Edit tour

Linux Analysis Report
gigab.x86.elf

Overview

General Information

Sample name:	gigab.x86.elf
Analysis ID:	1639033
MD5:	70671ad2135275f6c767f7fb9643f28f
SHA1:	05a4c89c7bd85e605ff90af18ed711cf81a8d93c
SHA256:	958a93ab4d8c87fe54ee4d1fb0f7fd2333cd1c0e3b6e6ca461867748b144dc98
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	80
Range:	0 - 100

Signatures

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1639033
Start date and time:	2025-03-15 02:04:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigab.x86.elf
Detection:	MAL
Classification:	mal80.spre.troj.linELF@0/0@2/0

Runtime Messages

Command:	/tmp/gigab.x86.elf
PID:	5625
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

gigab.x86.elf (PID: 5625, Parent: 5543, MD5: 70671ad2135275f6c767f7fb9643f28f) Arguments: /tmp/gigab.x86.elf

gigab.x86.elf New Fork (PID: 5626, Parent: 5625)

gigab.x86.elf New Fork (PID: 5627, Parent: 5626)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigab.x86.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigab.x86.elf	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8a6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
gigab.x86.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x6774:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
gigab.x86.elf	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7cc:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
gigab.x86.elf	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x281f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
gigab.x86.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x475a:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x47be:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x48dd:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
gigab.x86.elf	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfa8:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x105d:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x129e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
gigab.x86.elf	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x1635:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
gigab.x86.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x9f22:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
gigab.x86.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6b25:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
gigab.x86.elf	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x174d:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
gigab.x86.elf	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6ee:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
gigab.x86.elf	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x323:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
gigab.x86.elf	Linux_Trojan_Gafgyt_859042a0	unknown	unknown	0x4518:$a: 45 A8 48 83 C0 01 48 89 45 C0 EB 05 48 83 45 C0 01 48 8B 45 C0 0F
gigab.x86.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e1b:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
gigab.x86.elf	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x317:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
gigab.x86.elf	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x16b0:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
Click to see the 12 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8a6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x6774:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7cc:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x281f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x475a:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x47be:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x48dd:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfa8:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x105d:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x129e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x1635:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x9f22:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6b25:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x174d:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6ee:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x323:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_859042a0	unknown	unknown	0x4518:$a: 45 A8 48 83 C0 01 48 89 45 C0 EB 05 48 83 45 C0 01 48 8B 45 C0 0F
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e1b:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x317:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
5625.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x16b0:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8a6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x6774:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7cc:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x281f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x475a:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x47be:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x48dd:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfa8:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x105d:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x129e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x1635:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x9f22:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6b25:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x174d:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6ee:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x323:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_859042a0	unknown	unknown	0x4518:$a: 45 A8 48 83 C0 01 48 89 45 C0 EB 05 48 83 45 C0 01 48 8B 45 C0 0F
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e1b:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x317:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
5626.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x16b0:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
Click to see the 27 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Spreading
• Networking
• System Summary
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: gigab.x86.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "37.44.238.66:666"}

Multi AV Scanner detection for submitted file

Source: gigab.x86.elf	Virustotal: Detection: 49%			Perma Link
Source: gigab.x86.elf	ReversingLabs: Detection: 55%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigab.x86.elf (PID: 5625)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.14:49000 -> 37.44.238.66:666

Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66
Source: unknown	TCP traffic detected without corresponding DNS query: 37.44.238.66

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_859042a0 Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_859042a0 Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_859042a0 Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_859042a0 reference_sample = 41615d3f3f27f04669166fdee3996d77890016304ee87851a5f90804d6d4a0b0, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a27bcaa16edceda3dc5a80803372c907a7efd00736c7859c5a9d6a2cf56a8eec, id = 859042a0-a424-4c83-944b-ed182b342998, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: gigab.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_859042a0 reference_sample = 41615d3f3f27f04669166fdee3996d77890016304ee87851a5f90804d6d4a0b0, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a27bcaa16edceda3dc5a80803372c907a7efd00736c7859c5a9d6a2cf56a8eec, id = 859042a0-a424-4c83-944b-ed182b342998, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 5625.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_859042a0 reference_sample = 41615d3f3f27f04669166fdee3996d77890016304ee87851a5f90804d6d4a0b0, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a27bcaa16edceda3dc5a80803372c907a7efd00736c7859c5a9d6a2cf56a8eec, id = 859042a0-a424-4c83-944b-ed182b342998, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 5626.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16

Source: classification engine

Classification label: mal80.spre.troj.linELF@0/0@2/0

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigab.x86.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigab.x86.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{
  "C2 url": "37.44.238.66:666"
}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigab.x86.elf	49%	Virustotal		Browse
gigab.x86.elf	56%	ReversingLabs	Linux.Backdoor.Gafgyt

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
37.44.238.66:666	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
37.44.238.66	unknown	France		49434	HARMONYHOSTING-ASFR	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
37.44.238.66	gigab.ppc.elf	Get hash	malicious	Gafgyt	Browse
	gigab.sh4.elf	Get hash	malicious	Gafgyt	Browse
	gigab.arm4t.elf	Get hash	malicious	Gafgyt	Browse
	gigab.i686.elf	Get hash	malicious	Gafgyt	Browse
	gigab.arm6.elf	Get hash	malicious	Gafgyt	Browse
	gigab.m68.elf	Get hash	malicious	Gafgyt	Browse
	gigab.mpsl.elf	Get hash	malicious	Gafgyt	Browse
	gigab.arm5.elf	Get hash	malicious	Gafgyt	Browse
	gigab.x86.elf	Get hash	malicious	Gafgyt	Browse
	gigab.spc.elf	Get hash	malicious	Gafgyt	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	main_arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	KKveTTgaAAsecNNaaaa.arc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	KKveTTgaAAsecNNaaaa.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	gigab.ppc.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	KKveTTgaAAsecNNaaaa.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	gigab.sh4.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	gigab.arm4t.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	gigab.i686.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	gigab.arm6.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	gigab.m68.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HARMONYHOSTING-ASFR	gigab.ppc.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.sh4.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.arm4t.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.i686.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.arm6.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.m68.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.mpsl.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.arm5.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.x86.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66
	gigab.spc.elf	Get hash	malicious	Gafgyt	Browse	37.44.238.66

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.819106811379244
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	gigab.x86.elf
File size:	104'063 bytes
MD5:	70671ad2135275f6c767f7fb9643f28f
SHA1:	05a4c89c7bd85e605ff90af18ed711cf81a8d93c
SHA256:	958a93ab4d8c87fe54ee4d1fb0f7fd2333cd1c0e3b6e6ca461867748b144dc98
SHA512:	19009ae0731975cdb98713ed6db8a5cd2dd6a01a44a945d9bf58ba0d2ee4393164130da9ce40e6db9b7950217b39b55e07ad45ac63cfc94a148c6740a7a4be97
SSDEEP:	3072:0/03n7K1BGpQQDgT/iNayhDDwmWxDcHim6:YlT/EJwmWxDaim6
TLSH:	34A32827C560C47EC08793B91BDF92665623F8BA0731721B3784BEA42F069D9DE99343
File Content Preview:	.ELF..............>.......@.....@.......x)..........@.8...@.......................@.......@....................... .......................`.......`......)................ .....Q.td....................................................H...._....z...H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	76152
Section Header Size:	64
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x400100	0x100	0xd1a4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x40d2a4	0xd2a4	0xe	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x40d2c0	0xd2c0	0x2120	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x60f3e0	0xf3e0	0x2564	0x0	0x3	WA	0	0	8
.ctors	PROGBITS	0x611948	0x11948	0x10	0x0	0x3	WA	0	0	8
.dtors	PROGBITS	0x611958	0x11958	0x10	0x0	0x3	WA	0	0	8
.jcr	PROGBITS	0x611968	0x11968	0x8	0x0	0x3	WA	0	0	8
.data	PROGBITS	0x611970	0x11970	0x408	0x0	0x3	WA	0	0	16
.bss	NOBITS	0x611d80	0x11d78	0x6af8	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0x11d78	0xb9a	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x12912	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x12d38	0x4638	0x18	0x0		14	258	8
.strtab	STRTAB	0x0	0x17370	0x230f	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xf3e0	0xf3e0	6.3013	0x5	R E	0x200000	.init .text .fini .rodata
LOAD	0xf3e0	0x60f3e0	0x60f3e0	0x2998	0x9498	3.5758	0x6	RW	0x200000	.eh_frame .ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000e8	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400100	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x40d2a4	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x40d2c0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x60f3e0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x611948	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x611958	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x611968	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x611970	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x611d80	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
C.1.3849	.symtab	0x40eed0	40	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x611e00	16384	OBJECT	<unknown>	DEFAULT	10
_Exit	.symtab	0x40481c	43	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x611950	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x611948	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x6119a0	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x40d450	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x611d68	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x40f0e0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x6119b0	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x40d750	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x611960	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x611958	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x60f3e0	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x611940	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x6119a0	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower	.symtab	0x611d68	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper	.symtab	0x6119b0	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_b	.symtab	0x6119a8	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x611d70	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x6119b8	8	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x404ac0	6	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x4047b8	100	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x409c50	222	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x406404	14	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x408840	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x404754	100	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x406878	28	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x406894	30	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x406858	32	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x408028	70	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x4080a3	58	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x406414	196	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x40481c	43	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x4075bc	200	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x407a60	18	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x40ad74	43	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x404848	38	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x4083c4	41	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x404870	41	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x408574	147	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x408b0a	43	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x408b35	46	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x408848	706	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x406664	43	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x618068	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x407bd4	95	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x408c34	269	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x404754	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x409b0c	322	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x409940	128	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x409c50	222	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x4099c0	116	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x409d30	116	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x408d44	10	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x40489c	38	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x404b28	142	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x405bec	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x40b144	5	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x40b14c	225	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x40ada0	82	FUNC	<unknown>	HIDDEN	2
__GI_fstat64	.symtab	0x40ada0	82	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x405c24	128	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x409c50	222	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x4083f0	36	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x408414	8	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x40841c	8	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x408424	8	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x406614	10	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0x406620	65	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x40a5e4	761	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x40c7f0	802	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x40cb14	94	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x40842c	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x4048c4	8	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x408440	40	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x406690	41	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x408468	8	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x61806c	4	OBJECT	<unknown>	HIDDEN	10
__GI_htonl	.symtab	0x406588	5	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x406580	8	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x4065f4	29	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x40a55c	135	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x4065e9	10	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x40659c	77	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x40b8cf	518	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x40b5ef	493	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x4079a4	185	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x4048d4	101	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x4064f4	25	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x404a8c	18	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x40493c	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x40d16c	45	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x40cc18	5	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x409f20	236	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x405d90	102	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x40a00c	702	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x409db0	90	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x40a2cc	233	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x405e00	210	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x408394	48	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x40adf4	42	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x408470	38	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x408498	38	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x406595	5	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x40658d	8	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x404968	106	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x40869d	157	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x404af8	45	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x40cb74	41	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x40a8e0	18	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x407690	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x407893	90	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x40b424	189	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x4049d4	39	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x4087b0	143	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x4066f0	11	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x4066fc	45	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x4084c0	74	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x4049fc	44	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x40672c	11	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x406738	48	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x404a28	38	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x406768	53	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x4077e8	171	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x408321	114	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x4067d0	133	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x40850c	47	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x407c34	142	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x4067a0	47	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x40cc20	149	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x4078ed	183	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x40cba0	79	FUNC	<unknown>	HIDDEN	2
__GI_stat64	.symtab	0x40cba0	79	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x40d19c	48	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x405ee0	417	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x40a3b8	268	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x406084	33	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x406084	33	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x4060b0	213	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x409e10	135	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x40cd78	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x406190	225	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x40b4e4	131	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x406274	201	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x40b398	140	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x40a4c4	53	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x409e98	135	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x406340	193	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x4064e8	10	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x40a4fc	94	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x407a74	10	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x407a74	10	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x407da3	560	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x406510	110	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x404a50	8	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x40853c	8	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x404aa0	30	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x40cbf0	38	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x404cd8	150	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x40ccb8	189	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x408544	47	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x404a58	7	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x408b64	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x408bb8	123	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x408ba8	15	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x404a60	42	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x611968	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x611968	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x618058	8	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x611d20	40	OBJECT	<unknown>	DEFAULT	9
__bss_start	.symtab	0x611d78	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40806e	53	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x40c750	109	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x6119a8	8	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x611d70	8	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x6119b8	8	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x618070	8	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x611980	0	NOTYPE	<unknown>	DEFAULT	9
__decode_dotted	.symtab	0x40bad8	280	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x40ce74	156	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x40bbf0	1853	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x40d270	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400100	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x611970	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x40d1cc	162	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x40cdb0	193	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x40cf10	80	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x618048	8	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x404ac0	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x618038	8	OBJECT	<unknown>	HIDDEN	10
__fcntl_nocancel	.symtab	0x4047b8	100	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x409c50	222	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x611944	0	NOTYPE	<unknown>	HIDDEN	5
__fini_array_start	.symtab	0x611944	0	NOTYPE	<unknown>	HIDDEN	5
__get_hosts_byname_r	.symtab	0x40c7c0	48	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x40b024	288	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x40b024	288	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x40842c	19	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x406404	14	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x408840	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x611944	0	NOTYPE	<unknown>	HIDDEN	5
__init_array_start	.symtab	0x611944	0	NOTYPE	<unknown>	HIDDEN	5
__libc_close	.symtab	0x404870	41	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x406664	43	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x404754	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x40489c	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek	.symtab	0x40d16c	45	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x40cc18	5	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x408498	38	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x404968	106	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x4049d4	39	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x4066f0	11	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x4066fc	45	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x4049fc	44	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x40672c	11	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x406738	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x408321	114	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x618040	8	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x404a58	7	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x404a60	42	FUNC	<unknown>	DEFAULT	2
__local_nameserver	.symtab	0x40f0c0	16	OBJECT	<unknown>	HIDDEN	4
__malloc_consolidate	.symtab	0x407246	407	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x4068b4	110	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x611be0	40	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x618170	1752	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x4071b0	150	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x618868	8	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x618870	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x40cf60	10	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x40c385	968	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x618050	8	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x611944	0	NOTYPE	<unknown>	HIDDEN	5
__preinit_array_start	.symtab	0x611944	0	NOTYPE	<unknown>	HIDDEN	5
__progname	.symtab	0x611d50	8	OBJECT	<unknown>	DEFAULT	9
__progname_full	.symtab	0x611d58	8	OBJECT	<unknown>	DEFAULT	9
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x40800b	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x408008	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x408008	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x408008	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x408008	3	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x40cf6a	511	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x618858	8	OBJECT	<unknown>	HIDDEN	10
__resolv_attempts	.symtab	0x611d65	1	OBJECT	<unknown>	HIDDEN	9
__resolv_lock	.symtab	0x618080	40	OBJECT	<unknown>	DEFAULT	10
__resolv_timeout	.symtab	0x611d64	1	OBJECT	<unknown>	HIDDEN	9
__restore_rt	.symtab	0x408318	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x618060	8	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x618860	8	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x618874	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x406878	28	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x406894	30	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x406858	32	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x6119d8	8	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x40b230	58	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x408d50	171	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x40b26c	131	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x409030	259	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x404c17	15	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4920	.symtab	0x40da60	40	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x40b2f0	37	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x40b374	31	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x40b318	90	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x409134	149	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x404cb0	39	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x6119e0	8	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x408028	70	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x4080a3	58	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x4080dd	570	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x611d48	8	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x406414	196	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x40aecc	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x40ae20	172	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x40af78	172	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x617e20	10	OBJECT	<unknown>	DEFAULT	10
_charpad	.symtab	0x404d70	77	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x6180c0	80	OBJECT	<unknown>	HIDDEN	10
_custom_printf_handler	.symtab	0x618110	80	OBJECT	<unknown>	HIDDEN	10
_custom_printf_spec	.symtab	0x611bd0	8	OBJECT	<unknown>	HIDDEN	9
_dl_aux_init	.symtab	0x40ad5c	23	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x618848	8	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x618850	8	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x611d78	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x618878	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x618068	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x40481c	43	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x40d2a4	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x615e20	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x404dbd	120	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x409320	1565	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x61806c	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x4000e8	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x4091cc	85	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x4054ec	114	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x405786	1126	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x405560	67	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x4055a4	436	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x405758	46	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x408016	18	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x40800e	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x618160	8	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x400194	42	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x408dfc	563	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x404bb8	95	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x6119e8	8	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x6119f0	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x409a34	216	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x615e14	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x611a20	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x615e10	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x611a50	384	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x404c26	135	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x611a48	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x407a80	339	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x409224	46	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x40db60	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x409254	201	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x404e35	1716	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x4075bc	200	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x402abe	448	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x402607	1207	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x407a60	18	FUNC	<unknown>	DEFAULT	2
atoi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x402162	1189	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x4064d8	14	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x618030	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x40ad74	43	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x4067d0	133	FUNC	<unknown>	DEFAULT	2
buf.3312	.symtab	0x617e40	16	OBJECT	<unknown>	DEFAULT	10
buf.5843	.symtab	0x617e50	448	OBJECT	<unknown>	DEFAULT	10
bzero	.symtab	0x405cb0	210	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x611994	4	OBJECT	<unknown>	DEFAULT	9
calloc	.symtab	0x40a8f4	248	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ceoServer	.symtab	0x611988	8	OBJECT	<unknown>	DEFAULT	9
ceoSocket	.symtab	0x611de0	4	OBJECT	<unknown>	DEFAULT	10
chdir	.symtab	0x404848	38	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_tcp_udp	.symtab	0x4015ea	222	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x404ac8	46	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x4083c4	41	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x404870	41	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x408574	147	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cncinput	.symtab	0x402fef	4447	FUNC	<unknown>	DEFAULT	2
completed.5156	.symtab	0x611d80	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x406664	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x401161	582	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x4014cd	116	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x611990	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x611980	0	NOTYPE	<unknown>	DEFAULT	9
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
defarchs	.symtab	0x402fd9	11	FUNC	<unknown>	DEFAULT	2
defopsys	.symtab	0x402fe4	11	FUNC	<unknown>	DEFAULT	2
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x618048	8	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x618068	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x407bd4	95	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x40ef20	208	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x408c34	269	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x404754	100	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x408608	149	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x400323	130	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x40873a	115	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x409b0c	322	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x409940	128	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x409c50	222	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x4099c0	116	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x409d30	116	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
findRandIP	.symtab	0x401761	47	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x40ef00	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x408d44	10	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40489c	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fprintf	.symtab	0x404b28	142	FUNC	<unknown>	DEFAULT	2
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x405bec	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x4073dd	451	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40b144	5	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x40b144	5	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40b14c	225	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x40ada0	82	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat64	.symtab	0x40ada0	82	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x405c24	128	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getHost	.symtab	0x400e42	115	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x4003a5	483	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x4002f4	47	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x409940	128	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x409c50	222	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x4083f0	36	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x408414	8	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40841c	8	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x408424	8	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x406614	10	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0x406620	65	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x40a5e4	761	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x40c7f0	802	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x40cb14	94	FUNC	<unknown>	DEFAULT	2
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40842c	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x4048c4	8	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x4048cc	8	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x408440	40	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit64	.symtab	0x408440	40	FUNC	<unknown>	DEFAULT	2
getsockname	.symtab	0x406690	41	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x4066bc	50	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x408468	8	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x611de4	4	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x61806c	4	OBJECT	<unknown>	DEFAULT	10
hoste.5842	.symtab	0x618010	32	OBJECT	<unknown>	DEFAULT	10
htonl	.symtab	0x406588	5	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x406580	8	FUNC	<unknown>	DEFAULT	2
i.5030	.symtab	0x611998	4	OBJECT	<unknown>	DEFAULT	9
icmpdrop	.symtab	0x402e05	468	FUNC	<unknown>	DEFAULT	2
illstd	.symtab	0x402c7e	391	FUNC	<unknown>	DEFAULT	2
index	.symtab	0x405ee0	417	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x4065f4	29	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x40a55c	135	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x4065e9	10	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x40659c	77	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x40b8cf	518	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x40b7dc	243	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x40b5ef	493	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x40b568	135	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x40414e	296	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x4001c0	126	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x407732	110	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x4079a4	185	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x4048d4	101	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x4064f4	25	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x404a8c	18	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x40493c	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.5904	.symtab	0x611d60	2	OBJECT	<unknown>	DEFAULT	9
last_ns_num.5903	.symtab	0x618078	4	OBJECT	<unknown>	DEFAULT	10
listFork	.symtab	0x4013fa	211	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek	.symtab	0x40d16c	45	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40cc18	5	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x611df0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x404276	1243	FUNC	<unknown>	DEFAULT	2
makeIPPacket	.symtab	0x4016c8	153	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x400eb5	110	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x401790	169	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x406922	2187	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x4075a0	28	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x409f20	236	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x405d90	102	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x40a00c	702	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x409db0	90	FUNC	<unknown>	DEFAULT	2
memrchr	.symtab	0x40a2cc	233	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x405e00	210	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x408394	48	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x40adf4	42	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x408470	38	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x611c10	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x611c40	40	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x408498	38	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1699	.symtab	0x617e30	8	OBJECT	<unknown>	DEFAULT	10
nprocessors_onln	.symtab	0x407cc4	223	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0x406595	5	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40658d	8	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x611de8	8	OBJECT	<unknown>	DEFAULT	10
object.5168	.symtab	0x611da0	48	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x404968	106	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x40869d	157	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x6180b0	4	OBJECT	<unknown>	DEFAULT	10
p.5154	.symtab	0x611978	0	OBJECT	<unknown>	DEFAULT	9
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
perror	.symtab	0x404af8	45	FUNC	<unknown>	DEFAULT	2
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x6180b8	8	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x40cb74	41	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.5143	.symtab	0x40da98	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x4008b1	1084	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x40063e	75	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x400770	321	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x400689	231	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x611d58	8	OBJECT	<unknown>	DEFAULT	9
program_invocation_short_name	.symtab	0x611d50	8	OBJECT	<unknown>	DEFAULT	9
qual_chars.5150	.symtab	0x40dab0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x40a8e0	18	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x407684	11	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40023e	182	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x4013a7	83	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x407690	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x40e6c0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x407893	90	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x611ca0	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x40b424	189	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x4049d4	39	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x4087b0	143	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x40a9ec	878	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x4066f0	11	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x400f23	574	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x4066fc	45	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_conf_mtime.5885	.symtab	0x6180a8	4	OBJECT	<unknown>	DEFAULT	10
rindex	.symtab	0x40a4c4	53	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0x401db7	939	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x4084c0	74	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x4049fc	44	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x40672c	11	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x406738	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x404a28	38	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x406768	53	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x4076d8	90	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x4077e8	171	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x408321	114	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x4067d0	133	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40850c	47	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
skip_and_NUL_space	.symtab	0x40c359	44	FUNC	<unknown>	DEFAULT	2
skip_nospace	.symtab	0x40c330	41	FUNC	<unknown>	DEFAULT	2
sleep	.symtab	0x407c34	142	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x4067a0	47	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sockprintf	.symtab	0x400ced	341	FUNC	<unknown>	DEFAULT	2
spec_and_mask.5149	.symtab	0x40dad0	16	OBJECT	<unknown>	DEFAULT	4
spec_base.5142	.symtab	0x40daa4	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.5146	.symtab	0x40db30	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.5145	.symtab	0x40db48	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.5148	.symtab	0x40dae0	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.5147	.symtab	0x40daf0	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x40cc20	149	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x4077a0	72	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x4077a0	72	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x4078ed	183	FUNC	<unknown>	DEFAULT	2
stat	.symtab	0x40cba0	79	FUNC	<unknown>	DEFAULT	2
stat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
stat64	.symtab	0x40cba0	79	FUNC	<unknown>	DEFAULT	2
stderr	.symtab	0x6119d0	8	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x6119c0	8	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x6119c8	8	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x40d19c	48	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x405ee0	417	FUNC	<unknown>	DEFAULT	2
strchrnul	.symtab	0x40a3b8	268	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x406084	33	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x406084	33	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x4060b0	213	FUNC	<unknown>	DEFAULT	2
strcspn	.symtab	0x409e10	135	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x40cd78	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x406414	196	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x406190	225	FUNC	<unknown>	DEFAULT	2
strncpy	.symtab	0x40b4e4	131	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x406274	201	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40b398	140	FUNC	<unknown>	DEFAULT	2
strrchr	.symtab	0x40a4c4	53	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x409e98	135	FUNC	<unknown>	DEFAULT	2
strstr	.symtab	0x406340	193	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x407a74	10	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x4064e8	10	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40a4fc	94	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x407a74	10	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x407a74	10	FUNC	<unknown>	DEFAULT	2
strtoq	.symtab	0x407a74	10	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x407da3	560	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x406510	110	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x401541	169	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x404a50	8	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x40853c	8	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x404aa0	30	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400588	182	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x40db00	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x40db18	12	OBJECT	<unknown>	DEFAULT	4
uname	.symtab	0x40cbf0	38	FUNC	<unknown>	DEFAULT	2
uname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1721	.symtab	0x40db50	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x611c70	40	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x407fd4	52	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vfprintf	.symtab	0x404cd8	150	FUNC	<unknown>	DEFAULT	2
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x401839	1406	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x40ccb8	189	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x615e0c	4	OBJECT	<unknown>	DEFAULT	10
wait4	.symtab	0x408544	47	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x404a58	7	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x408b64	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x408bb8	123	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x408ba8	15	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x404a60	42	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
x	.symtab	0x615e00	4	OBJECT	<unknown>	DEFAULT	10
xdigits.3743	.symtab	0x40f050	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x615e04	4	OBJECT	<unknown>	DEFAULT	10
z	.symtab	0x615e08	4	OBJECT	<unknown>	DEFAULT	10

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 517
• 666 undefined
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2025 02:05:26.304187059 CET	49000	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:26.308949947 CET	666	49000	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:26.309014082 CET	49000	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:26.309037924 CET	49000	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:26.313754082 CET	666	49000	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:27.961837053 CET	666	49000	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:27.962238073 CET	49000	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:27.962687969 CET	49002	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:27.966945887 CET	666	49000	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:27.967434883 CET	666	49002	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:27.967478037 CET	49002	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:27.967494011 CET	49002	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:27.972165108 CET	666	49002	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:29.633848906 CET	666	49002	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:29.634006977 CET	49002	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:29.634504080 CET	49004	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:29.638660908 CET	666	49002	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:29.639132023 CET	666	49004	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:29.639231920 CET	49004	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:29.639241934 CET	49004	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:29.643881083 CET	666	49004	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:31.309458017 CET	666	49004	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:31.309812069 CET	49004	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:31.310321093 CET	49006	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:31.316910028 CET	666	49004	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:31.317614079 CET	666	49006	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:31.317679882 CET	49006	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:31.317708015 CET	49006	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:31.324428082 CET	666	49006	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:32.963762045 CET	666	49006	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:32.964018106 CET	49006	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:32.964416027 CET	49008	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:32.968707085 CET	666	49006	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:32.969063044 CET	666	49008	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:32.969109058 CET	49008	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:32.969124079 CET	49008	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:32.973768950 CET	666	49008	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:34.636101961 CET	666	49008	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:34.636255980 CET	49008	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:34.636737108 CET	49010	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:34.644565105 CET	666	49008	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:34.645050049 CET	666	49010	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:34.645139933 CET	49010	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:34.645164013 CET	49010	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:34.650533915 CET	666	49010	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:36.289098978 CET	666	49010	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:36.289366961 CET	49010	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:36.289864063 CET	49012	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:36.294074059 CET	666	49010	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:36.294540882 CET	666	49012	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:36.294595957 CET	49012	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:36.294635057 CET	49012	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:36.299247980 CET	666	49012	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:37.943500996 CET	666	49012	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:37.943932056 CET	49012	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:37.944551945 CET	49014	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:37.948618889 CET	666	49012	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:37.949212074 CET	666	49014	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:37.949292898 CET	49014	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:37.949337959 CET	49014	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:37.954052925 CET	666	49014	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:39.586627007 CET	666	49014	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:39.586769104 CET	49014	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:39.587295055 CET	49016	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:39.591469049 CET	666	49014	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:39.591969967 CET	666	49016	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:39.592017889 CET	49016	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:39.592065096 CET	49016	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:39.596725941 CET	666	49016	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:41.242752075 CET	666	49016	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:41.243016958 CET	49016	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:41.243463039 CET	49018	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:41.247700930 CET	666	49016	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:41.248145103 CET	666	49018	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:41.248218060 CET	49018	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:41.248239994 CET	49018	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:41.252916098 CET	666	49018	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:42.883912086 CET	666	49018	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:42.884176970 CET	49018	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:42.884562969 CET	49020	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:42.888843060 CET	666	49018	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:42.889276981 CET	666	49020	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:42.889319897 CET	49020	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:42.889338970 CET	49020	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:42.893981934 CET	666	49020	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:44.564390898 CET	666	49020	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:44.564522028 CET	49020	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:44.564996958 CET	49022	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:44.569307089 CET	666	49020	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:44.569628954 CET	666	49022	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:44.569716930 CET	49022	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:44.569739103 CET	49022	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:44.574333906 CET	666	49022	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:46.211575031 CET	666	49022	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:46.211812973 CET	49022	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:46.212263107 CET	49024	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:46.216509104 CET	666	49022	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:46.216962099 CET	666	49024	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:46.217020988 CET	49024	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:46.217020988 CET	49024	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:46.221692085 CET	666	49024	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:47.884376049 CET	666	49024	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:47.884511948 CET	49024	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:47.884972095 CET	49026	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:47.889261961 CET	666	49024	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:47.889678955 CET	666	49026	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:47.889801025 CET	49026	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:47.889813900 CET	49026	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:47.894491911 CET	666	49026	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:49.556090117 CET	666	49026	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:49.556297064 CET	49026	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:49.556833029 CET	49028	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:49.561044931 CET	666	49026	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:49.561580896 CET	666	49028	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:49.561690092 CET	49028	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:49.561721087 CET	49028	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:49.566363096 CET	666	49028	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:51.211047888 CET	666	49028	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:51.211211920 CET	49028	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:51.211658955 CET	49030	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:51.215934038 CET	666	49028	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:51.216418982 CET	666	49030	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:51.216500998 CET	49030	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:51.216511965 CET	49030	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:51.221199989 CET	666	49030	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:52.885883093 CET	666	49030	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:52.886194944 CET	49030	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:52.886686087 CET	49032	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:52.890841961 CET	666	49030	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:52.891336918 CET	666	49032	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:52.891386986 CET	49032	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:52.891400099 CET	49032	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:52.896030903 CET	666	49032	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:54.544581890 CET	666	49032	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:54.544814110 CET	49032	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:54.545523882 CET	49034	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:54.549473047 CET	666	49032	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:54.550446987 CET	666	49034	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:54.550553083 CET	49034	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:54.550591946 CET	49034	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:54.556088924 CET	666	49034	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:56.213658094 CET	666	49034	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:56.213886023 CET	49034	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:56.214431047 CET	49036	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:56.218635082 CET	666	49034	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:56.219182968 CET	666	49036	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:56.219238043 CET	49036	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:56.219250917 CET	49036	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:56.223869085 CET	666	49036	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:57.883794069 CET	666	49036	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:57.883975983 CET	49036	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:57.884531021 CET	49038	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:57.888689041 CET	666	49036	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:57.889204025 CET	666	49038	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:57.889307976 CET	49038	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:57.889307976 CET	49038	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:57.893960953 CET	666	49038	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:59.577193022 CET	666	49038	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:59.577454090 CET	49038	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:59.578335047 CET	49040	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:59.582145929 CET	666	49038	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:59.583046913 CET	666	49040	37.44.238.66	192.168.2.14
Mar 15, 2025 02:05:59.583131075 CET	49040	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:59.583178043 CET	49040	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:05:59.587819099 CET	666	49040	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:01.225588083 CET	666	49040	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:01.225812912 CET	49040	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:01.226360083 CET	49042	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:01.230477095 CET	666	49040	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:01.231053114 CET	666	49042	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:01.231106997 CET	49042	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:01.231126070 CET	49042	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:01.235807896 CET	666	49042	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:02.865891933 CET	666	49042	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:02.866060972 CET	49042	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:02.866576910 CET	49044	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:02.870781898 CET	666	49042	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:02.871321917 CET	666	49044	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:02.871407986 CET	49044	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:02.871407986 CET	49044	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:02.876470089 CET	666	49044	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:04.542038918 CET	666	49044	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:04.542347908 CET	49044	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:04.542875051 CET	49046	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:04.546996117 CET	666	49044	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:04.547580957 CET	666	49046	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:04.547631979 CET	49046	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:04.547648907 CET	49046	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:04.552252054 CET	666	49046	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:06.213749886 CET	666	49046	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:06.213907003 CET	49046	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:06.214391947 CET	49048	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:06.218597889 CET	666	49046	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:06.219077110 CET	666	49048	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:06.219175100 CET	49048	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:06.219213963 CET	49048	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:06.223841906 CET	666	49048	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:07.931284904 CET	666	49048	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:07.931591034 CET	49048	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:07.932209015 CET	49050	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:07.936290979 CET	666	49048	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:07.936937094 CET	666	49050	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:07.936989069 CET	49050	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:07.937000036 CET	49050	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:07.941673040 CET	666	49050	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:09.569499016 CET	666	49050	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:09.569715977 CET	49050	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:09.570517063 CET	49052	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:09.574378014 CET	666	49050	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:09.575193882 CET	666	49052	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:09.575309992 CET	49052	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:09.575335979 CET	49052	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:09.579998970 CET	666	49052	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:11.249560118 CET	666	49052	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:11.250058889 CET	49052	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:11.250865936 CET	49054	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:11.254878998 CET	666	49052	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:11.255548954 CET	666	49054	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:11.255619049 CET	49054	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:11.255656004 CET	49054	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:11.260323048 CET	666	49054	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:12.917397976 CET	666	49054	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:12.917654037 CET	49054	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:12.918390989 CET	49056	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:12.924068928 CET	666	49054	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:12.924735069 CET	666	49056	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:12.924809933 CET	49056	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:12.924854994 CET	49056	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:12.931363106 CET	666	49056	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:14.571048975 CET	666	49056	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:14.571322918 CET	49056	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:14.571789980 CET	49058	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:14.576114893 CET	666	49056	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:14.576520920 CET	666	49058	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:14.576643944 CET	49058	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:14.576643944 CET	49058	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:14.581420898 CET	666	49058	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:16.245465040 CET	666	49058	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:16.245647907 CET	49058	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:16.246107101 CET	49060	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:16.250422955 CET	666	49058	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:16.250780106 CET	666	49060	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:16.250823975 CET	49060	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:16.250840902 CET	49060	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:16.255502939 CET	666	49060	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:17.882394075 CET	666	49060	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:17.882559061 CET	49060	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:17.883028984 CET	49062	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:17.887396097 CET	666	49060	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:17.887867928 CET	666	49062	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:17.887974024 CET	49062	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:17.888072014 CET	49062	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:17.892699003 CET	666	49062	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:19.565165043 CET	666	49062	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:19.565464020 CET	49062	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:19.566068888 CET	49064	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:19.570599079 CET	666	49062	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:19.571135998 CET	666	49064	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:19.571202993 CET	49064	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:19.571247101 CET	49064	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:19.576406002 CET	666	49064	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:21.249361038 CET	666	49064	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:21.249528885 CET	49064	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:21.250058889 CET	49066	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:21.255815029 CET	666	49064	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:21.255826950 CET	666	49066	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:21.255886078 CET	49066	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:21.255904913 CET	49066	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:21.261337996 CET	666	49066	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:22.899724007 CET	666	49066	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:22.899960995 CET	49066	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:22.900542974 CET	49068	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:22.904716969 CET	666	49066	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:22.905313969 CET	666	49068	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:22.905385017 CET	49068	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:22.905409098 CET	49068	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:22.910128117 CET	666	49068	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:24.574069023 CET	666	49068	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:24.574383974 CET	49068	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:24.574943066 CET	49070	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:24.579068899 CET	666	49068	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:24.579706907 CET	666	49070	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:24.579778910 CET	49070	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:24.579802036 CET	49070	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:24.584470034 CET	666	49070	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:26.233052969 CET	666	49070	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:26.233351946 CET	49070	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:26.233997107 CET	49072	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:26.241447926 CET	666	49070	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:26.241461992 CET	666	49072	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:26.241545916 CET	49072	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:26.241565943 CET	49072	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:26.249202013 CET	666	49072	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:27.924787045 CET	666	49072	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:27.924978971 CET	49072	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:27.925528049 CET	49074	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:27.930850029 CET	666	49072	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:27.931493044 CET	666	49074	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:27.931549072 CET	49074	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:27.931566000 CET	49074	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:27.937628984 CET	666	49074	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:29.588577986 CET	666	49074	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:29.588825941 CET	49074	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:29.589498997 CET	49076	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:29.593591928 CET	666	49074	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:29.594218969 CET	666	49076	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:29.594264984 CET	49076	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:29.594302893 CET	49076	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:29.598973036 CET	666	49076	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:31.243473053 CET	666	49076	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:31.243721008 CET	49076	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:31.244266033 CET	49078	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:31.248398066 CET	666	49076	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:31.248967886 CET	666	49078	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:31.249058008 CET	49078	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:31.249085903 CET	49078	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:31.253743887 CET	666	49078	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:32.902558088 CET	666	49078	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:32.902812958 CET	49078	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:32.903301954 CET	49080	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:32.907548904 CET	666	49078	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:32.908090115 CET	666	49080	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:32.908138037 CET	49080	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:32.908170938 CET	49080	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:32.913079977 CET	666	49080	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:34.554024935 CET	666	49080	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:34.554255009 CET	49080	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:34.554985046 CET	49082	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:34.558979034 CET	666	49080	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:34.559802055 CET	666	49082	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:34.559864998 CET	49082	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:34.559922934 CET	49082	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:34.565361977 CET	666	49082	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:36.213052988 CET	666	49082	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:36.213202000 CET	49082	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:36.213732958 CET	49084	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:36.217895985 CET	666	49082	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:36.218471050 CET	666	49084	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:36.218523979 CET	49084	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:36.218539953 CET	49084	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:36.223185062 CET	666	49084	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:37.869903088 CET	666	49084	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:37.870044947 CET	49084	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:37.870521069 CET	49086	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:37.874762058 CET	666	49084	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:37.875272989 CET	666	49086	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:37.875318050 CET	49086	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:37.875335932 CET	49086	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:37.880563021 CET	666	49086	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:39.547481060 CET	666	49086	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:39.547624111 CET	49086	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:39.548100948 CET	49088	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:39.561604977 CET	666	49086	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:39.561614990 CET	666	49088	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:39.561738968 CET	49088	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:39.561764956 CET	49088	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:39.566435099 CET	666	49088	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:41.230185986 CET	666	49088	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:41.230328083 CET	49088	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:41.230741024 CET	49090	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:41.235013008 CET	666	49088	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:41.235464096 CET	666	49090	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:41.235528946 CET	49090	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:41.235574961 CET	49090	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:41.240211010 CET	666	49090	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:42.908679008 CET	666	49090	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:42.908844948 CET	49090	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:42.909267902 CET	49092	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:42.913526058 CET	666	49090	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:42.913980007 CET	666	49092	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:42.914047956 CET	49092	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:42.914047956 CET	49092	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:42.918704033 CET	666	49092	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:44.596415043 CET	666	49092	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:44.596564054 CET	49092	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:44.597006083 CET	49094	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:44.601304054 CET	666	49092	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:44.601691961 CET	666	49094	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:44.601771116 CET	49094	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:44.601804018 CET	49094	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:44.606465101 CET	666	49094	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:46.284239054 CET	666	49094	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:46.284385920 CET	49094	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:46.284843922 CET	49096	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:46.289117098 CET	666	49094	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:46.289513111 CET	666	49096	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:46.289556980 CET	49096	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:46.289572001 CET	49096	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:46.294286966 CET	666	49096	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:47.973478079 CET	666	49096	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:47.973650932 CET	49096	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:47.974144936 CET	49098	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:47.978568077 CET	666	49096	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:47.979175091 CET	666	49098	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:47.979221106 CET	49098	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:47.979235888 CET	49098	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:47.984203100 CET	666	49098	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:49.637525082 CET	666	49098	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:49.637669086 CET	49098	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:49.638231993 CET	49100	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:49.642431974 CET	666	49098	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:49.642987967 CET	666	49100	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:49.643040895 CET	49100	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:49.643057108 CET	49100	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:49.647694111 CET	666	49100	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:51.307308912 CET	666	49100	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:51.307486057 CET	49100	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:51.307909012 CET	49102	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:51.312176943 CET	666	49100	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:51.312608957 CET	666	49102	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:51.312650919 CET	49102	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:51.312665939 CET	49102	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:51.317284107 CET	666	49102	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:52.979201078 CET	666	49102	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:52.979351044 CET	49102	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:52.979834080 CET	49104	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:52.984040022 CET	666	49102	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:52.984652042 CET	666	49104	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:52.984693050 CET	49104	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:52.984709978 CET	49104	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:52.989365101 CET	666	49104	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:54.674200058 CET	666	49104	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:54.674444914 CET	49104	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:54.674942970 CET	49106	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:54.679143906 CET	666	49104	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:54.679676056 CET	666	49106	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:54.679717064 CET	49106	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:54.679735899 CET	49106	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:54.684362888 CET	666	49106	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:56.340152979 CET	666	49106	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:56.340229034 CET	49106	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:56.340744019 CET	49108	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:56.344993114 CET	666	49106	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:56.345400095 CET	666	49108	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:56.345489979 CET	49108	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:56.345535994 CET	49108	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:56.350230932 CET	666	49108	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:58.013365984 CET	666	49108	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:58.013650894 CET	49108	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:58.014410973 CET	49110	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:58.018405914 CET	666	49108	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:58.019068003 CET	666	49110	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:58.019134998 CET	49110	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:58.019181967 CET	49110	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:58.023828030 CET	666	49110	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:59.682302952 CET	666	49110	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:59.682499886 CET	49110	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:59.683310986 CET	49112	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:59.687134027 CET	666	49110	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:59.687947989 CET	666	49112	37.44.238.66	192.168.2.14
Mar 15, 2025 02:06:59.688024044 CET	49112	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:59.688082933 CET	49112	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:06:59.692738056 CET	666	49112	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:01.356899977 CET	666	49112	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:01.357135057 CET	49112	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:01.357892990 CET	49114	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:01.362941027 CET	666	49112	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:01.363483906 CET	666	49114	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:01.363557100 CET	49114	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:01.363603115 CET	49114	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:01.369441032 CET	666	49114	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:03.053884983 CET	666	49114	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:03.054110050 CET	49114	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:03.054779053 CET	49116	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:03.059340000 CET	666	49114	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:03.059632063 CET	666	49116	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:03.059679031 CET	49116	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:03.059695959 CET	49116	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:03.064343929 CET	666	49116	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:04.737729073 CET	666	49116	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:04.737962008 CET	49116	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:04.738662958 CET	49118	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:04.742619038 CET	666	49116	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:04.743433952 CET	666	49118	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:04.743513107 CET	49118	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:04.743563890 CET	49118	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:04.748188019 CET	666	49118	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:06.384601116 CET	666	49118	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:06.384804964 CET	49118	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:06.385387897 CET	49120	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:06.389568090 CET	666	49118	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:06.390072107 CET	666	49120	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:06.390126944 CET	49120	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:06.390141964 CET	49120	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:06.394804001 CET	666	49120	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:08.042260885 CET	666	49120	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:08.042424917 CET	49120	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:08.042865038 CET	49122	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:08.047173977 CET	666	49120	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:08.047558069 CET	666	49122	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:08.047604084 CET	49122	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:08.047646046 CET	49122	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:08.052293062 CET	666	49122	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:09.715800047 CET	666	49122	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:09.715958118 CET	49122	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:09.716401100 CET	49124	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:09.720633984 CET	666	49122	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:09.721088886 CET	666	49124	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:09.721137047 CET	49124	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:09.721163034 CET	49124	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:09.725783110 CET	666	49124	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:11.371041059 CET	666	49124	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:11.371190071 CET	49124	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:11.371637106 CET	49126	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:11.375948906 CET	666	49124	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:11.376276016 CET	666	49126	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:11.376319885 CET	49126	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:11.376339912 CET	49126	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:11.380979061 CET	666	49126	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:13.044857979 CET	666	49126	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:13.045135975 CET	49126	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:13.045706034 CET	49128	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:13.052144051 CET	666	49126	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:13.052628994 CET	666	49128	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:13.052746058 CET	49128	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:13.052746058 CET	49128	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:13.059587002 CET	666	49128	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:14.717241049 CET	666	49128	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:14.717487097 CET	49128	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:14.718113899 CET	49130	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:14.722227097 CET	666	49128	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:14.722759962 CET	666	49130	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:14.722829103 CET	49130	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:14.722875118 CET	49130	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:14.727528095 CET	666	49130	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:16.388464928 CET	666	49130	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:16.388617039 CET	49130	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:16.389158010 CET	49132	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:16.394069910 CET	666	49130	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:16.394598007 CET	666	49132	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:16.394665956 CET	49132	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:16.394716024 CET	49132	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:16.400005102 CET	666	49132	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:18.039556980 CET	666	49132	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:18.039752007 CET	49132	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:18.040210962 CET	49134	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:18.044514894 CET	666	49132	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:18.044924021 CET	666	49134	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:18.044989109 CET	49134	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:18.045037031 CET	49134	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:18.049766064 CET	666	49134	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:19.679939985 CET	666	49134	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:19.680253983 CET	49134	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:19.680758953 CET	49136	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:19.684871912 CET	666	49134	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:19.685537100 CET	666	49136	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:19.685616970 CET	49136	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:19.685616970 CET	49136	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:19.690244913 CET	666	49136	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:21.360083103 CET	666	49136	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:21.360342979 CET	49136	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:21.360847950 CET	49138	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:21.365050077 CET	666	49136	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:21.365514994 CET	666	49138	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:21.365564108 CET	49138	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:21.365576982 CET	49138	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:21.370284081 CET	666	49138	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:23.041780949 CET	666	49138	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:23.041958094 CET	49138	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:23.042403936 CET	49140	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:23.046675920 CET	666	49138	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:23.047147989 CET	666	49140	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:23.047218084 CET	49140	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:23.047267914 CET	49140	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:23.051944971 CET	666	49140	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:24.713993073 CET	666	49140	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:24.714159966 CET	49140	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:24.714698076 CET	49142	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:24.718961000 CET	666	49140	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:24.719383001 CET	666	49142	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:24.719440937 CET	49142	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:24.719454050 CET	49142	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:24.724082947 CET	666	49142	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:26.385615110 CET	666	49142	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:26.385772943 CET	49142	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:26.386243105 CET	49144	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:26.390605927 CET	666	49142	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:26.390916109 CET	666	49144	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:26.390991926 CET	49144	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:26.390991926 CET	49144	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:26.395661116 CET	666	49144	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:28.057715893 CET	666	49144	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:28.057909012 CET	49144	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:28.058429003 CET	49146	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:28.062613010 CET	666	49144	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:28.063193083 CET	666	49146	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:28.063257933 CET	49146	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:28.063275099 CET	49146	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:28.067979097 CET	666	49146	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:29.728823900 CET	666	49146	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:29.728952885 CET	49146	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:29.729438066 CET	49148	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:29.733653069 CET	666	49146	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:29.734160900 CET	666	49148	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:29.734244108 CET	49148	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:29.734244108 CET	49148	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:29.738929987 CET	666	49148	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:31.403458118 CET	666	49148	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:31.403737068 CET	49148	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:31.404411077 CET	49150	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:31.408421993 CET	666	49148	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:31.409178019 CET	666	49150	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:31.409255981 CET	49150	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:31.409286976 CET	49150	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:31.413930893 CET	666	49150	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:33.097912073 CET	666	49150	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:33.098079920 CET	49150	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:33.098594904 CET	49152	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:33.104062080 CET	666	49150	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:33.104079008 CET	666	49152	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:33.104167938 CET	49152	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:33.104167938 CET	49152	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:33.108830929 CET	666	49152	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:34.761217117 CET	666	49152	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:34.761687994 CET	49152	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:34.762682915 CET	49154	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:34.766396999 CET	666	49152	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:34.767340899 CET	666	49154	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:34.767393112 CET	49154	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:34.767424107 CET	49154	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:34.772291899 CET	666	49154	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:36.461297035 CET	666	49154	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:36.461466074 CET	49154	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:36.461893082 CET	49156	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:36.466160059 CET	666	49154	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:36.466562986 CET	666	49156	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:36.466696024 CET	49156	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:36.466721058 CET	49156	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:36.471416950 CET	666	49156	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:38.138575077 CET	666	49156	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:38.138745070 CET	49156	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:38.139182091 CET	49158	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:38.144766092 CET	666	49156	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:38.145306110 CET	666	49158	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:38.145354033 CET	49158	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:38.145369053 CET	49158	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:38.151370049 CET	666	49158	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:39.829633951 CET	666	49158	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:39.829993010 CET	49158	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:39.830490112 CET	49160	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:39.838690996 CET	666	49158	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:39.839251995 CET	666	49160	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:39.839339972 CET	49160	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:39.839359045 CET	49160	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:39.848551989 CET	666	49160	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:41.478147030 CET	666	49160	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:41.478420019 CET	49160	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:41.479077101 CET	49162	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:41.483095884 CET	666	49160	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:41.483803034 CET	666	49162	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:41.483875990 CET	49162	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:41.483922958 CET	49162	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:41.488542080 CET	666	49162	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:43.136039019 CET	666	49162	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:43.136312962 CET	49162	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:43.136931896 CET	49164	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:43.141139984 CET	666	49162	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:43.141591072 CET	666	49164	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:43.141676903 CET	49164	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:43.141724110 CET	49164	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:43.146998882 CET	666	49164	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:44.816553116 CET	666	49164	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:44.816962957 CET	49164	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:44.817766905 CET	49166	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:44.821846962 CET	666	49164	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:44.823326111 CET	666	49166	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:44.823445082 CET	49166	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:44.823445082 CET	49166	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:44.828135014 CET	666	49166	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:46.499722958 CET	666	49166	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:46.499972105 CET	49166	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:46.500487089 CET	49168	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:46.504673958 CET	666	49166	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:46.505172014 CET	666	49168	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:46.505239010 CET	49168	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:46.505278111 CET	49168	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:46.509905100 CET	666	49168	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:48.176021099 CET	666	49168	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:48.176275015 CET	49168	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:48.177026033 CET	49170	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:48.180990934 CET	666	49168	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:48.181737900 CET	666	49170	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:48.181826115 CET	49170	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:48.181883097 CET	49170	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:48.186543941 CET	666	49170	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:49.838334084 CET	666	49170	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:49.838709116 CET	49170	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:49.839474916 CET	49172	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:49.844002962 CET	666	49170	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:49.844192028 CET	666	49172	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:49.844268084 CET	49172	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:49.844310045 CET	49172	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:49.848942041 CET	666	49172	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:51.513134003 CET	666	49172	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:51.513258934 CET	49172	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:51.513736010 CET	49174	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:51.517887115 CET	666	49172	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:51.518448114 CET	666	49174	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:51.518572092 CET	49174	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:51.518593073 CET	49174	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:51.523303032 CET	666	49174	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:53.167603016 CET	666	49174	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:53.167880058 CET	49174	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:53.168603897 CET	49176	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:53.172636986 CET	666	49174	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:53.173312902 CET	666	49176	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:53.173393965 CET	49176	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:53.173433065 CET	49176	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:53.178060055 CET	666	49176	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:54.867330074 CET	666	49176	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:54.867584944 CET	49176	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:54.868261099 CET	49178	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:54.872277975 CET	666	49176	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:54.872919083 CET	666	49178	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:54.873055935 CET	49178	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:54.873075962 CET	49178	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:54.877732038 CET	666	49178	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:56.527004004 CET	666	49178	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:56.527319908 CET	49178	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:56.527931929 CET	49180	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:56.532066107 CET	666	49178	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:56.532614946 CET	666	49180	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:56.532670975 CET	49180	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:56.532670975 CET	49180	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:56.537347078 CET	666	49180	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:58.183409929 CET	666	49180	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:58.183574915 CET	49180	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:58.184086084 CET	49182	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:58.188278913 CET	666	49180	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:58.188787937 CET	666	49182	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:58.188926935 CET	49182	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:58.188941002 CET	49182	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:58.193576097 CET	666	49182	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:59.884212017 CET	666	49182	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:59.884361982 CET	49182	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:59.884871960 CET	49184	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:59.889677048 CET	666	49182	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:59.890846968 CET	666	49184	37.44.238.66	192.168.2.14
Mar 15, 2025 02:07:59.890912056 CET	49184	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:59.890912056 CET	49184	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:07:59.896332979 CET	666	49184	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:01.579643011 CET	666	49184	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:01.579900980 CET	49184	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:01.580384970 CET	49186	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:01.584599018 CET	666	49184	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:01.585066080 CET	666	49186	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:01.585140944 CET	49186	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:01.585170984 CET	49186	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:01.589826107 CET	666	49186	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:03.266067982 CET	666	49186	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:03.266228914 CET	49186	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:03.266755104 CET	49188	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:03.270956993 CET	666	49186	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:03.271426916 CET	666	49188	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:03.271517038 CET	49188	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:03.271558046 CET	49188	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:03.276161909 CET	666	49188	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:04.917237043 CET	666	49188	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:04.917556047 CET	49188	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:04.917999029 CET	49190	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:04.922269106 CET	666	49188	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:04.922646046 CET	666	49190	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:04.922698975 CET	49190	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:04.922718048 CET	49190	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:04.927371025 CET	666	49190	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:06.591233969 CET	666	49190	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:06.591402054 CET	49190	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:06.592056036 CET	49192	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:06.596107006 CET	666	49190	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:06.596793890 CET	666	49192	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:06.596901894 CET	49192	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:06.596918106 CET	49192	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:06.601596117 CET	666	49192	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:08.262434959 CET	666	49192	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:08.262788057 CET	49192	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:08.263545990 CET	49194	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:08.267463923 CET	666	49192	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:08.268315077 CET	666	49194	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:08.268383980 CET	49194	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:08.268424988 CET	49194	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:08.273173094 CET	666	49194	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:09.935296059 CET	666	49194	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:09.935444117 CET	49194	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:09.935970068 CET	49196	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:09.940150976 CET	666	49194	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:09.940694094 CET	666	49196	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:09.940774918 CET	49196	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:09.940790892 CET	49196	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:09.945497036 CET	666	49196	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:11.606714010 CET	666	49196	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:11.607105970 CET	49196	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:11.607906103 CET	49198	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:11.611774921 CET	666	49196	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:11.612582922 CET	666	49198	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:11.612658024 CET	49198	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:11.612703085 CET	49198	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:11.618613005 CET	666	49198	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:13.303179026 CET	666	49198	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:13.303831100 CET	49198	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:13.304702044 CET	49200	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:13.308502913 CET	666	49198	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:13.309369087 CET	666	49200	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:13.309415102 CET	49200	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:13.309436083 CET	49200	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:13.314045906 CET	666	49200	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:14.966818094 CET	666	49200	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:14.967216015 CET	49200	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:14.967704058 CET	49202	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:14.972773075 CET	666	49200	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:14.973325014 CET	666	49202	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:14.973428011 CET	49202	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:14.973428011 CET	49202	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:14.978863001 CET	666	49202	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:16.637027979 CET	666	49202	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:16.637252092 CET	49202	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:16.637626886 CET	49204	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:16.641946077 CET	666	49202	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:16.642357111 CET	666	49204	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:16.642404079 CET	49204	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:16.642416000 CET	49204	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:16.658730030 CET	666	49204	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:18.310497046 CET	666	49204	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:18.310640097 CET	49204	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:18.311034918 CET	49206	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:18.315253973 CET	666	49204	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:18.315745115 CET	666	49206	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:18.315835953 CET	49206	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:18.315835953 CET	49206	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:18.320492983 CET	666	49206	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:19.980695009 CET	666	49206	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:19.981005907 CET	49206	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:19.981545925 CET	49208	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:19.985644102 CET	666	49206	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:19.986236095 CET	666	49208	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:19.986327887 CET	49208	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:19.986394882 CET	49208	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:19.991019964 CET	666	49208	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:21.673866034 CET	666	49208	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:21.674029112 CET	49208	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:21.674458027 CET	49210	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:21.678733110 CET	666	49208	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:21.679157019 CET	666	49210	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:21.679229975 CET	49210	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:21.679229975 CET	49210	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:21.683936119 CET	666	49210	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:23.348644972 CET	666	49210	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:23.348922014 CET	49210	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:23.349328995 CET	49212	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:23.353828907 CET	666	49210	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:23.353977919 CET	666	49212	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:23.354027987 CET	49212	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:23.354043007 CET	49212	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:23.359781981 CET	666	49212	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:25.011609077 CET	666	49212	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:25.011977911 CET	49212	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:25.012650967 CET	49214	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:25.016668081 CET	666	49212	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:25.017400026 CET	666	49214	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:25.017476082 CET	49214	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:25.017488956 CET	49214	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:25.022138119 CET	666	49214	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:26.683779955 CET	666	49214	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:26.684102058 CET	49214	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:26.684530020 CET	49216	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:26.688983917 CET	666	49214	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:26.689220905 CET	666	49216	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:26.689306021 CET	49216	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:26.689328909 CET	49216	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:26.694010019 CET	666	49216	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:28.339840889 CET	666	49216	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:28.340145111 CET	49216	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:28.340830088 CET	49218	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:28.344824076 CET	666	49216	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:28.345513105 CET	666	49218	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:28.345593929 CET	49218	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:28.345593929 CET	49218	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:28.350265980 CET	666	49218	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:30.013560057 CET	666	49218	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:30.013816118 CET	49218	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:30.014254093 CET	49220	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:30.018546104 CET	666	49218	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:30.018974066 CET	666	49220	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:30.019102097 CET	49220	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:30.019102097 CET	49220	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:30.023933887 CET	666	49220	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:31.685329914 CET	666	49220	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:31.685494900 CET	49220	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:31.686119080 CET	49222	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:31.690294027 CET	666	49220	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:31.690824032 CET	666	49222	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:31.690892935 CET	49222	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:31.690941095 CET	49222	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:31.695564032 CET	666	49222	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:33.358536005 CET	666	49222	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:33.359009027 CET	49222	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:33.359641075 CET	49224	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:33.363640070 CET	666	49222	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:33.364387989 CET	666	49224	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:33.364475965 CET	49224	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:33.364495993 CET	49224	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:33.369127035 CET	666	49224	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:35.027601004 CET	666	49224	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:35.027820110 CET	49224	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:35.028266907 CET	49226	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:35.032516956 CET	666	49224	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:35.032955885 CET	666	49226	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:35.033011913 CET	49226	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:35.033046961 CET	49226	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:35.037656069 CET	666	49226	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:36.700340986 CET	666	49226	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:36.700489044 CET	49226	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:36.700833082 CET	49228	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:36.705153942 CET	666	49226	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:36.705534935 CET	666	49228	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:36.705684900 CET	49228	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:36.705684900 CET	49228	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:36.710416079 CET	666	49228	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:38.375224113 CET	666	49228	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:38.375408888 CET	49228	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:38.375983953 CET	49230	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:38.380115986 CET	666	49228	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:38.380637884 CET	666	49230	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:38.380695105 CET	49230	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:38.380717993 CET	49230	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:38.385366917 CET	666	49230	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:40.044997931 CET	666	49230	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:40.045310020 CET	49230	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:40.045736074 CET	49232	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:40.050584078 CET	666	49230	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:40.051218033 CET	666	49232	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:40.051265001 CET	49232	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:40.051289082 CET	49232	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:40.056150913 CET	666	49232	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:41.720583916 CET	666	49232	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:41.721069098 CET	49232	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:41.721700907 CET	49234	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:41.725730896 CET	666	49232	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:41.726358891 CET	666	49234	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:41.726480961 CET	49234	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:41.726522923 CET	49234	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:41.731153965 CET	666	49234	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:43.373434067 CET	666	49234	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:43.373764038 CET	49234	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:43.374279022 CET	49236	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:43.378424883 CET	666	49234	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:43.379048109 CET	666	49236	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:43.379120111 CET	49236	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:43.379157066 CET	49236	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:43.383836985 CET	666	49236	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:45.043610096 CET	666	49236	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:45.043802977 CET	49236	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:45.044426918 CET	49238	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:45.048485041 CET	666	49236	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:45.049217939 CET	666	49238	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:45.049345016 CET	49238	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:45.049374104 CET	49238	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:45.054125071 CET	666	49238	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:46.723500013 CET	666	49238	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:46.723700047 CET	49238	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:46.724184036 CET	49240	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:46.728503942 CET	666	49238	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:46.728877068 CET	666	49240	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:46.728940010 CET	49240	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:46.728957891 CET	49240	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:46.733606100 CET	666	49240	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:48.387546062 CET	666	49240	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:48.387689114 CET	49240	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:48.388396025 CET	49242	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:48.392409086 CET	666	49240	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:48.393080950 CET	666	49242	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:48.393182993 CET	49242	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:48.393196106 CET	49242	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:48.398394108 CET	666	49242	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:50.080709934 CET	666	49242	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:50.081043959 CET	49242	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:50.081713915 CET	49244	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:50.085810900 CET	666	49242	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:50.086427927 CET	666	49244	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:50.086497068 CET	49244	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:50.086536884 CET	49244	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:50.091167927 CET	666	49244	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:51.746866941 CET	666	49244	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:51.747241974 CET	49244	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:51.748025894 CET	49246	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:51.751892090 CET	666	49244	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:51.752717972 CET	666	49246	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:51.752837896 CET	49246	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:51.752876043 CET	49246	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:51.757509947 CET	666	49246	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:53.439565897 CET	666	49246	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:53.440047979 CET	49246	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:53.440742016 CET	49248	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:53.444693089 CET	666	49246	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:53.445383072 CET	666	49248	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:53.445465088 CET	49248	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:53.445487976 CET	49248	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:53.450177908 CET	666	49248	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:55.106360912 CET	666	49248	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:55.106992960 CET	49248	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:55.107670069 CET	49250	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:55.111702919 CET	666	49248	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:55.112364054 CET	666	49250	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:55.112433910 CET	49250	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:55.112487078 CET	49250	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:55.117121935 CET	666	49250	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:56.779882908 CET	666	49250	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:56.780205011 CET	49250	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:56.780791044 CET	49252	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:56.784950972 CET	666	49250	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:56.785492897 CET	666	49252	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:56.785571098 CET	49252	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:56.785603046 CET	49252	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:56.790328026 CET	666	49252	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:58.453916073 CET	666	49252	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:58.454334974 CET	49252	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:58.454859018 CET	49254	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:58.459038019 CET	666	49252	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:58.459573984 CET	666	49254	37.44.238.66	192.168.2.14
Mar 15, 2025 02:08:58.459644079 CET	49254	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:58.459696054 CET	49254	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:08:58.464351892 CET	666	49254	37.44.238.66	192.168.2.14
Mar 15, 2025 02:09:00.122020006 CET	666	49254	37.44.238.66	192.168.2.14
Mar 15, 2025 02:09:00.122328997 CET	49254	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:09:00.122724056 CET	49256	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:09:00.127046108 CET	666	49254	37.44.238.66	192.168.2.14
Mar 15, 2025 02:09:00.127499104 CET	666	49256	37.44.238.66	192.168.2.14
Mar 15, 2025 02:09:00.127603054 CET	49256	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:09:00.127603054 CET	49256	666	192.168.2.14	37.44.238.66
Mar 15, 2025 02:09:00.132281065 CET	666	49256	37.44.238.66	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2025 02:08:12.514450073 CET	56543	53	192.168.2.14	1.1.1.1
Mar 15, 2025 02:08:12.514522076 CET	38927	53	192.168.2.14	1.1.1.1
Mar 15, 2025 02:08:12.522006989 CET	53	56543	1.1.1.1	192.168.2.14
Mar 15, 2025 02:08:12.522020102 CET	53	38927	1.1.1.1	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 15, 2025 02:08:12.514450073 CET	192.168.2.14	1.1.1.1	0xefd2	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 02:08:12.514522076 CET	192.168.2.14	1.1.1.1	0xbff6	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 15, 2025 02:08:12.522006989 CET	1.1.1.1	192.168.2.14	0xefd2	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Mar 15, 2025 02:08:12.522006989 CET	1.1.1.1	192.168.2.14	0xefd2	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: gigab.x86.elf PID: 5625, Parent PID: 5543

General

Start time (UTC):	01:05:24
Start date (UTC):	15/03/2025
Path:	/tmp/gigab.x86.elf
Arguments:	/tmp/gigab.x86.elf
File size:	104063 bytes
MD5 hash:	70671ad2135275f6c767f7fb9643f28f

File Activities

File Opened

File Read

Process Activities

Process Forked

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: gigab.x86.elf PID: 5626, Parent PID: 5625

General

Start time (UTC):	01:05:25
Start date (UTC):	15/03/2025
Path:	/tmp/gigab.x86.elf
Arguments:	-
File size:	104063 bytes
MD5 hash:	70671ad2135275f6c767f7fb9643f28f

Process Activities

Process Forked

Chronological Activities

Analysis Process: gigab.x86.elf PID: 5627, Parent PID: 5626

General

Start time (UTC):	01:05:25
Start date (UTC):	15/03/2025
Path:	/tmp/gigab.x86.elf
Arguments:	-
File size:	104063 bytes
MD5 hash:	70671ad2135275f6c767f7fb9643f28f

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigab.x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: gigab.x86.elf PID: 5625, Parent PID: 5543

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: gigab.x86.elf PID: 5626, Parent PID: 5625

General

Process Activities

Process Forked

Chronological Activities

Linux Analysis Report
gigab.x86.elf