8	192.168.2.13	0xa405	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:07.420964956 CET	8.8.8.8	192.168.2.13	0xfe09	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:08.158076048 CET	8.8.8.8	192.168.2.13	0xa352	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:08.866406918 CET	8.8.8.8	192.168.2.13	0x2c7f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:09.611799955 CET	8.8.8.8	192.168.2.13	0xd81a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:10.333129883 CET	8.8.8.8	192.168.2.13	0xdafb	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:11.050132990 CET	8.8.8.8	192.168.2.13	0xabe0	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:11.745790005 CET	8.8.8.8	192.168.2.13	0xd604	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:12.450145960 CET	8.8.8.8	192.168.2.13	0x6487	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:13.149346113 CET	8.8.8.8	192.168.2.13	0xcd93	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:13.883866072 CET	8.8.8.8	192.168.2.13	0x7e10	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:14.600157976 CET	8.8.8.8	192.168.2.13	0xa53d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:15.293730021 CET	8.8.8.8	192.168.2.13	0xe9d7	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:16.010165930 CET	8.8.8.8	192.168.2.13	0xafbe	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:16.746566057 CET	8.8.8.8	192.168.2.13	0xe36f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:17.468987942 CET	8.8.8.8	192.168.2.13	0xbf57	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:18.194442034 CET	8.8.8.8	192.168.2.13	0xa687	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:18.907686949 CET	8.8.8.8	192.168.2.13	0xc38	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:19.639520884 CET	8.8.8.8	192.168.2.13	0xe687	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:20.358603001 CET	8.8.8.8	192.168.2.13	0xf595	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:21.083640099 CET	8.8.8.8	192.168.2.13	0x5301	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:21.780654907 CET	8.8.8.8	192.168.2.13	0xb54e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:22.505584955 CET	8.8.8.8	192.168.2.13	0xe53e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:23.218492985 CET	8.8.8.8	192.168.2.13	0x8795	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:23.949970007 CET	8.8.8.8	192.168.2.13	0xd6f7	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:24.666250944 CET	8.8.8.8	192.168.2.13	0xc87f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:25.415853977 CET	8.8.8.8	192.168.2.13	0x1cf5	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:26.121387005 CET	8.8.8.8	192.168.2.13	0x915f	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:26.851744890 CET	8.8.8.8	192.168.2.13	0xc62d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:27.538238049 CET	8.8.8.8	192.168.2.13	0x88ec	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:28.242558956 CET	8.8.8.8	192.168.2.13	0x5b5a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:28.957441092 CET	8.8.8.8	192.168.2.13	0x58d2	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:29.682959080 CET	8.8.8.8	192.168.2.13	0xfb2	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:30.426058054 CET	8.8.8.8	192.168.2.13	0x27f3	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:31.128416061 CET	8.8.8.8	192.168.2.13	0x64ee	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:31.853120089 CET	8.8.8.8	192.168.2.13	0x202a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:32.556418896 CET	8.8.8.8	192.168.2.13	0x1c32	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:33.265271902 CET	8.8.8.8	192.168.2.13	0x60de	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:33.980351925 CET	8.8.8.8	192.168.2.13	0x2627	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:34.682389021 CET	8.8.8.8	192.168.2.13	0x7803	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:35.376761913 CET	8.8.8.8	192.168.2.13	0x390c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:36.080522060 CET	8.8.8.8	192.168.2.13	0xf575	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:36.798521042 CET	8.8.8.8	192.168.2.13	0xb8ab	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:37.535331964 CET	8.8.8.8	192.168.2.13	0xa30e	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:38.248351097 CET	8.8.8.8	192.168.2.13	0xbc7c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:38.949455976 CET	8.8.8.8	192.168.2.13	0x76ab	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:39.700930119 CET	8.8.8.8	192.168.2.13	0x9407	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:40.415139914 CET	8.8.8.8	192.168.2.13	0xbf56	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:41.136394024 CET	8.8.8.8	192.168.2.13	0x9a8c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:41.880865097 CET	8.8.8.8	192.168.2.13	0xd595	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:42.650482893 CET	8.8.8.8	192.168.2.13	0x5ffd	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:43.389482975 CET	8.8.8.8	192.168.2.13	0x2ffc	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:44.113054037 CET	8.8.8.8	192.168.2.13	0x2d82	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:44.857085943 CET	8.8.8.8	192.168.2.13	0x61ee	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:45.577075005 CET	8.8.8.8	192.168.2.13	0x6ea2	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:46.294657946 CET	8.8.8.8	192.168.2.13	0xae0c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:47.015033960 CET	8.8.8.8	192.168.2.13	0x21ec	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:47.740886927 CET	8.8.8.8	192.168.2.13	0x1916	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:48.436892986 CET	8.8.8.8	192.168.2.13	0xe25a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:49.135632992 CET	8.8.8.8	192.168.2.13	0xc0b0	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:49.852315903 CET	8.8.8.8	192.168.2.13	0x1893	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:50.573328972 CET	8.8.8.8	192.168.2.13	0xac5	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:51.295346975 CET	8.8.8.8	192.168.2.13	0xa2b8	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:51.990284920 CET	8.8.8.8	192.168.2.13	0xd692	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:52.719029903 CET	8.8.8.8	192.168.2.13	0xe81d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:53.444228888 CET	8.8.8.8	192.168.2.13	0x71d6	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:54.137788057 CET	8.8.8.8	192.168.2.13	0x9c94	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:54.878809929 CET	8.8.8.8	192.168.2.13	0xe4e9	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:55.590931892 CET	8.8.8.8	192.168.2.13	0x5fde	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:56.315036058 CET	8.8.8.8	192.168.2.13	0x3180	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:57.064481974 CET	8.8.8.8	192.168.2.13	0x16a4	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:57.770426989 CET	8.8.8.8	192.168.2.13	0xe31c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:58.462730885 CET	8.8.8.8	192.168.2.13	0xc163	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:59.182296991 CET	8.8.8.8	192.168.2.13	0x89e9	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:14:59.911863089 CET	8.8.8.8	192.168.2.13	0x3a2d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:00.631834984 CET	8.8.8.8	192.168.2.13	0xa074	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:01.334570885 CET	8.8.8.8	192.168.2.13	0xc1ae	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:02.064402103 CET	8.8.8.8	192.168.2.13	0x575d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:02.808798075 CET	8.8.8.8	192.168.2.13	0xb68d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:03.504786015 CET	8.8.8.8	192.168.2.13	0x53eb	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:04.256011009 CET	8.8.8.8	192.168.2.13	0xaf34	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:04.997581005 CET	8.8.8.8	192.168.2.13	0xbe0d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:05.731307030 CET	8.8.8.8	192.168.2.13	0xb83c	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:06.475836992 CET	8.8.8.8	192.168.2.13	0x4544	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:07.189438105 CET	8.8.8.8	192.168.2.13	0x7305	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:07.906898975 CET	8.8.8.8	192.168.2.13	0xd396	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:08.658588886 CET	8.8.8.8	192.168.2.13	0x2e20	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:09.366596937 CET	8.8.8.8	192.168.2.13	0x39c2	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:10.085057974 CET	8.8.8.8	192.168.2.13	0xf805	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:10.821345091 CET	8.8.8.8	192.168.2.13	0xe680	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:11.548708916 CET	8.8.8.8	192.168.2.13	0xcf4b	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:12.264020920 CET	8.8.8.8	192.168.2.13	0xf0c4	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:13.008903980 CET	8.8.8.8	192.168.2.13	0xf1ef	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:13.706028938 CET	8.8.8.8	192.168.2.13	0x1ae0	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:14.400263071 CET	8.8.8.8	192.168.2.13	0xe5ed	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:15.119570017 CET	8.8.8.8	192.168.2.13	0x4d1a	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:15.834855080 CET	8.8.8.8	192.168.2.13	0xdf7d	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:16.550648928 CET	8.8.8.8	192.168.2.13	0xa391	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:17.286241055 CET	8.8.8.8	192.168.2.13	0xcb64	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:18.020782948 CET	8.8.8.8	192.168.2.13	0x332b	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:18.736284018 CET	8.8.8.8	192.168.2.13	0xb25b	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:19.471239090 CET	8.8.8.8	192.168.2.13	0xcfdb	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 16, 2025 06:15:20.178369045 CET	8.8.8.8	192.168.2.13	0xbce8	No error (0)	krkrdoskslansldkalsd.o-r.kr	193.143.1.66	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: byte.x86.elf PID: 5426, Parent PID: 5345

General

Start time (UTC):	05:12:51
Start date (UTC):	16/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	/tmp/byte.x86.elf
File size:	75120 bytes
MD5 hash:	68945c8d25a8717a3435259129c4924f

Start time (UTC):	05:12:51
Start date (UTC):	16/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75120 bytes
MD5 hash:	68945c8d25a8717a3435259129c4924f

Start time (UTC):	05:12:51
Start date (UTC):	16/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75120 bytes
MD5 hash:	68945c8d25a8717a3435259129c4924f

Start time (UTC):	05:12:51
Start date (UTC):	16/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75120 bytes
MD5 hash:	68945c8d25a8717a3435259129c4924f

Start time (UTC):	05:12:51
Start date (UTC):	16/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75120 bytes
MD5 hash:	68945c8d25a8717a3435259129c4924f

Start time (UTC):	05:12:51
Start date (UTC):	16/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75120 bytes
MD5 hash:	68945c8d25a8717a3435259129c4924f

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	05:12:52
Start date (UTC):	16/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:12:53
Start date (UTC):	16/01/2025
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Start time (UTC):	05:12:53
Start date (UTC):	16/01/2025
Path:	/bin/fusermount
Arguments:	fusermount -u -q -z -- /run/user/1000/gvfs
File size:	39144 bytes
MD5 hash:	576a1b135c82bdcbc97a91acea900566

Start time (UTC):	05:12:53
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:53
Start date (UTC):	16/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	05:12:54
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:54
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:12:55
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:55
Start date (UTC):	16/01/2025
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Start time (UTC):	05:12:56
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:56
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:12:57
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:01
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:01
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:01
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:01
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:02
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:03
Start date (UTC):	16/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Start time (UTC):	05:13:04
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:04
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:07
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:07
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:08
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:09
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:10
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemd PID: 5595, Parent PID: 1

General

Start time (UTC):	05:13:11
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:11
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:12
Start date (UTC):	16/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	05:13:13
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:13
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:13
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:13
Start date (UTC):	16/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Start time (UTC):	05:13:13
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:13
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:14
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:14
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:15
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:15
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:15
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:15
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:16
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:16
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:16
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:16
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:16
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:16
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:16
Start date (UTC):	16/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	05:13:17
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:17
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:17
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:17
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:18
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:18
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:18
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:18
Start date (UTC):	16/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	05:13:19
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:19
Start date (UTC):	16/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	05:13:19
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:13:19
Start date (UTC):	16/01/2025
Path:	/bin/plymouth
Arguments:	/bin/plymouth quit
File size:	51352 bytes
MD5 hash:	87003efd8dad470042f5e75360a8f49f

Start time (UTC):	05:14:23
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:14:23
Start date (UTC):	16/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	05:14:26
Start date (UTC):	16/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Source: byte.x86.elf	ReversingLabs: Detection: 73%
Source: byte.x86.elf	Virustotal: Detection: 65%			Perma Link

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary’s actions. Typically these artifacts are used as defensive indicators related to monitored events, such as strings from downloaded files, logs that are generated from user actions, and other data analyzed by defenders. Location, format, and type of artifact (such as command or login history) are often specific to each platform.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Deletion, File: File Metadata, File: File Modification, Firewall: Firewall Rule Modification, Network Traffic: Network Traffic Content, Process: OS API Execution, Process: Process Creation, Scheduled Job: Scheduled Job Modification, User Account: User Account Authentication, User Account: User Account Deletion, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, Google Workspace, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report byte.x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/seats/.#seat072D10V

/run/systemd/seats/.#seat0U0b7ia

/var/log/auth.log

/var/log/kern.log

/var/log/syslog

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: byte.x86.elf PID: 5426, Parent PID: 5345

General

Chronological Activities

Analysis Process: byte.x86.elf PID: 5427, Parent PID: 5426

General

Chronological Activities

Analysis Process: byte.x86.elf PID: 5428, Parent PID: 5426

General

Chronological Activities

Analysis Process: byte.x86.elf PID: 5429, Parent PID: 5426

Linux Analysis Report
byte.x86.elf