Joe Sandbox Cloud Basic Analysis Report
Edit tour

Linux Analysis Report
ub8ehJSePAfc9FYqZIT6.sh4.elf

Overview

General Information

Sample name:ub8ehJSePAfc9FYqZIT6.sh4.elf
Analysis ID:1617279
MD5:ebc7fd6987661a6e7c0fec365ae7b09e
SHA1:c351efc7fc3ace03b6e81fed287d8929d4e1c069
SHA256:e67f6ccb640947b1f9e99524b0762b4a5c477e5653713cab929a86fdef6e1638
Tags:elfuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample has stripped symbol table
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1617279
Start date and time:2025-02-17 17:22:34 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 38s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:ub8ehJSePAfc9FYqZIT6.sh4.elf
Detection:MAL
Classification:mal64.linELF@0/0@0/0

Runtime Messages

Command:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
PID:5528
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
ub8ehJSePAfc9FYqZIT6.sh4.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

SourceRuleDescriptionAuthorStrings
5542.1.00007eff40400000.00007eff40414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5528.1.00007eff40400000.00007eff40414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5530.1.00007eff40400000.00007eff40414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5532.1.00007eff40400000.00007eff40414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5528Linux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x2128:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x213c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2150:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2164:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2178:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x218c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x21a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x21b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x21c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x21dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x21f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2204:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2218:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x222c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2240:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2254:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2268:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x227c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2290:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x22a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x22b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

  • • AV Detection
  • • Networking
  • • System Summary
  • • Persistence and Installation Behavior
  • • Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Source: ub8ehJSePAfc9FYqZIT6.sh4.elfAvira: detected
Source: ub8ehJSePAfc9FYqZIT6.sh4.elfVirustotal: Detection: 63%Perma Link
Source: ub8ehJSePAfc9FYqZIT6.sh4.elfReversingLabs: Detection: 63%
Source: global trafficTCP traffic: 192.168.2.15:60482 -> 61.7.209.115:3778
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115
Source: unknownTCP traffic detected without corresponding DNS query: 61.7.209.115

System Summary

barindex
Source: ub8ehJSePAfc9FYqZIT6.sh4.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5542.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5528.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5530.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5532.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5528, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5530, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5532, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5542, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Initial sampleString containing 'busybox' found: /bin/busybox
Source: Initial sampleString containing 'busybox' found: /proc/net/tcp.x86.x86_64.arm.arm5.arm6.arm7.mips.mipsel.sh4.ppc/proc/proc/%d/exe/proc/%s/statusrName:%s/bin/busybox/bin/systemd/usr/bintest/tmp/condi/tmp/zxcr9999/tmp/condinetwork/var/condibot/var/zxcr9999/var/CondiBot/var/condinet/bin/watchdog61.7.209.115
Source: ELF static info symbol of initial sample.symtab present: no
Source: ub8ehJSePAfc9FYqZIT6.sh4.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5542.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5528.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5530.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5532.1.00007eff40400000.00007eff40414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5528, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5530, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5532, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.sh4.elf PID: 5542, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: classification engineClassification label: mal64.linELF@0/0@0/0
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/110/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/231/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/111/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/112/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/233/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/113/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/114/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/235/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/115/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1333/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/116/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1695/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/117/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/118/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/119/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/911/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/914/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/10/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/917/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/11/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/12/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/13/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/14/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/15/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/16/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/17/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/18/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/19/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1591/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/120/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/121/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/122/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/243/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/2/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/123/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/3/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/124/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1588/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/125/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/4/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/246/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/126/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/5/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/127/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/6/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1585/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/128/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/7/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/129/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/8/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/800/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/9/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/802/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/803/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/804/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/20/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/21/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/3407/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/22/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/23/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/24/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/25/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/26/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/27/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/28/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/29/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1484/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/490/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/250/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/130/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/251/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/131/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/132/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/133/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1479/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/378/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/258/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/259/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/931/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1595/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/812/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/933/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/30/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/3419/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/35/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/3310/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/260/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/261/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/262/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/142/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/263/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/264/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/265/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/145/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/266/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/267/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/268/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/3303/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/269/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1486/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/1806/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/3440/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/270/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)File opened: /proc/271/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf (PID: 5528)Queries kernel information via 'uname': Jump to behavior
Source: ub8ehJSePAfc9FYqZIT6.sh4.elf, 5528.1.00007fff6c225000.00007fff6c246000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5530.1.00007fff6c225000.00007fff6c246000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5532.1.00007fff6c225000.00007fff6c246000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5542.1.00007fff6c225000.00007fff6c246000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sh4
Source: ub8ehJSePAfc9FYqZIT6.sh4.elf, 5528.1.000055823f4ae000.000055823f538000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5530.1.000055823f4ae000.000055823f511000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5532.1.000055823f4ae000.000055823f511000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5542.1.000055823f4ae000.000055823f538000.rw-.sdmpBinary or memory string: U5!/etc/qemu-binfmt/sh4
Source: ub8ehJSePAfc9FYqZIT6.sh4.elf, 5528.1.000055823f4ae000.000055823f538000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5530.1.000055823f4ae000.000055823f511000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5532.1.000055823f4ae000.000055823f511000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5542.1.000055823f4ae000.000055823f538000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sh4
Source: ub8ehJSePAfc9FYqZIT6.sh4.elf, 5528.1.00007fff6c225000.00007fff6c246000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5530.1.00007fff6c225000.00007fff6c246000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5532.1.00007fff6c225000.00007fff6c246000.rw-.sdmp, ub8ehJSePAfc9FYqZIT6.sh4.elf, 5542.1.00007fff6c225000.00007fff6c246000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-sh4/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume Access1
OS Credential Dumping		11
Security Software Discovery		Remote ServicesData from Local System1
Non-Standard Port		Exfiltration Over Other Network MediumAbuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1617279 Sample: ub8ehJSePAfc9FYqZIT6.sh4.elf Startdate: 17/02/2025 Architecture: LINUX Score: 64 20 61.7.209.115, 3778, 60482, 60484 CAT-APTheCommunicationAuthoityofThailandCATTH Thailand 2->20 22 Malicious sample detected (through community Yara rule) 2->22 24 Antivirus / Scanner detection for submitted sample 2->24 26 Multi AV Scanner detection for submitted file 2->26 8 ub8ehJSePAfc9FYqZIT6.sh4.elf 2->8         started        signatures3 process4 process5 10 ub8ehJSePAfc9FYqZIT6.sh4.elf 8->10         started        12 ub8ehJSePAfc9FYqZIT6.sh4.elf 8->12         started        14 ub8ehJSePAfc9FYqZIT6.sh4.elf 8->14         started        process6 16 ub8ehJSePAfc9FYqZIT6.sh4.elf 10->16         started        18 ub8ehJSePAfc9FYqZIT6.sh4.elf 10->18         started       

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
ub8ehJSePAfc9FYqZIT6.sh4.elf63%VirustotalBrowse
ub8ehJSePAfc9FYqZIT6.sh4.elf64%ReversingLabsLinux.Backdoor.Mirai
ub8ehJSePAfc9FYqZIT6.sh4.elf100%AviraLINUX/Mirai.bonb

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Public IPs

IPDomainCountryFlagASNASN NameMalicious
61.7.209.115
unknownThailand
9931CAT-APTheCommunicationAuthoityofThailandCATTHfalse

Joe Sandbox View / Context

IPs

MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
61.7.209.115ub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse

    Domains

    ⊘No context

    ASNs

    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
    CAT-APTheCommunicationAuthoityofThailandCATTHub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
    • 61.7.209.115
    mpsl.elfGet hashmaliciousMirai, MoobotBrowse
    • 122.155.121.49
    .Sarm5.elfGet hashmaliciousMiraiBrowse
    • 61.19.165.82
    https://storage.thaicarecloud.org/Package4273221/step1.php?id=98204537Get hashmaliciousUnknownBrowse
    • 61.19.254.8
    m68k.elfGet hashmaliciousUnknownBrowse
    • 122.155.121.43
    3.elfGet hashmaliciousUnknownBrowse
    • 122.155.39.113
    Fantazy.arm7.elfGet hashmaliciousMiraiBrowse
    • 122.155.121.187
    mipsel.nn.elfGet hashmaliciousMirai, OkiruBrowse
    • 202.129.40.184
    spc.elfGet hashmaliciousMiraiBrowse
    • 110.78.81.185
    botx.spc.elfGet hashmaliciousMiraiBrowse
    • 122.155.39.115

    JA3 Fingerprints

    ⊘No context

    Dropped Files

    ⊘No context

    Created / dropped Files

    ⊘No created / dropped files found

    Static File Info

    General

    File type:ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
    Entropy (8bit):6.603072926882575
    TrID:
    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
    File name:ub8ehJSePAfc9FYqZIT6.sh4.elf
    File size:82'652 bytes
    MD5:ebc7fd6987661a6e7c0fec365ae7b09e
    SHA1:c351efc7fc3ace03b6e81fed287d8929d4e1c069
    SHA256:e67f6ccb640947b1f9e99524b0762b4a5c477e5653713cab929a86fdef6e1638
    SHA512:d7aa7c0f43a8d239b7e1483538d53b5a074ae6d9406d3f3e2a54f67d790f8b21cf6237b076ddba762a87f5245ea9fd88699cb09b5cf044d6c99fb54b1acc5e8d
    SSDEEP:1536:DWRU/uih+nyazXUcMnYVohwH5wX6SNmTdEyRSr:DR/F+nyazXenY66L5dRK
    TLSH:7E839E61F0142CE5C9660674F0F8ED35471369F123A52CB26EEEE9A188F368DF44AF94
    File Content Preview:.ELF..............*.......@.4...LA......4. ...(...............@...@.L4..L4...............@...@B..@B.0...............Q.td..............................././"O.n......#.*@........#.*@L...&O.n.l..................................././.../.a"O.!...n...a.b("...q.

    Static ELF Info

    ELF header

    Class:ELF32
    Data:2's complement, little endian
    Version:1 (current)
    Machine:<unknown>
    Version Number:0x1
    Type:EXEC (Executable file)
    OS/ABI:UNIX - System V
    ABI Version:0
    Entry Point Address:0x4001a0
    Flags:0xc
    ELF Header Size:52
    Program Header Offset:52
    Program Header Size:32
    Number of Program Headers:3
    Section Header Offset:82252
    Section Header Size:40
    Number of Section Headers:10
    Header String Table Index:9

    Sections

    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
    NULL0x00x00x00x00x0000
    .initPROGBITS0x4000940x940x2e0x00x6AX004
    .textPROGBITS0x4000e00xe00x10e600x00x6AX0032
    .finiPROGBITS0x410f400x10f400x220x00x6AX004
    .rodataPROGBITS0x410f640x10f640x24e80x00x2A004
    .ctorsPROGBITS0x4240dc0x140dc0x80x00x3WA004
    .dtorsPROGBITS0x4240e40x140e40x80x00x3WA004
    .dataPROGBITS0x4240f00x140f00x1c0x00x3WA004
    .bssNOBITS0x42410c0x1410c0xaec0x00x3WA004
    .shstrtabSTRTAB0x00x1410c0x3e0x00x0001

    Program Segments

    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
    LOAD0x00x4000000x4000000x1344c0x1344c6.77530x5R E0x10000.init .text .fini .rodata
    LOAD0x140dc0x4240dc0x4240dc0x300xb1c2.47110x6RW 0x10000.ctors .dtors .data .bss
    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

    Network Behavior

    Download Network PCAP: filtered – full

    TimestampSource PortDest PortSource IPDest IP
    Feb 17, 2025 17:23:23.358480930 CET604823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:23.363287926 CET37786048261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:23.363346100 CET604823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:23.397885084 CET604823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:23.403204918 CET37786048261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:23.403239965 CET604823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:23.408787012 CET37786048261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:24.373473883 CET37786048261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:24.373675108 CET604823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:24.373905897 CET604823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:24.374681950 CET604843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:24.380168915 CET37786048461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:24.380254984 CET604843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:24.381586075 CET604843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:24.386380911 CET37786048461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:24.386428118 CET604843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:24.391175985 CET37786048461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:25.347220898 CET37786048461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:25.351486921 CET604843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:25.351486921 CET604843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:25.367389917 CET604863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:25.372224092 CET37786048661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:25.374977112 CET604863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:25.416007042 CET604863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:25.420774937 CET37786048661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:25.420845032 CET604863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:25.425635099 CET37786048661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:26.365163088 CET37786048661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:26.365365982 CET604863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:26.365417957 CET604863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:26.366117954 CET604883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:26.370898008 CET37786048861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:26.371001959 CET604883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:26.371905088 CET604883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:26.376652002 CET37786048861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:26.376754999 CET604883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:26.382584095 CET37786048861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:27.347318888 CET37786048861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:27.347481966 CET604883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:27.347565889 CET604883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:27.348195076 CET604903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:27.353029013 CET37786049061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:27.353120089 CET604903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:27.353878021 CET604903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:27.359422922 CET37786049061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:27.359517097 CET604903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:27.365104914 CET37786049061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:28.335186005 CET37786049061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:28.335355043 CET604903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:28.335419893 CET604903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:28.336225986 CET604923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:28.341059923 CET37786049261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:28.341151953 CET604923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:28.342132092 CET604923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:28.346956015 CET37786049261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:28.347018003 CET604923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:28.351787090 CET37786049261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:29.129921913 CET604943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.134813070 CET37786049461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:29.134886980 CET604943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.186589956 CET604943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.191565990 CET37786049461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:29.191629887 CET604943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.196480036 CET37786049461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:29.307888031 CET37786049261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:29.307945013 CET604923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.308023930 CET604923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.311556101 CET604963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.316359043 CET37786049661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:29.316462994 CET604963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.329128027 CET604963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.333961010 CET37786049661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:29.334044933 CET604963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:29.338872910 CET37786049661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.119373083 CET37786049461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.119580030 CET604943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.119693995 CET604943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.120393038 CET604983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.125181913 CET37786049861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.125258923 CET604983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.126039982 CET604983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.130860090 CET37786049861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.130923033 CET604983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.135724068 CET37786049861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.292357922 CET37786049661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.292593956 CET604963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.292593956 CET604963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.293307066 CET605003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.298136950 CET37786050061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.298207045 CET605003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.299340963 CET605003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.304138899 CET37786050061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:30.304205894 CET605003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:30.309014082 CET37786050061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.114360094 CET37786049861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.114814043 CET604983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.114814043 CET604983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.115401030 CET605023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.120253086 CET37786050261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.120310068 CET605023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.121089935 CET605023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.125868082 CET37786050261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.126013994 CET605023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.130788088 CET37786050261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.275876999 CET37786050061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.276025057 CET605003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.276150942 CET605003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.276859999 CET605043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.281780005 CET37786050461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.281843901 CET605043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.282705069 CET605043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.287528038 CET37786050461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:31.287580967 CET605043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:31.292428017 CET37786050461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.111465931 CET37786050261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.111596107 CET605023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.111649990 CET605023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.112226963 CET605063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.117064953 CET37786050661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.117119074 CET605063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.117974997 CET605063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.122744083 CET37786050661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.122795105 CET605063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.127542019 CET37786050661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.249510050 CET37786050461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.249617100 CET605043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.249643087 CET605043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.250227928 CET605083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.255079031 CET37786050861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.255167007 CET605083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.256052017 CET605083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.260839939 CET37786050861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:32.260917902 CET605083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:32.265782118 CET37786050861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.113816977 CET37786050661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.114032030 CET605063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.114078999 CET605063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.114846945 CET605103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.119651079 CET37786051061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.119755983 CET605103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.120672941 CET605103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.125442982 CET37786051061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.125720024 CET605103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.130534887 CET37786051061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.244172096 CET37786050861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.244344950 CET605083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.244344950 CET605083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.244905949 CET605123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.249727964 CET37786051261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.249792099 CET605123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.250622034 CET605123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.255358934 CET37786051261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:33.255526066 CET605123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:33.260315895 CET37786051261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.112715960 CET37786051061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.112998009 CET605103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.113084078 CET605103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.113729000 CET605143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.118558884 CET37786051461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.118613958 CET605143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.119405031 CET605143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.124152899 CET37786051461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.124203920 CET605143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.129061937 CET37786051461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.236794949 CET37786051261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.236946106 CET605123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.236984015 CET605123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.237518072 CET605163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.242383957 CET37786051661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.242430925 CET605163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.243263960 CET605163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.248044968 CET37786051661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:34.248084068 CET605163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:34.252917051 CET37786051661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.115710020 CET37786051461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.116005898 CET605143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.116084099 CET605143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.116700888 CET605183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.121541977 CET37786051861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.121601105 CET605183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.122256041 CET605183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.127041101 CET37786051861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.127094984 CET605183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.131850958 CET37786051861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.230273008 CET37786051661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.230386972 CET605163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.230434895 CET605163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.231017113 CET605203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.235892057 CET37786052061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.236004114 CET605203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.236809969 CET605203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.241627932 CET37786052061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:35.241673946 CET605203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:35.246515036 CET37786052061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.113852978 CET37786051861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.114006042 CET605183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.114062071 CET605183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.114731073 CET605223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.119555950 CET37786052261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.119621038 CET605223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.120434999 CET605223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.125222921 CET37786052261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.125273943 CET605223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.130038023 CET37786052261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.235085011 CET37786052061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.235372066 CET605203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.235425949 CET605203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.236048937 CET605243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.241559029 CET37786052461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.241607904 CET605243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.242432117 CET605243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.247852087 CET37786052461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:36.247894049 CET605243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:36.253257990 CET37786052461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.122944117 CET37786052261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.123172998 CET605223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.123261929 CET605223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.124180079 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.129092932 CET37786052661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.129157066 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.130134106 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.135056019 CET37786052661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.135305882 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.140237093 CET37786052661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.251080990 CET37786052461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.251190901 CET605243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.251240969 CET605243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.251826048 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.256632090 CET37786052861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.256694078 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.257513046 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.262258053 CET37786052861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:37.262305021 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:37.267138958 CET37786052861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.299916029 CET37786052661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.300165892 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.300311089 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.300549030 CET37786052861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.300626040 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.300740957 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.300934076 CET605303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.301115036 CET37786052661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.301189899 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.301682949 CET605323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.488754988 CET37786052661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.488863945 CET37786052861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.488868952 CET605263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.488900900 CET37786052861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.488959074 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.488959074 CET605283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.490267992 CET37786053061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.490282059 CET37786053261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.490331888 CET605303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.490335941 CET605323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.491820097 CET605323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.491913080 CET605303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.496656895 CET37786053261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.496679068 CET37786053061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.496699095 CET605323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.496742010 CET605303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:38.501524925 CET37786053261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:38.501538038 CET37786053061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.506601095 CET37786053261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.506840944 CET605323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.506900072 CET605323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.507636070 CET605343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.512450933 CET37786053461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.512501955 CET605343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.513771057 CET605343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.518579006 CET37786053461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.518651009 CET605343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.523452997 CET37786053461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.528728962 CET37786053061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.528790951 CET605303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.528831959 CET605303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.529263020 CET605363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.534027100 CET37786053661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.534081936 CET605363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.534849882 CET605363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.539582014 CET37786053661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:39.539627075 CET605363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:39.544368029 CET37786053661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.711220980 CET37786053461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.711488008 CET605343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.711600065 CET605343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.712428093 CET605383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.717200041 CET37786053861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.717278957 CET605383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.718389034 CET605383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.719235897 CET37786053661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.719283104 CET605363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.719340086 CET605363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.719760895 CET605403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.723562002 CET37786053861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.723607063 CET605383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.725058079 CET37786054061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.725131035 CET605403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.725869894 CET605403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.728984118 CET37786053861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.731172085 CET37786054061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:40.731348991 CET605403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:40.736182928 CET37786054061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.767247915 CET37786053861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.767389059 CET605383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.767443895 CET605383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.768135071 CET605423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.772814035 CET37786054061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.772913933 CET605403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.772913933 CET605403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.772941113 CET37786054261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.773000956 CET605423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.773514986 CET605443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.774544001 CET605423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.778296947 CET37786054461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.778347015 CET605443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.778980970 CET605443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.779299974 CET37786054261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.779340029 CET605423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.783724070 CET37786054461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.783772945 CET605443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:41.784157991 CET37786054261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:41.788516998 CET37786054461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.763140917 CET37786054261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.763335943 CET605423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.763390064 CET605423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.764076948 CET605463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.768893003 CET37786054661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.768954992 CET605463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.769793987 CET605463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.774589062 CET37786054661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.774638891 CET605463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.777374029 CET37786054461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.777421951 CET605443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.777461052 CET605443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.777903080 CET605483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.779448032 CET37786054661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.782740116 CET37786054861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.782830954 CET605483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.783680916 CET605483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.788491964 CET37786054861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:42.788548946 CET605483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:42.793430090 CET37786054861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.738984108 CET37786054661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.739124060 CET605463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.739252090 CET605463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.740159988 CET605503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.745035887 CET37786055061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.745213032 CET605503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.746239901 CET605503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.751120090 CET37786055061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.751188993 CET605503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.756069899 CET37786055061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.760370970 CET37786054861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.760453939 CET605483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.760540009 CET605483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.760946989 CET605523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.765819073 CET37786055261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.765876055 CET605523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.766628981 CET605523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.771440029 CET37786055261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:43.771486998 CET605523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:43.776315928 CET37786055261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.717864037 CET37786055061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.718035936 CET605503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.718111038 CET605503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.718894958 CET605543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.725521088 CET37786055461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.725614071 CET605543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.726706982 CET605543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.731540918 CET37786055461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.731606960 CET605543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.736409903 CET37786055461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.750005007 CET37786055261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.750082016 CET605523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.750163078 CET605523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.750713110 CET605563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.755614996 CET37786055661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.755702019 CET605563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.756611109 CET605563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.761418104 CET37786055661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:44.761483908 CET605563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:44.766315937 CET37786055661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.726486921 CET37786055461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.726636887 CET605543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.726778984 CET605543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.727448940 CET605583778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.732270002 CET37786055861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.732331991 CET605583778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.733127117 CET605583778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.737394094 CET37786055661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.737457991 CET605563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.737515926 CET605563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.737912893 CET605603778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.737919092 CET37786055861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.737968922 CET605583778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.742765903 CET37786056061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.742783070 CET37786055861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.742820024 CET605603778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.743510962 CET605603778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.748397112 CET37786056061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:45.748445988 CET605603778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:45.753207922 CET37786056061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.725007057 CET37786055861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.725325108 CET605583778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.725409985 CET605583778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.726562023 CET605623778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.731441021 CET37786056261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.731532097 CET605623778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.732594967 CET605623778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.737467051 CET37786056261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.737515926 CET605623778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.742296934 CET37786056261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.783874989 CET37786056061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.783950090 CET605603778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.784007072 CET605603778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.784778118 CET605643778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.789580107 CET37786056461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.789683104 CET605643778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.790553093 CET605643778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.795305014 CET37786056461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:46.795402050 CET605643778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:46.800632000 CET37786056461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.842272043 CET37786056261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.842490911 CET605623778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.842600107 CET605623778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.843807936 CET605663778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.848628998 CET37786056661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.848705053 CET605663778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.849884033 CET605663778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.854655981 CET37786056661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.854717970 CET605663778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.858369112 CET37786056461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.858437061 CET605643778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.858489990 CET605643778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.858958960 CET605683778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.859549999 CET37786056661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.863785028 CET37786056861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.863853931 CET605683778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.864954948 CET605683778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.869734049 CET37786056861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:47.869805098 CET605683778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:47.874550104 CET37786056861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.823631048 CET37786056661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.823801041 CET605663778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.823892117 CET605663778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.824985027 CET605703778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.829816103 CET37786057061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.829931021 CET605703778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.831403017 CET605703778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.831578016 CET37786056861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.831631899 CET605683778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.831676960 CET605683778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.832102060 CET605723778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.836206913 CET37786057061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.836268902 CET605703778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.837065935 CET37786057261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.837161064 CET605723778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.838066101 CET605723778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.841037989 CET37786057061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.842916012 CET37786057261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:48.842983007 CET605723778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:48.847743988 CET37786057261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.839998960 CET37786057061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.840200901 CET605703778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.840291977 CET605703778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.841104984 CET605743778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.845885038 CET37786057261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.845946074 CET605723778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.846019030 CET37786057461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.846055984 CET605723778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.846090078 CET605743778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.847930908 CET605763778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.848731995 CET605743778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.852741003 CET37786057661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.852802038 CET605763778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.853610039 CET37786057461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.853650093 CET605743778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.854367018 CET605763778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.858464956 CET37786057461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.859189987 CET37786057661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:49.859230995 CET605763778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:49.864089012 CET37786057661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.830101013 CET37786057461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.830312967 CET605743778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.830354929 CET605743778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.831352949 CET605783778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.838793993 CET37786057861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.838845968 CET605783778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.840001106 CET605783778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.843481064 CET37786057661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.843537092 CET605763778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.843607903 CET605763778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.844228029 CET605803778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.847502947 CET37786057861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.847548008 CET605783778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.850117922 CET37786058061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.850200891 CET605803778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.851522923 CET605803778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.853207111 CET37786057861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.857251883 CET37786058061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:50.857319117 CET605803778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:50.863117933 CET37786058061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.824517012 CET37786058061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.824779987 CET605803778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.824898958 CET605803778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.826378107 CET605823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.832293034 CET37786058261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.832365990 CET605823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.833832026 CET605823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.839428902 CET37786058261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.839523077 CET605823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.845499992 CET37786058261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.855459929 CET37786057861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.855544090 CET605783778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.855585098 CET605783778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.856403112 CET605843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.861362934 CET37786058461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.861424923 CET605843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.862987995 CET605843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.867882967 CET37786058461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:51.867965937 CET605843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:51.872874975 CET37786058461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.939730883 CET37786058261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.940107107 CET605823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.940192938 CET605823778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.941570044 CET605863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.946577072 CET37786058661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.946674109 CET605863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.947916031 CET605863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.952096939 CET37786058461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.952171087 CET605843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.952287912 CET605843778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.952729940 CET37786058661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.952786922 CET605863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.953111887 CET605883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.957567930 CET37786058661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.957973957 CET37786058861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.958056927 CET605883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.959355116 CET605883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.964202881 CET37786058861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:52.964270115 CET605883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:52.969069004 CET37786058861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:53.991574049 CET37786058661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:53.991739035 CET605863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:53.991837978 CET605863778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:53.992557049 CET605903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:53.997524023 CET37786059061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:53.997637033 CET605903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:53.998904943 CET605903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.001272917 CET37786058861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:54.001389980 CET605883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.001435995 CET605883778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.002001047 CET605923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.003834963 CET37786059061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:54.003901005 CET605903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.006840944 CET37786059261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:54.006912947 CET605923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.008193016 CET605923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.008755922 CET37786059061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:54.013056040 CET37786059261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:54.013118029 CET605923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:54.017921925 CET37786059261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:55.185724974 CET37786059061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:55.185889959 CET605903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:55.185965061 CET605903778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:55.186928988 CET605943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:55.191824913 CET37786059461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:55.191917896 CET605943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:55.193348885 CET605943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:55.198229074 CET37786059461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:55.198296070 CET605943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:55.204524040 CET37786059461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:56.166115046 CET37786059461.7.209.115192.168.2.15
    Feb 17, 2025 17:23:56.166312933 CET605943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:56.166404009 CET605943778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:56.167627096 CET605963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:56.172482014 CET37786059661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:56.172602892 CET605963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:56.173981905 CET605963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:56.178821087 CET37786059661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:56.179047108 CET605963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:56.183891058 CET37786059661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:57.142398119 CET37786059661.7.209.115192.168.2.15
    Feb 17, 2025 17:23:57.142734051 CET605963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:57.142752886 CET605963778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:57.144342899 CET605983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:57.149425983 CET37786059861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:57.149677038 CET605983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:57.151040077 CET605983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:57.155975103 CET37786059861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:57.156070948 CET605983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:57.160882950 CET37786059861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:58.145008087 CET37786059861.7.209.115192.168.2.15
    Feb 17, 2025 17:23:58.145189047 CET605983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:58.145231009 CET605983778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:58.146080971 CET606003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:58.150976896 CET37786060061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:58.151050091 CET606003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:58.152677059 CET606003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:58.157542944 CET37786060061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:58.157604933 CET606003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:58.162414074 CET37786060061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:59.154813051 CET37786060061.7.209.115192.168.2.15
    Feb 17, 2025 17:23:59.154969931 CET606003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:59.155019045 CET606003778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:59.155662060 CET606023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:59.160680056 CET37786060261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:59.160733938 CET606023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:59.161834002 CET606023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:59.166855097 CET37786060261.7.209.115192.168.2.15
    Feb 17, 2025 17:23:59.166903019 CET606023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:23:59.171664953 CET37786060261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:00.272469997 CET37786060261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:00.272721052 CET606023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:00.272721052 CET606023778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:00.273487091 CET606043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:00.278403997 CET37786060461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:00.278531075 CET606043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:00.279858112 CET606043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:00.284683943 CET37786060461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:00.284771919 CET606043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:00.289602041 CET37786060461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:01.251965046 CET37786060461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:01.252137899 CET606043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:01.252192974 CET606043778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:01.252996922 CET606063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:01.257791042 CET37786060661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:01.257868052 CET606063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:01.258858919 CET606063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:01.263829947 CET37786060661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:01.263902903 CET606063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:01.268692970 CET37786060661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:02.237294912 CET37786060661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:02.237535954 CET606063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:02.237601042 CET606063778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:02.238450050 CET606083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:02.243251085 CET37786060861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:02.243324995 CET606083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:02.244344950 CET606083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:02.249126911 CET37786060861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:02.249200106 CET606083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:02.253937006 CET37786060861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:03.281655073 CET37786060861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:03.281877041 CET606083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:03.281934023 CET606083778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:03.282565117 CET606103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:03.287360907 CET37786061061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:03.287472010 CET606103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:03.288651943 CET606103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:03.294686079 CET37786061061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:03.294756889 CET606103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:03.299540997 CET37786061061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:04.018157959 CET605923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:04.023217916 CET37786059261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:04.261153936 CET37786061061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:04.261301994 CET606103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:04.261360884 CET606103778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:04.262495041 CET606123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:04.267385006 CET37786061261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:04.267497063 CET606123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:04.268706083 CET606123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:04.273560047 CET37786061261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:04.273631096 CET606123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:04.278424978 CET37786061261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:04.385540009 CET37786059261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:04.385757923 CET605923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:05.262356043 CET37786061261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:05.262516022 CET606123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:05.262557983 CET606123778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:05.263712883 CET606143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:05.268558025 CET37786061461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:05.268640995 CET606143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:05.269931078 CET606143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:05.274810076 CET37786061461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:05.274883986 CET606143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:05.279795885 CET37786061461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:06.231193066 CET37786061461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:06.231463909 CET606143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:06.231509924 CET606143778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:06.232533932 CET606163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:06.237389088 CET37786061661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:06.237505913 CET606163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:06.238473892 CET606163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:06.243236065 CET37786061661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:06.243302107 CET606163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:06.248163939 CET37786061661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:07.248399973 CET37786061661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:07.248553991 CET606163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:07.248836040 CET606163778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:07.249594927 CET606183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:07.254391909 CET37786061861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:07.254507065 CET606183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:07.255326986 CET606183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:07.260063887 CET37786061861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:07.260121107 CET606183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:07.265254974 CET37786061861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:08.324407101 CET37786061861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:08.324588060 CET606183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:08.324635029 CET606183778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:08.325737000 CET606203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:08.330574989 CET37786062061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:08.330672026 CET606203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:08.332602978 CET606203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:08.337466002 CET37786062061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:08.337588072 CET606203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:08.342439890 CET37786062061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:09.399141073 CET37786062061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:09.399401903 CET606203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:09.399491072 CET606203778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:09.400063038 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:09.405030012 CET37786062261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:09.405102968 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:09.405956030 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:09.410805941 CET37786062261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:09.410871983 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:09.415702105 CET37786062261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:10.847080946 CET37786062261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:10.847358942 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.847431898 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.847595930 CET37786062261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:10.847690105 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.847992897 CET37786062261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:10.848052979 CET606223778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.848309040 CET606243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.856750011 CET37786062461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:10.856868982 CET606243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.858191013 CET606243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.863028049 CET37786062461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:10.863116980 CET606243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:10.867940903 CET37786062461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:11.930428982 CET37786062461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:11.930638075 CET606243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:11.930764914 CET606243778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:11.931596994 CET606263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:11.936388969 CET37786062661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:11.936467886 CET606263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:11.937674046 CET606263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:11.942514896 CET37786062661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:11.942575932 CET606263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:11.947365999 CET37786062661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:12.952724934 CET37786062661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:12.952904940 CET606263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:12.953041077 CET606263778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:12.953830957 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:12.958589077 CET37786062861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:12.958710909 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:12.960232019 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:12.964996099 CET37786062861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:12.965080023 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:12.969793081 CET37786062861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:14.677045107 CET37786062861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:14.677208900 CET37786062861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:14.677284956 CET37786062861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:14.677364111 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.677364111 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.677364111 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.677464008 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.678308964 CET606303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.679557085 CET37786062861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:14.679627895 CET606283778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.685034037 CET37786063061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:14.685108900 CET606303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.686328888 CET606303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.691150904 CET37786063061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:14.691215038 CET606303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:14.695996046 CET37786063061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:15.681113958 CET37786063061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:15.681349039 CET606303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:15.681377888 CET606303778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:15.682169914 CET606323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:15.687021971 CET37786063261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:15.687144041 CET606323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:15.688199997 CET606323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:15.693006992 CET37786063261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:15.693068981 CET606323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:15.697838068 CET37786063261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:16.675875902 CET37786063261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:16.676071882 CET606323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:16.676198959 CET606323778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:16.677160025 CET606343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:16.681969881 CET37786063461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:16.682034969 CET606343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:16.683296919 CET606343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:16.688102961 CET37786063461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:16.688206911 CET606343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:16.692991018 CET37786063461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:17.677217960 CET37786063461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:17.677495956 CET606343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:17.677618027 CET606343778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:17.678666115 CET606363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:17.683479071 CET37786063661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:17.683552980 CET606363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:17.684916973 CET606363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:17.689742088 CET37786063661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:17.689789057 CET606363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:17.694631100 CET37786063661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:18.695375919 CET37786063661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:18.695583105 CET606363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:18.695630074 CET606363778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:18.696594000 CET606383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:18.701389074 CET37786063861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:18.701473951 CET606383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:18.702971935 CET606383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:18.707746029 CET37786063861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:18.707808971 CET606383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:18.712636948 CET37786063861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:19.745703936 CET37786063861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:19.745810032 CET606383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:19.745839119 CET606383778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:19.746663094 CET606403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:19.751466036 CET37786064061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:19.751517057 CET606403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:19.752605915 CET606403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:19.757406950 CET37786064061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:19.757452011 CET606403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:19.762187958 CET37786064061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:20.742053986 CET37786064061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:20.742227077 CET606403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:20.742309093 CET606403778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:20.743432045 CET606423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:20.751003027 CET37786064261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:20.751101017 CET606423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:20.752635956 CET606423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:20.759720087 CET37786064261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:20.759897947 CET606423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:20.764687061 CET37786064261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:21.794436932 CET37786064261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:21.794677973 CET606423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:21.794739962 CET606423778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:21.795711994 CET606443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:21.800492048 CET37786064461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:21.800594091 CET606443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:21.801862955 CET606443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:21.806663990 CET37786064461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:21.806751013 CET606443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:21.811552048 CET37786064461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:22.800550938 CET37786064461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:22.800795078 CET606443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:22.800837040 CET606443778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:22.801909924 CET606463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:22.806772947 CET37786064661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:22.806827068 CET606463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:22.808029890 CET606463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:22.812812090 CET37786064661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:22.812861919 CET606463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:22.817594051 CET37786064661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:23.793947935 CET37786064661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:23.794203043 CET606463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:23.794229031 CET606463778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:23.795177937 CET606483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:23.799899101 CET37786064861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:23.800008059 CET606483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:23.801440954 CET606483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:23.806159019 CET37786064861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:23.806278944 CET606483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:23.811094046 CET37786064861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:24.803014994 CET37786064861.7.209.115192.168.2.15
    Feb 17, 2025 17:24:24.803181887 CET606483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:24.803241968 CET606483778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:24.804392099 CET606503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:24.809144020 CET37786065061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:24.809225082 CET606503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:24.810471058 CET606503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:24.816175938 CET37786065061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:24.816227913 CET606503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:24.820979118 CET37786065061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:25.834784031 CET37786065061.7.209.115192.168.2.15
    Feb 17, 2025 17:24:25.835093021 CET606503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:25.835171938 CET606503778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:25.836255074 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:25.841161013 CET37786065261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:25.841284037 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:25.842698097 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:25.847491980 CET37786065261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:25.847588062 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:25.852457047 CET37786065261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:26.994349003 CET37786065261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:26.994520903 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:26.994599104 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:26.994683027 CET37786065261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:26.994776011 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:26.994776964 CET37786065261.7.209.115192.168.2.15
    Feb 17, 2025 17:24:26.994842052 CET606523778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:26.995385885 CET606543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.002747059 CET37786065461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:27.002840042 CET606543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.004173040 CET606543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.008872032 CET37786065461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:27.008991003 CET606543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.013755083 CET37786065461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:27.991136074 CET37786065461.7.209.115192.168.2.15
    Feb 17, 2025 17:24:27.991336107 CET606543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.991435051 CET606543778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.992515087 CET606563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.997340918 CET37786065661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:27.997431040 CET606563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:27.998950958 CET606563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:28.003801107 CET37786065661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:28.003858089 CET606563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:28.008749962 CET37786065661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:38.008838892 CET606563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:24:38.013695002 CET37786065661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:38.532382965 CET37786065661.7.209.115192.168.2.15
    Feb 17, 2025 17:24:38.532666922 CET606563778192.168.2.1561.7.209.115
    Feb 17, 2025 17:25:04.433444023 CET605923778192.168.2.1561.7.209.115
    Feb 17, 2025 17:25:04.590187073 CET37786059261.7.209.115192.168.2.15
    Feb 17, 2025 17:25:04.953929901 CET37786059261.7.209.115192.168.2.15
    Feb 17, 2025 17:25:04.954267025 CET605923778192.168.2.1561.7.209.115

    System Behavior

    General

    Start time (UTC):16:23:22
    Start date (UTC):17/02/2025
    Path:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
    Arguments:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
    File size:4139976 bytes
    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

    File Activities

    Process Activities

    System Activities

    Network Activities


    General

    Start time (UTC):16:23:22
    Start date (UTC):17/02/2025
    Path:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
    Arguments:-
    File size:4139976 bytes
    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

    Process Activities


    General

    Start time (UTC):16:23:22
    Start date (UTC):17/02/2025
    Path:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
    Arguments:-
    File size:4139976 bytes
    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

    File Activities

    Process Activities


    General

    Start time (UTC):16:23:22
    Start date (UTC):17/02/2025
    Path:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
    Arguments:-
    File size:4139976 bytes
    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

    Process Activities

    Network Activities


    General

    Start time (UTC):16:23:27
    Start date (UTC):17/02/2025
    Path:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
    Arguments:-
    File size:4139976 bytes
    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

    File Activities

    Process Activities


    General

    Start time (UTC):16:23:27
    Start date (UTC):17/02/2025
    Path:/tmp/ub8ehJSePAfc9FYqZIT6.sh4.elf
    Arguments:-
    File size:4139976 bytes
    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

    Process Activities

    Network Activities