Edit tour

Linux Analysis Report
armv4l.elf

Overview

General Information

Sample name:armv4l.elf
Analysis ID:1575964
MD5:887f26803ed4afc543e5ecc19f3b951c
SHA1:1efcd1e5c4e1be434f95451ea9186c3caf0c8e41
SHA256:66f4a59d119d7335379847785e26a4a6f22b361023e9c8116bda48f5e4d02469
Tags:elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai
Score:100
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected Gafgyt
Yara detected Mirai
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Executes the "rm" command used to delete files or directories
Sample contains strings that are user agent strings indicative of HTTP manipulation
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:41.0.0 Charoite
Analysis ID:1575964
Start date and time:2024-12-16 12:43:51 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 49s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:armv4l.elf
Detection:MAL
Classification:mal100.spre.troj.linELF@0/0@2/0
  • VT rate limit hit for: armv4l.elf
Command:/tmp/armv4l.elf
PID:5534
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:
  • system is lnxubuntu20
  • dash New Fork (PID: 5505, Parent: 3670)
  • rm (PID: 5505, Parent: 3670, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.O5OwcA7doe /tmp/tmp.qNcchs80ZU /tmp/tmp.xnGa5YhFz5
  • dash New Fork (PID: 5506, Parent: 3670)
  • rm (PID: 5506, Parent: 3670, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.O5OwcA7doe /tmp/tmp.qNcchs80ZU /tmp/tmp.xnGa5YhFz5
  • armv4l.elf (PID: 5534, Parent: 5439, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/armv4l.elf
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
armv4l.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    armv4l.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      armv4l.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
      • 0xfbd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfcb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfcc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfcdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfcf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfd04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfd18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfd2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfd40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfd54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0xfd68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      SourceRuleDescriptionAuthorStrings
      5534.1.00007fafd4017000.00007fafd4029000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
        5534.1.00007fafd4017000.00007fafd4029000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
        • 0xfbd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfcb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfcc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfcdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfcf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfd04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfd18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfd2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfd40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfd54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0xfd68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        5536.1.00007fafd4017000.00007fafd4029000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
          5536.1.00007fafd4017000.00007fafd4029000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
          • 0xfbd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfcb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfcc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfcdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfcf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfd04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfd18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfd2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfd40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfd54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0xfd68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          Process Memory Space: armv4l.elf PID: 5534JoeSecurity_Mirai_8Yara detected MiraiJoe Security
            Click to see the 3 entries
            TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
            2024-12-16T12:44:30.396636+010028465261A Network Trojan was detected192.168.2.1555116150.241.88.13225565TCP
            2024-12-16T12:44:32.729570+010028465261A Network Trojan was detected192.168.2.1555118150.241.88.13225565TCP
            2024-12-16T12:44:35.106541+010028465261A Network Trojan was detected192.168.2.1555120150.241.88.13225565TCP
            2024-12-16T12:44:37.445353+010028465261A Network Trojan was detected192.168.2.1555122150.241.88.13225565TCP
            2024-12-16T12:44:39.781476+010028465261A Network Trojan was detected192.168.2.1555124150.241.88.13225565TCP
            2024-12-16T12:44:42.167613+010028465261A Network Trojan was detected192.168.2.1555126150.241.88.13225565TCP
            2024-12-16T12:44:44.513772+010028465261A Network Trojan was detected192.168.2.1555128150.241.88.13225565TCP
            2024-12-16T12:44:46.852575+010028465261A Network Trojan was detected192.168.2.1555130150.241.88.13225565TCP
            2024-12-16T12:44:49.199449+010028465261A Network Trojan was detected192.168.2.1555132150.241.88.13225565TCP
            2024-12-16T12:44:51.588682+010028465261A Network Trojan was detected192.168.2.1555134150.241.88.13225565TCP
            2024-12-16T12:44:53.913738+010028465261A Network Trojan was detected192.168.2.1555136150.241.88.13225565TCP
            2024-12-16T12:44:56.243445+010028465261A Network Trojan was detected192.168.2.1555138150.241.88.13225565TCP
            2024-12-16T12:44:58.618920+010028465261A Network Trojan was detected192.168.2.1555140150.241.88.13225565TCP
            2024-12-16T12:45:00.949565+010028465261A Network Trojan was detected192.168.2.1555142150.241.88.13225565TCP
            2024-12-16T12:45:03.344073+010028465261A Network Trojan was detected192.168.2.1555144150.241.88.13225565TCP
            2024-12-16T12:45:05.680956+010028465261A Network Trojan was detected192.168.2.1555146150.241.88.13225565TCP
            2024-12-16T12:45:08.013079+010028465261A Network Trojan was detected192.168.2.1555148150.241.88.13225565TCP
            2024-12-16T12:45:10.337690+010028465261A Network Trojan was detected192.168.2.1555150150.241.88.13225565TCP
            2024-12-16T12:45:12.683250+010028465261A Network Trojan was detected192.168.2.1555152150.241.88.13225565TCP
            2024-12-16T12:45:15.042936+010028465261A Network Trojan was detected192.168.2.1555154150.241.88.13225565TCP
            2024-12-16T12:45:17.434134+010028465261A Network Trojan was detected192.168.2.1555156150.241.88.13225565TCP
            2024-12-16T12:45:19.759641+010028465261A Network Trojan was detected192.168.2.1555158150.241.88.13225565TCP
            2024-12-16T12:45:22.130197+010028465261A Network Trojan was detected192.168.2.1555160150.241.88.13225565TCP
            2024-12-16T12:45:24.467279+010028465261A Network Trojan was detected192.168.2.1555162150.241.88.13225565TCP
            2024-12-16T12:45:26.858049+010028465261A Network Trojan was detected192.168.2.1555164150.241.88.13225565TCP
            2024-12-16T12:45:29.197773+010028465261A Network Trojan was detected192.168.2.1555166150.241.88.13225565TCP
            2024-12-16T12:45:31.525098+010028465261A Network Trojan was detected192.168.2.1555168150.241.88.13225565TCP
            2024-12-16T12:45:33.901697+010028465261A Network Trojan was detected192.168.2.1555170150.241.88.13225565TCP
            2024-12-16T12:45:36.247100+010028465261A Network Trojan was detected192.168.2.1555172150.241.88.13225565TCP
            2024-12-16T12:45:38.571732+010028465261A Network Trojan was detected192.168.2.1555174150.241.88.13225565TCP
            2024-12-16T12:45:40.899566+010028465261A Network Trojan was detected192.168.2.1555176150.241.88.13225565TCP
            2024-12-16T12:45:43.233516+010028465261A Network Trojan was detected192.168.2.1555178150.241.88.13225565TCP
            2024-12-16T12:45:45.619957+010028465261A Network Trojan was detected192.168.2.1555180150.241.88.13225565TCP
            2024-12-16T12:45:47.995047+010028465261A Network Trojan was detected192.168.2.1555182150.241.88.13225565TCP
            2024-12-16T12:45:50.343865+010028465261A Network Trojan was detected192.168.2.1555184150.241.88.13225565TCP
            2024-12-16T12:45:52.681690+010028465261A Network Trojan was detected192.168.2.1555186150.241.88.13225565TCP
            2024-12-16T12:45:55.012377+010028465261A Network Trojan was detected192.168.2.1555188150.241.88.13225565TCP
            2024-12-16T12:45:57.356702+010028465261A Network Trojan was detected192.168.2.1555190150.241.88.13225565TCP
            2024-12-16T12:45:59.698239+010028465261A Network Trojan was detected192.168.2.1555192150.241.88.13225565TCP
            2024-12-16T12:46:02.028141+010028465261A Network Trojan was detected192.168.2.1555194150.241.88.13225565TCP
            2024-12-16T12:46:04.401879+010028465261A Network Trojan was detected192.168.2.1555196150.241.88.13225565TCP
            2024-12-16T12:46:06.747589+010028465261A Network Trojan was detected192.168.2.1555198150.241.88.13225565TCP
            2024-12-16T12:46:09.092246+010028465261A Network Trojan was detected192.168.2.1555200150.241.88.13225565TCP
            2024-12-16T12:46:11.433462+010028465261A Network Trojan was detected192.168.2.1555202150.241.88.13225565TCP
            2024-12-16T12:46:13.759426+010028465261A Network Trojan was detected192.168.2.1555204150.241.88.13225565TCP
            2024-12-16T12:46:16.091039+010028465261A Network Trojan was detected192.168.2.1555206150.241.88.13225565TCP
            2024-12-16T12:46:18.415844+010028465261A Network Trojan was detected192.168.2.1555208150.241.88.13225565TCP
            2024-12-16T12:46:20.798634+010028465261A Network Trojan was detected192.168.2.1555210150.241.88.13225565TCP
            2024-12-16T12:46:23.137534+010028465261A Network Trojan was detected192.168.2.1555212150.241.88.13225565TCP
            2024-12-16T12:46:25.481898+010028465261A Network Trojan was detected192.168.2.1555214150.241.88.13225565TCP
            2024-12-16T12:46:27.823379+010028465261A Network Trojan was detected192.168.2.1555216150.241.88.13225565TCP
            2024-12-16T12:46:30.159862+010028465261A Network Trojan was detected192.168.2.1555218150.241.88.13225565TCP
            2024-12-16T12:46:32.500026+010028465261A Network Trojan was detected192.168.2.1555220150.241.88.13225565TCP
            2024-12-16T12:46:34.887432+010028465261A Network Trojan was detected192.168.2.1555222150.241.88.13225565TCP
            2024-12-16T12:46:37.213200+010028465261A Network Trojan was detected192.168.2.1555224150.241.88.13225565TCP
            2024-12-16T12:46:39.541251+010028465261A Network Trojan was detected192.168.2.1555226150.241.88.13225565TCP
            2024-12-16T12:46:41.869845+010028465261A Network Trojan was detected192.168.2.1555228150.241.88.13225565TCP
            2024-12-16T12:46:44.201481+010028465261A Network Trojan was detected192.168.2.1555230150.241.88.13225565TCP
            2024-12-16T12:46:46.544753+010028465261A Network Trojan was detected192.168.2.1555232150.241.88.13225565TCP
            2024-12-16T12:46:48.889663+010028465261A Network Trojan was detected192.168.2.1555234150.241.88.13225565TCP
            2024-12-16T12:46:51.248200+010028465261A Network Trojan was detected192.168.2.1555236150.241.88.13225565TCP
            2024-12-16T12:46:53.640823+010028465261A Network Trojan was detected192.168.2.1555238150.241.88.13225565TCP
            2024-12-16T12:46:56.027580+010028465261A Network Trojan was detected192.168.2.1555240150.241.88.13225565TCP
            2024-12-16T12:46:58.405932+010028465261A Network Trojan was detected192.168.2.1555242150.241.88.13225565TCP
            2024-12-16T12:47:00.746213+010028465261A Network Trojan was detected192.168.2.1555244150.241.88.13225565TCP
            2024-12-16T12:47:03.073643+010028465261A Network Trojan was detected192.168.2.1555246150.241.88.13225565TCP
            2024-12-16T12:47:05.406104+010028465261A Network Trojan was detected192.168.2.1555248150.241.88.13225565TCP
            2024-12-16T12:47:07.748800+010028465261A Network Trojan was detected192.168.2.1555250150.241.88.13225565TCP
            2024-12-16T12:47:10.091841+010028465261A Network Trojan was detected192.168.2.1555252150.241.88.13225565TCP
            2024-12-16T12:47:12.480797+010028465261A Network Trojan was detected192.168.2.1555254150.241.88.13225565TCP
            2024-12-16T12:47:14.810216+010028465261A Network Trojan was detected192.168.2.1555256150.241.88.13225565TCP
            2024-12-16T12:47:17.136237+010028465261A Network Trojan was detected192.168.2.1555258150.241.88.13225565TCP
            2024-12-16T12:47:19.472423+010028465261A Network Trojan was detected192.168.2.1555260150.241.88.13225565TCP
            2024-12-16T12:47:21.855872+010028465261A Network Trojan was detected192.168.2.1555262150.241.88.13225565TCP
            2024-12-16T12:47:24.201415+010028465261A Network Trojan was detected192.168.2.1555264150.241.88.13225565TCP
            2024-12-16T12:47:26.526907+010028465261A Network Trojan was detected192.168.2.1555266150.241.88.13225565TCP
            2024-12-16T12:47:28.924786+010028465261A Network Trojan was detected192.168.2.1555268150.241.88.13225565TCP
            2024-12-16T12:47:31.310149+010028465261A Network Trojan was detected192.168.2.1555270150.241.88.13225565TCP
            2024-12-16T12:47:33.703777+010028465261A Network Trojan was detected192.168.2.1555272150.241.88.13225565TCP
            2024-12-16T12:47:36.093714+010028465261A Network Trojan was detected192.168.2.1555274150.241.88.13225565TCP
            2024-12-16T12:47:38.484506+010028465261A Network Trojan was detected192.168.2.1555276150.241.88.13225565TCP
            2024-12-16T12:47:40.822749+010028465261A Network Trojan was detected192.168.2.1555278150.241.88.13225565TCP
            2024-12-16T12:47:43.155642+010028465261A Network Trojan was detected192.168.2.1555280150.241.88.13225565TCP
            2024-12-16T12:47:45.480492+010028465261A Network Trojan was detected192.168.2.1555282150.241.88.13225565TCP
            2024-12-16T12:47:47.901889+010028465261A Network Trojan was detected192.168.2.1555284150.241.88.13225565TCP
            2024-12-16T12:47:50.412404+010028465261A Network Trojan was detected192.168.2.1555286150.241.88.13225565TCP
            2024-12-16T12:47:53.109247+010028465261A Network Trojan was detected192.168.2.1555288150.241.88.13225565TCP
            2024-12-16T12:47:55.468689+010028465261A Network Trojan was detected192.168.2.1555290150.241.88.13225565TCP
            2024-12-16T12:47:57.811419+010028465261A Network Trojan was detected192.168.2.1555292150.241.88.13225565TCP
            2024-12-16T12:48:00.136229+010028465261A Network Trojan was detected192.168.2.1555294150.241.88.13225565TCP
            2024-12-16T12:48:02.513719+010028465261A Network Trojan was detected192.168.2.1555296150.241.88.13225565TCP

            Click to jump to signature section

            Show All Signature Results

            AV Detection

            barindex
            Source: armv4l.elfAvira: detected
            Source: armv4l.elfMalware Configuration Extractor: Gafgyt {"C2 url": "150.241.88.132:25565"}
            Source: armv4l.elfReversingLabs: Detection: 65%

            Spreading

            barindex
            Source: /tmp/armv4l.elf (PID: 5534)Opens: /proc/net/routeJump to behavior

            Networking

            barindex
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55132 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55166 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55122 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55260 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55130 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55232 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55124 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55296 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55154 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55146 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55128 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55134 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55258 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55138 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55198 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55188 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55144 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55152 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55206 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55278 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55254 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55216 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55190 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55176 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55264 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55118 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55116 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55262 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55136 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55236 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55196 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55148 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55288 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55226 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55150 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55292 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55164 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55170 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55158 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55240 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55172 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55192 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55160 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55126 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55266 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55238 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55230 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55178 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55274 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55182 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55168 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55248 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55184 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55204 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55210 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55200 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55186 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55212 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55142 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55222 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55156 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55270 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55194 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55280 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55162 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55202 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55140 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55180 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55252 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55120 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55208 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55242 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55294 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55214 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55224 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55174 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55284 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55220 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55234 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55268 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55218 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55228 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55246 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55276 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55250 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55256 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55286 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55290 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55244 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55272 -> 150.241.88.132:25565
            Source: Network trafficSuricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:55282 -> 150.241.88.132:25565
            Source: global trafficTCP traffic: 192.168.2.15:55116 -> 150.241.88.132:25565
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: unknownTCP traffic detected without corresponding DNS query: 150.241.88.132
            Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

            System Summary

            barindex
            Source: armv4l.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: 5534.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: 5536.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: Process Memory Space: armv4l.elf PID: 5534, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: Process Memory Space: armv4l.elf PID: 5536, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: armv4l.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: 5534.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: 5536.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: Process Memory Space: armv4l.elf PID: 5534, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: Process Memory Space: armv4l.elf PID: 5536, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: classification engineClassification label: mal100.spre.troj.linELF@0/0@2/0
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: armv4l.elfELF static info symbol of initial sample: libc/string/arm/_memcpy.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/string/arm/bcopy.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/string/arm/memcpy.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/string/arm/memmove.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/string/arm/memset.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/string/arm/strcmp.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/string/arm/strlen.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
            Source: armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S
            Source: /usr/bin/dash (PID: 5505)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.O5OwcA7doe /tmp/tmp.qNcchs80ZU /tmp/tmp.xnGa5YhFz5Jump to behavior
            Source: /usr/bin/dash (PID: 5506)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.O5OwcA7doe /tmp/tmp.qNcchs80ZU /tmp/tmp.xnGa5YhFz5Jump to behavior
            Source: /tmp/armv4l.elf (PID: 5534)Queries kernel information via 'uname': Jump to behavior
            Source: armv4l.elf, 5534.1.00007ffe178da000.00007ffe178fb000.rw-.sdmp, armv4l.elf, 5536.1.00007ffe178da000.00007ffe178fb000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/armv4l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/armv4l.elf
            Source: armv4l.elf, 5534.1.000055f74485f000.000055f74498d000.rw-.sdmp, armv4l.elf, 5536.1.000055f74485f000.000055f74498d000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
            Source: armv4l.elf, 5534.1.000055f74485f000.000055f74498d000.rw-.sdmp, armv4l.elf, 5536.1.000055f74485f000.000055f74498d000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
            Source: armv4l.elf, 5534.1.00007ffe178da000.00007ffe178fb000.rw-.sdmp, armv4l.elf, 5536.1.00007ffe178da000.00007ffe178fb000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

            Stealing of Sensitive Information

            barindex
            Source: Yara matchFile source: armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: 5534.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5536.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: armv4l.elf PID: 5534, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: armv4l.elf PID: 5536, type: MEMORYSTR
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

            Remote Access Functionality

            barindex
            Source: Yara matchFile source: armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: 5534.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5536.1.00007fafd4017000.00007fafd4029000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: armv4l.elf PID: 5534, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: armv4l.elf PID: 5536, type: MEMORYSTR
            ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
            Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
            File Deletion
            OS Credential Dumping11
            Security Software Discovery
            Remote ServicesData from Local System1
            Data Obfuscation
            Exfiltration Over Other Network MediumAbuse Accessibility Features
            CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
            Remote System Discovery
            Remote Desktop ProtocolData from Removable Media1
            Non-Standard Port
            Exfiltration Over BluetoothNetwork Denial of Service
            Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
            Non-Application Layer Protocol
            Automated ExfiltrationData Encrypted for Impact
            Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
            Application Layer Protocol
            Traffic DuplicationData Destruction
            {
              "C2 url": "150.241.88.132:25565"
            }
            Hide Legend

            Legend:

            • Process
            • Signature
            • Created File
            • DNS/IP Info
            • Is Dropped
            • Number of created Files
            • Is malicious
            • Internet
            behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1575964 Sample: armv4l.elf Startdate: 16/12/2024 Architecture: LINUX Score: 100 17 150.241.88.132, 25565, 55116, 55118 TECNALIAES Spain 2->17 19 daisy.ubuntu.com 2->19 21 Suricata IDS alerts for network traffic 2->21 23 Found malware configuration 2->23 25 Malicious sample detected (through community Yara rule) 2->25 27 4 other signatures 2->27 8 dash rm armv4l.elf 2->8         started        11 dash rm 2->11         started        signatures3 process4 signatures5 29 Opens /proc/net/* files useful for finding connected devices and routers 8->29 13 armv4l.elf 8->13         started        process6 process7 15 armv4l.elf 13->15         started       

            This section contains all screenshots as thumbnails, including those not shown in the slideshow.


            windows-stand
            SourceDetectionScannerLabelLink
            armv4l.elf66%ReversingLabsLinux.Backdoor.Gafgyt
            armv4l.elf100%AviraLINUX/Gafgyt.opnd
            No Antivirus matches
            No Antivirus matches
            No Antivirus matches

            Download Network PCAP: filteredfull

            NameIPActiveMaliciousAntivirus DetectionReputation
            daisy.ubuntu.com
            162.213.35.24
            truefalse
              high
              NameMaliciousAntivirus DetectionReputation
              150.241.88.132:25565true
                unknown
                • No. of IPs < 25%
                • 25% < No. of IPs < 50%
                • 50% < No. of IPs < 75%
                • 75% < No. of IPs
                IPDomainCountryFlagASNASN NameMalicious
                150.241.88.132
                unknownSpain
                207714TECNALIAEStrue
                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                150.241.88.132i586.elfGet hashmaliciousGafgyt, MiraiBrowse
                  armv5l.elfGet hashmaliciousGafgyt, MiraiBrowse
                    armv7l.elfGet hashmaliciousGafgyt, MiraiBrowse
                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                      daisy.ubuntu.comi586.elfGet hashmaliciousGafgyt, MiraiBrowse
                      • 162.213.35.24
                      armv5l.elfGet hashmaliciousGafgyt, MiraiBrowse
                      • 162.213.35.24
                      main_arm6.elfGet hashmaliciousMiraiBrowse
                      • 162.213.35.25
                      arm7.elfGet hashmaliciousMiraiBrowse
                      • 162.213.35.25
                      i686.elfGet hashmaliciousMiraiBrowse
                      • 162.213.35.25
                      mips.elfGet hashmaliciousMiraiBrowse
                      • 162.213.35.24
                      main_arm6.elfGet hashmaliciousMiraiBrowse
                      • 162.213.35.24
                      armv5l.elfGet hashmaliciousMiraiBrowse
                      • 162.213.35.24
                      armv7l.elfGet hashmaliciousMiraiBrowse
                      • 162.213.35.24
                      s-h.4-.Sakura.elfGet hashmaliciousGafgyt, MiraiBrowse
                      • 162.213.35.25
                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                      TECNALIAESi586.elfGet hashmaliciousGafgyt, MiraiBrowse
                      • 150.241.88.132
                      armv5l.elfGet hashmaliciousGafgyt, MiraiBrowse
                      • 150.241.88.132
                      file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, VidarBrowse
                      • 150.241.91.218
                      file.exeGet hashmaliciousSmokeLoaderBrowse
                      • 150.241.91.218
                      9RM52QaURq.exeGet hashmaliciousCredGrabber, Meduza StealerBrowse
                      • 150.241.95.163
                      HZ1BUCfTne.exeGet hashmaliciousCredGrabber, Meduza StealerBrowse
                      • 150.241.95.163
                      9RM52QaURq.exeGet hashmaliciousCredGrabber, Meduza StealerBrowse
                      • 150.241.95.163
                      HZ1BUCfTne.exeGet hashmaliciousCredGrabber, Meduza StealerBrowse
                      • 150.241.95.163
                      eMfPZvOkbJ.exeGet hashmaliciousCredGrabber, Meduza StealerBrowse
                      • 150.241.92.160
                      G13VTHRtIa.exeGet hashmaliciousCredGrabber, Meduza StealerBrowse
                      • 150.241.92.160
                      No context
                      No context
                      No created / dropped files found
                      File type:ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
                      Entropy (8bit):5.957270571765064
                      TrID:
                      • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                      File name:armv4l.elf
                      File size:108'417 bytes
                      MD5:887f26803ed4afc543e5ecc19f3b951c
                      SHA1:1efcd1e5c4e1be434f95451ea9186c3caf0c8e41
                      SHA256:66f4a59d119d7335379847785e26a4a6f22b361023e9c8116bda48f5e4d02469
                      SHA512:f2ee88b1260dffa53632eda5adb1822094ce29d40a7f546802c5c02b6921074821f27f91ba9926f2d318d4c4b837be1580e51a32e86ae16a1051534f49fbf8b1
                      SSDEEP:3072:MSk+U6m1qW/w8xlPbiRq6AmkZrQAhPDCXFke:U6mgW/1xlPXmkZrQAhPDCXFke
                      TLSH:C5B31845F8408727C3D327BAE78E478D3B36579467DB33116A38BEB42BC17892E29520
                      File Content Preview:.ELF...a..........(.........4....?......4. ...(.....................T...T................ ... ... .......g..........Q.td..................................-...L."....<..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

                      ELF header

                      Class:ELF32
                      Data:2's complement, little endian
                      Version:1 (current)
                      Machine:ARM
                      Version Number:0x1
                      Type:EXEC (Executable file)
                      OS/ABI:ARM - ABI
                      ABI Version:0
                      Entry Point Address:0x8190
                      Flags:0x202
                      ELF Header Size:52
                      Program Header Offset:52
                      Program Header Size:32
                      Number of Program Headers:3
                      Section Header Offset:81820
                      Section Header Size:40
                      Number of Section Headers:20
                      Header String Table Index:17
                      NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                      NULL0x00x00x00x00x0000
                      .initPROGBITS0x80940x940x180x00x6AX004
                      .textPROGBITS0x80b00xb00xf3f80x00x6AX0016
                      .finiPROGBITS0x174a80xf4a80x140x00x6AX004
                      .rodataPROGBITS0x174bc0xf4bc0x26940x00x2A004
                      .eh_framePROGBITS0x19b500x11b500x40x00x2A004
                      .ctorsPROGBITS0x220000x120000x80x00x3WA004
                      .dtorsPROGBITS0x220080x120080x80x00x3WA004
                      .jcrPROGBITS0x220100x120100x40x00x3WA004
                      .dataPROGBITS0x220140x120140x3a00x00x3WA004
                      .bssNOBITS0x223b40x123b40x635c0x00x3WA004
                      .commentPROGBITS0x00x123b40xa900x00x0001
                      .debug_arangesPROGBITS0x00x12e480x1200x00x0008
                      .debug_infoPROGBITS0x00x12f680x5780x00x0001
                      .debug_abbrevPROGBITS0x00x134e00xb40x00x0001
                      .debug_linePROGBITS0x00x135940x8bd0x00x0001
                      .debug_framePROGBITS0x00x13e540xa00x00x0004
                      .shstrtabSTRTAB0x00x13ef40xa80x00x0001
                      .symtabSYMTAB0x00x142bc0x41c00x100x0195794
                      .strtabSTRTAB0x00x1847c0x23050x00x0001
                      TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                      LOAD0x00x80000x80000x11b540x11b546.10930x5R E0x8000.init .text .fini .rodata .eh_frame
                      LOAD0x120000x220000x220000x3b40x67102.74050x6RW 0x8000.ctors .dtors .jcr .data .bss
                      GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                      NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                      .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                      .symtab0x80940SECTION<unknown>DEFAULT1
                      .symtab0x80b00SECTION<unknown>DEFAULT2
                      .symtab0x174a80SECTION<unknown>DEFAULT3
                      .symtab0x174bc0SECTION<unknown>DEFAULT4
                      .symtab0x19b500SECTION<unknown>DEFAULT5
                      .symtab0x220000SECTION<unknown>DEFAULT6
                      .symtab0x220080SECTION<unknown>DEFAULT7
                      .symtab0x220100SECTION<unknown>DEFAULT8
                      .symtab0x220140SECTION<unknown>DEFAULT9
                      .symtab0x223b40SECTION<unknown>DEFAULT10
                      .symtab0x00SECTION<unknown>DEFAULT11
                      .symtab0x00SECTION<unknown>DEFAULT12
                      .symtab0x00SECTION<unknown>DEFAULT13
                      .symtab0x00SECTION<unknown>DEFAULT14
                      .symtab0x00SECTION<unknown>DEFAULT15
                      .symtab0x00SECTION<unknown>DEFAULT16
                      .symtab0x00SECTION<unknown>DEFAULT17
                      .symtab0x00SECTION<unknown>DEFAULT18
                      .symtab0x00SECTION<unknown>DEFAULT19
                      $a.symtab0x80940NOTYPE<unknown>DEFAULT1
                      $a.symtab0x174a80NOTYPE<unknown>DEFAULT3
                      $a.symtab0x80b00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x81280NOTYPE<unknown>DEFAULT2
                      $a.symtab0x174b40NOTYPE<unknown>DEFAULT3
                      $a.symtab0x81880NOTYPE<unknown>DEFAULT2
                      $a.symtab0x80a00NOTYPE<unknown>DEFAULT1
                      $a.symtab0x1746c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x174a00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x80a40NOTYPE<unknown>DEFAULT1
                      $a.symtab0x80a80NOTYPE<unknown>DEFAULT1
                      $a.symtab0x174b80NOTYPE<unknown>DEFAULT3
                      $a.symtab0x81900NOTYPE<unknown>DEFAULT2
                      $a.symtab0x81cc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x82a00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x83d80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x84380NOTYPE<unknown>DEFAULT2
                      $a.symtab0x87ec0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x90e40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x956c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x99840NOTYPE<unknown>DEFAULT2
                      $a.symtab0xa83c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xa9a80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xac2c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xb3280NOTYPE<unknown>DEFAULT2
                      $a.symtab0xb47c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xb5e00NOTYPE<unknown>DEFAULT2
                      $a.symtab0xb7580NOTYPE<unknown>DEFAULT2
                      $a.symtab0xc8e80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xca4c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xca680NOTYPE<unknown>DEFAULT2
                      $a.symtab0xcb340NOTYPE<unknown>DEFAULT2
                      $a.symtab0xdb600NOTYPE<unknown>DEFAULT2
                      $a.symtab0xe4000NOTYPE<unknown>DEFAULT2
                      $a.symtab0xec140NOTYPE<unknown>DEFAULT2
                      $a.symtab0xed240NOTYPE<unknown>DEFAULT2
                      $a.symtab0xedf00NOTYPE<unknown>DEFAULT2
                      $a.symtab0xedf40NOTYPE<unknown>DEFAULT2
                      $a.symtab0xee440NOTYPE<unknown>DEFAULT2
                      $a.symtab0xeeb80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xef080NOTYPE<unknown>DEFAULT2
                      $a.symtab0xef300NOTYPE<unknown>DEFAULT2
                      $a.symtab0xef5c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xef880NOTYPE<unknown>DEFAULT2
                      $a.symtab0xefb40NOTYPE<unknown>DEFAULT2
                      $a.symtab0xefe00NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf00c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf05c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf0880NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf0f40NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf1200NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf1500NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf17c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf1a80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf1b00NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf1dc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf1f40NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf2280NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf2400NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf2500NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf2600NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf3000NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf3200NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf3800NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf4880NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf4a40NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf59c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf5a80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf6180NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf6a40NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf6c80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xf70c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfa800NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfaac0NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfad80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfb080NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfb340NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfb600NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfb940NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfbc40NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfbf00NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfca80NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfd140NOTYPE<unknown>DEFAULT2
                      $a.symtab0xfe680NOTYPE<unknown>DEFAULT2
                      $a.symtab0xff580NOTYPE<unknown>DEFAULT2
                      $a.symtab0xffec0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x101140NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1025c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x102600NOTYPE<unknown>DEFAULT2
                      $a.symtab0x102dc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x103680NOTYPE<unknown>DEFAULT2
                      $a.symtab0x104000NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1047c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1053c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x105cc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x106980NOTYPE<unknown>DEFAULT2
                      $a.symtab0x107600NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1076c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x107740NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1090c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x109a00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10b440NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10b900NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10bfc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10c400NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10c9c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10ee80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10fcc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x10fd40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x110000NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1102c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x110580NOTYPE<unknown>DEFAULT2
                      $a.symtab0x110840NOTYPE<unknown>DEFAULT2
                      $a.symtab0x110b00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x110dc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x111340NOTYPE<unknown>DEFAULT2
                      $a.symtab0x111880NOTYPE<unknown>DEFAULT2
                      $a.symtab0x111b40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x111c00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x113100NOTYPE<unknown>DEFAULT2
                      $a.symtab0x117a00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x117b00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x118680NOTYPE<unknown>DEFAULT2
                      $a.symtab0x118dc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1191c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x11a080NOTYPE<unknown>DEFAULT2
                      $a.symtab0x122140NOTYPE<unknown>DEFAULT2
                      $a.symtab0x124e80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x125300NOTYPE<unknown>DEFAULT2
                      $a.symtab0x125480NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1256c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x125a80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x125d40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x127540NOTYPE<unknown>DEFAULT2
                      $a.symtab0x127600NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12a580NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12ac80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12ad80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12b900NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12bc00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12c540NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12d940NOTYPE<unknown>DEFAULT2
                      $a.symtab0x12f780NOTYPE<unknown>DEFAULT2
                      $a.symtab0x130100NOTYPE<unknown>DEFAULT2
                      $a.symtab0x130c80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x131900NOTYPE<unknown>DEFAULT2
                      $a.symtab0x131e00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x132100NOTYPE<unknown>DEFAULT2
                      $a.symtab0x132300NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1329c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x135780NOTYPE<unknown>DEFAULT2
                      $a.symtab0x136dc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1393c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13a240NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13adc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13b380NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13b4c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13c280NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13c5c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13f840NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13fb80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x13fec0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1409c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x141580NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1481c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x148b40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x148ec0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x14a880NOTYPE<unknown>DEFAULT2
                      $a.symtab0x14ad40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x14f980NOTYPE<unknown>DEFAULT2
                      $a.symtab0x150c80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x150fc0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x151a80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x151c00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x152a00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x152b40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1539c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x154180NOTYPE<unknown>DEFAULT2
                      $a.symtab0x154c00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1558c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x155d80NOTYPE<unknown>DEFAULT2
                      $a.symtab0x156280NOTYPE<unknown>DEFAULT2
                      $a.symtab0x156480NOTYPE<unknown>DEFAULT2
                      $a.symtab0x157040NOTYPE<unknown>DEFAULT2
                      $a.symtab0x157600NOTYPE<unknown>DEFAULT2
                      $a.symtab0x158980NOTYPE<unknown>DEFAULT2
                      $a.symtab0x158c40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x159800NOTYPE<unknown>DEFAULT2
                      $a.symtab0x15a840NOTYPE<unknown>DEFAULT2
                      $a.symtab0x15af40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x15b280NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1631c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x164180NOTYPE<unknown>DEFAULT2
                      $a.symtab0x165040NOTYPE<unknown>DEFAULT2
                      $a.symtab0x165100NOTYPE<unknown>DEFAULT2
                      $a.symtab0x166400NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1670c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x1673c0NOTYPE<unknown>DEFAULT2
                      $a.symtab0x167a00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x168e00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x169c40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x16dc40NOTYPE<unknown>DEFAULT2
                      $a.symtab0x172f00NOTYPE<unknown>DEFAULT2
                      $a.symtab0x174180NOTYPE<unknown>DEFAULT2
                      $d.symtab0x220000NOTYPE<unknown>DEFAULT6
                      $d.symtab0x220080NOTYPE<unknown>DEFAULT7
                      $d.symtab0x2201c0NOTYPE<unknown>DEFAULT9
                      $d.symtab0x81180NOTYPE<unknown>DEFAULT2
                      $d.symtab0x81740NOTYPE<unknown>DEFAULT2
                      $d.symtab0x1749c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x220200NOTYPE<unknown>DEFAULT9
                      $d.symtab0x81c00NOTYPE<unknown>DEFAULT2
                      $d.symtab0x220240NOTYPE<unknown>DEFAULT9
                      $d.symtab0x82980NOTYPE<unknown>DEFAULT2
                      $d.symtab0x83cc0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x84340NOTYPE<unknown>DEFAULT2
                      $d.symtab0x87d80NOTYPE<unknown>DEFAULT2
                      $d.symtab0x90e00NOTYPE<unknown>DEFAULT2
                      $d.symtab0x95680NOTYPE<unknown>DEFAULT2
                      $d.symtab0x997c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0xa8200NOTYPE<unknown>DEFAULT2
                      $d.symtab0x179740NOTYPE<unknown>DEFAULT4
                      $d.symtab0xa9a40NOTYPE<unknown>DEFAULT2
                      $d.symtab0xac280NOTYPE<unknown>DEFAULT2
                      $d.symtab0xb3240NOTYPE<unknown>DEFAULT2
                      $d.symtab0xb4780NOTYPE<unknown>DEFAULT2
                      $d.symtab0xb5dc0NOTYPE<unknown>DEFAULT2
                      $d.symtab0xb7540NOTYPE<unknown>DEFAULT2
                      $d.symtab0xc8cc0NOTYPE<unknown>DEFAULT2
                      $d.symtab0xca480NOTYPE<unknown>DEFAULT2
                      $d.symtab0xca640NOTYPE<unknown>DEFAULT2
                      $d.symtab0xcb1c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0xdb240NOTYPE<unknown>DEFAULT2
                      $d.symtab0xe3f40NOTYPE<unknown>DEFAULT2
                      $d.symtab0xebf80NOTYPE<unknown>DEFAULT2
                      $d.symtab0xf0f00NOTYPE<unknown>DEFAULT2
                      $d.symtab0xf1f00NOTYPE<unknown>DEFAULT2
                      $d.symtab0xf2240NOTYPE<unknown>DEFAULT2
                      $d.symtab0x220500NOTYPE<unknown>DEFAULT9
                      $d.symtab0x220580NOTYPE<unknown>DEFAULT9
                      $d.symtab0xf2300NOTYPE<unknown>DEFAULT2
                      $d.symtab0xf4800NOTYPE<unknown>DEFAULT2
                      $d.symtab0xf5a40NOTYPE<unknown>DEFAULT2
                      $d.symtab0xf6a00NOTYPE<unknown>DEFAULT2
                      $d.symtab0xf7040NOTYPE<unknown>DEFAULT2
                      $d.symtab0xfa640NOTYPE<unknown>DEFAULT2
                      $d.symtab0xfca40NOTYPE<unknown>DEFAULT2
                      $d.symtab0xfe500NOTYPE<unknown>DEFAULT2
                      $d.symtab0x220600NOTYPE<unknown>DEFAULT9
                      $d.symtab0xff400NOTYPE<unknown>DEFAULT2
                      $d.symtab0x1024c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x221680NOTYPE<unknown>DEFAULT9
                      $d.symtab0x102c40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x103500NOTYPE<unknown>DEFAULT2
                      $d.symtab0x103e80NOTYPE<unknown>DEFAULT2
                      $d.symtab0x104640NOTYPE<unknown>DEFAULT2
                      $d.symtab0x221800NOTYPE<unknown>DEFAULT9
                      $d.symtab0x105380NOTYPE<unknown>DEFAULT2
                      $d.symtab0x105c80NOTYPE<unknown>DEFAULT2
                      $d.symtab0x1068c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x1075c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x18af80NOTYPE<unknown>DEFAULT4
                      $d.symtab0x109080NOTYPE<unknown>DEFAULT2
                      $d.symtab0x109840NOTYPE<unknown>DEFAULT2
                      $d.symtab0x222340NOTYPE<unknown>DEFAULT9
                      $d.symtab0x10b400NOTYPE<unknown>DEFAULT2
                      $d.symtab0x10b8c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x10bec0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x10c3c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x10c8c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x10eb40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x2224c0NOTYPE<unknown>DEFAULT9
                      $d.symtab0x10fc40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x111300NOTYPE<unknown>DEFAULT2
                      $d.symtab0x266140NOTYPE<unknown>DEFAULT10
                      $d.symtab0x111bc0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x11a040NOTYPE<unknown>DEFAULT2
                      $d.symtab0x121e00NOTYPE<unknown>DEFAULT2
                      $d.symtab0x124a80NOTYPE<unknown>DEFAULT2
                      $d.symtab0x222540NOTYPE<unknown>DEFAULT9
                      $d.symtab0x125640NOTYPE<unknown>DEFAULT2
                      $d.symtab0x125a40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x127380NOTYPE<unknown>DEFAULT2
                      $d.symtab0x12a280NOTYPE<unknown>DEFAULT2
                      $d.symtab0x12ac40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x12ad40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x12b800NOTYPE<unknown>DEFAULT2
                      $d.symtab0x2226c0NOTYPE<unknown>DEFAULT9
                      $d.symtab0x18b7c0NOTYPE<unknown>DEFAULT4
                      $d.symtab0x12c440NOTYPE<unknown>DEFAULT2
                      $d.symtab0x12d6c0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x12f540NOTYPE<unknown>DEFAULT2
                      $d.symtab0x130c00NOTYPE<unknown>DEFAULT2
                      $d.symtab0x132980NOTYPE<unknown>DEFAULT2
                      $d.symtab0x135740NOTYPE<unknown>DEFAULT2
                      $d.symtab0x136d80NOTYPE<unknown>DEFAULT2
                      $d.symtab0x139340NOTYPE<unknown>DEFAULT2
                      $d.symtab0x13c500NOTYPE<unknown>DEFAULT2
                      $d.symtab0x13f800NOTYPE<unknown>DEFAULT2
                      $d.symtab0x13fb40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x223a80NOTYPE<unknown>DEFAULT9
                      $d.symtab0x148080NOTYPE<unknown>DEFAULT2
                      $d.symtab0x14a840NOTYPE<unknown>DEFAULT2
                      $d.symtab0x14ac80NOTYPE<unknown>DEFAULT2
                      $d.symtab0x14f740NOTYPE<unknown>DEFAULT2
                      $d.symtab0x150c40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x152980NOTYPE<unknown>DEFAULT2
                      $d.symtab0x153940NOTYPE<unknown>DEFAULT2
                      $d.symtab0x154140NOTYPE<unknown>DEFAULT2
                      $d.symtab0x162f40NOTYPE<unknown>DEFAULT2
                      $d.symtab0x19b080NOTYPE<unknown>DEFAULT4
                      $d.symtab0x164100NOTYPE<unknown>DEFAULT2
                      $d.symtab0x164fc0NOTYPE<unknown>DEFAULT2
                      $d.symtab0x166300NOTYPE<unknown>DEFAULT2
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      C.111.5062.symtab0x179748OBJECT<unknown>DEFAULT4
                      C.148.5389.symtab0x182f024OBJECT<unknown>DEFAULT4
                      Laligned.symtab0xf3480NOTYPE<unknown>DEFAULT2
                      Llastword.symtab0xf3640NOTYPE<unknown>DEFAULT2
                      Q.symtab0x223e816384OBJECT<unknown>DEFAULT10
                      Sakura_Bot.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      SendSTD.symtab0xb328340FUNC<unknown>DEFAULT2
                      SendSTDHEX.symtab0xa83c364FUNC<unknown>DEFAULT2
                      SendSTD_HEX.symtab0xb5e0376FUNC<unknown>DEFAULT2
                      SendUDP.symtab0x9d001228FUNC<unknown>DEFAULT2
                      _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                      _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __CTOR_END__.symtab0x220040OBJECT<unknown>DEFAULT6
                      __CTOR_LIST__.symtab0x220000OBJECT<unknown>DEFAULT6
                      __C_ctype_b.symtab0x220504OBJECT<unknown>DEFAULT9
                      __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __C_ctype_b_data.symtab0x184f8768OBJECT<unknown>DEFAULT4
                      __C_ctype_tolower.symtab0x223a84OBJECT<unknown>DEFAULT9
                      __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __C_ctype_tolower_data.symtab0x18bde768OBJECT<unknown>DEFAULT4
                      __C_ctype_toupper.symtab0x220584OBJECT<unknown>DEFAULT9
                      __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __C_ctype_toupper_data.symtab0x187f8768OBJECT<unknown>DEFAULT4
                      __DTOR_END__.symtab0x2200c0OBJECT<unknown>DEFAULT7
                      __DTOR_LIST__.symtab0x220080OBJECT<unknown>DEFAULT7
                      __EH_FRAME_BEGIN__.symtab0x19b500OBJECT<unknown>DEFAULT5
                      __FRAME_END__.symtab0x19b500OBJECT<unknown>DEFAULT5
                      __GI___C_ctype_b.symtab0x220504OBJECT<unknown>HIDDEN9
                      __GI___C_ctype_b_data.symtab0x184f8768OBJECT<unknown>HIDDEN4
                      __GI___C_ctype_tolower.symtab0x223a84OBJECT<unknown>HIDDEN9
                      __GI___C_ctype_tolower_data.symtab0x18bde768OBJECT<unknown>HIDDEN4
                      __GI___C_ctype_toupper.symtab0x220584OBJECT<unknown>HIDDEN9
                      __GI___C_ctype_toupper_data.symtab0x187f8768OBJECT<unknown>HIDDEN4
                      __GI___ctype_b.symtab0x220544OBJECT<unknown>HIDDEN9
                      __GI___ctype_tolower.symtab0x223ac4OBJECT<unknown>HIDDEN9
                      __GI___ctype_toupper.symtab0x2205c4OBJECT<unknown>HIDDEN9
                      __GI___errno_location.symtab0xf22812FUNC<unknown>HIDDEN2
                      __GI___fgetc_unlocked.symtab0x14f98304FUNC<unknown>HIDDEN2
                      __GI___glibc_strerror_r.symtab0x152a020FUNC<unknown>HIDDEN2
                      __GI___h_errno_location.symtab0x111b412FUNC<unknown>HIDDEN2
                      __GI___libc_fcntl.symtab0xee44116FUNC<unknown>HIDDEN2
                      __GI___libc_fcntl64.symtab0xeeb880FUNC<unknown>HIDDEN2
                      __GI___libc_open.symtab0xf08892FUNC<unknown>HIDDEN2
                      __GI___uClibc_fini.symtab0x10b90108FUNC<unknown>HIDDEN2
                      __GI___uClibc_init.symtab0x10c4092FUNC<unknown>HIDDEN2
                      __GI___xpg_strerror_r.symtab0x152b4232FUNC<unknown>HIDDEN2
                      __GI__exit.symtab0xef0840FUNC<unknown>HIDDEN2
                      __GI_abort.symtab0x10114328FUNC<unknown>HIDDEN2
                      __GI_atoi.symtab0x1076012FUNC<unknown>HIDDEN2
                      __GI_atol.symtab0x1076012FUNC<unknown>HIDDEN2
                      __GI_brk.symtab0x1256c60FUNC<unknown>HIDDEN2
                      __GI_chdir.symtab0xef5c44FUNC<unknown>HIDDEN2
                      __GI_close.symtab0xef8844FUNC<unknown>HIDDEN2
                      __GI_connect.symtab0xfa8044FUNC<unknown>HIDDEN2
                      __GI_errno.symtab0x266144OBJECT<unknown>HIDDEN10
                      __GI_exit.symtab0x1090c148FUNC<unknown>HIDDEN2
                      __GI_fclose.symtab0x125d4384FUNC<unknown>HIDDEN2
                      __GI_fcntl.symtab0xee44116FUNC<unknown>HIDDEN2
                      __GI_fcntl64.symtab0xeeb880FUNC<unknown>HIDDEN2
                      __GI_fflush_unlocked.symtab0x12d94484FUNC<unknown>HIDDEN2
                      __GI_fgetc_unlocked.symtab0x14f98304FUNC<unknown>HIDDEN2
                      __GI_fgets.symtab0x12bc0148FUNC<unknown>HIDDEN2
                      __GI_fgets_unlocked.symtab0x12f78152FUNC<unknown>HIDDEN2
                      __GI_fopen.symtab0x1275412FUNC<unknown>HIDDEN2
                      __GI_fork.symtab0xefb444FUNC<unknown>HIDDEN2
                      __GI_fputs_unlocked.symtab0x150c852FUNC<unknown>HIDDEN2
                      __GI_fseek.symtab0x1650412FUNC<unknown>HIDDEN2
                      __GI_fseeko64.symtab0x16510304FUNC<unknown>HIDDEN2
                      __GI_fwrite_unlocked.symtab0x150fc172FUNC<unknown>HIDDEN2
                      __GI_getc_unlocked.symtab0x14f98304FUNC<unknown>HIDDEN2
                      __GI_getegid.symtab0x1100044FUNC<unknown>HIDDEN2
                      __GI_geteuid.symtab0x1102c44FUNC<unknown>HIDDEN2
                      __GI_getgid.symtab0x1105844FUNC<unknown>HIDDEN2
                      __GI_gethostbyname.symtab0xf6c868FUNC<unknown>HIDDEN2
                      __GI_gethostbyname_r.symtab0xf70c884FUNC<unknown>HIDDEN2
                      __GI_getpid.symtab0xefe044FUNC<unknown>HIDDEN2
                      __GI_getsockname.symtab0xfaac44FUNC<unknown>HIDDEN2
                      __GI_getuid.symtab0x1108444FUNC<unknown>HIDDEN2
                      __GI_h_errno.symtab0x266184OBJECT<unknown>HIDDEN10
                      __GI_inet_addr.symtab0xf6a436FUNC<unknown>HIDDEN2
                      __GI_inet_aton.symtab0x1191c236FUNC<unknown>HIDDEN2
                      __GI_inet_ntoa.symtab0xf69812FUNC<unknown>HIDDEN2
                      __GI_inet_ntoa_r.symtab0xf618128FUNC<unknown>HIDDEN2
                      __GI_inet_ntop.symtab0x136dc608FUNC<unknown>HIDDEN2
                      __GI_inet_pton.symtab0x13368528FUNC<unknown>HIDDEN2
                      __GI_initstate_r.symtab0x10698200FUNC<unknown>HIDDEN2
                      __GI_ioctl.symtab0xf00c80FUNC<unknown>HIDDEN2
                      __GI_isatty.symtab0x1321032FUNC<unknown>HIDDEN2
                      __GI_kill.symtab0xf05c44FUNC<unknown>HIDDEN2
                      __GI_lseek64.symtab0x1673c100FUNC<unknown>HIDDEN2
                      __GI_memchr.symtab0x1631c252FUNC<unknown>HIDDEN2
                      __GI_memcpy.symtab0xf2504FUNC<unknown>HIDDEN2
                      __GI_memmove.symtab0x117a04FUNC<unknown>HIDDEN2
                      __GI_mempcpy.symtab0x151a824FUNC<unknown>HIDDEN2
                      __GI_memrchr.symtab0x16418236FUNC<unknown>HIDDEN2
                      __GI_memset.symtab0xf260156FUNC<unknown>HIDDEN2
                      __GI_nanosleep.symtab0x110b044FUNC<unknown>HIDDEN2
                      __GI_open.symtab0xf08892FUNC<unknown>HIDDEN2
                      __GI_poll.symtab0x125a844FUNC<unknown>HIDDEN2
                      __GI_raise.symtab0x1253024FUNC<unknown>HIDDEN2
                      __GI_random.symtab0x10260124FUNC<unknown>HIDDEN2
                      __GI_random_r.symtab0x1053c144FUNC<unknown>HIDDEN2
                      __GI_rawmemchr.symtab0x13010184FUNC<unknown>HIDDEN2
                      __GI_read.symtab0xf0f444FUNC<unknown>HIDDEN2
                      __GI_recv.symtab0xfb0844FUNC<unknown>HIDDEN2
                      __GI_sbrk.symtab0x110dc88FUNC<unknown>HIDDEN2
                      __GI_select.symtab0xf12048FUNC<unknown>HIDDEN2
                      __GI_send.symtab0xfb3444FUNC<unknown>HIDDEN2
                      __GI_sendto.symtab0xfb6052FUNC<unknown>HIDDEN2
                      __GI_setsid.symtab0xf15044FUNC<unknown>HIDDEN2
                      __GI_setsockopt.symtab0xfb9448FUNC<unknown>HIDDEN2
                      __GI_setstate_r.symtab0x1047c192FUNC<unknown>HIDDEN2
                      __GI_sigaction.symtab0x10ee8228FUNC<unknown>HIDDEN2
                      __GI_signal.symtab0xfbf0184FUNC<unknown>HIDDEN2
                      __GI_sigprocmask.symtab0x1113484FUNC<unknown>HIDDEN2
                      __GI_sleep.symtab0x109a0420FUNC<unknown>HIDDEN2
                      __GI_socket.symtab0xfbc444FUNC<unknown>HIDDEN2
                      __GI_sprintf.symtab0x13fb852FUNC<unknown>HIDDEN2
                      __GI_srandom_r.symtab0x105cc204FUNC<unknown>HIDDEN2
                      __GI_strcasecmp.symtab0x1539c124FUNC<unknown>HIDDEN2
                      __GI_strchr.symtab0xf380264FUNC<unknown>HIDDEN2
                      __GI_strcmp.symtab0xf30028FUNC<unknown>HIDDEN2
                      __GI_strcoll.symtab0xf30028FUNC<unknown>HIDDEN2
                      __GI_strcpy.symtab0xf48828FUNC<unknown>HIDDEN2
                      __GI_strdup.symtab0x131e048FUNC<unknown>HIDDEN2
                      __GI_strlen.symtab0xf32096FUNC<unknown>HIDDEN2
                      __GI_strncat.symtab0x130c8200FUNC<unknown>HIDDEN2
                      __GI_strncpy.symtab0x117b0184FUNC<unknown>HIDDEN2
                      __GI_strnlen.symtab0x151c0224FUNC<unknown>HIDDEN2
                      __GI_strpbrk.symtab0x118dc64FUNC<unknown>HIDDEN2
                      __GI_strspn.symtab0x1319080FUNC<unknown>HIDDEN2
                      __GI_strstr.symtab0xf4a4248FUNC<unknown>HIDDEN2
                      __GI_strtok.symtab0xf59c12FUNC<unknown>HIDDEN2
                      __GI_strtok_r.symtab0x11868116FUNC<unknown>HIDDEN2
                      __GI_strtol.symtab0x1076c8FUNC<unknown>HIDDEN2
                      __GI_tcgetattr.symtab0x13230108FUNC<unknown>HIDDEN2
                      __GI_time.symtab0xf17c44FUNC<unknown>HIDDEN2
                      __GI_tolower.symtab0x13f8452FUNC<unknown>HIDDEN2
                      __GI_toupper.symtab0xf1f452FUNC<unknown>HIDDEN2
                      __GI_vsnprintf.symtab0x13fec176FUNC<unknown>HIDDEN2
                      __GI_wait4.symtab0x1118844FUNC<unknown>HIDDEN2
                      __GI_waitpid.symtab0xf1a88FUNC<unknown>HIDDEN2
                      __GI_wcrtomb.symtab0x155d880FUNC<unknown>HIDDEN2
                      __GI_wcsnrtombs.symtab0x15648188FUNC<unknown>HIDDEN2
                      __GI_wcsrtombs.symtab0x1562832FUNC<unknown>HIDDEN2
                      __GI_write.symtab0xf1b044FUNC<unknown>HIDDEN2
                      __JCR_END__.symtab0x220100OBJECT<unknown>DEFAULT8
                      __JCR_LIST__.symtab0x220100OBJECT<unknown>DEFAULT8
                      __adddf3.symtab0x169d0736FUNC<unknown>DEFAULT2
                      __aeabi_cdcmpeq.symtab0x173a020FUNC<unknown>DEFAULT2
                      __aeabi_cdcmple.symtab0x173a020FUNC<unknown>DEFAULT2
                      __aeabi_cdrcmple.symtab0x1738448FUNC<unknown>DEFAULT2
                      __aeabi_d2uiz.symtab0x1741884FUNC<unknown>DEFAULT2
                      __aeabi_dadd.symtab0x169d0736FUNC<unknown>DEFAULT2
                      __aeabi_dcmpeq.symtab0x173b420FUNC<unknown>DEFAULT2
                      __aeabi_dcmpge.symtab0x173f020FUNC<unknown>DEFAULT2
                      __aeabi_dcmpgt.symtab0x1740420FUNC<unknown>DEFAULT2
                      __aeabi_dcmple.symtab0x173dc20FUNC<unknown>DEFAULT2
                      __aeabi_dcmplt.symtab0x173c820FUNC<unknown>DEFAULT2
                      __aeabi_ddiv.symtab0x170ec516FUNC<unknown>DEFAULT2
                      __aeabi_dmul.symtab0x16dc4808FUNC<unknown>DEFAULT2
                      __aeabi_drsub.symtab0x169c40FUNC<unknown>DEFAULT2
                      __aeabi_dsub.symtab0x169cc740FUNC<unknown>DEFAULT2
                      __aeabi_f2d.symtab0x16d0464FUNC<unknown>DEFAULT2
                      __aeabi_i2d.symtab0x16cd844FUNC<unknown>DEFAULT2
                      __aeabi_idiv.symtab0x167a00FUNC<unknown>DEFAULT2
                      __aeabi_idiv0.symtab0xedf04FUNC<unknown>DEFAULT2
                      __aeabi_idivmod.symtab0x168c824FUNC<unknown>DEFAULT2
                      __aeabi_l2d.symtab0x16d58108FUNC<unknown>DEFAULT2
                      __aeabi_ldiv0.symtab0xedf04FUNC<unknown>DEFAULT2
                      __aeabi_ui2d.symtab0x16cb040FUNC<unknown>DEFAULT2
                      __aeabi_uidiv.symtab0xec140FUNC<unknown>DEFAULT2
                      __aeabi_uidivmod.symtab0xed0c24FUNC<unknown>DEFAULT2
                      __aeabi_ul2d.symtab0x16d44128FUNC<unknown>DEFAULT2
                      __app_fini.symtab0x266084OBJECT<unknown>HIDDEN10
                      __atexit_lock.symtab0x2223424OBJECT<unknown>DEFAULT9
                      __bsd_signal.symtab0xfbf0184FUNC<unknown>HIDDEN2
                      __bss_end__.symtab0x287100NOTYPE<unknown>DEFAULTSHN_ABS
                      __bss_start.symtab0x223b40NOTYPE<unknown>DEFAULTSHN_ABS
                      __bss_start__.symtab0x223b40NOTYPE<unknown>DEFAULTSHN_ABS
                      __check_one_fd.symtab0x10c0856FUNC<unknown>DEFAULT2
                      __cmpdf2.symtab0x17300132FUNC<unknown>DEFAULT2
                      __ctype_b.symtab0x220544OBJECT<unknown>DEFAULT9
                      __ctype_tolower.symtab0x223ac4OBJECT<unknown>DEFAULT9
                      __ctype_toupper.symtab0x2205c4OBJECT<unknown>DEFAULT9
                      __curbrk.symtab0x266384OBJECT<unknown>HIDDEN10
                      __data_start.symtab0x220140NOTYPE<unknown>DEFAULT9
                      __decode_answer.symtab0x13b4c220FUNC<unknown>HIDDEN2
                      __decode_dotted.symtab0x154c0204FUNC<unknown>HIDDEN2
                      __decode_header.symtab0x13a24184FUNC<unknown>HIDDEN2
                      __default_rt_sa_restorer.symtab0x10fd00FUNC<unknown>DEFAULT2
                      __default_sa_restorer.symtab0x10fcc0FUNC<unknown>DEFAULT2
                      __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                      __div0.symtab0xedf04FUNC<unknown>DEFAULT2
                      __divdf3.symtab0x170ec516FUNC<unknown>DEFAULT2
                      __divsi3.symtab0x167a0296FUNC<unknown>DEFAULT2
                      __dns_lookup.symtab0x11a082060FUNC<unknown>HIDDEN2
                      __do_global_ctors_aux.symtab0x1746c0FUNC<unknown>DEFAULT2
                      __do_global_dtors_aux.symtab0x80b00FUNC<unknown>DEFAULT2
                      __dso_handle.symtab0x220180OBJECT<unknown>HIDDEN9
                      __encode_dotted.symtab0x15418168FUNC<unknown>HIDDEN2
                      __encode_header.symtab0x1393c232FUNC<unknown>HIDDEN2
                      __encode_question.symtab0x13adc92FUNC<unknown>HIDDEN2
                      __end__.symtab0x287100NOTYPE<unknown>DEFAULTSHN_ABS
                      __environ.symtab0x266004OBJECT<unknown>DEFAULT10
                      __eqdf2.symtab0x17300132FUNC<unknown>DEFAULT2
                      __errno_location.symtab0xf22812FUNC<unknown>DEFAULT2
                      __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __exit_cleanup.symtab0x265f84OBJECT<unknown>HIDDEN10
                      __extendsfdf2.symtab0x16d0464FUNC<unknown>DEFAULT2
                      __fgetc_unlocked.symtab0x14f98304FUNC<unknown>DEFAULT2
                      __fini_array_end.symtab0x220000NOTYPE<unknown>HIDDENSHN_ABS
                      __fini_array_start.symtab0x220000NOTYPE<unknown>HIDDENSHN_ABS
                      __fixunsdfsi.symtab0x1741884FUNC<unknown>DEFAULT2
                      __floatdidf.symtab0x16d58108FUNC<unknown>DEFAULT2
                      __floatsidf.symtab0x16cd844FUNC<unknown>DEFAULT2
                      __floatundidf.symtab0x16d44128FUNC<unknown>DEFAULT2
                      __floatunsidf.symtab0x16cb040FUNC<unknown>DEFAULT2
                      __gedf2.symtab0x172f0148FUNC<unknown>DEFAULT2
                      __get_hosts_byname_r.symtab0x124e872FUNC<unknown>HIDDEN2
                      __glibc_strerror_r.symtab0x152a020FUNC<unknown>DEFAULT2
                      __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __gtdf2.symtab0x172f0148FUNC<unknown>DEFAULT2
                      __h_errno_location.symtab0x111b412FUNC<unknown>DEFAULT2
                      __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __heap_alloc.symtab0xff58148FUNC<unknown>DEFAULT2
                      __heap_free.symtab0x10020244FUNC<unknown>DEFAULT2
                      __heap_link_free_area.symtab0xffec32FUNC<unknown>DEFAULT2
                      __heap_link_free_area_after.symtab0x1000c20FUNC<unknown>DEFAULT2
                      __init_array_end.symtab0x220000NOTYPE<unknown>HIDDENSHN_ABS
                      __init_array_start.symtab0x220000NOTYPE<unknown>HIDDENSHN_ABS
                      __ledf2.symtab0x172f8140FUNC<unknown>DEFAULT2
                      __length_dotted.symtab0x1558c76FUNC<unknown>HIDDEN2
                      __length_question.symtab0x13b3820FUNC<unknown>HIDDEN2
                      __libc_close.symtab0xef8844FUNC<unknown>DEFAULT2
                      __libc_connect.symtab0xfa8044FUNC<unknown>DEFAULT2
                      __libc_creat.symtab0xf0e416FUNC<unknown>DEFAULT2
                      __libc_fcntl.symtab0xee44116FUNC<unknown>DEFAULT2
                      __libc_fcntl64.symtab0xeeb880FUNC<unknown>DEFAULT2
                      __libc_fork.symtab0xefb444FUNC<unknown>DEFAULT2
                      __libc_getpid.symtab0xefe044FUNC<unknown>DEFAULT2
                      __libc_lseek64.symtab0x1673c100FUNC<unknown>DEFAULT2
                      __libc_nanosleep.symtab0x110b044FUNC<unknown>DEFAULT2
                      __libc_open.symtab0xf08892FUNC<unknown>DEFAULT2
                      __libc_poll.symtab0x125a844FUNC<unknown>DEFAULT2
                      __libc_read.symtab0xf0f444FUNC<unknown>DEFAULT2
                      __libc_recv.symtab0xfb0844FUNC<unknown>DEFAULT2
                      __libc_select.symtab0xf12048FUNC<unknown>DEFAULT2
                      __libc_send.symtab0xfb3444FUNC<unknown>DEFAULT2
                      __libc_sendto.symtab0xfb6052FUNC<unknown>DEFAULT2
                      __libc_sigaction.symtab0x10ee8228FUNC<unknown>DEFAULT2
                      __libc_stack_end.symtab0x265fc4OBJECT<unknown>DEFAULT10
                      __libc_waitpid.symtab0xf1a88FUNC<unknown>DEFAULT2
                      __libc_write.symtab0xf1b044FUNC<unknown>DEFAULT2
                      __ltdf2.symtab0x172f8140FUNC<unknown>DEFAULT2
                      __malloc_heap.symtab0x220604OBJECT<unknown>DEFAULT9
                      __malloc_heap_lock.symtab0x265dc24OBJECT<unknown>DEFAULT10
                      __malloc_sbrk_lock.symtab0x286cc24OBJECT<unknown>DEFAULT10
                      __modsi3.symtab0x168e0228FUNC<unknown>DEFAULT2
                      __muldf3.symtab0x16dc4808FUNC<unknown>DEFAULT2
                      __muldi3.symtab0xedf480FUNC<unknown>DEFAULT2
                      __nameserver.symtab0x286f412OBJECT<unknown>HIDDEN10
                      __nameservers.symtab0x287004OBJECT<unknown>HIDDEN10
                      __nedf2.symtab0x17300132FUNC<unknown>DEFAULT2
                      __open_etc_hosts.symtab0x13c2852FUNC<unknown>HIDDEN2
                      __open_nameservers.symtab0x12214724FUNC<unknown>HIDDEN2
                      __pagesize.symtab0x266044OBJECT<unknown>DEFAULT10
                      __preinit_array_end.symtab0x220000NOTYPE<unknown>HIDDENSHN_ABS
                      __preinit_array_start.symtab0x220000NOTYPE<unknown>HIDDENSHN_ABS
                      __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                      __pthread_mutex_init.symtab0x10bfc8FUNC<unknown>DEFAULT2
                      __pthread_mutex_lock.symtab0x10bfc8FUNC<unknown>DEFAULT2
                      __pthread_mutex_trylock.symtab0x10bfc8FUNC<unknown>DEFAULT2
                      __pthread_mutex_unlock.symtab0x10bfc8FUNC<unknown>DEFAULT2
                      __pthread_return_0.symtab0x10bfc8FUNC<unknown>DEFAULT2
                      __pthread_return_void.symtab0x10c044FUNC<unknown>DEFAULT2
                      __raise.symtab0x1253024FUNC<unknown>HIDDEN2
                      __read_etc_hosts_r.symtab0x13c5c808FUNC<unknown>HIDDEN2
                      __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                      __resolv_lock.symtab0x2225424OBJECT<unknown>DEFAULT9
                      __rtld_fini.symtab0x2660c4OBJECT<unknown>HIDDEN10
                      __searchdomain.symtab0x286e416OBJECT<unknown>HIDDEN10
                      __searchdomains.symtab0x287044OBJECT<unknown>HIDDEN10
                      __sigaddset.symtab0xfccc36FUNC<unknown>DEFAULT2
                      __sigdelset.symtab0xfcf036FUNC<unknown>DEFAULT2
                      __sigismember.symtab0xfca836FUNC<unknown>DEFAULT2
                      __stdin.symtab0x222784OBJECT<unknown>DEFAULT9
                      __stdio_READ.symtab0x1570492FUNC<unknown>HIDDEN2
                      __stdio_WRITE.symtab0x1409c188FUNC<unknown>HIDDEN2
                      __stdio_adjust_position.symtab0x16640204FUNC<unknown>HIDDEN2
                      __stdio_fwrite.symtab0x15760312FUNC<unknown>HIDDEN2
                      __stdio_init_mutex.symtab0x12ac816FUNC<unknown>HIDDEN2
                      __stdio_mutex_initializer.3929.symtab0x18b7c24OBJECT<unknown>DEFAULT4
                      __stdio_rfill.symtab0x1589844FUNC<unknown>HIDDEN2
                      __stdio_seek.symtab0x1670c48FUNC<unknown>HIDDEN2
                      __stdio_trans2r_o.symtab0x158c4188FUNC<unknown>HIDDEN2
                      __stdio_trans2w_o.symtab0x15980260FUNC<unknown>HIDDEN2
                      __stdio_wcommit.symtab0x12b9048FUNC<unknown>HIDDEN2
                      __stdout.symtab0x2227c4OBJECT<unknown>DEFAULT9
                      __subdf3.symtab0x169cc740FUNC<unknown>DEFAULT2
                      __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __syscall_fcntl64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __syscall_rt_sigaction.symtab0x10fd444FUNC<unknown>HIDDEN2
                      __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __uClibc_fini.symtab0x10b90108FUNC<unknown>DEFAULT2
                      __uClibc_init.symtab0x10c4092FUNC<unknown>DEFAULT2
                      __uClibc_main.symtab0x10c9c588FUNC<unknown>DEFAULT2
                      __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      __uclibc_progname.symtab0x2224c4OBJECT<unknown>HIDDEN9
                      __udivsi3.symtab0xec14248FUNC<unknown>DEFAULT2
                      __umodsi3.symtab0xed24204FUNC<unknown>DEFAULT2
                      __xpg_strerror_r.symtab0x152b4232FUNC<unknown>DEFAULT2
                      __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _bss_end__.symtab0x287100NOTYPE<unknown>DEFAULTSHN_ABS
                      _charpad.symtab0x1415876FUNC<unknown>DEFAULT2
                      _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _dl_aux_init.symtab0x1254836FUNC<unknown>DEFAULT2
                      _dl_phdr.symtab0x287084OBJECT<unknown>DEFAULT10
                      _dl_phnum.symtab0x2870c4OBJECT<unknown>DEFAULT10
                      _edata.symtab0x223b40NOTYPE<unknown>DEFAULTSHN_ABS
                      _end.symtab0x287100NOTYPE<unknown>DEFAULTSHN_ABS
                      _errno.symtab0x266144OBJECT<unknown>DEFAULT10
                      _exit.symtab0xef0840FUNC<unknown>DEFAULT2
                      _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _fini.symtab0x174a84FUNC<unknown>DEFAULT3
                      _fixed_buffers.symtab0x266448192OBJECT<unknown>DEFAULT10
                      _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _fp_out_narrow.symtab0x141a4132FUNC<unknown>DEFAULT2
                      _fpmaxtostr.symtab0x15b282036FUNC<unknown>HIDDEN2
                      _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _h_errno.symtab0x266184OBJECT<unknown>DEFAULT10
                      _init.symtab0x80944FUNC<unknown>DEFAULT1
                      _load_inttype.symtab0x15a84112FUNC<unknown>HIDDEN2
                      _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _memcpy.symtab0x113100FUNC<unknown>HIDDEN2
                      _ppfs_init.symtab0x1481c152FUNC<unknown>HIDDEN2
                      _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _ppfs_parsespec.symtab0x14ad41220FUNC<unknown>HIDDEN2
                      _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _ppfs_prepargs.symtab0x148b456FUNC<unknown>HIDDEN2
                      _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _ppfs_setargs.symtab0x148ec412FUNC<unknown>HIDDEN2
                      _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _promoted_size.symtab0x14a8876FUNC<unknown>DEFAULT2
                      _pthread_cleanup_pop_restore.symtab0x10c044FUNC<unknown>DEFAULT2
                      _pthread_cleanup_push_defer.symtab0x10c044FUNC<unknown>DEFAULT2
                      _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _sigintr.symtab0x2864c128OBJECT<unknown>HIDDEN10
                      _start.symtab0x81900FUNC<unknown>DEFAULT2
                      _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _stdio_fopen.symtab0x12760760FUNC<unknown>HIDDEN2
                      _stdio_init.symtab0x12a58112FUNC<unknown>HIDDEN2
                      _stdio_openlist.symtab0x222804OBJECT<unknown>DEFAULT9
                      _stdio_openlist_add_lock.symtab0x2228424OBJECT<unknown>DEFAULT9
                      _stdio_openlist_dec_use.symtab0x12c54320FUNC<unknown>DEFAULT2
                      _stdio_openlist_del_count.symtab0x266404OBJECT<unknown>DEFAULT10
                      _stdio_openlist_del_lock.symtab0x2229c24OBJECT<unknown>DEFAULT9
                      _stdio_openlist_use_count.symtab0x2663c4OBJECT<unknown>DEFAULT10
                      _stdio_streams.symtab0x222b8240OBJECT<unknown>DEFAULT9
                      _stdio_term.symtab0x12ad8184FUNC<unknown>HIDDEN2
                      _stdio_user_locking.symtab0x222b44OBJECT<unknown>DEFAULT9
                      _stdlib_strto_l.symtab0x10774408FUNC<unknown>HIDDEN2
                      _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _store_inttype.symtab0x15af452FUNC<unknown>HIDDEN2
                      _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _string_syserrmsgs.symtab0x18f982906OBJECT<unknown>HIDDEN4
                      _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _uintmaxtostr.symtab0x111c0336FUNC<unknown>HIDDEN2
                      _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _vfprintf_internal.symtab0x142281524FUNC<unknown>HIDDEN2
                      _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      abort.symtab0x10114328FUNC<unknown>DEFAULT2
                      abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      access.symtab0xef3044FUNC<unknown>DEFAULT2
                      access.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      astd.symtab0xc8e8356FUNC<unknown>DEFAULT2
                      atcp.symtab0xc2781648FUNC<unknown>DEFAULT2
                      atoi.symtab0x1076012FUNC<unknown>DEFAULT2
                      atol.symtab0x1076012FUNC<unknown>DEFAULT2
                      atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      audp.symtab0xbc641556FUNC<unknown>DEFAULT2
                      bcopy.symtab0xf24016FUNC<unknown>DEFAULT2
                      been_there_done_that.symtab0x265f44OBJECT<unknown>DEFAULT10
                      been_there_done_that.2789.symtab0x266104OBJECT<unknown>DEFAULT10
                      brk.symtab0x1256c60FUNC<unknown>DEFAULT2
                      brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      bsd_signal.symtab0xfbf0184FUNC<unknown>DEFAULT2
                      buf.2613.symtab0x263ec16OBJECT<unknown>DEFAULT10
                      buf.4901.symtab0x263fc460OBJECT<unknown>DEFAULT10
                      c.symtab0x220484OBJECT<unknown>DEFAULT9
                      call___do_global_ctors_aux.symtab0x174a00FUNC<unknown>DEFAULT2
                      call___do_global_dtors_aux.symtab0x81280FUNC<unknown>DEFAULT2
                      call_frame_dummy.symtab0x81880FUNC<unknown>DEFAULT2
                      chdir.symtab0xef5c44FUNC<unknown>DEFAULT2
                      chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      close.symtab0xef8844FUNC<unknown>DEFAULT2
                      close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      commServer.symtab0x220244OBJECT<unknown>DEFAULT9
                      completed.2555.symtab0x223b41OBJECT<unknown>DEFAULT10
                      connect.symtab0xfa8044FUNC<unknown>DEFAULT2
                      connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      connectTimeout.symtab0x956c640FUNC<unknown>DEFAULT2
                      creat.symtab0xf0e416FUNC<unknown>DEFAULT2
                      crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      csum.symtab0x9984344FUNC<unknown>DEFAULT2
                      currentServer.symtab0x220444OBJECT<unknown>DEFAULT9
                      data_start.symtab0x220200NOTYPE<unknown>DEFAULT9
                      decodea.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      environ.symtab0x266004OBJECT<unknown>DEFAULT10
                      errno.symtab0x266144OBJECT<unknown>DEFAULT10
                      errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      exit.symtab0x1090c148FUNC<unknown>DEFAULT2
                      exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      exp10_table.symtab0x19b0872OBJECT<unknown>DEFAULT4
                      fclose.symtab0x125d4384FUNC<unknown>DEFAULT2
                      fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fcntl.symtab0xee44116FUNC<unknown>DEFAULT2
                      fcntl64.symtab0xeeb880FUNC<unknown>DEFAULT2
                      fdgets.symtab0x8438208FUNC<unknown>DEFAULT2
                      fflush_unlocked.symtab0x12d94484FUNC<unknown>DEFAULT2
                      fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fgetc_unlocked.symtab0x14f98304FUNC<unknown>DEFAULT2
                      fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fgets.symtab0x12bc0148FUNC<unknown>DEFAULT2
                      fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fgets_unlocked.symtab0x12f78152FUNC<unknown>DEFAULT2
                      fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fmt.symtab0x19af420OBJECT<unknown>DEFAULT4
                      fopen.symtab0x1275412FUNC<unknown>DEFAULT2
                      fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      force_to_data.symtab0x220140OBJECT<unknown>DEFAULT9
                      force_to_data.symtab0x223b00OBJECT<unknown>DEFAULT9
                      fork.symtab0xefb444FUNC<unknown>DEFAULT2
                      fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fputs_unlocked.symtab0x150c852FUNC<unknown>DEFAULT2
                      fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      frame_dummy.symtab0x81300FUNC<unknown>DEFAULT2
                      free.symtab0xfe68240FUNC<unknown>DEFAULT2
                      free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fseek.symtab0x1650412FUNC<unknown>DEFAULT2
                      fseeko.symtab0x1650412FUNC<unknown>DEFAULT2
                      fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      fseeko64.symtab0x16510304FUNC<unknown>DEFAULT2
                      fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      ftcp.symtab0xa1cc1648FUNC<unknown>DEFAULT2
                      fwrite_unlocked.symtab0x150fc172FUNC<unknown>DEFAULT2
                      fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      getArch.symtab0xca4c28FUNC<unknown>DEFAULT2
                      getHost.symtab0x91ac100FUNC<unknown>DEFAULT2
                      getOurIP.symtab0x8508740FUNC<unknown>DEFAULT2
                      getPortz.symtab0xca68204FUNC<unknown>DEFAULT2
                      getRandomIP.symtab0x83d896FUNC<unknown>DEFAULT2
                      get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      getc_unlocked.symtab0x14f98304FUNC<unknown>DEFAULT2
                      getegid.symtab0x1100044FUNC<unknown>DEFAULT2
                      getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      geteuid.symtab0x1102c44FUNC<unknown>DEFAULT2
                      geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      getgid.symtab0x1105844FUNC<unknown>DEFAULT2
                      getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      gethostbyname.symtab0xf6c868FUNC<unknown>DEFAULT2
                      gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      gethostbyname_r.symtab0xf70c884FUNC<unknown>DEFAULT2
                      gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      getpid.symtab0xefe044FUNC<unknown>DEFAULT2
                      getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      getsockname.symtab0xfaac44FUNC<unknown>DEFAULT2
                      getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      getsockopt.symtab0xfad848FUNC<unknown>DEFAULT2
                      getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      getuid.symtab0x1108444FUNC<unknown>DEFAULT2
                      getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      gotIP.symtab0x223d44OBJECT<unknown>DEFAULT10
                      h.4900.symtab0x265c820OBJECT<unknown>DEFAULT10
                      h_errno.symtab0x266184OBJECT<unknown>DEFAULT10
                      heap_alloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      heap_free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      htonl.symtab0xf5e036FUNC<unknown>DEFAULT2
                      htons.symtab0xf60420FUNC<unknown>DEFAULT2
                      i.4126.symtab0x2204c4OBJECT<unknown>DEFAULT9
                      index.symtab0xf380264FUNC<unknown>DEFAULT2
                      inet_addr.symtab0xf6a436FUNC<unknown>DEFAULT2
                      inet_aton.symtab0x1191c236FUNC<unknown>DEFAULT2
                      inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      inet_ntoa.symtab0xf69812FUNC<unknown>DEFAULT2
                      inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      inet_ntoa_r.symtab0xf618128FUNC<unknown>DEFAULT2
                      inet_ntop.symtab0x136dc608FUNC<unknown>DEFAULT2
                      inet_ntop4.symtab0x13578356FUNC<unknown>DEFAULT2
                      inet_pton.symtab0x13368528FUNC<unknown>DEFAULT2
                      inet_pton4.symtab0x1329c204FUNC<unknown>DEFAULT2
                      initConnection.symtab0xe274396FUNC<unknown>DEFAULT2
                      init_rand.symtab0x81cc212FUNC<unknown>DEFAULT2
                      initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      initial_fa.symtab0x22064260OBJECT<unknown>DEFAULT9
                      initstate.symtab0x10368152FUNC<unknown>DEFAULT2
                      initstate_r.symtab0x10698200FUNC<unknown>DEFAULT2
                      ioctl.symtab0xf00c80FUNC<unknown>DEFAULT2
                      ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      isatty.symtab0x1321032FUNC<unknown>DEFAULT2
                      isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      isspace.symtab0xf1dc24FUNC<unknown>DEFAULT2
                      isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      kill.symtab0xf05c44FUNC<unknown>DEFAULT2
                      kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      lengthd.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      lengthq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/string/arm/_memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/string/arm/bcopy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/string/arm/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/string/arm/memmove.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/string/arm/memset.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/string/arm/strcmp.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/string/arm/strlen.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/sysdeps/linux/arm/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/sysdeps/linux/arm/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/sysdeps/linux/arm/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libc/sysdeps/linux/arm/sigrestorer.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      libgcc2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      listFork.symtab0x97ec408FUNC<unknown>DEFAULT2
                      llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      lseek64.symtab0x1673c100FUNC<unknown>DEFAULT2
                      macAddress.symtab0x223e06OBJECT<unknown>DEFAULT10
                      main.symtab0xe4002068FUNC<unknown>DEFAULT2
                      mainCommSock.symtab0x223d04OBJECT<unknown>DEFAULT10
                      makeIPPacket.symtab0x9bec276FUNC<unknown>DEFAULT2
                      makeRandomStr.symtab0x9210136FUNC<unknown>DEFAULT2
                      makevsepacket.symtab0xaaf4312FUNC<unknown>DEFAULT2
                      malloc.symtab0xfd14340FUNC<unknown>DEFAULT2
                      malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      memchr.symtab0x1631c252FUNC<unknown>DEFAULT2
                      memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      memcpy.symtab0xf2504FUNC<unknown>DEFAULT2
                      memmove.symtab0x117a04FUNC<unknown>DEFAULT2
                      mempcpy.symtab0x151a824FUNC<unknown>DEFAULT2
                      mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      memrchr.symtab0x16418236FUNC<unknown>DEFAULT2
                      memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      memset.symtab0xf260156FUNC<unknown>DEFAULT2
                      mylock.symtab0x2216824OBJECT<unknown>DEFAULT9
                      mylock.symtab0x2218024OBJECT<unknown>DEFAULT9
                      mylock.symtab0x2661c24OBJECT<unknown>DEFAULT10
                      nanosleep.symtab0x110b044FUNC<unknown>DEFAULT2
                      nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      next_start.1066.symtab0x263e84OBJECT<unknown>DEFAULT10
                      ntohl.symtab0xf5a836FUNC<unknown>DEFAULT2
                      ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      ntohs.symtab0xf5cc20FUNC<unknown>DEFAULT2
                      ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      numpids.symtab0x223d88OBJECT<unknown>DEFAULT10
                      object.2636.symtab0x223b824OBJECT<unknown>DEFAULT10
                      open.symtab0xf08892FUNC<unknown>DEFAULT2
                      open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      opennameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      ourIP.symtab0x286444OBJECT<unknown>DEFAULT10
                      p.2553.symtab0x2201c0OBJECT<unknown>DEFAULT9
                      pids.symtab0x286484OBJECT<unknown>DEFAULT10
                      poll.symtab0x125a844FUNC<unknown>DEFAULT2
                      poll.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      prefix.4141.symtab0x18ef012OBJECT<unknown>DEFAULT4
                      print.symtab0x8cf41008FUNC<unknown>DEFAULT2
                      printchar.symtab0x891c108FUNC<unknown>DEFAULT2
                      printi.symtab0x8b0c488FUNC<unknown>DEFAULT2
                      prints.symtab0x8988388FUNC<unknown>DEFAULT2
                      processCmd.symtab0xcb345952FUNC<unknown>DEFAULT2
                      qual_chars.4147.symtab0x18f0420OBJECT<unknown>DEFAULT4
                      raise.symtab0x1253024FUNC<unknown>DEFAULT2
                      raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      rand.symtab0x1025c4FUNC<unknown>DEFAULT2
                      rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      rand_cmwc.symtab0x82a0312FUNC<unknown>DEFAULT2
                      random.symtab0x10260124FUNC<unknown>DEFAULT2
                      random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      random_poly_info.symtab0x18af840OBJECT<unknown>DEFAULT4
                      random_r.symtab0x1053c144FUNC<unknown>DEFAULT2
                      random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      randtbl.symtab0x221b4128OBJECT<unknown>DEFAULT9
                      rawmemchr.symtab0x13010184FUNC<unknown>DEFAULT2
                      rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      read.symtab0xf0f444FUNC<unknown>DEFAULT2
                      read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      read_etc_hosts_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      recv.symtab0xfb0844FUNC<unknown>DEFAULT2
                      recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      recvLine.symtab0x9298724FUNC<unknown>DEFAULT2
                      rtcp.symtab0xb7581292FUNC<unknown>DEFAULT2
                      sbrk.symtab0x110dc88FUNC<unknown>DEFAULT2
                      sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      select.symtab0xf12048FUNC<unknown>DEFAULT2
                      select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      send.symtab0xfb3444FUNC<unknown>DEFAULT2
                      send.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      sendto.symtab0xfb6052FUNC<unknown>DEFAULT2
                      sendto.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      setsid.symtab0xf15044FUNC<unknown>DEFAULT2
                      setsid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      setsockopt.symtab0xfb9448FUNC<unknown>DEFAULT2
                      setsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      setstate.symtab0x102dc140FUNC<unknown>DEFAULT2
                      setstate_r.symtab0x1047c192FUNC<unknown>DEFAULT2
                      sigaction.symtab0x10ee8228FUNC<unknown>DEFAULT2
                      sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      signal.symtab0xfbf0184FUNC<unknown>DEFAULT2
                      signal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      sigprocmask.symtab0x1113484FUNC<unknown>DEFAULT2
                      sigprocmask.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      sigsetops.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      sleep.symtab0x109a0420FUNC<unknown>DEFAULT2
                      sleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      socket.symtab0xfbc444FUNC<unknown>DEFAULT2
                      socket.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      socket_connect.symtab0xa9a8332FUNC<unknown>DEFAULT2
                      sockprintf.symtab0x90e4200FUNC<unknown>DEFAULT2
                      spec_and_mask.4146.symtab0x18f1816OBJECT<unknown>DEFAULT4
                      spec_base.4140.symtab0x18efc7OBJECT<unknown>DEFAULT4
                      spec_chars.4143.symtab0x18f4421OBJECT<unknown>DEFAULT4
                      spec_flags.4142.symtab0x18f5c8OBJECT<unknown>DEFAULT4
                      spec_or_mask.4145.symtab0x18f2816OBJECT<unknown>DEFAULT4
                      spec_ranges.4144.symtab0x18f389OBJECT<unknown>DEFAULT4
                      sprintf.symtab0x13fb852FUNC<unknown>DEFAULT2
                      sprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      srand.symtab0x10400124FUNC<unknown>DEFAULT2
                      srandom.symtab0x10400124FUNC<unknown>DEFAULT2
                      srandom_r.symtab0x105cc204FUNC<unknown>DEFAULT2
                      static_id.symtab0x222502OBJECT<unknown>DEFAULT9
                      static_ns.symtab0x266344OBJECT<unknown>DEFAULT10
                      stderr.symtab0x222744OBJECT<unknown>DEFAULT9
                      stdhexflood.symtab0xb47c356FUNC<unknown>DEFAULT2
                      stdin.symtab0x2226c4OBJECT<unknown>DEFAULT9
                      stdout.symtab0x222704OBJECT<unknown>DEFAULT9
                      strcasecmp.symtab0x1539c124FUNC<unknown>DEFAULT2
                      strcasecmp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strchr.symtab0xf380264FUNC<unknown>DEFAULT2
                      strchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strcmp.symtab0xf30028FUNC<unknown>DEFAULT2
                      strcoll.symtab0xf30028FUNC<unknown>DEFAULT2
                      strcpy.symtab0xf48828FUNC<unknown>DEFAULT2
                      strcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strdup.symtab0x131e048FUNC<unknown>DEFAULT2
                      strdup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strerror_r.symtab0x152b4232FUNC<unknown>DEFAULT2
                      strlen.symtab0xf32096FUNC<unknown>DEFAULT2
                      strncat.symtab0x130c8200FUNC<unknown>DEFAULT2
                      strncat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strncpy.symtab0x117b0184FUNC<unknown>DEFAULT2
                      strncpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strnlen.symtab0x151c0224FUNC<unknown>DEFAULT2
                      strnlen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strpbrk.symtab0x118dc64FUNC<unknown>DEFAULT2
                      strpbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strspn.symtab0x1319080FUNC<unknown>DEFAULT2
                      strspn.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strstr.symtab0xf4a4248FUNC<unknown>DEFAULT2
                      strstr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strtok.symtab0xf59c12FUNC<unknown>DEFAULT2
                      strtok.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strtok_r.symtab0x11868116FUNC<unknown>DEFAULT2
                      strtok_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      strtol.symtab0x1076c8FUNC<unknown>DEFAULT2
                      strtol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      tcgetattr.symtab0x13230108FUNC<unknown>DEFAULT2
                      tcgetattr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                      tcpcsum.symtab0x9adc272FUNC<unknown>DEFAULT2
                      time.symtab0xf17c44FUNC<unknown>DEFAULT2
                      time.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS

                      Download Network PCAP: filteredfull

                      TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                      2024-12-16T12:44:30.396636+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555116150.241.88.13225565TCP
                      2024-12-16T12:44:32.729570+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555118150.241.88.13225565TCP
                      2024-12-16T12:44:35.106541+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555120150.241.88.13225565TCP
                      2024-12-16T12:44:37.445353+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555122150.241.88.13225565TCP
                      2024-12-16T12:44:39.781476+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555124150.241.88.13225565TCP
                      2024-12-16T12:44:42.167613+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555126150.241.88.13225565TCP
                      2024-12-16T12:44:44.513772+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555128150.241.88.13225565TCP
                      2024-12-16T12:44:46.852575+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555130150.241.88.13225565TCP
                      2024-12-16T12:44:49.199449+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555132150.241.88.13225565TCP
                      2024-12-16T12:44:51.588682+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555134150.241.88.13225565TCP
                      2024-12-16T12:44:53.913738+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555136150.241.88.13225565TCP
                      2024-12-16T12:44:56.243445+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555138150.241.88.13225565TCP
                      2024-12-16T12:44:58.618920+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555140150.241.88.13225565TCP
                      2024-12-16T12:45:00.949565+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555142150.241.88.13225565TCP
                      2024-12-16T12:45:03.344073+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555144150.241.88.13225565TCP
                      2024-12-16T12:45:05.680956+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555146150.241.88.13225565TCP
                      2024-12-16T12:45:08.013079+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555148150.241.88.13225565TCP
                      2024-12-16T12:45:10.337690+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555150150.241.88.13225565TCP
                      2024-12-16T12:45:12.683250+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555152150.241.88.13225565TCP
                      2024-12-16T12:45:15.042936+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555154150.241.88.13225565TCP
                      2024-12-16T12:45:17.434134+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555156150.241.88.13225565TCP
                      2024-12-16T12:45:19.759641+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555158150.241.88.13225565TCP
                      2024-12-16T12:45:22.130197+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555160150.241.88.13225565TCP
                      2024-12-16T12:45:24.467279+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555162150.241.88.13225565TCP
                      2024-12-16T12:45:26.858049+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555164150.241.88.13225565TCP
                      2024-12-16T12:45:29.197773+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555166150.241.88.13225565TCP
                      2024-12-16T12:45:31.525098+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555168150.241.88.13225565TCP
                      2024-12-16T12:45:33.901697+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555170150.241.88.13225565TCP
                      2024-12-16T12:45:36.247100+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555172150.241.88.13225565TCP
                      2024-12-16T12:45:38.571732+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555174150.241.88.13225565TCP
                      2024-12-16T12:45:40.899566+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555176150.241.88.13225565TCP
                      2024-12-16T12:45:43.233516+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555178150.241.88.13225565TCP
                      2024-12-16T12:45:45.619957+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555180150.241.88.13225565TCP
                      2024-12-16T12:45:47.995047+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555182150.241.88.13225565TCP
                      2024-12-16T12:45:50.343865+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555184150.241.88.13225565TCP
                      2024-12-16T12:45:52.681690+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555186150.241.88.13225565TCP
                      2024-12-16T12:45:55.012377+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555188150.241.88.13225565TCP
                      2024-12-16T12:45:57.356702+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555190150.241.88.13225565TCP
                      2024-12-16T12:45:59.698239+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555192150.241.88.13225565TCP
                      2024-12-16T12:46:02.028141+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555194150.241.88.13225565TCP
                      2024-12-16T12:46:04.401879+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555196150.241.88.13225565TCP
                      2024-12-16T12:46:06.747589+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555198150.241.88.13225565TCP
                      2024-12-16T12:46:09.092246+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555200150.241.88.13225565TCP
                      2024-12-16T12:46:11.433462+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555202150.241.88.13225565TCP
                      2024-12-16T12:46:13.759426+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555204150.241.88.13225565TCP
                      2024-12-16T12:46:16.091039+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555206150.241.88.13225565TCP
                      2024-12-16T12:46:18.415844+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555208150.241.88.13225565TCP
                      2024-12-16T12:46:20.798634+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555210150.241.88.13225565TCP
                      2024-12-16T12:46:23.137534+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555212150.241.88.13225565TCP
                      2024-12-16T12:46:25.481898+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555214150.241.88.13225565TCP
                      2024-12-16T12:46:27.823379+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555216150.241.88.13225565TCP
                      2024-12-16T12:46:30.159862+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555218150.241.88.13225565TCP
                      2024-12-16T12:46:32.500026+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555220150.241.88.13225565TCP
                      2024-12-16T12:46:34.887432+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555222150.241.88.13225565TCP
                      2024-12-16T12:46:37.213200+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555224150.241.88.13225565TCP
                      2024-12-16T12:46:39.541251+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555226150.241.88.13225565TCP
                      2024-12-16T12:46:41.869845+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555228150.241.88.13225565TCP
                      2024-12-16T12:46:44.201481+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555230150.241.88.13225565TCP
                      2024-12-16T12:46:46.544753+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555232150.241.88.13225565TCP
                      2024-12-16T12:46:48.889663+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555234150.241.88.13225565TCP
                      2024-12-16T12:46:51.248200+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555236150.241.88.13225565TCP
                      2024-12-16T12:46:53.640823+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555238150.241.88.13225565TCP
                      2024-12-16T12:46:56.027580+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555240150.241.88.13225565TCP
                      2024-12-16T12:46:58.405932+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555242150.241.88.13225565TCP
                      2024-12-16T12:47:00.746213+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555244150.241.88.13225565TCP
                      2024-12-16T12:47:03.073643+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555246150.241.88.13225565TCP
                      2024-12-16T12:47:05.406104+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555248150.241.88.13225565TCP
                      2024-12-16T12:47:07.748800+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555250150.241.88.13225565TCP
                      2024-12-16T12:47:10.091841+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555252150.241.88.13225565TCP
                      2024-12-16T12:47:12.480797+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555254150.241.88.13225565TCP
                      2024-12-16T12:47:14.810216+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555256150.241.88.13225565TCP
                      2024-12-16T12:47:17.136237+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555258150.241.88.13225565TCP
                      2024-12-16T12:47:19.472423+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555260150.241.88.13225565TCP
                      2024-12-16T12:47:21.855872+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555262150.241.88.13225565TCP
                      2024-12-16T12:47:24.201415+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555264150.241.88.13225565TCP
                      2024-12-16T12:47:26.526907+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555266150.241.88.13225565TCP
                      2024-12-16T12:47:28.924786+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555268150.241.88.13225565TCP
                      2024-12-16T12:47:31.310149+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555270150.241.88.13225565TCP
                      2024-12-16T12:47:33.703777+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555272150.241.88.13225565TCP
                      2024-12-16T12:47:36.093714+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555274150.241.88.13225565TCP
                      2024-12-16T12:47:38.484506+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555276150.241.88.13225565TCP
                      2024-12-16T12:47:40.822749+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555278150.241.88.13225565TCP
                      2024-12-16T12:47:43.155642+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555280150.241.88.13225565TCP
                      2024-12-16T12:47:45.480492+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555282150.241.88.13225565TCP
                      2024-12-16T12:47:47.901889+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555284150.241.88.13225565TCP
                      2024-12-16T12:47:50.412404+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555286150.241.88.13225565TCP
                      2024-12-16T12:47:53.109247+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555288150.241.88.13225565TCP
                      2024-12-16T12:47:55.468689+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555290150.241.88.13225565TCP
                      2024-12-16T12:47:57.811419+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555292150.241.88.13225565TCP
                      2024-12-16T12:48:00.136229+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555294150.241.88.13225565TCP
                      2024-12-16T12:48:02.513719+01002846526ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin1192.168.2.1555296150.241.88.13225565TCP
                      • Total Packets: 368
                      • 25565 undefined
                      • 53 (DNS)
                      TimestampSource PortDest PortSource IPDest IP
                      Dec 16, 2024 12:44:30.271908998 CET5511625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:30.395309925 CET2556555116150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:30.395381927 CET5511625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:30.396636009 CET5511625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:30.516509056 CET2556555116150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:32.608736992 CET2556555116150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:32.609114885 CET5511625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:32.609647036 CET5511825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:32.728940964 CET2556555116150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:32.729407072 CET2556555118150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:32.729533911 CET5511825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:32.729569912 CET5511825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:32.849564075 CET2556555118150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:34.983071089 CET2556555118150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:34.983397961 CET5511825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:34.984023094 CET5512025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:35.106096983 CET2556555118150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:35.106190920 CET2556555120150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:35.106426001 CET5512025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:35.106540918 CET5512025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:35.226526022 CET2556555120150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:37.324228048 CET2556555120150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:37.324650049 CET5512025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:37.325299025 CET5512225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:37.444509983 CET2556555120150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:37.444973946 CET2556555122150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:37.445202112 CET5512225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:37.445353031 CET5512225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:37.565140009 CET2556555122150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:39.660130978 CET2556555122150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:39.660496950 CET5512225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:39.660496950 CET5512225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:39.661082029 CET5512425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:39.780719042 CET2556555122150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:39.780940056 CET2556555124150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:39.781213045 CET5512425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:39.781476021 CET5512425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:39.901253939 CET2556555124150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:42.045599937 CET2556555124150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:42.045852900 CET5512425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:42.046423912 CET5512625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:42.167321920 CET2556555124150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:42.167344093 CET2556555126150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:42.167500973 CET5512625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:42.167613029 CET5512625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:42.290894032 CET2556555126150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:44.390722036 CET2556555126150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:44.391068935 CET5512625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:44.391758919 CET5512825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:44.513523102 CET2556555126150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:44.513542891 CET2556555128150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:44.513772011 CET5512825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:44.513772011 CET5512825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:44.633836985 CET2556555128150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:46.730875969 CET2556555128150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:46.731303930 CET5512825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:46.732328892 CET5513025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:46.851211071 CET2556555128150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:46.852097034 CET2556555130150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:46.852196932 CET5513025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:46.852575064 CET5513025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:46.973915100 CET2556555130150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:49.077447891 CET2556555130150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:49.077780962 CET5513025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:49.078587055 CET5513225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:49.198292017 CET2556555130150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:49.198970079 CET2556555132150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:49.199327946 CET5513225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:49.199449062 CET5513225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:49.319129944 CET2556555132150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:51.467128992 CET2556555132150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:51.467684984 CET5513225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:51.468384981 CET5513425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:51.587728024 CET2556555132150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:51.588426113 CET2556555134150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:51.588511944 CET5513425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:51.588681936 CET5513425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:51.708566904 CET2556555134150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:53.792655945 CET2556555134150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:53.792990923 CET5513425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:53.793621063 CET5513625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:53.912966967 CET2556555134150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:53.913439989 CET2556555136150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:53.913681984 CET5513625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:53.913738012 CET5513625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:54.034003973 CET2556555136150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:56.121680975 CET2556555136150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:56.122229099 CET5513625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:56.123123884 CET5513825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:56.242367029 CET2556555136150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:56.243027925 CET2556555138150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:56.243169069 CET5513825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:56.243444920 CET5513825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:56.363253117 CET2556555138150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:58.497716904 CET2556555138150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:58.498110056 CET5513825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:58.498733997 CET5514025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:58.618001938 CET2556555138150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:58.618529081 CET2556555140150.241.88.132192.168.2.15
                      Dec 16, 2024 12:44:58.618702888 CET5514025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:58.618920088 CET5514025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:44:58.738666058 CET2556555140150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:00.827696085 CET2556555140150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:00.828362942 CET5514025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:00.829327106 CET5514225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:00.948457003 CET2556555140150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:00.949176073 CET2556555142150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:00.949409962 CET5514225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:00.949564934 CET5514225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:01.072743893 CET2556555142150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:03.222157955 CET2556555142150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:03.222492933 CET5514225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:03.223407030 CET5514425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:03.343775988 CET2556555142150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:03.343827963 CET2556555144150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:03.343996048 CET5514425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:03.344073057 CET5514425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:03.464026928 CET2556555144150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:05.559766054 CET2556555144150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:05.560131073 CET5514425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:05.560952902 CET5514625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:05.680432081 CET2556555144150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:05.680771112 CET2556555146150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:05.680892944 CET5514625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:05.680955887 CET5514625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:05.802937984 CET2556555146150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:07.890225887 CET2556555146150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:07.890588045 CET5514625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:07.891285896 CET5514825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:08.012566090 CET2556555146150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:08.012703896 CET2556555148150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:08.012829065 CET5514825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:08.013078928 CET5514825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:08.132924080 CET2556555148150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:10.215451002 CET2556555148150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:10.216131926 CET5514825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:10.217223883 CET5515025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:10.336196899 CET2556555148150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:10.337398052 CET2556555150150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:10.337620020 CET5515025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:10.337690115 CET5515025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:10.457648993 CET2556555150150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:12.562283039 CET2556555150150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:12.562572956 CET5515025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:12.563286066 CET5515225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:12.682463884 CET2556555150150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:12.683005095 CET2556555152150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:12.683123112 CET5515225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:12.683249950 CET5515225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:12.803107023 CET2556555152150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:14.921993017 CET2556555152150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:14.922269106 CET5515225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:14.922950983 CET5515425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:15.042148113 CET2556555152150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:15.042772055 CET2556555154150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:15.042855978 CET5515425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:15.042936087 CET5515425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:15.162992001 CET2556555154150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:17.311604977 CET2556555154150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:17.312052965 CET5515425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:17.312917948 CET5515625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:17.433829069 CET2556555154150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:17.433850050 CET2556555156150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:17.434066057 CET5515625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:17.434134007 CET5515625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:17.554089069 CET2556555156150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:19.638133049 CET2556555156150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:19.638472080 CET5515625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:19.639528990 CET5515825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:19.758378029 CET2556555156150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:19.759363890 CET2556555158150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:19.759639978 CET5515825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:19.759640932 CET5515825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:19.879648924 CET2556555158150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:22.008795023 CET2556555158150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:22.009026051 CET5515825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:22.009637117 CET5516025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:22.129873037 CET2556555158150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:22.130043983 CET2556555160150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:22.130156040 CET5516025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:22.130197048 CET5516025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:22.250845909 CET2556555160150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:24.340511084 CET2556555160150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:24.341507912 CET5516025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:24.341507912 CET5516225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:24.464507103 CET2556555160150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:24.464521885 CET2556555162150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:24.464808941 CET5516225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:24.467278957 CET5516225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:24.590502024 CET2556555162150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:26.734401941 CET2556555162150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:26.734750986 CET5516225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:26.735738993 CET5516425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:26.857708931 CET2556555162150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:26.857743025 CET2556555164150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:26.857981920 CET5516425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:26.858048916 CET5516425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:26.981683969 CET2556555164150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:29.075382948 CET2556555164150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:29.075836897 CET5516425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:29.076560974 CET5516625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:29.196856976 CET2556555164150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:29.197458982 CET2556555166150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:29.197623968 CET5516625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:29.197772980 CET5516625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:29.319370031 CET2556555166150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:31.403044939 CET2556555166150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:31.403317928 CET5516625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:31.404021978 CET5516825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:31.524590015 CET2556555166150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:31.524619102 CET2556555168150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:31.524797916 CET5516825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:31.525098085 CET5516825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:31.644968987 CET2556555168150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:33.780325890 CET2556555168150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:33.780668020 CET5516825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:33.781538010 CET5517025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:33.900815010 CET2556555168150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:33.901412964 CET2556555170150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:33.901529074 CET5517025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:33.901696920 CET5517025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:34.021573067 CET2556555170150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:36.126147032 CET2556555170150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:36.126471996 CET5517025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:36.127146959 CET5517225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:36.246395111 CET2556555170150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:36.246896982 CET2556555172150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:36.247020006 CET5517225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:36.247100115 CET5517225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:36.367007971 CET2556555172150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:38.450597048 CET2556555172150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:38.450969934 CET5517225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:38.451729059 CET5517425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:38.570902109 CET2556555172150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:38.571465015 CET2556555174150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:38.571594954 CET5517425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:38.571732044 CET5517425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:38.691534996 CET2556555174150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:40.778449059 CET2556555174150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:40.778695107 CET5517425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:40.779259920 CET5517625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:40.898713112 CET2556555174150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:40.899211884 CET2556555176150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:40.899373055 CET5517625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:40.899565935 CET5517625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:41.019536018 CET2556555176150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:43.106698036 CET2556555176150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:43.107156992 CET5517625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:43.108439922 CET5517825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:43.232294083 CET2556555176150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:43.233182907 CET2556555178150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:43.233349085 CET5517825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:43.233515978 CET5517825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:43.354471922 CET2556555178150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:45.498581886 CET2556555178150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:45.498878002 CET5517825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:45.499900103 CET5518025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:45.618871927 CET2556555178150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:45.619771957 CET2556555180150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:45.619904995 CET5518025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:45.619956970 CET5518025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:45.741218090 CET2556555180150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:47.873563051 CET2556555180150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:47.873970032 CET5518025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:47.874744892 CET5518225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:47.993917942 CET2556555180150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:47.994674921 CET2556555182150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:47.994986057 CET5518225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:47.995047092 CET5518225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:48.115286112 CET2556555182150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:50.222477913 CET2556555182150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:50.222954988 CET5518225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:50.223573923 CET5518425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:50.342973948 CET2556555182150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:50.343461037 CET2556555184150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:50.343579054 CET5518425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:50.343864918 CET5518425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:50.463852882 CET2556555184150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:52.559576988 CET2556555184150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:52.559873104 CET5518425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:52.560736895 CET5518625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:52.681026936 CET2556555184150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:52.681412935 CET2556555186150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:52.681535006 CET5518625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:52.681689978 CET5518625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:52.801486015 CET2556555186150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:54.889496088 CET2556555186150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:54.891415119 CET5518625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:54.892146111 CET5518825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:55.011497974 CET2556555186150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:55.012193918 CET2556555188150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:55.012329102 CET5518825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:55.012377024 CET5518825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:55.132522106 CET2556555188150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:57.235819101 CET2556555188150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:57.236063004 CET5518825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:57.236733913 CET5519025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:57.355962038 CET2556555188150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:57.356417894 CET2556555190150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:57.356575966 CET5519025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:57.356702089 CET5519025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:57.476548910 CET2556555190150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:59.575696945 CET2556555190150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:59.576086998 CET5519025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:59.577574015 CET5519225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:59.696544886 CET2556555190150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:59.697694063 CET2556555192150.241.88.132192.168.2.15
                      Dec 16, 2024 12:45:59.697875977 CET5519225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:59.698239088 CET5519225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:45:59.818288088 CET2556555192150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:01.906960964 CET2556555192150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:01.907289982 CET5519225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:01.908083916 CET5519425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:02.027282000 CET2556555192150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:02.027869940 CET2556555194150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:02.027985096 CET5519425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:02.028141022 CET5519425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:02.148092985 CET2556555194150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:04.280452013 CET2556555194150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:04.280817986 CET5519425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:04.281649113 CET5519625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:04.401073933 CET2556555194150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:04.401621103 CET2556555196150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:04.401734114 CET5519625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:04.401879072 CET5519625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:04.521796942 CET2556555196150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:06.626162052 CET2556555196150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:06.626573086 CET5519625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:06.627476931 CET5519825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:06.746553898 CET2556555196150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:06.747231007 CET2556555198150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:06.747494936 CET5519825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:06.747589111 CET5519825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:06.867494106 CET2556555198150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:08.970733881 CET2556555198150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:08.971071005 CET5519825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:08.971976042 CET5520025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:09.091257095 CET2556555198150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:09.092016935 CET2556555200150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:09.092175007 CET5520025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:09.092246056 CET5520025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:09.212362051 CET2556555200150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:11.311562061 CET2556555200150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:11.311877966 CET5520025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:11.312652111 CET5520225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:11.432991982 CET2556555200150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:11.433012962 CET2556555202150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:11.433206081 CET5520225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:11.433461905 CET5520225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:11.553590059 CET2556555202150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:13.638169050 CET2556555202150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:13.638469934 CET5520225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:13.639102936 CET5520425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:13.758502960 CET2556555202150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:13.759033918 CET2556555204150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:13.759426117 CET5520425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:13.759426117 CET5520425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:13.879733086 CET2556555204150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:15.969485998 CET2556555204150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:15.969930887 CET5520425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:15.970694065 CET5520625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:16.089961052 CET2556555204150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:16.090497017 CET2556555206150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:16.090620041 CET5520625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:16.091038942 CET5520625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:16.210896015 CET2556555206150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:18.294610023 CET2556555206150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:18.294934034 CET5520625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:18.295804024 CET5520825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:18.414880991 CET2556555206150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:18.415591002 CET2556555208150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:18.415740967 CET5520825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:18.415843964 CET5520825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:18.535681009 CET2556555208150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:20.676597118 CET2556555208150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:20.677067995 CET5520825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:20.678137064 CET5521025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:20.797215939 CET2556555208150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:20.798214912 CET2556555210150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:20.798331022 CET5521025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:20.798634052 CET5521025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:20.918643951 CET2556555210150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:23.016769886 CET2556555210150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:23.017013073 CET5521025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:23.017663002 CET5521225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:23.136976004 CET2556555210150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:23.137309074 CET2556555212150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:23.137401104 CET5521225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:23.137533903 CET5521225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:23.257219076 CET2556555212150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:25.360702991 CET2556555212150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:25.360975027 CET5521225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:25.361845016 CET5521425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:25.480771065 CET2556555212150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:25.481539011 CET2556555214150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:25.481712103 CET5521425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:25.481898069 CET5521425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:25.601622105 CET2556555214150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:27.701615095 CET2556555214150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:27.702009916 CET5521425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:27.702727079 CET5521625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:27.822211027 CET2556555214150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:27.822776079 CET2556555216150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:27.823298931 CET5521625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:27.823379040 CET5521625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:27.944238901 CET2556555216150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:30.037676096 CET2556555216150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:30.037868977 CET5521625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:30.038408041 CET5521825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:30.159461975 CET2556555216150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:30.159590960 CET2556555218150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:30.159735918 CET5521825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:30.159862041 CET5521825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:30.279891014 CET2556555218150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:32.378709078 CET2556555218150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:32.379086971 CET5521825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:32.379911900 CET5522025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:32.499123096 CET2556555218150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:32.499710083 CET2556555220150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:32.499927044 CET5522025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:32.500025988 CET5522025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:32.619966984 CET2556555220150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:34.765501022 CET2556555220150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:34.766048908 CET5522025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:34.767143011 CET5522225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:34.886420012 CET2556555220150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:34.887126923 CET2556555222150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:34.887231112 CET5522225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:34.887432098 CET5522225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:35.007441998 CET2556555222150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:37.091686964 CET2556555222150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:37.092001915 CET5522225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:37.092750072 CET5522425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:37.212095022 CET2556555222150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:37.212945938 CET2556555224150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:37.213095903 CET5522425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:37.213200092 CET5522425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:37.333285093 CET2556555224150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:39.419998884 CET2556555224150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:39.420346022 CET5522425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:39.421277046 CET5522625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:39.540324926 CET2556555224150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:39.540998936 CET2556555226150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:39.541129112 CET5522625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:39.541250944 CET5522625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:39.661066055 CET2556555226150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:41.748357058 CET2556555226150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:41.749191046 CET5522625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:41.749767065 CET5522825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:41.869133949 CET2556555226150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:41.869477987 CET2556555228150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:41.869693041 CET5522825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:41.869844913 CET5522825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:41.989672899 CET2556555228150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:44.080136061 CET2556555228150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:44.080409050 CET5522825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:44.081254959 CET5523025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:44.201113939 CET2556555228150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:44.201143026 CET2556555230150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:44.201308966 CET5523025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:44.201481104 CET5523025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:44.321520090 CET2556555230150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:46.423628092 CET2556555230150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:46.423918009 CET5523025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:46.424669027 CET5523225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:46.544123888 CET2556555230150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:46.544446945 CET2556555232150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:46.544642925 CET5523225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:46.544753075 CET5523225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:46.664773941 CET2556555232150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:48.767883062 CET2556555232150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:48.768282890 CET5523225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:48.769431114 CET5523425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:48.888101101 CET2556555232150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:48.889389992 CET2556555234150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:48.889498949 CET5523425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:48.889662981 CET5523425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:49.009520054 CET2556555234150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:51.127229929 CET2556555234150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:51.127429008 CET5523425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:51.128140926 CET5523625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:51.247344017 CET2556555234150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:51.247956038 CET2556555236150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:51.248100042 CET5523625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:51.248199940 CET5523625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:51.368197918 CET2556555236150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:53.519555092 CET2556555236150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:53.519969940 CET5523625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:53.520739079 CET5523825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:53.640556097 CET2556555236150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:53.640577078 CET2556555238150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:53.640727043 CET5523825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:53.640822887 CET5523825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:53.760581970 CET2556555238150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:55.906177044 CET2556555238150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:55.906438112 CET5523825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:55.907110929 CET5524025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:56.027223110 CET2556555238150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:56.027236938 CET2556555240150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:56.027515888 CET5524025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:56.027580023 CET5524025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:56.147778988 CET2556555240150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:58.281824112 CET2556555240150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:58.282144070 CET5524025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:58.283108950 CET5524225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:58.405394077 CET2556555240150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:58.405674934 CET2556555242150.241.88.132192.168.2.15
                      Dec 16, 2024 12:46:58.405797958 CET5524225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:58.405931950 CET5524225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:46:58.525835037 CET2556555242150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:00.624191999 CET2556555242150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:00.624730110 CET5524225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:00.624730110 CET5524225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:00.626164913 CET5524425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:00.744764090 CET2556555242150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:00.745913029 CET2556555244150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:00.746170044 CET5524425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:00.746212959 CET5524425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:00.866013050 CET2556555244150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:02.952409029 CET2556555244150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:02.952811003 CET5524425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:02.953566074 CET5524625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:03.072772980 CET2556555244150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:03.073365927 CET2556555246150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:03.073477030 CET5524625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:03.073642969 CET5524625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:03.193681002 CET2556555246150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:05.283576012 CET2556555246150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:05.283972979 CET5524625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:05.284706116 CET5524825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:05.404227972 CET2556555246150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:05.405827045 CET2556555248150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:05.405976057 CET5524825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:05.406104088 CET5524825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:05.525830984 CET2556555248150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:07.627600908 CET2556555248150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:07.627882957 CET5524825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:07.628496885 CET5525025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:07.747822046 CET2556555248150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:07.748636961 CET2556555250150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:07.748749971 CET5525025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:07.748800039 CET5525025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:07.868621111 CET2556555250150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:09.971004009 CET2556555250150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:09.971246004 CET5525025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:09.971857071 CET5525225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:10.091039896 CET2556555250150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:10.091556072 CET2556555252150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:10.091766119 CET5525225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:10.091840982 CET5525225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:10.211805105 CET2556555252150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:12.359879017 CET2556555252150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:12.360260963 CET5525225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:12.360260963 CET5525225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:12.360912085 CET5525425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:12.480191946 CET2556555252150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:12.480586052 CET2556555254150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:12.480716944 CET5525425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:12.480797052 CET5525425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:12.600594044 CET2556555254150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:14.687398911 CET2556555254150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:14.687496901 CET5525425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:14.690305948 CET5525625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:14.807306051 CET2556555254150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:14.810081005 CET2556555256150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:14.810149908 CET5525625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:14.810215950 CET5525625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:14.930156946 CET2556555256150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:17.015364885 CET2556555256150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:17.015628099 CET5525625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:17.016343117 CET5525825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:17.135677099 CET2556555256150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:17.136095047 CET2556555258150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:17.136171103 CET5525825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:17.136236906 CET5525825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:17.256122112 CET2556555258150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:19.342823029 CET2556555258150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:19.343120098 CET5525825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:19.352047920 CET5526025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:19.463100910 CET2556555258150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:19.472074032 CET2556555260150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:19.472188950 CET5526025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:19.472423077 CET5526025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:19.592154026 CET2556555260150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:21.734913111 CET2556555260150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:21.735196114 CET5526025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:21.735685110 CET5526225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:21.855077028 CET2556555260150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:21.855509043 CET2556555262150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:21.855683088 CET5526225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:21.855871916 CET5526225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:21.975733042 CET2556555262150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:24.080219984 CET2556555262150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:24.080535889 CET5526225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:24.081058025 CET5526425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:24.200686932 CET2556555262150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:24.201045036 CET2556555264150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:24.201155901 CET5526425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:24.201415062 CET5526425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:24.321135044 CET2556555264150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:26.406094074 CET2556555264150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:26.406394005 CET5526425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:26.406893969 CET5526625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:26.526557922 CET2556555264150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:26.526658058 CET2556555266150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:26.526853085 CET5526625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:26.526906967 CET5526625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:26.648391962 CET2556555266150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:28.803473949 CET2556555266150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:28.803945065 CET5526625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:28.804673910 CET5526825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:28.923795938 CET2556555266150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:28.924406052 CET2556555268150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:28.924566031 CET5526825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:28.924786091 CET5526825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:29.044748068 CET2556555268150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:31.189243078 CET2556555268150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:31.189532042 CET5526825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:31.190190077 CET5527025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:31.309272051 CET2556555268150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:31.309887886 CET2556555270150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:31.310005903 CET5527025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:31.310148954 CET5527025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:31.429897070 CET2556555270150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:33.514684916 CET2556555270150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:33.514949083 CET5527025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:33.515655994 CET5527225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:33.703418016 CET2556555270150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:33.703438044 CET2556555272150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:33.703547001 CET5527225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:33.703777075 CET5527225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:33.823349953 CET2556555272150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:35.971873999 CET2556555272150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:35.972174883 CET5527225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:35.972989082 CET5527425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:36.093214035 CET2556555272150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:36.093534946 CET2556555274150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:36.093621016 CET5527425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:36.093713999 CET5527425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:36.213403940 CET2556555274150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:38.363578081 CET2556555274150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:38.363832951 CET5527425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:38.364367008 CET5527625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:38.483623981 CET2556555274150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:38.484266996 CET2556555276150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:38.484400034 CET5527625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:38.484505892 CET5527625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:38.604176998 CET2556555276150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:40.702239990 CET2556555276150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:40.702425957 CET5527625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:40.702925920 CET5527825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:40.822329998 CET2556555276150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:40.822618961 CET2556555278150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:40.822678089 CET5527825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:40.822748899 CET5527825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:40.942487955 CET2556555278150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:43.031388044 CET2556555278150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:43.031902075 CET5527825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:43.032407999 CET5528025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:43.153748989 CET2556555278150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:43.155416965 CET2556555280150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:43.155531883 CET5528025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:43.155642033 CET5528025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:43.276860952 CET2556555280150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:45.359395981 CET2556555280150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:45.359782934 CET5528025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:45.360363007 CET5528225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:45.479656935 CET2556555280150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:45.480258942 CET2556555282150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:45.480385065 CET5528225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:45.480492115 CET5528225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:45.600413084 CET2556555282150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:47.780502081 CET2556555282150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:47.780899048 CET5528225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:47.781660080 CET5528425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:47.900994062 CET2556555282150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:47.901663065 CET2556555284150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:47.901813030 CET5528425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:47.901889086 CET5528425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:48.022763968 CET2556555284150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:50.291188002 CET2556555284150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:50.291507006 CET5528425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:50.292403936 CET5528625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:50.411242962 CET2556555284150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:50.412177086 CET2556555286150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:50.412286043 CET5528625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:50.412404060 CET5528625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:50.532141924 CET2556555286150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:52.987632036 CET2556555286150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:52.987886906 CET5528625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:52.988641024 CET5528825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:53.108073950 CET2556555286150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:53.108774900 CET2556555288150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:53.109081984 CET5528825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:53.109246969 CET5528825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:53.228905916 CET2556555288150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:55.347563982 CET2556555288150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:55.347882032 CET5528825565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:55.348555088 CET5529025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:55.467757940 CET2556555288150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:55.468338966 CET2556555290150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:55.468422890 CET5529025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:55.468688965 CET5529025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:55.588736057 CET2556555290150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:57.690530062 CET2556555290150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:57.690797091 CET5529025565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:57.691385031 CET5529225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:57.810699940 CET2556555290150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:57.811157942 CET2556555292150.241.88.132192.168.2.15
                      Dec 16, 2024 12:47:57.811276913 CET5529225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:57.811419010 CET5529225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:47:57.931284904 CET2556555292150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:00.015230894 CET2556555292150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:00.015415907 CET5529225565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:00.016124964 CET5529425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:00.135379076 CET2556555292150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:00.135874033 CET2556555294150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:00.135993004 CET5529425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:00.136229038 CET5529425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:00.257000923 CET2556555294150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:02.391864061 CET2556555294150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:02.392364979 CET5529425565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:02.393059969 CET5529625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:02.513387918 CET2556555294150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:02.513412952 CET2556555296150.241.88.132192.168.2.15
                      Dec 16, 2024 12:48:02.513576031 CET5529625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:02.513719082 CET5529625565192.168.2.15150.241.88.132
                      Dec 16, 2024 12:48:02.633702993 CET2556555296150.241.88.132192.168.2.15
                      TimestampSource PortDest PortSource IPDest IP
                      Dec 16, 2024 12:47:14.495068073 CET4859753192.168.2.158.8.8.8
                      Dec 16, 2024 12:47:14.495141029 CET4744353192.168.2.158.8.8.8
                      Dec 16, 2024 12:47:14.618025064 CET53474438.8.8.8192.168.2.15
                      Dec 16, 2024 12:47:14.629813910 CET53485978.8.8.8192.168.2.15
                      TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                      Dec 16, 2024 12:47:14.495068073 CET192.168.2.158.8.8.80x4b45Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                      Dec 16, 2024 12:47:14.495141029 CET192.168.2.158.8.8.80x5f71Standard query (0)daisy.ubuntu.com28IN (0x0001)false
                      TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                      Dec 16, 2024 12:47:14.629813910 CET8.8.8.8192.168.2.150x4b45No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
                      Dec 16, 2024 12:47:14.629813910 CET8.8.8.8192.168.2.150x4b45No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

                      System Behavior

                      Start time (UTC):11:44:23
                      Start date (UTC):16/12/2024
                      Path:/usr/bin/dash
                      Arguments:-
                      File size:129816 bytes
                      MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                      Start time (UTC):11:44:23
                      Start date (UTC):16/12/2024
                      Path:/usr/bin/rm
                      Arguments:rm -f /tmp/tmp.O5OwcA7doe /tmp/tmp.qNcchs80ZU /tmp/tmp.xnGa5YhFz5
                      File size:72056 bytes
                      MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                      Start time (UTC):11:44:23
                      Start date (UTC):16/12/2024
                      Path:/usr/bin/dash
                      Arguments:-
                      File size:129816 bytes
                      MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                      Start time (UTC):11:44:23
                      Start date (UTC):16/12/2024
                      Path:/usr/bin/rm
                      Arguments:rm -f /tmp/tmp.O5OwcA7doe /tmp/tmp.qNcchs80ZU /tmp/tmp.xnGa5YhFz5
                      File size:72056 bytes
                      MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                      Start time (UTC):11:44:28
                      Start date (UTC):16/12/2024
                      Path:/tmp/armv4l.elf
                      Arguments:/tmp/armv4l.elf
                      File size:4956856 bytes
                      MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                      Start time (UTC):11:44:29
                      Start date (UTC):16/12/2024
                      Path:/tmp/armv4l.elf
                      Arguments:-
                      File size:4956856 bytes
                      MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                      Start time (UTC):11:44:29
                      Start date (UTC):16/12/2024
                      Path:/tmp/armv4l.elf
                      Arguments:-
                      File size:4956856 bytes
                      MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1