Edit tour

Linux Analysis Report
a-r.m-4.Sakura.elf

Overview

General Information

Sample name:	a-r.m-4.Sakura.elf
Analysis ID:	1572638
MD5:	31f1e73d6d69bd7048efc723ba68dc43
SHA1:	27ea7191b90d04baaf87af1b0ec2dda464702fac
SHA256:	ea4b669059899755ae9661c63f39505f62cf6e31509126bfa897fc24d35cd347
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1572638
Start date and time:	2024-12-10 18:37:45 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	a-r.m-4.Sakura.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: a-r.m-4.Sakura.elf

Runtime Messages

Command:	/tmp/a-r.m-4.Sakura.elf
PID:	5512
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

a-r.m-4.Sakura.elf (PID: 5512, Parent: 5439, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/a-r.m-4.Sakura.elf

a-r.m-4.Sakura.elf New Fork (PID: 5514, Parent: 5512)

a-r.m-4.Sakura.elf New Fork (PID: 5516, Parent: 5514)

dash New Fork (PID: 5558, Parent: 3670)

rm (PID: 5558, Parent: 3670, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.sHnnf05VNU /tmp/tmp.xOePOKeBDB /tmp/tmp.jD6Vjpa6wn

dash New Fork (PID: 5559, Parent: 3670)

rm (PID: 5559, Parent: 3670, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.sHnnf05VNU /tmp/tmp.xOePOKeBDB /tmp/tmp.jD6Vjpa6wn

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
a-r.m-4.Sakura.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
a-r.m-4.Sakura.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
a-r.m-4.Sakura.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5514.1.00007f5370017000.00007f5370029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5514.1.00007f5370017000.00007f5370029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5512.1.00007f5370017000.00007f5370029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5512.1.00007f5370017000.00007f5370029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: a-r.m-4.Sakura.elf PID: 5512	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13205:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13219:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1322d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13241:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13255:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13269:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1327d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13291:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13309:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1331d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13331:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13345:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13359:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1336d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: a-r.m-4.Sakura.elf PID: 5514	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: a-r.m-4.Sakura.elf PID: 5514	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11e7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ea4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11eb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ef4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1200c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 2 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T18:38:25.770983+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47326	93.123.85.251	12345	TCP
2024-12-10T18:38:26.952166+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47328	93.123.85.251	12345	TCP
2024-12-10T18:38:28.125389+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47330	93.123.85.251	12345	TCP
2024-12-10T18:38:29.297043+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47332	93.123.85.251	12345	TCP
2024-12-10T18:38:30.487162+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47334	93.123.85.251	12345	TCP
2024-12-10T18:38:31.678108+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47336	93.123.85.251	12345	TCP
2024-12-10T18:38:32.864102+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47338	93.123.85.251	12345	TCP
2024-12-10T18:38:34.039155+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47340	93.123.85.251	12345	TCP
2024-12-10T18:38:35.212044+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47342	93.123.85.251	12345	TCP
2024-12-10T18:38:36.386289+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47344	93.123.85.251	12345	TCP
2024-12-10T18:38:37.617449+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47346	93.123.85.251	12345	TCP
2024-12-10T18:38:38.789579+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47348	93.123.85.251	12345	TCP
2024-12-10T18:38:39.963160+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47350	93.123.85.251	12345	TCP
2024-12-10T18:38:41.177876+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47352	93.123.85.251	12345	TCP
2024-12-10T18:38:42.350115+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47354	93.123.85.251	12345	TCP
2024-12-10T18:38:43.529946+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47356	93.123.85.251	12345	TCP
2024-12-10T18:38:44.710044+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47358	93.123.85.251	12345	TCP
2024-12-10T18:38:45.886887+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47360	93.123.85.251	12345	TCP
2024-12-10T18:38:47.060519+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47362	93.123.85.251	12345	TCP
2024-12-10T18:38:48.237224+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47364	93.123.85.251	12345	TCP
2024-12-10T18:38:49.411197+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47366	93.123.85.251	12345	TCP
2024-12-10T18:38:50.588777+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47368	93.123.85.251	12345	TCP
2024-12-10T18:38:51.765911+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47370	93.123.85.251	12345	TCP
2024-12-10T18:38:52.992258+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47372	93.123.85.251	12345	TCP
2024-12-10T18:38:54.165941+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47374	93.123.85.251	12345	TCP
2024-12-10T18:38:55.338609+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47376	93.123.85.251	12345	TCP
2024-12-10T18:38:56.514451+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47378	93.123.85.251	12345	TCP
2024-12-10T18:38:57.689657+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47380	93.123.85.251	12345	TCP
2024-12-10T18:38:58.865737+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47382	93.123.85.251	12345	TCP
2024-12-10T18:39:00.038323+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47384	93.123.85.251	12345	TCP
2024-12-10T18:39:01.228987+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47386	93.123.85.251	12345	TCP
2024-12-10T18:39:02.400646+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47388	93.123.85.251	12345	TCP
2024-12-10T18:39:03.576547+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47390	93.123.85.251	12345	TCP
2024-12-10T18:39:04.751384+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47392	93.123.85.251	12345	TCP
2024-12-10T18:39:05.931140+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47394	93.123.85.251	12345	TCP
2024-12-10T18:39:07.116731+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47396	93.123.85.251	12345	TCP
2024-12-10T18:39:08.292585+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47398	93.123.85.251	12345	TCP
2024-12-10T18:39:09.487706+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47400	93.123.85.251	12345	TCP
2024-12-10T18:39:10.675776+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47402	93.123.85.251	12345	TCP
2024-12-10T18:39:11.848681+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47404	93.123.85.251	12345	TCP
2024-12-10T18:39:13.024511+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47406	93.123.85.251	12345	TCP
2024-12-10T18:39:14.198039+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47408	93.123.85.251	12345	TCP
2024-12-10T18:39:15.386392+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47410	93.123.85.251	12345	TCP
2024-12-10T18:39:16.562009+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47412	93.123.85.251	12345	TCP
2024-12-10T18:39:17.835855+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47414	93.123.85.251	12345	TCP
2024-12-10T18:39:19.015283+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47416	93.123.85.251	12345	TCP
2024-12-10T18:39:20.197819+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47418	93.123.85.251	12345	TCP
2024-12-10T18:39:21.370188+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47420	93.123.85.251	12345	TCP
2024-12-10T18:39:22.545462+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47422	93.123.85.251	12345	TCP
2024-12-10T18:39:23.722267+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47424	93.123.85.251	12345	TCP
2024-12-10T18:39:24.908884+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47426	93.123.85.251	12345	TCP
2024-12-10T18:39:26.103350+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47428	93.123.85.251	12345	TCP
2024-12-10T18:39:27.276304+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47430	93.123.85.251	12345	TCP
2024-12-10T18:39:28.450205+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47432	93.123.85.251	12345	TCP
2024-12-10T18:39:29.626001+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47434	93.123.85.251	12345	TCP
2024-12-10T18:39:30.809499+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47436	93.123.85.251	12345	TCP
2024-12-10T18:39:31.997544+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47438	93.123.85.251	12345	TCP
2024-12-10T18:39:33.171131+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47440	93.123.85.251	12345	TCP
2024-12-10T18:39:34.342985+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47442	93.123.85.251	12345	TCP
2024-12-10T18:39:35.532625+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47444	93.123.85.251	12345	TCP
2024-12-10T18:39:36.705242+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47446	93.123.85.251	12345	TCP
2024-12-10T18:39:37.877312+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47448	93.123.85.251	12345	TCP
2024-12-10T18:39:39.064601+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47450	93.123.85.251	12345	TCP
2024-12-10T18:39:40.239133+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47452	93.123.85.251	12345	TCP
2024-12-10T18:39:41.411040+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47454	93.123.85.251	12345	TCP
2024-12-10T18:39:42.585719+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47456	93.123.85.251	12345	TCP
2024-12-10T18:39:43.757255+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47458	93.123.85.251	12345	TCP
2024-12-10T18:39:44.941598+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47460	93.123.85.251	12345	TCP
2024-12-10T18:39:46.114813+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47462	93.123.85.251	12345	TCP
2024-12-10T18:39:47.288870+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47464	93.123.85.251	12345	TCP
2024-12-10T18:39:48.461729+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47466	93.123.85.251	12345	TCP
2024-12-10T18:39:49.634799+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47468	93.123.85.251	12345	TCP
2024-12-10T18:39:50.873979+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47470	93.123.85.251	12345	TCP
2024-12-10T18:39:52.051688+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47472	93.123.85.251	12345	TCP
2024-12-10T18:39:53.226040+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47474	93.123.85.251	12345	TCP
2024-12-10T18:39:54.421445+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47476	93.123.85.251	12345	TCP
2024-12-10T18:39:55.594323+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47478	93.123.85.251	12345	TCP
2024-12-10T18:39:56.766996+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47480	93.123.85.251	12345	TCP
2024-12-10T18:39:57.939268+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47482	93.123.85.251	12345	TCP
2024-12-10T18:39:59.112369+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47484	93.123.85.251	12345	TCP
2024-12-10T18:40:00.289636+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47486	93.123.85.251	12345	TCP
2024-12-10T18:40:01.464465+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47488	93.123.85.251	12345	TCP
2024-12-10T18:40:02.655560+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47490	93.123.85.251	12345	TCP
2024-12-10T18:40:03.827510+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47492	93.123.85.251	12345	TCP
2024-12-10T18:40:04.999729+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47494	93.123.85.251	12345	TCP
2024-12-10T18:40:06.173019+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47496	93.123.85.251	12345	TCP
2024-12-10T18:40:07.346135+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47498	93.123.85.251	12345	TCP
2024-12-10T18:40:08.520839+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47500	93.123.85.251	12345	TCP
2024-12-10T18:40:09.715459+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47502	93.123.85.251	12345	TCP
2024-12-10T18:40:10.895918+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47504	93.123.85.251	12345	TCP
2024-12-10T18:40:12.070770+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47506	93.123.85.251	12345	TCP
2024-12-10T18:40:13.246298+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47508	93.123.85.251	12345	TCP
2024-12-10T18:40:14.418719+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47510	93.123.85.251	12345	TCP
2024-12-10T18:40:15.594939+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47512	93.123.85.251	12345	TCP
2024-12-10T18:40:16.768223+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47514	93.123.85.251	12345	TCP
2024-12-10T18:40:17.942136+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47516	93.123.85.251	12345	TCP
2024-12-10T18:40:19.115963+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47518	93.123.85.251	12345	TCP
2024-12-10T18:40:20.303243+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47520	93.123.85.251	12345	TCP
2024-12-10T18:40:21.477662+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47522	93.123.85.251	12345	TCP
2024-12-10T18:40:22.650849+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47524	93.123.85.251	12345	TCP
2024-12-10T18:40:23.909533+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47526	93.123.85.251	12345	TCP
2024-12-10T18:40:25.086786+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47528	93.123.85.251	12345	TCP
2024-12-10T18:40:26.261960+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47530	93.123.85.251	12345	TCP
2024-12-10T18:40:27.433959+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47532	93.123.85.251	12345	TCP
2024-12-10T18:40:28.631332+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47534	93.123.85.251	12345	TCP
2024-12-10T18:40:29.834485+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47536	93.123.85.251	12345	TCP
2024-12-10T18:40:31.024865+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47538	93.123.85.251	12345	TCP
2024-12-10T18:40:32.197059+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47540	93.123.85.251	12345	TCP
2024-12-10T18:40:33.375329+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47542	93.123.85.251	12345	TCP
2024-12-10T18:40:34.549604+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47544	93.123.85.251	12345	TCP
2024-12-10T18:40:35.725039+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47546	93.123.85.251	12345	TCP
2024-12-10T18:40:36.899960+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47548	93.123.85.251	12345	TCP
2024-12-10T18:40:38.089278+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47550	93.123.85.251	12345	TCP
2024-12-10T18:40:39.266416+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47552	93.123.85.251	12345	TCP
2024-12-10T18:40:40.439368+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47554	93.123.85.251	12345	TCP
2024-12-10T18:40:41.617669+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47556	93.123.85.251	12345	TCP
2024-12-10T18:40:42.790363+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47558	93.123.85.251	12345	TCP
2024-12-10T18:40:43.963240+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47560	93.123.85.251	12345	TCP
2024-12-10T18:40:45.140057+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47562	93.123.85.251	12345	TCP
2024-12-10T18:40:46.313986+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47564	93.123.85.251	12345	TCP
2024-12-10T18:40:47.500808+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47566	93.123.85.251	12345	TCP
2024-12-10T18:40:48.692199+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47568	93.123.85.251	12345	TCP
2024-12-10T18:40:49.876377+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47570	93.123.85.251	12345	TCP
2024-12-10T18:40:51.087644+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47572	93.123.85.251	12345	TCP
2024-12-10T18:40:52.267132+0100	2846526	1	A Network Trojan was detected	192.168.2.15	47574	93.123.85.251	12345	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: a-r.m-4.Sakura.elf

Avira: detected

Found malware configuration

Source: a-r.m-4.Sakura.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "93.123.85.251:12345"}

Multi AV Scanner detection for submitted file

Source: a-r.m-4.Sakura.elf

ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/a-r.m-4.Sakura.elf (PID: 5512)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47328 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47346 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47352 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47396 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47384 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47420 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47338 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47370 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47388 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47334 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47414 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47386 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47340 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47332 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47358 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47342 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47406 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47392 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47354 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47424 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47432 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47372 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47440 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47374 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47380 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47438 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47344 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47452 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47422 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47410 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47376 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47442 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47462 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47398 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47436 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47450 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47362 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47454 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47404 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47416 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47458 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47434 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47504 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47402 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47350 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47444 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47500 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47512 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47466 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47464 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47532 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47364 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47472 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47510 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47382 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47394 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47506 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47330 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47476 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47348 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47502 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47426 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47478 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47468 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47326 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47482 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47446 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47554 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47418 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47360 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47470 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47514 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47448 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47508 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47366 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47568 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47400 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47488 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47520 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47530 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47526 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47336 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47456 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47492 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47522 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47544 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47556 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47562 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47574 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47460 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47534 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47498 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47408 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47566 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47356 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47480 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47390 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47558 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47368 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47516 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47494 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47542 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47430 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47378 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47550 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47518 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47428 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47536 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47552 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47538 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47540 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47524 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47412 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47484 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47486 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47548 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47528 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47572 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47564 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47546 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47490 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47474 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47496 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47560 -> 93.123.85.251:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:47570 -> 93.123.85.251:12345

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 93.123.85.251 ports 1,2,3,4,5,12345

Source: global traffic

TCP traffic: 192.168.2.15:47326 -> 93.123.85.251:12345

Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.251

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44520

System Summary

Malicious sample detected (through community Yara rule)

Source: a-r.m-4.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5514.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5512.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: a-r.m-4.Sakura.elf PID: 5512, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: a-r.m-4.Sakura.elf PID: 5514, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: a-r.m-4.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5514.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5512.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: a-r.m-4.Sakura.elf PID: 5512, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: a-r.m-4.Sakura.elf PID: 5514, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: a-r.m-4.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /usr/bin/dash (PID: 5558)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.sHnnf05VNU /tmp/tmp.xOePOKeBDB /tmp/tmp.jD6Vjpa6wn			Jump to behavior
Source: /usr/bin/dash (PID: 5559)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.sHnnf05VNU /tmp/tmp.xOePOKeBDB /tmp/tmp.jD6Vjpa6wn			Jump to behavior

Source: /tmp/a-r.m-4.Sakura.elf (PID: 5512)

Queries kernel information via 'uname':

Jump to behavior

Source: a-r.m-4.Sakura.elf, 5512.1.000055f309008000.000055f309136000.rw-.sdmp, a-r.m-4.Sakura.elf, 5514.1.000055f309008000.000055f309136000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: a-r.m-4.Sakura.elf, 5512.1.00007ffd6e0a6000.00007ffd6e0c7000.rw-.sdmp, a-r.m-4.Sakura.elf, 5514.1.00007ffd6e0a6000.00007ffd6e0c7000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/a-r.m-4.Sakura.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/a-r.m-4.Sakura.elf
Source: a-r.m-4.Sakura.elf, 5512.1.000055f309008000.000055f309136000.rw-.sdmp, a-r.m-4.Sakura.elf, 5514.1.000055f309008000.000055f309136000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: a-r.m-4.Sakura.elf, 5512.1.00007ffd6e0a6000.00007ffd6e0c7000.rw-.sdmp, a-r.m-4.Sakura.elf, 5514.1.00007ffd6e0a6000.00007ffd6e0c7000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: a-r.m-4.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: a-r.m-4.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5514.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5512.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a-r.m-4.Sakura.elf PID: 5514, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: a-r.m-4.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: a-r.m-4.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5514.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5512.1.00007f5370017000.00007f5370029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a-r.m-4.Sakura.elf PID: 5514, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	2 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{"C2 url": "93.123.85.251:12345"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
a-r.m-4.Sakura.elf	66%	ReversingLabs	Linux.Backdoor.Gafgyt
a-r.m-4.Sakura.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
93.123.85.251:12345	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
93.123.85.251	unknown	Bulgaria		43561	NET1-ASBG	true
34.254.182.186	unknown	United States		16509	AMAZON-02US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
93.123.85.251	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	s-h.4-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
34.254.182.186	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	Fantazy.arc.elf	Get hash	malicious	Unknown	Browse
	x86-20241120-0553.elf	Get hash	malicious	Unknown	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
	tftp.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	main_mips.elf	Get hash	malicious	Mirai	Browse
	zersh4.elf	Get hash	malicious	Unknown	Browse
	bot.arm.elf	Get hash	malicious	Mirai, Okiru	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	s-h.4-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hax.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	.5r3fqt67ew531has4231.sh4.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	162.213.35.25
	.5r3fqt67ew531has4231.x86.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	162.213.35.25
	.5r3fqt67ew531has4231.mips.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	162.213.35.24
	.5r3fqt67ew531has4231.m68k.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	162.213.35.25
	.5r3fqt67ew531has4231.mpsl.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	34.254.182.186
	Richiesta di Indagine sulla Violazione del Copyright lnk.lnk	Get hash	malicious	Unknown	Browse	18.192.31.165
	hax.mips.elf	Get hash	malicious	Mirai	Browse	52.210.50.139
	.5r3fqt67ew531has4231.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	54.171.230.55
	.5r3fqt67ew531has4231.mpsl.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	54.217.10.153
	MA-DS-2024-03 URGENT.exe	Get hash	malicious	FormBook	Browse	54.244.188.177
	https://desactivacion-correo.s3.eu-north-1.amazonaws.com/es.html	Get hash	malicious	Unknown	Browse	3.5.217.53
	https://app.droplet.io/form/Ko1loy	Get hash	malicious	Unknown	Browse	3.23.93.108
	bin.sh.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	Request for Quotation.exe	Get hash	malicious	FormBook	Browse	18.141.10.107
NET1-ASBG	a-r.m-5.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.251
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.251
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.251
	s-h.4-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.251
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.251
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.251
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	91.92.23.128
	file.exe	Get hash	malicious	Unknown	Browse	94.156.177.33
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	93.123.85.192
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	93.123.85.192

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	5.956941460085717
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	a-r.m-4.Sakura.elf
File size:	108'417 bytes
MD5:	31f1e73d6d69bd7048efc723ba68dc43
SHA1:	27ea7191b90d04baaf87af1b0ec2dda464702fac
SHA256:	ea4b669059899755ae9661c63f39505f62cf6e31509126bfa897fc24d35cd347
SHA512:	eae2def2f13ba9684e8be10751a9d23b02ab8389981832807143e045cf81740a8e38c3b53ead1efd7fcafab7b194c605915b2ffa1d9ec766681286e9ead905f3
SSDEEP:	3072:MSY+46m1qOzssLFPPKNy+AmkZrQAhPDCXFke:06mgOzJLFPzmkZrQAhPDCXFke
TLSH:	8FB31845F8408727C3D327BAE78F479D3B36579467DB33116A38BEB42BC17892A29520
File Content Preview:	.ELF...a..........(.........4....?......4. ...(.....................P...P................ ... ... .......g..........Q.td..................................-...L."....<..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	81820
Section Header Size:	40
Number of Section Headers:	20
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0xf3f8	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x174a8	0xf4a8	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x174bc	0xf4bc	0x2690	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x19b4c	0x11b4c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x22000	0x12000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x22008	0x12008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x22010	0x12010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x22014	0x12014	0x3a0	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x223b4	0x123b4	0x635c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x123b4	0xa90	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x12e48	0x120	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x12f68	0x578	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x134e0	0xb4	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x13594	0x8bd	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x13e54	0xa0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x13ef4	0xa8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x142bc	0x41c0	0x10	0x0		19	579	4
.strtab	STRTAB	0x0	0x1847c	0x2305	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x11b50	0x11b50	6.1092	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x12000	0x22000	0x22000	0x3b4	0x6710	2.7254	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x174a8	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x174bc	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x19b4c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x22000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x22008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x22010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x22014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x223b4	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x174a8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174b4	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1746c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x174b8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x956c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb5e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeeb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf00c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf05c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf17c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf70c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfaac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1025c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1047c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1053c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1076c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1090c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1102c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11084	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1191c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12530	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12548	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1256c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12754	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13010	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1329c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1393c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13adc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1409c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14158	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1481c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ad4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1539c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1558c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15898	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1631c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16504	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1670c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1673c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22000	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x22008	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x2201c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1749c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x997c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa820	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17970	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa9a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb324	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb5dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcb1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdb24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf1f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf224	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22050	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x22058	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf230	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf704	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfca4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfe50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22060	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xff40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1024c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22168	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x102c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10350	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x103e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10464	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22180	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1068c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1075c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18af4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22234	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10b40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10bec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10eb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2224c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10fc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11130	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26614	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x111bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22254	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x12564	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x125a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ac4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ad4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2226c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x18b78	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12c44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13574	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13934	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13c50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x223a8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x14808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x162f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19b04	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16410	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16630	0	NOTYPE	<unknown>	DEFAULT	2
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.111.5062	.symtab	0x17970	8	OBJECT	<unknown>	DEFAULT	4
C.148.5389	.symtab	0x182ec	24	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xf348	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xf364	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x223e8	16384	OBJECT	<unknown>	DEFAULT	10
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0xb328	340	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0xa83c	364	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0xb5e0	376	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x9d00	1228	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x22004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x22000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x22050	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x184f4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x223a8	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x18bda	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x22058	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x187f4	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x2200c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x22008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x19b4c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x19b4c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x22050	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x184f4	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x223a8	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x18bda	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x22058	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x187f4	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x22054	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x223ac	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x2205c	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0xf228	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xef08	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x10114	328	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1256c	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xef5c	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xef88	44	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xfa80	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x26614	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x1090c	148	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x125d4	384	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x12bc0	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x12754	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xefb4	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x16504	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x16510	304	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x11000	44	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1102c	44	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x11058	44	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xefe0	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xfaac	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x11084	44	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x26618	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x13368	528	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10698	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xf00c	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x13210	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xf05c	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1673c	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1631c	252	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xf250	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x117a0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x16418	236	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xf260	156	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x125a8	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x10260	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1053c	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xf0f4	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xfb08	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x110dc	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xf120	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xfb34	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0xfb60	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xf150	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x109a0	420	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xfbc4	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xf380	264	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xf488	28	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x131e0	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xf320	96	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x130c8	200	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x117b0	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x151c0	224	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x13190	80	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xf4a4	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xf59c	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x11868	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1076c	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xf17c	44	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x13f84	52	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xf1f4	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x13fec	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x11188	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x155d8	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x15648	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x15628	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xf1b0	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x22010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x22010	0	OBJECT	<unknown>	DEFAULT	8
__adddf3	.symtab	0x169d0	736	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmpeq	.symtab	0x173a0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmple	.symtab	0x173a0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdrcmple	.symtab	0x17384	48	FUNC	<unknown>	DEFAULT	2
__aeabi_d2uiz	.symtab	0x17418	84	FUNC	<unknown>	DEFAULT	2
__aeabi_dadd	.symtab	0x169d0	736	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpeq	.symtab	0x173b4	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpge	.symtab	0x173f0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpgt	.symtab	0x17404	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmple	.symtab	0x173dc	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmplt	.symtab	0x173c8	20	FUNC	<unknown>	DEFAULT	2
__aeabi_ddiv	.symtab	0x170ec	516	FUNC	<unknown>	DEFAULT	2
__aeabi_dmul	.symtab	0x16dc4	808	FUNC	<unknown>	DEFAULT	2
__aeabi_drsub	.symtab	0x169c4	0	FUNC	<unknown>	DEFAULT	2
__aeabi_dsub	.symtab	0x169cc	740	FUNC	<unknown>	DEFAULT	2
__aeabi_f2d	.symtab	0x16d04	64	FUNC	<unknown>	DEFAULT	2
__aeabi_i2d	.symtab	0x16cd8	44	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv	.symtab	0x167a0	0	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_idivmod	.symtab	0x168c8	24	FUNC	<unknown>	DEFAULT	2
__aeabi_l2d	.symtab	0x16d58	108	FUNC	<unknown>	DEFAULT	2
__aeabi_ldiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x16cb0	40	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xec14	0	FUNC	<unknown>	DEFAULT	2
__aeabi_uidivmod	.symtab	0xed0c	24	FUNC	<unknown>	DEFAULT	2
__aeabi_ul2d	.symtab	0x16d44	128	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x26608	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x22234	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__bss_end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10c08	56	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x22054	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x223ac	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x2205c	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x26638	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x22014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x13b4c	220	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x154c0	204	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x13a24	184	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x10fd0	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x10fcc	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__divdf3	.symtab	0x170ec	516	FUNC	<unknown>	DEFAULT	2
__divsi3	.symtab	0x167a0	296	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x11a08	2060	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1746c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x22018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x15418	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1393c	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x13adc	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x26600	4	OBJECT	<unknown>	DEFAULT	10
__eqdf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__errno_location	.symtab	0xf228	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x265f8	4	OBJECT	<unknown>	HIDDEN	10
__extendsfdf2	.symtab	0x16d04	64	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fixunsdfsi	.symtab	0x17418	84	FUNC	<unknown>	DEFAULT	2
__floatdidf	.symtab	0x16d58	108	FUNC	<unknown>	DEFAULT	2
__floatsidf	.symtab	0x16cd8	44	FUNC	<unknown>	DEFAULT	2
__floatundidf	.symtab	0x16d44	128	FUNC	<unknown>	DEFAULT	2
__floatunsidf	.symtab	0x16cb0	40	FUNC	<unknown>	DEFAULT	2
__gedf2	.symtab	0x172f0	148	FUNC	<unknown>	DEFAULT	2
__get_hosts_byname_r	.symtab	0x124e8	72	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x172f0	148	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0xff58	148	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x10020	244	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0xffec	32	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1000c	20	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__ledf2	.symtab	0x172f8	140	FUNC	<unknown>	DEFAULT	2
__length_dotted	.symtab	0x1558c	76	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x13b38	20	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1673c	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x265fc	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xf1b0	44	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x172f8	140	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x22060	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x265dc	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x286cc	24	OBJECT	<unknown>	DEFAULT	10
__modsi3	.symtab	0x168e0	228	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x16dc4	808	FUNC	<unknown>	DEFAULT	2
__muldi3	.symtab	0xedf4	80	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x286f4	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x28700	4	OBJECT	<unknown>	HIDDEN	10
__nedf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x13c28	52	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x12214	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x26604	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x13c5c	808	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x22254	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x2660c	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x286e4	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x28704	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0xfccc	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xfcf0	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xfca8	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x22278	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x15704	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1409c	188	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x16640	204	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x15760	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x12ac8	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3929	.symtab	0x18b78	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x15898	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1670c	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x158c4	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x15980	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x12b90	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2227c	4	OBJECT	<unknown>	DEFAULT	9
__subdf3	.symtab	0x169cc	740	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x10fd4	44	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x10c9c	588	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2224c	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xec14	248	FUNC	<unknown>	DEFAULT	2
__umodsi3	.symtab	0xed24	204	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x14158	76	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x12548	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x28708	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2870c	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x26614	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xef08	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x174a8	4	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x26644	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x141a4	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x15b28	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x26618	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	4	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x15a84	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x11310	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x1481c	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x14ad4	1220	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x148b4	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x148ec	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x14a88	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2864c	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x12760	760	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x12a58	112	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x22280	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x22284	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x12c54	320	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x26640	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x2229c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x2663c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x222b8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x12ad8	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x222b4	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x10774	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x15af4	52	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x18f94	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x111c0	336	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x14228	1524	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x10114	328	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0xef30	44	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0xc8e8	356	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0xc278	1648	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0xbc64	1556	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0xf240	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x265f4	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2789	.symtab	0x26610	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x1256c	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
buf.2613	.symtab	0x263ec	16	OBJECT	<unknown>	DEFAULT	10
buf.4901	.symtab	0x263fc	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x22048	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x174a0	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xef5c	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x22024	4	OBJECT	<unknown>	DEFAULT	9
completed.2555	.symtab	0x223b4	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x956c	640	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x9984	344	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x22044	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x22020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x26600	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x26614	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1090c	148	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x19b04	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x125d4	384	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x12bc0	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x19af0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x12754	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x22014	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x223b0	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0xfe68	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x16504	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x16504	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x16510	304	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0xa1cc	1648	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xca4c	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91ac	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	740	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0xca68	204	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x11000	44	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1102c	44	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x11058	44	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xfaac	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xfad8	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x11084	44	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x223d4	4	OBJECT	<unknown>	DEFAULT	10
h.4900	.symtab	0x265c8	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x26618	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0xf5e0	36	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xf604	20	FUNC	<unknown>	DEFAULT	2
i.4126	.symtab	0x2204c	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x13578	356	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x13368	528	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1329c	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xe274	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x22064	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x10368	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10698	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xf00c	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x13210	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xf1dc	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xf05c	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x97ec	408	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1673c	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x223e0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xe400	2068	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x223d0	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x9bec	276	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x9210	136	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xaaf4	312	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0xfd14	340	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1631c	252	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xf250	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x117a0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x16418	236	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xf260	156	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x22168	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x22180	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x2661c	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1066	.symtab	0x263e8	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0xf5a8	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xf5cc	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x223d8	8	OBJECT	<unknown>	DEFAULT	10
object.2636	.symtab	0x223b8	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x28644	4	OBJECT	<unknown>	DEFAULT	10
p.2553	.symtab	0x2201c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x28648	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4141	.symtab	0x18eec	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8cf4	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x891c	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b0c	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8988	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xcb34	5952	FUNC	<unknown>	DEFAULT	2
qual_chars.4147	.symtab	0x18f00	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x12530	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x1025c	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x10260	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x18af4	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1053c	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x221b4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9298	724	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0xb758	1292	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x110dc	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0xf150	44	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x102dc	140	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x109a0	420	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0xfbc4	44	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0xa9a8	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x90e4	200	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4146	.symtab	0x18f14	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4140	.symtab	0x18ef8	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4143	.symtab	0x18f40	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4142	.symtab	0x18f58	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4145	.symtab	0x18f24	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4144	.symtab	0x18f34	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x22250	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x26634	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x22274	4	OBJECT	<unknown>	DEFAULT	9
stdhexflood	.symtab	0xb47c	356	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x2226c	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x22270	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0xf488	28	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x131e0	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0xf320	96	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x130c8	200	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x117b0	184	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x151c0	224	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x13190	80	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0xf4a4	248	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0xf59c	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x11868	116	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1076c	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x9adc	272	FUNC	<unknown>	DEFAULT	2
time	.symtab	0xf17c	44	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-10T18:38:25.770983+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47326	93.123.85.251	12345	TCP
2024-12-10T18:38:26.952166+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47328	93.123.85.251	12345	TCP
2024-12-10T18:38:28.125389+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47330	93.123.85.251	12345	TCP
2024-12-10T18:38:29.297043+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47332	93.123.85.251	12345	TCP
2024-12-10T18:38:30.487162+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47334	93.123.85.251	12345	TCP
2024-12-10T18:38:31.678108+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47336	93.123.85.251	12345	TCP
2024-12-10T18:38:32.864102+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47338	93.123.85.251	12345	TCP
2024-12-10T18:38:34.039155+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47340	93.123.85.251	12345	TCP
2024-12-10T18:38:35.212044+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47342	93.123.85.251	12345	TCP
2024-12-10T18:38:36.386289+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47344	93.123.85.251	12345	TCP
2024-12-10T18:38:37.617449+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47346	93.123.85.251	12345	TCP
2024-12-10T18:38:38.789579+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47348	93.123.85.251	12345	TCP
2024-12-10T18:38:39.963160+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47350	93.123.85.251	12345	TCP
2024-12-10T18:38:41.177876+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47352	93.123.85.251	12345	TCP
2024-12-10T18:38:42.350115+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47354	93.123.85.251	12345	TCP
2024-12-10T18:38:43.529946+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47356	93.123.85.251	12345	TCP
2024-12-10T18:38:44.710044+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47358	93.123.85.251	12345	TCP
2024-12-10T18:38:45.886887+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47360	93.123.85.251	12345	TCP
2024-12-10T18:38:47.060519+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47362	93.123.85.251	12345	TCP
2024-12-10T18:38:48.237224+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47364	93.123.85.251	12345	TCP
2024-12-10T18:38:49.411197+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47366	93.123.85.251	12345	TCP
2024-12-10T18:38:50.588777+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47368	93.123.85.251	12345	TCP
2024-12-10T18:38:51.765911+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47370	93.123.85.251	12345	TCP
2024-12-10T18:38:52.992258+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47372	93.123.85.251	12345	TCP
2024-12-10T18:38:54.165941+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47374	93.123.85.251	12345	TCP
2024-12-10T18:38:55.338609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47376	93.123.85.251	12345	TCP
2024-12-10T18:38:56.514451+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47378	93.123.85.251	12345	TCP
2024-12-10T18:38:57.689657+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47380	93.123.85.251	12345	TCP
2024-12-10T18:38:58.865737+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47382	93.123.85.251	12345	TCP
2024-12-10T18:39:00.038323+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47384	93.123.85.251	12345	TCP
2024-12-10T18:39:01.228987+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47386	93.123.85.251	12345	TCP
2024-12-10T18:39:02.400646+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47388	93.123.85.251	12345	TCP
2024-12-10T18:39:03.576547+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47390	93.123.85.251	12345	TCP
2024-12-10T18:39:04.751384+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47392	93.123.85.251	12345	TCP
2024-12-10T18:39:05.931140+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47394	93.123.85.251	12345	TCP
2024-12-10T18:39:07.116731+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47396	93.123.85.251	12345	TCP
2024-12-10T18:39:08.292585+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47398	93.123.85.251	12345	TCP
2024-12-10T18:39:09.487706+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47400	93.123.85.251	12345	TCP
2024-12-10T18:39:10.675776+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47402	93.123.85.251	12345	TCP
2024-12-10T18:39:11.848681+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47404	93.123.85.251	12345	TCP
2024-12-10T18:39:13.024511+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47406	93.123.85.251	12345	TCP
2024-12-10T18:39:14.198039+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47408	93.123.85.251	12345	TCP
2024-12-10T18:39:15.386392+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47410	93.123.85.251	12345	TCP
2024-12-10T18:39:16.562009+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47412	93.123.85.251	12345	TCP
2024-12-10T18:39:17.835855+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47414	93.123.85.251	12345	TCP
2024-12-10T18:39:19.015283+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47416	93.123.85.251	12345	TCP
2024-12-10T18:39:20.197819+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47418	93.123.85.251	12345	TCP
2024-12-10T18:39:21.370188+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47420	93.123.85.251	12345	TCP
2024-12-10T18:39:22.545462+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47422	93.123.85.251	12345	TCP
2024-12-10T18:39:23.722267+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47424	93.123.85.251	12345	TCP
2024-12-10T18:39:24.908884+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47426	93.123.85.251	12345	TCP
2024-12-10T18:39:26.103350+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47428	93.123.85.251	12345	TCP
2024-12-10T18:39:27.276304+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47430	93.123.85.251	12345	TCP
2024-12-10T18:39:28.450205+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47432	93.123.85.251	12345	TCP
2024-12-10T18:39:29.626001+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47434	93.123.85.251	12345	TCP
2024-12-10T18:39:30.809499+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47436	93.123.85.251	12345	TCP
2024-12-10T18:39:31.997544+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47438	93.123.85.251	12345	TCP
2024-12-10T18:39:33.171131+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47440	93.123.85.251	12345	TCP
2024-12-10T18:39:34.342985+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47442	93.123.85.251	12345	TCP
2024-12-10T18:39:35.532625+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47444	93.123.85.251	12345	TCP
2024-12-10T18:39:36.705242+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47446	93.123.85.251	12345	TCP
2024-12-10T18:39:37.877312+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47448	93.123.85.251	12345	TCP
2024-12-10T18:39:39.064601+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47450	93.123.85.251	12345	TCP
2024-12-10T18:39:40.239133+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47452	93.123.85.251	12345	TCP
2024-12-10T18:39:41.411040+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47454	93.123.85.251	12345	TCP
2024-12-10T18:39:42.585719+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47456	93.123.85.251	12345	TCP
2024-12-10T18:39:43.757255+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47458	93.123.85.251	12345	TCP
2024-12-10T18:39:44.941598+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47460	93.123.85.251	12345	TCP
2024-12-10T18:39:46.114813+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47462	93.123.85.251	12345	TCP
2024-12-10T18:39:47.288870+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47464	93.123.85.251	12345	TCP
2024-12-10T18:39:48.461729+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47466	93.123.85.251	12345	TCP
2024-12-10T18:39:49.634799+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47468	93.123.85.251	12345	TCP
2024-12-10T18:39:50.873979+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47470	93.123.85.251	12345	TCP
2024-12-10T18:39:52.051688+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47472	93.123.85.251	12345	TCP
2024-12-10T18:39:53.226040+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47474	93.123.85.251	12345	TCP
2024-12-10T18:39:54.421445+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47476	93.123.85.251	12345	TCP
2024-12-10T18:39:55.594323+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47478	93.123.85.251	12345	TCP
2024-12-10T18:39:56.766996+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47480	93.123.85.251	12345	TCP
2024-12-10T18:39:57.939268+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47482	93.123.85.251	12345	TCP
2024-12-10T18:39:59.112369+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47484	93.123.85.251	12345	TCP
2024-12-10T18:40:00.289636+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47486	93.123.85.251	12345	TCP
2024-12-10T18:40:01.464465+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47488	93.123.85.251	12345	TCP
2024-12-10T18:40:02.655560+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47490	93.123.85.251	12345	TCP
2024-12-10T18:40:03.827510+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47492	93.123.85.251	12345	TCP
2024-12-10T18:40:04.999729+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47494	93.123.85.251	12345	TCP
2024-12-10T18:40:06.173019+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47496	93.123.85.251	12345	TCP
2024-12-10T18:40:07.346135+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47498	93.123.85.251	12345	TCP
2024-12-10T18:40:08.520839+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47500	93.123.85.251	12345	TCP
2024-12-10T18:40:09.715459+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47502	93.123.85.251	12345	TCP
2024-12-10T18:40:10.895918+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47504	93.123.85.251	12345	TCP
2024-12-10T18:40:12.070770+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47506	93.123.85.251	12345	TCP
2024-12-10T18:40:13.246298+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47508	93.123.85.251	12345	TCP
2024-12-10T18:40:14.418719+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47510	93.123.85.251	12345	TCP
2024-12-10T18:40:15.594939+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47512	93.123.85.251	12345	TCP
2024-12-10T18:40:16.768223+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47514	93.123.85.251	12345	TCP
2024-12-10T18:40:17.942136+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47516	93.123.85.251	12345	TCP
2024-12-10T18:40:19.115963+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47518	93.123.85.251	12345	TCP
2024-12-10T18:40:20.303243+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47520	93.123.85.251	12345	TCP
2024-12-10T18:40:21.477662+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47522	93.123.85.251	12345	TCP
2024-12-10T18:40:22.650849+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47524	93.123.85.251	12345	TCP
2024-12-10T18:40:23.909533+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47526	93.123.85.251	12345	TCP
2024-12-10T18:40:25.086786+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47528	93.123.85.251	12345	TCP
2024-12-10T18:40:26.261960+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47530	93.123.85.251	12345	TCP
2024-12-10T18:40:27.433959+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47532	93.123.85.251	12345	TCP
2024-12-10T18:40:28.631332+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47534	93.123.85.251	12345	TCP
2024-12-10T18:40:29.834485+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47536	93.123.85.251	12345	TCP
2024-12-10T18:40:31.024865+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47538	93.123.85.251	12345	TCP
2024-12-10T18:40:32.197059+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47540	93.123.85.251	12345	TCP
2024-12-10T18:40:33.375329+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47542	93.123.85.251	12345	TCP
2024-12-10T18:40:34.549604+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47544	93.123.85.251	12345	TCP
2024-12-10T18:40:35.725039+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47546	93.123.85.251	12345	TCP
2024-12-10T18:40:36.899960+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47548	93.123.85.251	12345	TCP
2024-12-10T18:40:38.089278+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47550	93.123.85.251	12345	TCP
2024-12-10T18:40:39.266416+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47552	93.123.85.251	12345	TCP
2024-12-10T18:40:40.439368+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47554	93.123.85.251	12345	TCP
2024-12-10T18:40:41.617669+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47556	93.123.85.251	12345	TCP
2024-12-10T18:40:42.790363+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47558	93.123.85.251	12345	TCP
2024-12-10T18:40:43.963240+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47560	93.123.85.251	12345	TCP
2024-12-10T18:40:45.140057+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47562	93.123.85.251	12345	TCP
2024-12-10T18:40:46.313986+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47564	93.123.85.251	12345	TCP
2024-12-10T18:40:47.500808+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47566	93.123.85.251	12345	TCP
2024-12-10T18:40:48.692199+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47568	93.123.85.251	12345	TCP
2024-12-10T18:40:49.876377+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47570	93.123.85.251	12345	TCP
2024-12-10T18:40:51.087644+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47572	93.123.85.251	12345	TCP
2024-12-10T18:40:52.267132+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	47574	93.123.85.251	12345	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 18:38:25.650633097 CET	47326	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:25.769896030 CET	12345	47326	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:25.769952059 CET	47326	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:25.770982981 CET	47326	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:25.896779060 CET	12345	47326	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:26.830996037 CET	12345	47326	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:26.831108093 CET	12345	47326	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:26.831161976 CET	47326	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:26.832113028 CET	47326	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:26.832736015 CET	47328	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:26.951426029 CET	12345	47326	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:26.951976061 CET	12345	47328	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:26.952064991 CET	47328	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:26.952166080 CET	47328	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:27.071778059 CET	12345	47328	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:28.004621983 CET	12345	47328	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:28.004648924 CET	12345	47328	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:28.004779100 CET	47328	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:28.004831076 CET	47328	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:28.005353928 CET	47330	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:28.125108004 CET	12345	47328	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:28.125134945 CET	12345	47330	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:28.125297070 CET	47330	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:28.125389099 CET	47330	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:28.245038033 CET	12345	47330	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:29.176548958 CET	12345	47330	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:29.176573992 CET	12345	47330	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:29.176692963 CET	47330	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:29.176780939 CET	47330	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:29.177409887 CET	47332	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:29.296272993 CET	12345	47330	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:29.296803951 CET	12345	47332	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:29.296953917 CET	47332	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:29.297043085 CET	47332	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:29.417314053 CET	12345	47332	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:30.364958048 CET	12345	47332	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:30.365106106 CET	47332	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:30.366728067 CET	12345	47332	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:30.366787910 CET	47332	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:30.367328882 CET	47334	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:30.486251116 CET	12345	47332	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:30.487036943 CET	12345	47334	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:30.487102032 CET	47334	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:30.487162113 CET	47334	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:30.606657028 CET	12345	47334	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:31.556953907 CET	12345	47334	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:31.557136059 CET	12345	47334	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:31.557239056 CET	47334	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:31.557297945 CET	47334	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:31.557812929 CET	47336	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:31.677311897 CET	12345	47334	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:31.677795887 CET	12345	47336	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:31.678023100 CET	47336	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:31.678107977 CET	47336	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:31.797534943 CET	12345	47336	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:32.743846893 CET	12345	47336	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:32.743880987 CET	12345	47336	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:32.744086027 CET	47336	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:32.744127989 CET	47336	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:32.744625092 CET	47338	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:32.863540888 CET	12345	47336	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:32.863878012 CET	12345	47338	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:32.863975048 CET	47338	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:32.864101887 CET	47338	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:32.983841896 CET	12345	47338	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:33.918884039 CET	12345	47338	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:33.919019938 CET	12345	47338	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:33.919047117 CET	47338	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:33.919199944 CET	47338	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:33.919720888 CET	47340	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:34.038614988 CET	12345	47338	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:34.038996935 CET	12345	47340	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:34.039077044 CET	47340	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:34.039155006 CET	47340	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:34.159028053 CET	12345	47340	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:35.091746092 CET	12345	47340	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:35.091835976 CET	12345	47340	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:35.091901064 CET	47340	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:35.091950893 CET	47340	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:35.092622995 CET	47342	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:35.211378098 CET	12345	47340	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:35.211891890 CET	12345	47342	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:35.212044001 CET	47342	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:35.212044001 CET	47342	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:35.331504107 CET	12345	47342	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:36.264408112 CET	12345	47342	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:36.264496088 CET	12345	47342	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:36.264538050 CET	47342	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:36.264738083 CET	47342	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:36.265332937 CET	47344	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:36.385561943 CET	12345	47342	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:36.386089087 CET	12345	47344	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:36.386225939 CET	47344	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:36.386288881 CET	47344	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:36.506648064 CET	12345	47344	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:37.497344017 CET	12345	47344	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:37.497358084 CET	12345	47344	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:37.497483015 CET	47344	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:37.497531891 CET	47344	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:37.497987986 CET	47346	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:37.616961956 CET	12345	47344	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:37.617259979 CET	12345	47346	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:37.617346048 CET	47346	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:37.617449045 CET	47346	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:37.736711979 CET	12345	47346	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:38.669389963 CET	12345	47346	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:38.669532061 CET	47346	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:38.669553041 CET	12345	47346	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:38.669629097 CET	47346	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:38.670142889 CET	47348	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:38.788999081 CET	12345	47346	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:38.789393902 CET	12345	47348	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:38.789504051 CET	47348	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:38.789578915 CET	47348	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:38.910011053 CET	12345	47348	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:39.842972994 CET	12345	47348	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:39.843105078 CET	47348	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:39.843135118 CET	12345	47348	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:39.843259096 CET	47348	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:39.843766928 CET	47350	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:39.962743044 CET	12345	47348	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:39.962997913 CET	12345	47350	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:39.963088036 CET	47350	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:39.963160038 CET	47350	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:40.082511902 CET	12345	47350	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:41.056718111 CET	12345	47350	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:41.056801081 CET	12345	47350	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:41.056843996 CET	47350	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:41.056912899 CET	47350	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:41.057441950 CET	47352	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:41.177164078 CET	12345	47350	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:41.177747011 CET	12345	47352	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:41.177823067 CET	47352	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:41.177875996 CET	47352	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:41.297302008 CET	12345	47352	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:42.229223967 CET	12345	47352	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:42.229316950 CET	12345	47352	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:42.229407072 CET	47352	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:42.229473114 CET	47352	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:42.230026960 CET	47354	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:42.349642038 CET	12345	47352	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:42.349961042 CET	12345	47354	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:42.350045919 CET	47354	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:42.350115061 CET	47354	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:42.469506025 CET	12345	47354	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:43.407829046 CET	12345	47354	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:43.407984018 CET	47354	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:43.408219099 CET	12345	47354	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:43.408310890 CET	47354	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:43.408891916 CET	47356	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:43.529268980 CET	12345	47354	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:43.529783010 CET	12345	47356	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:43.529858112 CET	47356	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:43.529946089 CET	47356	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:43.653275967 CET	12345	47356	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:44.589632988 CET	12345	47356	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:44.589643955 CET	12345	47356	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:44.589728117 CET	47356	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:44.589795113 CET	47356	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:44.590295076 CET	47358	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:44.709414005 CET	12345	47356	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:44.709924936 CET	12345	47358	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:44.710001945 CET	47358	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:44.710043907 CET	47358	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:44.830203056 CET	12345	47358	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:45.763933897 CET	12345	47358	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:45.764043093 CET	12345	47358	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:45.764054060 CET	47358	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:45.764117002 CET	47358	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:45.764632940 CET	47360	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:45.886291981 CET	12345	47358	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:45.886634111 CET	12345	47360	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:45.886782885 CET	47360	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:45.886887074 CET	47360	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:46.006468058 CET	12345	47360	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:46.939841032 CET	12345	47360	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:46.939965963 CET	47360	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:46.940018892 CET	12345	47360	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:46.940068007 CET	47360	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:46.940555096 CET	47362	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:47.059827089 CET	12345	47360	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:47.060282946 CET	12345	47362	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:47.060395956 CET	47362	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:47.060518980 CET	47362	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:47.179915905 CET	12345	47362	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:48.112720013 CET	12345	47362	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:48.112744093 CET	12345	47362	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:48.112904072 CET	47362	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:48.113050938 CET	47362	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:48.113698006 CET	47364	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:48.236433029 CET	12345	47362	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:48.236933947 CET	12345	47364	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:48.237051964 CET	47364	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:48.237224102 CET	47364	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:48.356610060 CET	12345	47364	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:49.289602995 CET	12345	47364	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:49.289726019 CET	47364	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:49.289767027 CET	12345	47364	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:49.289848089 CET	47364	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:49.290328026 CET	47366	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:49.410676956 CET	12345	47364	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:49.411046982 CET	12345	47366	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:49.411104918 CET	47366	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:49.411196947 CET	47366	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:49.531467915 CET	12345	47366	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:50.468534946 CET	12345	47366	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:50.468646049 CET	47366	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:50.468707085 CET	12345	47366	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:50.468785048 CET	47366	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:50.469325066 CET	47368	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:50.588318110 CET	12345	47366	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:50.588654995 CET	12345	47368	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:50.588733912 CET	47368	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:50.588777065 CET	47368	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:50.708606958 CET	12345	47368	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:51.645164013 CET	12345	47368	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:51.645248890 CET	12345	47368	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:51.645271063 CET	47368	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:51.645349979 CET	47368	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:51.645950079 CET	47370	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:51.764988899 CET	12345	47368	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:51.765615940 CET	12345	47370	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:51.765717030 CET	47370	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:51.765911102 CET	47370	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:51.886543989 CET	12345	47370	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:51.941303968 CET	44520	443	192.168.2.15	34.254.182.186
Dec 10, 2024 18:38:52.063997984 CET	443	44520	34.254.182.186	192.168.2.15
Dec 10, 2024 18:38:52.064120054 CET	44520	443	192.168.2.15	34.254.182.186
Dec 10, 2024 18:38:52.870404005 CET	12345	47370	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:52.870589972 CET	47370	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:52.870661020 CET	12345	47370	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:52.870731115 CET	47370	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:52.871403933 CET	47372	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:52.991817951 CET	12345	47370	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:52.992036104 CET	12345	47372	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:52.992095947 CET	47372	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:52.992258072 CET	47372	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:53.112782001 CET	12345	47372	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:54.045535088 CET	12345	47372	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:54.045645952 CET	12345	47372	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:54.045656919 CET	47372	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:54.045790911 CET	47372	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:54.046472073 CET	47374	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:54.165056944 CET	12345	47372	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:54.165735006 CET	12345	47374	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:54.165791988 CET	47374	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:54.165941000 CET	47374	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:54.285751104 CET	12345	47374	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:55.217637062 CET	12345	47374	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:55.217721939 CET	47374	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:55.218158007 CET	12345	47374	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:55.218414068 CET	47374	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:55.219116926 CET	47376	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:55.337702990 CET	12345	47374	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:55.338495970 CET	12345	47376	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:55.338555098 CET	47376	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:55.338608980 CET	47376	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:55.458080053 CET	12345	47376	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:56.392751932 CET	12345	47376	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:56.392822981 CET	12345	47376	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:56.392952919 CET	47376	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:56.393095016 CET	47376	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:56.393924952 CET	47378	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:56.513166904 CET	12345	47376	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:56.513998985 CET	12345	47378	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:56.514316082 CET	47378	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:56.514451027 CET	47378	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:56.634604931 CET	12345	47378	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:57.569274902 CET	12345	47378	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:57.569468021 CET	12345	47378	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:57.569516897 CET	47378	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:57.569555998 CET	47378	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:57.570122004 CET	47380	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:57.688908100 CET	12345	47378	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:57.689425945 CET	12345	47380	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:57.689493895 CET	47380	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:57.689656973 CET	47380	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:57.809581041 CET	12345	47380	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:58.745218039 CET	12345	47380	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:58.745326042 CET	12345	47380	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:58.745440006 CET	47380	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:58.745440006 CET	47380	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:58.746001005 CET	47382	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:58.864887953 CET	12345	47380	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:58.865461111 CET	12345	47382	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:58.865525007 CET	47382	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:58.865736961 CET	47382	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:58.985053062 CET	12345	47382	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:59.917932987 CET	12345	47382	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:59.918025017 CET	12345	47382	93.123.85.251	192.168.2.15
Dec 10, 2024 18:38:59.918167114 CET	47382	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:59.918190956 CET	47382	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:38:59.918864012 CET	47384	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:00.037487030 CET	12345	47382	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:00.038126945 CET	12345	47384	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:00.038228035 CET	47384	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:00.038322926 CET	47384	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:00.157721043 CET	12345	47384	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:01.108150005 CET	12345	47384	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:01.108405113 CET	47384	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:01.108437061 CET	12345	47384	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:01.108500004 CET	47384	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:01.109100103 CET	47386	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:01.228163004 CET	12345	47384	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:01.228763103 CET	12345	47386	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:01.228817940 CET	47386	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:01.228986979 CET	47386	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:01.348391056 CET	12345	47386	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:02.279956102 CET	12345	47386	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:02.280055046 CET	12345	47386	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:02.280280113 CET	47386	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:02.280281067 CET	47386	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:02.280911922 CET	47388	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:02.399691105 CET	12345	47386	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:02.400384903 CET	12345	47388	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:02.400474072 CET	47388	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:02.400645971 CET	47388	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:02.519912004 CET	12345	47388	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:03.453304052 CET	12345	47388	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:03.453485966 CET	47388	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:03.453496933 CET	12345	47388	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:03.453576088 CET	47388	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:03.454063892 CET	47390	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:03.575975895 CET	12345	47388	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:03.576381922 CET	12345	47390	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:03.576546907 CET	47390	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:03.576546907 CET	47390	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:03.697042942 CET	12345	47390	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:04.631370068 CET	12345	47390	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:04.631504059 CET	12345	47390	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:04.631565094 CET	47390	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:04.631584883 CET	47390	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:04.632029057 CET	47392	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:04.750854015 CET	12345	47390	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:04.751240969 CET	12345	47392	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:04.751384020 CET	47392	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:04.751384020 CET	47392	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:04.870760918 CET	12345	47392	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:05.810770035 CET	12345	47392	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:05.810905933 CET	12345	47392	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:05.811043024 CET	47392	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:05.811043024 CET	47392	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:05.811644077 CET	47394	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:05.930632114 CET	12345	47392	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:05.930917025 CET	12345	47394	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:05.931097984 CET	47394	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:05.931139946 CET	47394	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:06.051471949 CET	12345	47394	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:06.996042967 CET	12345	47394	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:06.996129036 CET	12345	47394	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:06.996201038 CET	47394	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:06.996318102 CET	47394	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:06.997016907 CET	47396	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:07.116175890 CET	12345	47394	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:07.116576910 CET	12345	47396	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:07.116667986 CET	47396	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:07.116730928 CET	47396	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:07.236041069 CET	12345	47396	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:08.171993017 CET	12345	47396	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:08.172178030 CET	47396	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:08.172183990 CET	12345	47396	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:08.172243118 CET	47396	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:08.172938108 CET	47398	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:08.291871071 CET	12345	47396	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:08.292237997 CET	12345	47398	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:08.292316914 CET	47398	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:08.292584896 CET	47398	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:08.413649082 CET	12345	47398	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:09.363919020 CET	12345	47398	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:09.364063025 CET	47398	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:09.364113092 CET	12345	47398	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:09.364201069 CET	47398	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:09.365752935 CET	47400	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:09.486108065 CET	12345	47398	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:09.487354040 CET	12345	47400	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:09.487545013 CET	47400	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:09.487705946 CET	47400	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:09.607157946 CET	12345	47400	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:10.553380013 CET	12345	47400	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:10.553541899 CET	12345	47400	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:10.553680897 CET	47400	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:10.553850889 CET	47400	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:10.554636002 CET	47402	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:10.674839020 CET	12345	47400	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:10.675623894 CET	12345	47402	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:10.675709963 CET	47402	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:10.675776005 CET	47402	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:10.795419931 CET	12345	47402	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:11.727852106 CET	12345	47402	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:11.728045940 CET	12345	47402	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:11.728167057 CET	47402	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:11.728167057 CET	47402	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:11.728868961 CET	47404	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:11.847882986 CET	12345	47402	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:11.848366976 CET	12345	47404	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:11.848505974 CET	47404	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:11.848680973 CET	47404	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:11.970632076 CET	12345	47404	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:12.904299021 CET	12345	47404	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:12.904422998 CET	12345	47404	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:12.904431105 CET	47404	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:12.904486895 CET	47404	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:12.905030012 CET	47406	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:13.023808956 CET	12345	47404	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:13.024389982 CET	12345	47406	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:13.024462938 CET	47406	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:13.024511099 CET	47406	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:13.143765926 CET	12345	47406	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:14.077630043 CET	12345	47406	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:14.077745914 CET	12345	47406	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:14.077765942 CET	47406	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:14.077811956 CET	47406	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:14.078452110 CET	47408	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:14.197207928 CET	12345	47406	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:14.197774887 CET	12345	47408	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:14.198014021 CET	47408	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:14.198039055 CET	47408	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:14.320334911 CET	12345	47408	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:15.265754938 CET	12345	47408	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:15.265888929 CET	12345	47408	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:15.265965939 CET	47408	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:15.266027927 CET	47408	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:15.266561985 CET	47410	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:15.385476112 CET	12345	47408	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:15.386111975 CET	12345	47410	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:15.386243105 CET	47410	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:15.386392117 CET	47410	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:15.507143021 CET	12345	47410	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:16.440180063 CET	12345	47410	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:16.440258980 CET	12345	47410	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:16.440345049 CET	47410	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:16.440399885 CET	47410	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:16.441093922 CET	47412	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:16.561023951 CET	12345	47410	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:16.561831951 CET	12345	47412	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:16.561954975 CET	47412	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:16.562009096 CET	47412	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:16.681543112 CET	12345	47412	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:17.715538025 CET	12345	47412	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:17.715548992 CET	12345	47412	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:17.715660095 CET	47412	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:17.715755939 CET	47412	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:17.716367960 CET	47414	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:17.835191965 CET	12345	47412	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:17.835668087 CET	12345	47414	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:17.835773945 CET	47414	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:17.835855007 CET	47414	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:17.955282927 CET	12345	47414	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:18.888523102 CET	12345	47414	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:18.888539076 CET	12345	47414	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:18.888633966 CET	47414	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:18.888699055 CET	47414	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:18.889290094 CET	47416	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:19.013865948 CET	12345	47414	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:19.015084028 CET	12345	47416	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:19.015180111 CET	47416	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:19.015283108 CET	47416	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:19.134629011 CET	12345	47416	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:20.076040983 CET	12345	47416	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:20.076136112 CET	12345	47416	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:20.076256037 CET	47416	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:20.076344967 CET	47416	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:20.077044010 CET	47418	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:20.196038008 CET	12345	47416	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:20.197560072 CET	12345	47418	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:20.197662115 CET	47418	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:20.197818995 CET	47418	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:20.317923069 CET	12345	47418	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:21.249758959 CET	12345	47418	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:21.249856949 CET	12345	47418	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:21.249907017 CET	47418	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:21.250001907 CET	47418	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:21.250565052 CET	47420	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:21.369730949 CET	12345	47418	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:21.369956970 CET	12345	47420	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:21.370085955 CET	47420	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:21.370187998 CET	47420	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:21.489733934 CET	12345	47420	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:22.424880981 CET	12345	47420	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:22.424923897 CET	12345	47420	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:22.424988031 CET	47420	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:22.425132990 CET	47420	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:22.426093102 CET	47422	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:22.544357061 CET	12345	47420	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:22.545304060 CET	12345	47422	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:22.545378923 CET	47422	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:22.545461893 CET	47422	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:22.664896965 CET	12345	47422	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:23.597765923 CET	12345	47422	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:23.597862959 CET	47422	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:23.597930908 CET	12345	47422	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:23.598006964 CET	47422	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:23.598561049 CET	47424	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:23.721321106 CET	12345	47422	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:23.721961021 CET	12345	47424	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:23.722090960 CET	47424	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:23.722266912 CET	47424	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:23.841717005 CET	12345	47424	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:24.786832094 CET	12345	47424	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:24.786864042 CET	12345	47424	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:24.786955118 CET	47424	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:24.787040949 CET	47424	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:24.787823915 CET	47426	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:24.907927036 CET	12345	47424	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:24.908727884 CET	12345	47426	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:24.908812046 CET	47426	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:24.908884048 CET	47426	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:25.031635046 CET	12345	47426	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:25.980422020 CET	12345	47426	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:25.980443001 CET	12345	47426	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:25.980536938 CET	47426	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:25.980612993 CET	47426	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:25.981183052 CET	47428	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:26.103152037 CET	12345	47426	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:26.103168011 CET	12345	47428	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:26.103288889 CET	47428	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:26.103349924 CET	47428	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:26.224567890 CET	12345	47428	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:27.156043053 CET	12345	47428	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:27.156147957 CET	47428	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:27.156193018 CET	12345	47428	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:27.156275988 CET	47428	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:27.156857967 CET	47430	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:27.275765896 CET	12345	47428	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:27.276154041 CET	12345	47430	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:27.276258945 CET	47430	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:27.276304007 CET	47430	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:27.395695925 CET	12345	47430	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:28.329808950 CET	12345	47430	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:28.329904079 CET	12345	47430	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:28.329961061 CET	47430	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:28.330023050 CET	47430	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:28.330621958 CET	47432	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:28.449475050 CET	12345	47430	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:28.449981928 CET	12345	47432	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:28.450205088 CET	47432	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:28.450205088 CET	47432	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:28.569680929 CET	12345	47432	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:29.505422115 CET	12345	47432	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:29.505567074 CET	12345	47432	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:29.505598068 CET	47432	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:29.505642891 CET	47432	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:29.506316900 CET	47434	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:29.625159979 CET	12345	47432	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:29.625821114 CET	12345	47434	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:29.625925064 CET	47434	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:29.626000881 CET	47434	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:29.747339964 CET	12345	47434	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:30.687998056 CET	12345	47434	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:30.688114882 CET	12345	47434	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:30.688158989 CET	47434	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:30.688240051 CET	47434	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:30.688843966 CET	47436	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:30.808916092 CET	12345	47434	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:30.809292078 CET	12345	47436	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:30.809417009 CET	47436	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:30.809499025 CET	47436	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:30.929826975 CET	12345	47436	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:31.874806881 CET	12345	47436	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:31.874874115 CET	12345	47436	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:31.874995947 CET	47436	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:31.875154972 CET	47436	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:31.875920057 CET	47438	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:31.996373892 CET	12345	47436	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:31.997384071 CET	12345	47438	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:31.997467041 CET	47438	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:31.997544050 CET	47438	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:32.117249966 CET	12345	47438	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:33.050617933 CET	12345	47438	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:33.050713062 CET	12345	47438	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:33.050740957 CET	47438	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:33.050863028 CET	47438	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:33.051557064 CET	47440	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:33.170238972 CET	12345	47438	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:33.170880079 CET	12345	47440	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:33.170965910 CET	47440	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:33.171130896 CET	47440	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:33.290616035 CET	12345	47440	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:34.222883940 CET	12345	47440	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:34.222940922 CET	12345	47440	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:34.223015070 CET	47440	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:34.223074913 CET	47440	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:34.223690033 CET	47442	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:34.342410088 CET	12345	47440	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:34.342880011 CET	12345	47442	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:34.342937946 CET	47442	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:34.342984915 CET	47442	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:34.463634014 CET	12345	47442	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:35.412329912 CET	12345	47442	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:35.412472010 CET	47442	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:35.412564039 CET	12345	47442	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:35.412627935 CET	47442	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:35.413170099 CET	47444	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:35.531965017 CET	12345	47442	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:35.532414913 CET	12345	47444	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:35.532577038 CET	47444	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:35.532624960 CET	47444	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:35.651910067 CET	12345	47444	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:36.584611893 CET	12345	47444	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:36.584748983 CET	47444	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:36.584819078 CET	12345	47444	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:36.584875107 CET	47444	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:36.585355997 CET	47446	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:36.704408884 CET	12345	47444	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:36.704981089 CET	12345	47446	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:36.705080986 CET	47446	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:36.705241919 CET	47446	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:36.824541092 CET	12345	47446	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:37.757184982 CET	12345	47446	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:37.757323980 CET	47446	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:37.757335901 CET	12345	47446	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:37.757394075 CET	47446	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:37.757930040 CET	47448	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:37.876652002 CET	12345	47446	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:37.877135038 CET	12345	47448	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:37.877271891 CET	47448	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:37.877311945 CET	47448	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:37.996687889 CET	12345	47448	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:38.942286968 CET	12345	47448	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:38.942430019 CET	12345	47448	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:38.942601919 CET	47448	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:38.942765951 CET	47448	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:38.943583965 CET	47450	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:39.063210011 CET	12345	47448	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:39.064322948 CET	12345	47450	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:39.064444065 CET	47450	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:39.064600945 CET	47450	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:39.183885098 CET	12345	47450	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:40.118189096 CET	12345	47450	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:40.118383884 CET	12345	47450	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:40.118494034 CET	47450	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:40.118674994 CET	47450	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:40.119584084 CET	47452	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:40.238039970 CET	12345	47450	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:40.238826036 CET	12345	47452	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:40.238956928 CET	47452	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:40.239132881 CET	47452	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:40.359282970 CET	12345	47452	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:41.290577888 CET	12345	47452	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:41.290723085 CET	47452	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:41.290824890 CET	12345	47452	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:41.290895939 CET	47452	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:41.291517019 CET	47454	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:41.410172939 CET	12345	47452	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:41.410886049 CET	12345	47454	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:41.410974979 CET	47454	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:41.411040068 CET	47454	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:41.530581951 CET	12345	47454	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:42.462410927 CET	12345	47454	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:42.462513924 CET	47454	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:42.462620974 CET	12345	47454	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:42.462687016 CET	47454	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:42.463310003 CET	47456	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:42.582000017 CET	12345	47454	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:42.585486889 CET	12345	47456	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:42.585603952 CET	47456	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:42.585719109 CET	47456	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:42.704967976 CET	12345	47456	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:43.636461020 CET	12345	47456	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:43.636472940 CET	12345	47456	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:43.636575937 CET	47456	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:43.636637926 CET	47456	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:43.637311935 CET	47458	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:43.756617069 CET	12345	47456	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:43.757114887 CET	12345	47458	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:43.757201910 CET	47458	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:43.757255077 CET	47458	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:43.876761913 CET	12345	47458	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:44.821095943 CET	12345	47458	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:44.821106911 CET	12345	47458	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:44.821201086 CET	47458	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:44.821290016 CET	47458	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:44.821902990 CET	47460	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:44.940888882 CET	12345	47458	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:44.941420078 CET	12345	47460	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:44.941550016 CET	47460	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:44.941597939 CET	47460	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:45.062669039 CET	12345	47460	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:45.994546890 CET	12345	47460	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:45.994560003 CET	12345	47460	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:45.994667053 CET	47460	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:45.994736910 CET	47460	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:45.995377064 CET	47462	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:46.114228964 CET	12345	47460	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:46.114660025 CET	12345	47462	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:46.114751101 CET	47462	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:46.114813089 CET	47462	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:46.234496117 CET	12345	47462	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:47.166363955 CET	12345	47462	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:47.166383982 CET	12345	47462	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:47.166765928 CET	47462	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:47.166765928 CET	47462	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:47.167530060 CET	47464	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:47.288258076 CET	12345	47462	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:47.288575888 CET	12345	47464	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:47.288741112 CET	47464	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:47.288870096 CET	47464	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:47.408246040 CET	12345	47464	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:48.341326952 CET	12345	47464	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:48.341454029 CET	47464	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:48.341675997 CET	12345	47464	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:48.341731071 CET	47464	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:48.342288971 CET	47466	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:48.461024046 CET	12345	47464	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:48.461561918 CET	12345	47466	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:48.461642981 CET	47466	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:48.461729050 CET	47466	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:48.581370115 CET	12345	47466	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:49.513566971 CET	12345	47466	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:49.513719082 CET	47466	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:49.513823986 CET	12345	47466	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:49.513880968 CET	47466	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:49.514410973 CET	47468	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:49.634095907 CET	12345	47466	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:49.634588003 CET	12345	47468	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:49.634705067 CET	47468	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:49.634799004 CET	47468	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:49.754625082 CET	12345	47468	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:50.753112078 CET	12345	47468	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:50.753144026 CET	12345	47468	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:50.753606081 CET	47468	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:50.753664017 CET	47468	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:50.754371881 CET	47470	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:50.872941971 CET	12345	47468	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:50.873667955 CET	12345	47470	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:50.873821020 CET	47470	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:50.873979092 CET	47470	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:50.993638992 CET	12345	47470	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:51.930821896 CET	12345	47470	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:51.930928946 CET	12345	47470	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:51.930954933 CET	47470	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:51.931056023 CET	47470	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:51.931664944 CET	47472	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:52.050865889 CET	12345	47470	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:52.051418066 CET	12345	47472	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:52.051532984 CET	47472	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:52.051687956 CET	47472	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:52.170955896 CET	12345	47472	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:53.104758978 CET	12345	47472	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:53.104887009 CET	47472	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:53.104912043 CET	12345	47472	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:53.104974031 CET	47472	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:53.106087923 CET	47474	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:53.224747896 CET	12345	47472	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:53.225784063 CET	12345	47474	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:53.225898027 CET	47474	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:53.226039886 CET	47474	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:53.346199989 CET	12345	47474	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:54.300432920 CET	12345	47474	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:54.300553083 CET	47474	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:54.301177979 CET	12345	47474	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:54.301240921 CET	47474	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:54.301820993 CET	47476	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:54.420847893 CET	12345	47474	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:54.421298027 CET	12345	47476	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:54.421374083 CET	47476	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:54.421444893 CET	47476	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:54.540747881 CET	12345	47476	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:55.473891020 CET	12345	47476	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:55.474011898 CET	12345	47476	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:55.474097013 CET	47476	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:55.474162102 CET	47476	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:55.474930048 CET	47478	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:55.593477964 CET	12345	47476	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:55.594191074 CET	12345	47478	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:55.594261885 CET	47478	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:55.594322920 CET	47478	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:55.714709997 CET	12345	47478	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:56.646492004 CET	12345	47478	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:56.646596909 CET	12345	47478	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:56.646728039 CET	47478	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:56.646801949 CET	47478	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:56.647497892 CET	47480	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:56.766160011 CET	12345	47478	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:56.766823053 CET	12345	47480	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:56.766925097 CET	47480	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:56.766995907 CET	47480	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:56.886256933 CET	12345	47480	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:57.819145918 CET	12345	47480	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:57.819248915 CET	12345	47480	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:57.819298983 CET	47480	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:57.819369078 CET	47480	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:57.819880009 CET	47482	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:57.938777924 CET	12345	47480	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:57.939167976 CET	12345	47482	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:57.939213991 CET	47482	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:57.939268112 CET	47482	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:58.058504105 CET	12345	47482	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:58.991755962 CET	12345	47482	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:58.991877079 CET	47482	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:58.991914034 CET	12345	47482	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:58.991976976 CET	47482	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:58.992636919 CET	47484	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:59.111396074 CET	12345	47482	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:59.112013102 CET	12345	47484	93.123.85.251	192.168.2.15
Dec 10, 2024 18:39:59.112324953 CET	47484	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:59.112369061 CET	47484	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:39:59.231836081 CET	12345	47484	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:00.168893099 CET	12345	47484	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:00.169044971 CET	12345	47484	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:00.169195890 CET	47484	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:00.169373035 CET	47484	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:00.170140982 CET	47486	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:00.288542032 CET	12345	47484	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:00.289376974 CET	12345	47486	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:00.289496899 CET	47486	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:00.289635897 CET	47486	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:00.408951044 CET	12345	47486	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:01.344010115 CET	12345	47486	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:01.344139099 CET	47486	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:01.344178915 CET	12345	47486	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:01.344244003 CET	47486	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:01.344923973 CET	47488	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:01.463566065 CET	12345	47486	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:01.464186907 CET	12345	47488	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:01.464314938 CET	47488	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:01.464464903 CET	47488	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:01.583699942 CET	12345	47488	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:02.535058022 CET	12345	47488	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:02.535233021 CET	12345	47488	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:02.535243034 CET	47488	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:02.535399914 CET	47488	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:02.536144972 CET	47490	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:02.654701948 CET	12345	47488	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:02.655348063 CET	12345	47490	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:02.655453920 CET	47490	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:02.655560017 CET	47490	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:02.776456118 CET	12345	47490	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:03.707180977 CET	12345	47490	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:03.707217932 CET	12345	47490	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:03.707348108 CET	47490	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:03.707407951 CET	47490	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:03.707973957 CET	47492	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:03.827181101 CET	12345	47490	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:03.827356100 CET	12345	47492	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:03.827481031 CET	47492	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:03.827510118 CET	47492	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:03.946994066 CET	12345	47492	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:04.879225969 CET	12345	47492	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:04.879374981 CET	12345	47492	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:04.879468918 CET	47492	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:04.879534006 CET	47492	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:04.880228996 CET	47494	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:04.998816013 CET	12345	47492	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:04.999448061 CET	12345	47494	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:04.999602079 CET	47494	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:04.999728918 CET	47494	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:05.118968010 CET	12345	47494	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:06.052521944 CET	12345	47494	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:06.052609921 CET	12345	47494	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:06.052664995 CET	47494	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:06.052721977 CET	47494	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:06.053288937 CET	47496	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:06.172777891 CET	12345	47494	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:06.172818899 CET	12345	47496	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:06.172943115 CET	47496	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:06.173018932 CET	47496	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:06.293715000 CET	12345	47496	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:07.225523949 CET	12345	47496	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:07.225593090 CET	12345	47496	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:07.225792885 CET	47496	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:07.225925922 CET	47496	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:07.226670980 CET	47498	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:07.345294952 CET	12345	47496	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:07.345889091 CET	12345	47498	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:07.345999956 CET	47498	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:07.346134901 CET	47498	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:07.465495110 CET	12345	47498	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:08.399986982 CET	12345	47498	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:08.400005102 CET	12345	47498	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:08.400305033 CET	47498	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:08.400465012 CET	47498	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:08.401180029 CET	47500	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:08.519795895 CET	12345	47498	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:08.520559072 CET	12345	47500	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:08.520670891 CET	47500	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:08.520838976 CET	47500	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:08.640383959 CET	12345	47500	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:09.572596073 CET	12345	47500	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:09.572714090 CET	12345	47500	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:09.572722912 CET	47500	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:09.572786093 CET	47500	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:09.573409081 CET	47502	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:09.715200901 CET	12345	47500	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:09.715213060 CET	12345	47502	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:09.715378046 CET	47502	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:09.715459108 CET	47502	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:09.834966898 CET	12345	47502	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:10.768032074 CET	12345	47502	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:10.768162966 CET	47502	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:10.768199921 CET	12345	47502	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:10.768254995 CET	47502	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:10.769015074 CET	47504	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:10.894870043 CET	12345	47502	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:10.895575047 CET	12345	47504	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:10.895752907 CET	47504	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:10.895917892 CET	47504	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:11.015512943 CET	12345	47504	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:11.949894905 CET	12345	47504	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:11.950043917 CET	12345	47504	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:11.950058937 CET	47504	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:11.950122118 CET	47504	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:11.950866938 CET	47506	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:12.069798946 CET	12345	47504	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:12.070600986 CET	12345	47506	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:12.070770025 CET	47506	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:12.070770025 CET	47506	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:12.190191031 CET	12345	47506	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:13.125576019 CET	12345	47506	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:13.125647068 CET	12345	47506	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:13.125674963 CET	47506	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:13.125756979 CET	47506	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:13.126281023 CET	47508	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:13.245699883 CET	12345	47506	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:13.246114016 CET	12345	47508	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:13.246212006 CET	47508	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:13.246298075 CET	47508	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:13.366095066 CET	12345	47508	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:14.298230886 CET	12345	47508	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:14.298352957 CET	47508	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:14.298418045 CET	12345	47508	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:14.298476934 CET	47508	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:14.299290895 CET	47510	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:14.417957067 CET	12345	47508	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:14.418590069 CET	12345	47510	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:14.418642998 CET	47510	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:14.418719053 CET	47510	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:14.538233995 CET	12345	47510	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:15.474244118 CET	12345	47510	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:15.474319935 CET	12345	47510	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:15.474390984 CET	47510	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:15.474457979 CET	47510	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:15.475173950 CET	47512	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:15.593750000 CET	12345	47510	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:15.594748974 CET	12345	47512	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:15.594873905 CET	47512	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:15.594938993 CET	47512	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:15.714308977 CET	12345	47512	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:16.647099972 CET	12345	47512	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:16.647197008 CET	12345	47512	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:16.647226095 CET	47512	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:16.647279978 CET	47512	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:16.647941113 CET	47514	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:16.767014980 CET	12345	47512	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:16.767929077 CET	12345	47514	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:16.768030882 CET	47514	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:16.768223047 CET	47514	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:16.888537884 CET	12345	47514	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:17.820904970 CET	12345	47514	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:17.821089983 CET	12345	47514	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:17.821158886 CET	47514	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:17.821240902 CET	47514	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:17.821971893 CET	47516	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:17.940834045 CET	12345	47514	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:17.941931009 CET	12345	47516	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:17.942055941 CET	47516	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:17.942136049 CET	47516	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:18.061981916 CET	12345	47516	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:18.994086027 CET	12345	47516	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:18.994237900 CET	12345	47516	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:18.994259119 CET	47516	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:18.994328976 CET	47516	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:18.995034933 CET	47518	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:19.115747929 CET	12345	47516	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:19.115761995 CET	12345	47518	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:19.115886927 CET	47518	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:19.115962982 CET	47518	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:19.235599041 CET	12345	47518	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:20.181513071 CET	12345	47518	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:20.181674004 CET	47518	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:20.181782961 CET	12345	47518	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:20.181920052 CET	47518	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:20.182527065 CET	47520	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:20.302382946 CET	12345	47518	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:20.303057909 CET	12345	47520	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:20.303198099 CET	47520	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:20.303242922 CET	47520	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:20.423964024 CET	12345	47520	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:21.356869936 CET	12345	47520	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:21.356899977 CET	12345	47520	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:21.357053041 CET	47520	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:21.357085943 CET	47520	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:21.357707024 CET	47522	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:21.476738930 CET	12345	47520	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:21.477478981 CET	12345	47522	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:21.477576017 CET	47522	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:21.477662086 CET	47522	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:21.598809004 CET	12345	47522	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:22.530101061 CET	12345	47522	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:22.530225992 CET	47522	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:22.530261040 CET	12345	47522	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:22.530325890 CET	47522	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:22.531160116 CET	47524	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:22.649703026 CET	12345	47522	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:22.650610924 CET	12345	47524	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:22.650748968 CET	47524	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:22.650849104 CET	47524	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:22.770113945 CET	12345	47524	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:23.722749949 CET	12345	47524	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:23.722872972 CET	12345	47524	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:23.723021030 CET	47524	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:23.723047972 CET	47524	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:23.723628998 CET	47526	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:23.909356117 CET	12345	47524	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:23.909399033 CET	12345	47526	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:23.909485102 CET	47526	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:23.909533024 CET	47526	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:24.028871059 CET	12345	47526	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:24.964097977 CET	12345	47526	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:24.964221954 CET	47526	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:24.964323997 CET	12345	47526	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:24.964395046 CET	47526	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:24.965204954 CET	47528	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:25.085721970 CET	12345	47526	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:25.086513042 CET	12345	47528	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:25.086601973 CET	47528	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:25.086786032 CET	47528	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:25.206197023 CET	12345	47528	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:26.140367031 CET	12345	47528	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:26.140467882 CET	12345	47528	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:26.140526056 CET	47528	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:26.140597105 CET	47528	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:26.141237974 CET	47530	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:26.261034966 CET	12345	47528	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:26.261753082 CET	12345	47530	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:26.261842012 CET	47530	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:26.261960030 CET	47530	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:26.381444931 CET	12345	47530	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:27.313039064 CET	12345	47530	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:27.313138962 CET	12345	47530	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:27.313157082 CET	47530	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:27.313225031 CET	47530	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:27.313867092 CET	47532	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:27.432904005 CET	12345	47530	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:27.433646917 CET	12345	47532	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:27.433779001 CET	47532	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:27.433959007 CET	47532	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:27.553205013 CET	12345	47532	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:28.508424044 CET	12345	47532	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:28.508450031 CET	12345	47532	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:28.508595943 CET	47532	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:28.508671999 CET	47532	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:28.509269953 CET	47534	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:28.630342960 CET	12345	47532	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:28.631123066 CET	12345	47534	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:28.631256104 CET	47534	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:28.631331921 CET	47534	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:28.758476973 CET	12345	47534	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:29.712204933 CET	12345	47534	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:29.712294102 CET	12345	47534	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:29.712506056 CET	47534	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:29.712666035 CET	47534	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:29.713373899 CET	47536	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:29.833439112 CET	12345	47534	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:29.834233046 CET	12345	47536	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:29.834391117 CET	47536	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:29.834485054 CET	47536	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:29.953952074 CET	12345	47536	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:30.904202938 CET	12345	47536	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:30.904324055 CET	12345	47536	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:30.904360056 CET	47536	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:30.904475927 CET	47536	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:30.905097008 CET	47538	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:31.023883104 CET	12345	47536	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:31.024676085 CET	12345	47538	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:31.024771929 CET	47538	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:31.024864912 CET	47538	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:31.145678997 CET	12345	47538	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:32.076560020 CET	12345	47538	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:32.076610088 CET	12345	47538	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:32.076752901 CET	47538	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:32.076837063 CET	47538	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:32.077455044 CET	47540	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:32.196173906 CET	12345	47538	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:32.196732998 CET	12345	47540	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:32.196976900 CET	47540	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:32.197058916 CET	47540	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:32.316401005 CET	12345	47540	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:33.254751921 CET	12345	47540	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:33.254957914 CET	12345	47540	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:33.254980087 CET	47540	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:33.255151033 CET	47540	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:33.255930901 CET	47542	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:33.374486923 CET	12345	47540	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:33.375180960 CET	12345	47542	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:33.375256062 CET	47542	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:33.375329018 CET	47542	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:33.494777918 CET	12345	47542	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:34.428906918 CET	12345	47542	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:34.429034948 CET	47542	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:34.429208994 CET	12345	47542	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:34.429296970 CET	47542	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:34.429899931 CET	47544	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:34.548614025 CET	12345	47542	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:34.549165964 CET	12345	47544	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:34.549406052 CET	47544	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:34.549603939 CET	47544	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:34.671271086 CET	12345	47544	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:35.602864027 CET	12345	47544	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:35.602994919 CET	12345	47544	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:35.603034973 CET	47544	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:35.603086948 CET	47544	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:35.603744984 CET	47546	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:35.722609043 CET	12345	47544	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:35.724883080 CET	12345	47546	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:35.724972010 CET	47546	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:35.725039005 CET	47546	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:35.844357014 CET	12345	47546	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:36.778301001 CET	12345	47546	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:36.778331995 CET	12345	47546	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:36.778489113 CET	47546	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:36.778562069 CET	47546	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:36.779273987 CET	47548	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:36.899296999 CET	12345	47546	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:36.899775982 CET	12345	47548	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:36.899872065 CET	47548	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:36.899960041 CET	47548	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:37.019697905 CET	12345	47548	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:37.968841076 CET	12345	47548	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:37.968951941 CET	12345	47548	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:37.969008923 CET	47548	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:37.969127893 CET	47548	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:37.969753981 CET	47550	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:38.088787079 CET	12345	47548	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:38.089077950 CET	12345	47550	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:38.089169025 CET	47550	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:38.089277983 CET	47550	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:38.208657980 CET	12345	47550	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:39.145793915 CET	12345	47550	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:39.145982981 CET	47550	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:39.146163940 CET	12345	47550	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:39.146234989 CET	47550	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:39.146913052 CET	47552	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:39.265624046 CET	12345	47550	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:39.266242027 CET	12345	47552	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:39.266345978 CET	47552	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:39.266416073 CET	47552	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:39.385688066 CET	12345	47552	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:40.318811893 CET	12345	47552	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:40.319019079 CET	47552	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:40.319134951 CET	12345	47552	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:40.319209099 CET	47552	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:40.319852114 CET	47554	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:40.438447952 CET	12345	47552	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:40.439201117 CET	12345	47554	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:40.439289093 CET	47554	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:40.439368010 CET	47554	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:40.562110901 CET	12345	47554	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:41.497121096 CET	12345	47554	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:41.497282982 CET	12345	47554	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:41.497416973 CET	47554	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:41.497416973 CET	47554	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:41.498053074 CET	47556	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:41.616772890 CET	12345	47554	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:41.617393017 CET	12345	47556	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:41.617562056 CET	47556	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:41.617669106 CET	47556	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:41.737381935 CET	12345	47556	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:42.669331074 CET	12345	47556	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:42.669514894 CET	12345	47556	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:42.669523954 CET	47556	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:42.669691086 CET	47556	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:42.670542002 CET	47558	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:42.789231062 CET	12345	47556	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:42.790077925 CET	12345	47558	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:42.790205002 CET	47558	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:42.790363073 CET	47558	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:42.909575939 CET	12345	47558	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:43.841993093 CET	12345	47558	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:43.842148066 CET	47558	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:43.842535973 CET	12345	47558	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:43.842618942 CET	47558	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:43.843250990 CET	47560	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:43.962419033 CET	12345	47558	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:43.962908983 CET	12345	47560	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:43.963088036 CET	47560	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:43.963239908 CET	47560	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:44.083571911 CET	12345	47560	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:45.019114971 CET	12345	47560	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:45.019222021 CET	12345	47560	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:45.019396067 CET	47560	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:45.019556046 CET	47560	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:45.020167112 CET	47562	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:45.139404058 CET	12345	47560	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:45.139911890 CET	12345	47562	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:45.139998913 CET	47562	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:45.140057087 CET	47562	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:45.260159016 CET	12345	47562	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:46.193473101 CET	12345	47562	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:46.193634033 CET	47562	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:46.193716049 CET	12345	47562	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:46.193778038 CET	47562	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:46.194375992 CET	47564	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:46.313123941 CET	12345	47562	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:46.313764095 CET	12345	47564	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:46.313904047 CET	47564	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:46.313986063 CET	47564	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:46.433300972 CET	12345	47564	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:47.380564928 CET	12345	47564	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:47.380611897 CET	12345	47564	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:47.380697966 CET	47564	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:47.380764961 CET	47564	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:47.381340027 CET	47566	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:47.500236988 CET	12345	47564	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:47.500631094 CET	12345	47566	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:47.500731945 CET	47566	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:47.500808001 CET	47566	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:47.623025894 CET	12345	47566	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:48.571260929 CET	12345	47566	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:48.571403980 CET	12345	47566	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:48.571506023 CET	47566	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:48.571590900 CET	47566	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:48.572419882 CET	47568	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:48.690979958 CET	12345	47566	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:48.691946983 CET	12345	47568	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:48.692126036 CET	47568	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:48.692198992 CET	47568	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:48.811435938 CET	12345	47568	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:49.755640030 CET	12345	47568	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:49.755683899 CET	12345	47568	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:49.755886078 CET	47568	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:49.756012917 CET	47568	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:49.756764889 CET	47570	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:49.875394106 CET	12345	47568	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:49.876199007 CET	12345	47570	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:49.876295090 CET	47570	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:49.876377106 CET	47570	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:49.996035099 CET	12345	47570	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:50.965450048 CET	12345	47570	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:50.965477943 CET	12345	47570	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:50.965612888 CET	47570	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:50.965687990 CET	47570	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:50.966391087 CET	47572	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:51.086707115 CET	12345	47570	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:51.087413073 CET	12345	47572	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:51.087496996 CET	47572	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:51.087644100 CET	47572	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:51.211740017 CET	12345	47572	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:52.146209955 CET	12345	47572	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:52.146311045 CET	12345	47572	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:52.146373034 CET	47572	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:52.146461964 CET	47572	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:52.147073030 CET	47574	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:52.266339064 CET	12345	47572	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:52.266968966 CET	12345	47574	93.123.85.251	192.168.2.15
Dec 10, 2024 18:40:52.267050028 CET	47574	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:52.267132044 CET	47574	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:40:52.386502981 CET	12345	47574	93.123.85.251	192.168.2.15
Dec 10, 2024 18:41:52.980694056 CET	12345	47574	93.123.85.251	192.168.2.15
Dec 10, 2024 18:41:52.980886936 CET	47574	12345	192.168.2.15	93.123.85.251
Dec 10, 2024 18:41:53.232507944 CET	12345	47574	93.123.85.251	192.168.2.15
Dec 10, 2024 18:41:53.232645988 CET	47574	12345	192.168.2.15	93.123.85.251

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 18:41:10.234636068 CET	50264	53	192.168.2.15	1.1.1.1
Dec 10, 2024 18:41:10.234703064 CET	49673	53	192.168.2.15	1.1.1.1
Dec 10, 2024 18:41:10.371694088 CET	53	49673	1.1.1.1	192.168.2.15
Dec 10, 2024 18:41:10.487339973 CET	53	50264	1.1.1.1	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 10, 2024 18:41:10.234636068 CET	192.168.2.15	1.1.1.1	0xc9b5	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 18:41:10.234703064 CET	192.168.2.15	1.1.1.1	0xf3ae	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 10, 2024 18:41:10.487339973 CET	1.1.1.1	192.168.2.15	0xc9b5	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 10, 2024 18:41:10.487339973 CET	1.1.1.1	192.168.2.15	0xc9b5	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: a-r.m-4.Sakura.elf PID: 5512, Parent PID: 5439

General

Start time (UTC):	17:38:24
Start date (UTC):	10/12/2024
Path:	/tmp/a-r.m-4.Sakura.elf
Arguments:	/tmp/a-r.m-4.Sakura.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: a-r.m-4.Sakura.elf PID: 5514, Parent PID: 5512

General

Start time (UTC):	17:38:24
Start date (UTC):	10/12/2024
Path:	/tmp/a-r.m-4.Sakura.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: a-r.m-4.Sakura.elf PID: 5516, Parent PID: 5514

General

Start time (UTC):	17:38:24
Start date (UTC):	10/12/2024
Path:	/tmp/a-r.m-4.Sakura.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: dash PID: 5558, Parent PID: 3670

General

Start time (UTC):	17:38:50
Start date (UTC):	10/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5558, Parent PID: 3670

General

Start time (UTC):	17:38:50
Start date (UTC):	10/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.sHnnf05VNU /tmp/tmp.xOePOKeBDB /tmp/tmp.jD6Vjpa6wn
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 5559, Parent PID: 3670

General

Start time (UTC):	17:38:50
Start date (UTC):	10/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5559, Parent PID: 3670

General

Start time (UTC):	17:38:50
Start date (UTC):	10/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.sHnnf05VNU /tmp/tmp.xOePOKeBDB /tmp/tmp.jD6Vjpa6wn
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report a-r.m-4.Sakura.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: a-r.m-4.Sakura.elf PID: 5512, Parent PID: 5439

General

Chronological Activities

Analysis Process: a-r.m-4.Sakura.elf PID: 5514, Parent PID: 5512

General

Chronological Activities

Analysis Process: a-r.m-4.Sakura.elf PID: 5516, Parent PID: 5514

General

Chronological Activities

Analysis Process: dash PID: 5558, Parent PID: 3670

General

Linux Analysis Report
a-r.m-4.Sakura.elf