Edit tour

Linux Analysis Report
gigops.arm5.elf

Overview

General Information

Sample name:	gigops.arm5.elf
Analysis ID:	1585613
MD5:	e8a22ae73ee59b54ce0a6096db3c5315
SHA1:	17068eeaa4d2b23a6a44bd74ea8617d8e240d1a7
SHA256:	9b1780c7dbb07f0f05a8bdeddf5122bf1f94b7d9f6f3083547b6cb46d143c93c
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Sample and/or dropped files contains symbols with suspicious names

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585613
Start date and time:	2025-01-07 22:26:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigops.arm5.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: gigops.arm5.elf

Runtime Messages

Command:	/tmp/gigops.arm5.elf
PID:	5488
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD DONGS buf: BUILD DONGS BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS
Standard Error:

Process Tree

system is lnxubuntu20

gigops.arm5.elf (PID: 5488, Parent: 5415, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/gigops.arm5.elf

gigops.arm5.elf New Fork (PID: 5490, Parent: 5488)

gigops.arm5.elf New Fork (PID: 5492, Parent: 5490)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigops.arm5.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigops.arm5.elf	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x151e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
gigops.arm5.elf	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x142e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
gigops.arm5.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x17408:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Memory Dumps

Source	Rule	Description	Author	Strings
5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x151e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x142e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x17408:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x151e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x142e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x17408:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
Click to see the 1 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T22:27:16.790077+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53300	45.128.233.186	23	TCP
2025-01-07T22:27:18.474473+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53302	45.128.233.186	23	TCP
2025-01-07T22:27:20.258011+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53304	45.128.233.186	23	TCP
2025-01-07T22:27:22.089948+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:22.298227+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:22.510140+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:22.942154+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:24.945020+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53308	45.128.233.186	23	TCP
2025-01-07T22:27:26.714662+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53310	45.128.233.186	23	TCP
2025-01-07T22:27:28.450585+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53312	45.128.233.186	23	TCP
2025-01-07T22:27:30.208751+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53314	45.128.233.186	23	TCP
2025-01-07T22:27:31.977079+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53316	45.128.233.186	23	TCP
2025-01-07T22:27:33.756549+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53318	45.128.233.186	23	TCP
2025-01-07T22:27:35.541973+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53320	45.128.233.186	23	TCP
2025-01-07T22:27:37.303473+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53322	45.128.233.186	23	TCP
2025-01-07T22:27:39.076269+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53324	45.128.233.186	23	TCP
2025-01-07T22:27:40.871757+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53326	45.128.233.186	23	TCP
2025-01-07T22:27:42.653062+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53328	45.128.233.186	23	TCP
2025-01-07T22:27:44.430769+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53330	45.128.233.186	23	TCP
2025-01-07T22:27:46.220647+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53332	45.128.233.186	23	TCP
2025-01-07T22:27:48.007176+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53334	45.128.233.186	23	TCP
2025-01-07T22:27:49.785978+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53336	45.128.233.186	23	TCP
2025-01-07T22:27:51.558175+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53338	45.128.233.186	23	TCP
2025-01-07T22:27:53.300118+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53340	45.128.233.186	23	TCP
2025-01-07T22:27:55.081124+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53342	45.128.233.186	23	TCP
2025-01-07T22:27:56.852221+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53344	45.128.233.186	23	TCP
2025-01-07T22:27:58.618407+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53346	45.128.233.186	23	TCP
2025-01-07T22:28:00.357615+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53348	45.128.233.186	23	TCP
2025-01-07T22:28:02.148588+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53350	45.128.233.186	23	TCP
2025-01-07T22:28:03.907625+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53352	45.128.233.186	23	TCP
2025-01-07T22:28:05.681176+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53354	45.128.233.186	23	TCP
2025-01-07T22:28:07.480510+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53356	45.128.233.186	23	TCP
2025-01-07T22:28:09.246886+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53358	45.128.233.186	23	TCP
2025-01-07T22:28:11.035936+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53360	45.128.233.186	23	TCP
2025-01-07T22:28:12.867322+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53362	45.128.233.186	23	TCP
2025-01-07T22:28:14.674006+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53364	45.128.233.186	23	TCP
2025-01-07T22:28:16.464269+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53366	45.128.233.186	23	TCP
2025-01-07T22:28:18.250493+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53368	45.128.233.186	23	TCP
2025-01-07T22:28:20.051415+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53370	45.128.233.186	23	TCP
2025-01-07T22:28:21.800298+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53372	45.128.233.186	23	TCP
2025-01-07T22:28:23.599346+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53374	45.128.233.186	23	TCP
2025-01-07T22:28:25.580611+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53376	45.128.233.186	23	TCP
2025-01-07T22:28:27.316095+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53378	45.128.233.186	23	TCP
2025-01-07T22:28:29.084501+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53380	45.128.233.186	23	TCP
2025-01-07T22:28:30.818484+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53382	45.128.233.186	23	TCP
2025-01-07T22:28:32.587289+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53384	45.128.233.186	23	TCP
2025-01-07T22:28:34.317313+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53386	45.128.233.186	23	TCP
2025-01-07T22:28:36.092607+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53388	45.128.233.186	23	TCP
2025-01-07T22:28:37.871217+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53390	45.128.233.186	23	TCP
2025-01-07T22:28:39.682860+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53392	45.128.233.186	23	TCP
2025-01-07T22:28:41.448100+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53394	45.128.233.186	23	TCP
2025-01-07T22:28:43.258408+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53396	45.128.233.186	23	TCP
2025-01-07T22:28:45.050222+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53398	45.128.233.186	23	TCP
2025-01-07T22:28:46.821319+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53400	45.128.233.186	23	TCP
2025-01-07T22:28:48.639736+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53402	45.128.233.186	23	TCP
2025-01-07T22:28:50.427594+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53404	45.128.233.186	23	TCP
2025-01-07T22:28:52.191560+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53406	45.128.233.186	23	TCP
2025-01-07T22:28:53.916171+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53408	45.128.233.186	23	TCP
2025-01-07T22:28:55.708285+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53410	45.128.233.186	23	TCP
2025-01-07T22:28:57.451286+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53412	45.128.233.186	23	TCP
2025-01-07T22:28:59.243815+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53414	45.128.233.186	23	TCP
2025-01-07T22:29:01.029256+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53416	45.128.233.186	23	TCP
2025-01-07T22:29:02.808457+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53418	45.128.233.186	23	TCP
2025-01-07T22:29:04.541510+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53420	45.128.233.186	23	TCP
2025-01-07T22:29:06.304256+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53422	45.128.233.186	23	TCP
2025-01-07T22:29:08.067851+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53424	45.128.233.186	23	TCP
2025-01-07T22:29:10.229379+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53426	45.128.233.186	23	TCP
2025-01-07T22:29:12.010689+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53428	45.128.233.186	23	TCP
2025-01-07T22:29:13.819184+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53430	45.128.233.186	23	TCP
2025-01-07T22:29:15.618251+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53432	45.128.233.186	23	TCP
2025-01-07T22:29:17.354898+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53434	45.128.233.186	23	TCP
2025-01-07T22:29:19.091337+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53436	45.128.233.186	23	TCP
2025-01-07T22:29:20.845787+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53438	45.128.233.186	23	TCP
2025-01-07T22:29:22.593049+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53440	45.128.233.186	23	TCP
2025-01-07T22:29:24.375871+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53442	45.128.233.186	23	TCP
2025-01-07T22:29:26.169102+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53444	45.128.233.186	23	TCP
2025-01-07T22:29:27.970180+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53446	45.128.233.186	23	TCP
2025-01-07T22:29:29.766820+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53448	45.128.233.186	23	TCP
2025-01-07T22:29:31.579967+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53450	45.128.233.186	23	TCP
2025-01-07T22:29:33.309115+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53452	45.128.233.186	23	TCP
2025-01-07T22:29:35.109568+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53454	45.128.233.186	23	TCP
2025-01-07T22:29:36.877346+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53456	45.128.233.186	23	TCP
2025-01-07T22:29:38.671424+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53458	45.128.233.186	23	TCP
2025-01-07T22:29:40.401333+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53460	45.128.233.186	23	TCP
2025-01-07T22:29:42.140054+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53462	45.128.233.186	23	TCP
2025-01-07T22:29:43.917678+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53464	45.128.233.186	23	TCP
2025-01-07T22:29:45.709903+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53466	45.128.233.186	23	TCP
2025-01-07T22:29:47.579588+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53468	45.128.233.186	23	TCP
2025-01-07T22:29:49.329941+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53470	45.128.233.186	23	TCP
2025-01-07T22:29:51.106457+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53472	45.128.233.186	23	TCP
2025-01-07T22:29:52.868127+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53474	45.128.233.186	23	TCP
2025-01-07T22:29:54.654096+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53476	45.128.233.186	23	TCP
2025-01-07T22:29:56.404841+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53478	45.128.233.186	23	TCP
2025-01-07T22:29:58.174397+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53480	45.128.233.186	23	TCP
2025-01-07T22:30:00.046483+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53482	45.128.233.186	23	TCP
2025-01-07T22:30:01.838767+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53484	45.128.233.186	23	TCP
2025-01-07T22:30:03.587491+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53486	45.128.233.186	23	TCP
2025-01-07T22:30:05.327489+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53488	45.128.233.186	23	TCP
2025-01-07T22:30:07.120682+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53490	45.128.233.186	23	TCP
2025-01-07T22:30:08.949403+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53492	45.128.233.186	23	TCP
2025-01-07T22:30:10.690196+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53494	45.128.233.186	23	TCP
2025-01-07T22:30:12.477666+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53496	45.128.233.186	23	TCP
2025-01-07T22:30:14.322183+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53498	45.128.233.186	23	TCP
2025-01-07T22:30:16.063431+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53500	45.128.233.186	23	TCP
2025-01-07T22:30:17.860277+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53502	45.128.233.186	23	TCP
2025-01-07T22:30:19.645229+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53504	45.128.233.186	23	TCP
2025-01-07T22:30:21.374491+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53506	45.128.233.186	23	TCP
2025-01-07T22:30:23.145238+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53508	45.128.233.186	23	TCP
2025-01-07T22:30:24.905882+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53510	45.128.233.186	23	TCP
2025-01-07T22:30:26.688166+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53512	45.128.233.186	23	TCP
2025-01-07T22:30:28.464195+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53514	45.128.233.186	23	TCP
2025-01-07T22:30:30.207274+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53516	45.128.233.186	23	TCP
2025-01-07T22:30:32.014050+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53518	45.128.233.186	23	TCP
2025-01-07T22:30:33.808855+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53520	45.128.233.186	23	TCP
2025-01-07T22:30:35.613625+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53522	45.128.233.186	23	TCP
2025-01-07T22:30:37.386966+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53524	45.128.233.186	23	TCP
2025-01-07T22:30:39.132967+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53526	45.128.233.186	23	TCP
2025-01-07T22:30:40.920591+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53528	45.128.233.186	23	TCP
2025-01-07T22:30:42.704912+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53530	45.128.233.186	23	TCP
2025-01-07T22:30:44.480946+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53532	45.128.233.186	23	TCP
2025-01-07T22:30:46.263610+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53534	45.128.233.186	23	TCP
2025-01-07T22:30:48.050116+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53536	45.128.233.186	23	TCP
2025-01-07T22:30:49.833194+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.14	53538	45.128.233.186	23	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: gigops.arm5.elf

Avira: detected

Found malware configuration

Source: gigops.arm5.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "45.128.233.186:23"}

Multi AV Scanner detection for submitted file

Source: gigops.arm5.elf

ReversingLabs: Detection: 71%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigops.arm5.elf (PID: 5488)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53352 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53308 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53300 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53386 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53398 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53356 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53396 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53330 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53442 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53388 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53358 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53382 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53406 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53318 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53436 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53422 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53504 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53456 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53510 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53404 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53302 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53340 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53528 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53320 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53312 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53346 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53326 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53434 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53306 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53332 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53402 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53370 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53344 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53374 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53418 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53334 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53348 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53470 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53520 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53338 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53392 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53408 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53310 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53532 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53324 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53498 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53316 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53438 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53366 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53490 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53486 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53500 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53380 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53446 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53514 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53432 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53342 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53492 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53466 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53314 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53480 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53424 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53328 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53482 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53350 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53394 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53364 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53368 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53444 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53412 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53494 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53336 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53538 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53304 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53376 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53462 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53448 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53410 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53534 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53384 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53468 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53426 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53322 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53452 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53378 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53472 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53484 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53478 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53414 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53360 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53354 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53526 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53530 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53506 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53450 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53536 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53416 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53440 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53420 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53524 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53476 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53428 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53464 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53454 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53496 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53372 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53512 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53474 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53362 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53488 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53502 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53458 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53518 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53460 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53390 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53508 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53516 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53522 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53400 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:53430 -> 45.128.233.186:23

Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: gigops.arm5.elf

String found in binary or memory: http://5.206.225.136/bins.sh;

System Summary

Malicious sample detected (through community Yara rule)

Source: gigops.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: gigops.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: gigops.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown

Source: gigops.arm5.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: gigops.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: gigops.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: gigops.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 5490.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 5488.1.00007fac7c017000.00007fac7c030000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@2/0

Source: /tmp/gigops.arm5.elf (PID: 5488)

Queries kernel information via 'uname':

Jump to behavior

Source: gigops.arm5.elf, 5488.1.000055ecd7713000.000055ecd7863000.rw-.sdmp, gigops.arm5.elf, 5490.1.000055ecd7713000.000055ecd7841000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: gigops.arm5.elf, 5488.1.000055ecd7713000.000055ecd7863000.rw-.sdmp, gigops.arm5.elf, 5490.1.000055ecd7713000.000055ecd7841000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: gigops.arm5.elf, 5488.1.00007ffc8f35a000.00007ffc8f37b000.rw-.sdmp, gigops.arm5.elf, 5490.1.00007ffc8f35a000.00007ffc8f37b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: gigops.arm5.elf, 5488.1.00007ffc8f35a000.00007ffc8f37b000.rw-.sdmp, gigops.arm5.elf, 5490.1.00007ffc8f35a000.00007ffc8f37b000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/gigops.arm5.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/gigops.arm5.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigops.arm5.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigops.arm5.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

Threatname: Gafgyt

{"C2 url": "45.128.233.186:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigops.arm5.elf	71%	ReversingLabs	Linux.Trojan.Gafgyt
gigops.arm5.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
45.128.233.186:23	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.206.225.136/bins.sh;	gigops.arm5.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.128.233.186	unknown	United Kingdom		208861	RACKTECHRU	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
45.128.233.186	gigops.i586.elf	Get hash	malicious	Gafgyt	Browse
	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse
	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	ppc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	miori.arc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	botnet.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	sora.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RACKTECHRU	gigops.i586.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	lEwK4xROgV.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	86.110.194.28
	zZ1Y43bxxV.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	updIMdPUj8.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	91.223.144.119

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.935993383993469
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	gigops.arm5.elf
File size:	162'503 bytes
MD5:	e8a22ae73ee59b54ce0a6096db3c5315
SHA1:	17068eeaa4d2b23a6a44bd74ea8617d8e240d1a7
SHA256:	9b1780c7dbb07f0f05a8bdeddf5122bf1f94b7d9f6f3083547b6cb46d143c93c
SHA512:	9c3d10220515bb42496ab530b2b45ce969f8c647e6e70d7bf2e459abe8685bf5742b75971f2768234ddacd91f86b503d640a2a1525b9502bcf75f3dfce1cec9e
SSDEEP:	3072:ZHZZpaG2s/UQZm8jmW3WLG3qhTwRTjt8aGXa+9RQknsrxiID6OS1XCYZV7Io0:nUXa+9RQksrx0/1XCYZV7Ix
TLSH:	5EF31808EA405727C2E23BBAF79B428E33234F946797330585287BF43BE5B995E36115
File Content Preview:	.ELF..............(.........4...8.......4. ...(........p............ ... ...........................................................,....r..........................................Q.td..................................-...L..................G.F.G.F.G.F.G.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81d0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	128312
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x16afc	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1ebec	0x16bec	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1ec00	0x16c00	0x1cc0	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x208c0	0x188c0	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x208d8	0x188d8	0x120	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x289f8	0x189f8	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x289fc	0x189fc	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x289fc	0x189fc	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x28a00	0x18a00	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x28a04	0x18a04	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x28a08	0x18a08	0xb0	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x28ab8	0x18ab8	0x26c	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x28d28	0x18d24	0x6f88	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x18d24	0xb8c	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x198b0	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x199f0	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x19c03	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1bc46	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1c328	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1d1a0	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1d458	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1dd22	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1eeb1	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1f409	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1f41f	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1f9c0	0x55a0	0x10	0x0		28	758	4
.strtab	STRTAB	0x0	0x24f60	0x2b67	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x188d8	0x208d8	0x208d8	0x120	0x120	4.5032	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x189f8	0x189f8	5.9832	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x189f8	0x289f8	0x289f8	0x32c	0x72b8	4.0306	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x189fc	0x289fc	0x289fc	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1ebec	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1ec00	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x208c0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x208d8	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x289f8	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x289fc	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x289fc	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x28a00	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x28a04	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x28a08	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x28ab8	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x28d28	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1ebec	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1ebf8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x812c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x820c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8d34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x92b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x98b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x99a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xabf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb1e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcc18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd4d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xea0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10038	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10398	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10678	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11288	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1137c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x113e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1141c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1145c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1165c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11724	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11764	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1189c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11988	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12008	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12038	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1217c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12948	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13370	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1350c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13694	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13790	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x137a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x138b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x138e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13908	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x139e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13cdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x140c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14198	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14294	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x142dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14444	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14490	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14560	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x145a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x145f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14608	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x146cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14738	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15708	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15924	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16098	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16880	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ce4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ed0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17008	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17144	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1719c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1722c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17234	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1734c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17354	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17650	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18160	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18208	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18340	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18354	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1837c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x184d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1857c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1868c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1875c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18db4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18dd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x191c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19200	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19254	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19324	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19af0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19b1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a46c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a97c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ae54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1af00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b584	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b6b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b750	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b7c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b808	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bee0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c178	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c1d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c234	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c2dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c5c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c780	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c8a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c8d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c974	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c9b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ca60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1caa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d070	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d50c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d64c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d6a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d6ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d738	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d740	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d77c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d788	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d9a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1daf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1db14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1db74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dbe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dcb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ddfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e34c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e354	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e35c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e45c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ebb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28a00	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x81bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x289fc	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28abc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x8200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28ac0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x82dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x841c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8d30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8e9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x92ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ee48	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x9404	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x98ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9998	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9a54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa15c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa464	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xabec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb1c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcbf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd4cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd64c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdd3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe9f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xffd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1038c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10640	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10674	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11088	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x11280	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1136c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x113dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x114bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11590	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x115d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11614	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11658	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1169c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1171c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11760	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x117ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11894	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x118bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x118ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28b24	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1f518	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x28b2c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1f818	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11910	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11978	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x119cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11df8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11e94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11fec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28b38	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x28b34	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x12924	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fb74	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12bd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13170	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28c1c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1fb7c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x13290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1368c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x138a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fc00	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x138dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13ccc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13e28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x140b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14168	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x141d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14248	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1428c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x142d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14318	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14388	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x143cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1443c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14488	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14558	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1459c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x145f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x146c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28c20	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1556c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x155c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x156dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28c38	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x15790	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15848	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x159ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28c50	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x28ce8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x15a54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15b24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20784	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x15f18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15fcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28cfc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16090	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x161c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x167dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16c24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ffc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17140	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x171d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17260	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x174dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17590	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x175f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17644	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x179f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28d14	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17b78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18098	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18154	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x181d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18204	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18284	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x182fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1833c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1839c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x183e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18474	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x184d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1853c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18578	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18670	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18814	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x188c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20820	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x189a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18e90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x191b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1931c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x193fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1982c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a44c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20868	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1a960	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ad10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ae4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b57c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b668	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b8f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ba24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bde0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1be60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bed0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c10c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c16c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28d20	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1c21c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c294	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c2d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c594	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c77c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c89c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ca58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cb0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1d98c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$t	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
C.11.5548	.symtab	0x207f4	12	OBJECT	<unknown>	DEFAULT	4
C.381.6923	.symtab	0x1f360	8	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x20820	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x20800	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x20838	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x1fb4c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x20844	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x1fb40	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x1fb34	12	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0x13398	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x133b4	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x28d60	16384	OBJECT	<unknown>	DEFAULT	14
StartTheLelz	.symtab	0xafd4	7972	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x1137c	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x28a08	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1d740	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1d744	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1e3f4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1d738	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1d77c	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1e418	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1ebb8	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1d770	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1e388	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1e3ac	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1e3d0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1d6a0	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1dcb8	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1d6ec	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x28b24	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1f518	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x28b2c	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1f818	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x289f8	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x289f8	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x28b24	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_toupper	.symtab	0x28b2c	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x17160	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x17144	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x28b28	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_toupper	.symtab	0x28b30	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x118f4	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x111f0	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1ad28	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x13790	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x17160	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x11288	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x171f0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x17310	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x17280	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x171f0	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x171d4	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x17310	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x172f4	24	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x16d48	392	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x146f0	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x14714	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x146cc	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x17528	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x175f8	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x17280	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x17264	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x137a8	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1137c	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x155c8	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x15d14	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1c1d0	88	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x113e4	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x17160	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x1857c	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x18ce4	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x18d18	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x189bc	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x141dc	116	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x1141c	64	FUNC	<unknown>	HIDDEN	2
__GI_execl	.symtab	0x15fec	172	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x18300	64	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x15f28	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x18e94	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x11288	244	FUNC	<unknown>	HIDDEN	2
__GI_fdopen	.symtab	0x191c4	60	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1a97c	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1a46c	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1ad28	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1a5b0	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1ae54	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x19200	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x16880	972	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x119d4	48	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x131a0	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1c59c	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1c5c0	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1c234	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x131d8	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1ad28	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1145c	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x18340	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x18354	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x18368	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1837c	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x16ed0	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x11488	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x14250	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x183a4	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x183e4	20	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0x13994	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x13984	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x14170	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1b808	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x14154	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x140c8	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x13e2c	668	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x13ab4	552	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x15b30	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x114c0	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x138e4	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x1189c	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x115a0	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1caa0	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1b390	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x132a0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1b480	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1b4a4	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x132b0	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x18160	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1c298	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x183f8	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x18478	96	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x139c4	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x139b4	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x171f0	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x1875c	196	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x11914	116	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x115d8	64	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x11988	76	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x16f18	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x15708	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x159c8	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1c9b0	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x17310	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x188d0	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x14320	112	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x184d8	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x116a0	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x143d4	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x14490	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x11724	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x14518	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x15c28	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x18208	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x145a4	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x145f4	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x14608	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11764	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x17008	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x14560	68	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x19220	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x15a58	216	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x133d0	40	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x133f8	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1b584	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x13350	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x13350	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x134e8	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1b670	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x13370	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x1350c	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x135c8	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1b7c8	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1b6b4	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1b704	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x13694	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x138b4	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1b750	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x15d34	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x161e4	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x13908	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x117f0	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x118c4	48	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x16810	112	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x12038	324	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x19254	208	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x18544	56	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x11820	124	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x18d60	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x18dd8	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x18db4	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x17280	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x28a04	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x28a04	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1e3f4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1e388	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1e3ac	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1e3d0	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x1cc60	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1d5bc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1d5bc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1d5a0	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1d64c	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1cc60	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1d5d4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1d61c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1d634	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1d604	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1d5ec	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1d300	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1d070	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1cc54	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1cc5c	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1cfbc	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1cf94	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1cb10	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1cc3c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1d010	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x182b0	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x1cf70	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x110c8	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x111c4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1cffc	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1e354	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1e34c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1e344	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2f328	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x28cfc	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x2fcb0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x28d24	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x28d24	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x175a4	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x17160	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x17144	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1d51c	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x28b28	4	OBJECT	<unknown>	DEFAULT	13
__ctype_toupper	.symtab	0x28b30	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2f89c	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x28ab8	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x182a8	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x1829c	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x111dc	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1d300	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1cb10	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x812c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x28a00	0	OBJECT	<unknown>	DEFAULT	10
__dso_handle	.symtab	0x28ab8	0	OBJECT	<unknown>	HIDDEN	13
__end__	.symtab	0x2fcb0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2f320	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x1d51c	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x118f4	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__error	.symtab	0x1687c	0	NOTYPE	<unknown>	DEFAULT	2
__exidx_end	.symtab	0x209f8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x208d8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2edd0	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x1cfbc	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x111f0	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1ad28	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x28a04	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x28a00	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x1d64c	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1d010	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1cf94	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1cffc	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1cf70	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x16880	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x2fc7c	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x2fc80	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x2edd4	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x289fc	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x1d50c	148	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1c454	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1837c	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x16ed0	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x13790	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1daf8	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1dbe0	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1e378	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1db74	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1dc98	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1e380	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1e45c	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1eb70	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1ddfc	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x1d50c	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x28a00	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x289fc	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x1d514	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x17160	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x141dc	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x17380	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x17408	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x11288	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x16880	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x2fc84	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x18478	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x171f0	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x17310	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x14320	112	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x116a0	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x143d4	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x14490	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1bf04	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x18208	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2f31c	4	OBJECT	<unknown>	DEFAULT	14
__libc_system	.symtab	0x180dc	132	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x11820	124	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x17280	100	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x16ce4	100	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x16c4c	152	FUNC	<unknown>	HIDDEN	2
__ltdf2	.symtab	0x1d514	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x15198	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x14738	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x28c20	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x2f904	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x150e8	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1d070	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x1d51c	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x171f0	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x171d4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x2f324	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x289fc	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x289fc	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x28d18	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x28d1c	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1c134	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x174ec	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x174e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x174e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x174e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x174e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x17310	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x172f4	24	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x16d48	392	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1e35c	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x2f32c	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x146f0	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x14714	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x146cc	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1ca60	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1c228	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x28b44	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1c780	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x19324	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1c7d8	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x19860	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1c8a0	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1c974	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1c8d0	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x199a0	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x12008	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x28b48	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x1cc5c	788	FUNC	<unknown>	HIDDEN	2
__sys_connect	.symtab	0x14198	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x142dc	68	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x14390	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x14444	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x181dc	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x18438	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x182c0	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x1165c	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1bee0	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x17528	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x175f8	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x17650	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x28d14	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x110c8	252	FUNC	<unknown>	HIDDEN	2
__vfork	.symtab	0x16810	112	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x17280	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x17264	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x137a8	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x1c3a8	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x1c2dc	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2edac	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x2fcb0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x811d	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8121	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8129	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x810d	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x8111	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x8115	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x8119	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8125	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x1217c	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2f8ac	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x2f8d4	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x28c1c	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x1c140	56	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x28d20	4	OBJECT	<unknown>	DEFAULT	13
_dl_nothread_init_static_tls	.symtab	0x1c178	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x2fca8	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x2fcac	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x2fc9c	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x2fc98	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x2fca0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x2fc90	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1be78	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x2fc8c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x2fca4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x2fc94	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x2fc88	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x28d24	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2fcb0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x1137c	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1ebec	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2cdac	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x121d0	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x19c78	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x19a7c	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x1af00	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x12948	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x12c30	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x129e8	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x12a2c	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x12bdc	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x174fc	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x174f4	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x18290	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x2f8fc	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x81d0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x19400	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x11e24	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x28b4c	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x2cd8c	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1a6cc	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2cda8	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x2cd98	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x2cda4	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x28b50	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x11ea4	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x28b34	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0x15d50	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x19af0	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1fc10	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x19b1c	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x12254	1780	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x155c8	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adaptiveHOLD	.symtab	0xe26c	1952	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x15d14	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x15d14	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x2edcc	4	OBJECT	<unknown>	DEFAULT	14
brk	.symtab	0x1c1d0	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x14608	196	FUNC	<unknown>	DEFAULT	2
buf.4507	.symtab	0x2edbc	16	OBJECT	<unknown>	DEFAULT	14
c	.symtab	0x28b1c	4	OBJECT	<unknown>	DEFAULT	13
calloc	.symtab	0x1b900	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cancel_handler	.symtab	0x17a3c	340	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x113e4	56	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x17160	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x1857c	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x28ac4	4	OBJECT	<unknown>	DEFAULT	13
completed.5105	.symtab	0x28d28	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x141dc	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x9d48	628	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0xac5c	340	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x28ac8	4	OBJECT	<unknown>	DEFAULT	13
data_start	.symtab	0x28abc	0	NOTYPE	<unknown>	DEFAULT	13
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
do_system	.symtab	0x17b90	1356	FUNC	<unknown>	DEFAULT	2
dup2	.symtab	0x1141c	64	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x2f320	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x15fec	172	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x18300	64	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x15f28	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T22:27:16.790077+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53300	45.128.233.186	23	TCP
2025-01-07T22:27:18.474473+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53302	45.128.233.186	23	TCP
2025-01-07T22:27:20.258011+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53304	45.128.233.186	23	TCP
2025-01-07T22:27:22.089948+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:22.298227+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:22.510140+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:22.942154+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53306	45.128.233.186	23	TCP
2025-01-07T22:27:24.945020+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53308	45.128.233.186	23	TCP
2025-01-07T22:27:26.714662+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53310	45.128.233.186	23	TCP
2025-01-07T22:27:28.450585+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53312	45.128.233.186	23	TCP
2025-01-07T22:27:30.208751+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53314	45.128.233.186	23	TCP
2025-01-07T22:27:31.977079+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53316	45.128.233.186	23	TCP
2025-01-07T22:27:33.756549+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53318	45.128.233.186	23	TCP
2025-01-07T22:27:35.541973+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53320	45.128.233.186	23	TCP
2025-01-07T22:27:37.303473+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53322	45.128.233.186	23	TCP
2025-01-07T22:27:39.076269+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53324	45.128.233.186	23	TCP
2025-01-07T22:27:40.871757+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53326	45.128.233.186	23	TCP
2025-01-07T22:27:42.653062+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53328	45.128.233.186	23	TCP
2025-01-07T22:27:44.430769+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53330	45.128.233.186	23	TCP
2025-01-07T22:27:46.220647+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53332	45.128.233.186	23	TCP
2025-01-07T22:27:48.007176+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53334	45.128.233.186	23	TCP
2025-01-07T22:27:49.785978+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53336	45.128.233.186	23	TCP
2025-01-07T22:27:51.558175+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53338	45.128.233.186	23	TCP
2025-01-07T22:27:53.300118+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53340	45.128.233.186	23	TCP
2025-01-07T22:27:55.081124+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53342	45.128.233.186	23	TCP
2025-01-07T22:27:56.852221+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53344	45.128.233.186	23	TCP
2025-01-07T22:27:58.618407+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53346	45.128.233.186	23	TCP
2025-01-07T22:28:00.357615+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53348	45.128.233.186	23	TCP
2025-01-07T22:28:02.148588+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53350	45.128.233.186	23	TCP
2025-01-07T22:28:03.907625+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53352	45.128.233.186	23	TCP
2025-01-07T22:28:05.681176+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53354	45.128.233.186	23	TCP
2025-01-07T22:28:07.480510+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53356	45.128.233.186	23	TCP
2025-01-07T22:28:09.246886+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53358	45.128.233.186	23	TCP
2025-01-07T22:28:11.035936+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53360	45.128.233.186	23	TCP
2025-01-07T22:28:12.867322+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53362	45.128.233.186	23	TCP
2025-01-07T22:28:14.674006+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53364	45.128.233.186	23	TCP
2025-01-07T22:28:16.464269+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53366	45.128.233.186	23	TCP
2025-01-07T22:28:18.250493+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53368	45.128.233.186	23	TCP
2025-01-07T22:28:20.051415+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53370	45.128.233.186	23	TCP
2025-01-07T22:28:21.800298+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53372	45.128.233.186	23	TCP
2025-01-07T22:28:23.599346+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53374	45.128.233.186	23	TCP
2025-01-07T22:28:25.580611+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53376	45.128.233.186	23	TCP
2025-01-07T22:28:27.316095+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53378	45.128.233.186	23	TCP
2025-01-07T22:28:29.084501+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53380	45.128.233.186	23	TCP
2025-01-07T22:28:30.818484+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53382	45.128.233.186	23	TCP
2025-01-07T22:28:32.587289+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53384	45.128.233.186	23	TCP
2025-01-07T22:28:34.317313+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53386	45.128.233.186	23	TCP
2025-01-07T22:28:36.092607+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53388	45.128.233.186	23	TCP
2025-01-07T22:28:37.871217+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53390	45.128.233.186	23	TCP
2025-01-07T22:28:39.682860+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53392	45.128.233.186	23	TCP
2025-01-07T22:28:41.448100+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53394	45.128.233.186	23	TCP
2025-01-07T22:28:43.258408+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53396	45.128.233.186	23	TCP
2025-01-07T22:28:45.050222+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53398	45.128.233.186	23	TCP
2025-01-07T22:28:46.821319+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53400	45.128.233.186	23	TCP
2025-01-07T22:28:48.639736+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53402	45.128.233.186	23	TCP
2025-01-07T22:28:50.427594+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53404	45.128.233.186	23	TCP
2025-01-07T22:28:52.191560+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53406	45.128.233.186	23	TCP
2025-01-07T22:28:53.916171+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53408	45.128.233.186	23	TCP
2025-01-07T22:28:55.708285+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53410	45.128.233.186	23	TCP
2025-01-07T22:28:57.451286+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53412	45.128.233.186	23	TCP
2025-01-07T22:28:59.243815+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53414	45.128.233.186	23	TCP
2025-01-07T22:29:01.029256+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53416	45.128.233.186	23	TCP
2025-01-07T22:29:02.808457+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53418	45.128.233.186	23	TCP
2025-01-07T22:29:04.541510+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53420	45.128.233.186	23	TCP
2025-01-07T22:29:06.304256+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53422	45.128.233.186	23	TCP
2025-01-07T22:29:08.067851+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53424	45.128.233.186	23	TCP
2025-01-07T22:29:10.229379+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53426	45.128.233.186	23	TCP
2025-01-07T22:29:12.010689+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53428	45.128.233.186	23	TCP
2025-01-07T22:29:13.819184+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53430	45.128.233.186	23	TCP
2025-01-07T22:29:15.618251+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53432	45.128.233.186	23	TCP
2025-01-07T22:29:17.354898+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53434	45.128.233.186	23	TCP
2025-01-07T22:29:19.091337+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53436	45.128.233.186	23	TCP
2025-01-07T22:29:20.845787+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53438	45.128.233.186	23	TCP
2025-01-07T22:29:22.593049+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53440	45.128.233.186	23	TCP
2025-01-07T22:29:24.375871+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53442	45.128.233.186	23	TCP
2025-01-07T22:29:26.169102+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53444	45.128.233.186	23	TCP
2025-01-07T22:29:27.970180+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53446	45.128.233.186	23	TCP
2025-01-07T22:29:29.766820+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53448	45.128.233.186	23	TCP
2025-01-07T22:29:31.579967+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53450	45.128.233.186	23	TCP
2025-01-07T22:29:33.309115+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53452	45.128.233.186	23	TCP
2025-01-07T22:29:35.109568+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53454	45.128.233.186	23	TCP
2025-01-07T22:29:36.877346+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53456	45.128.233.186	23	TCP
2025-01-07T22:29:38.671424+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53458	45.128.233.186	23	TCP
2025-01-07T22:29:40.401333+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53460	45.128.233.186	23	TCP
2025-01-07T22:29:42.140054+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53462	45.128.233.186	23	TCP
2025-01-07T22:29:43.917678+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53464	45.128.233.186	23	TCP
2025-01-07T22:29:45.709903+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53466	45.128.233.186	23	TCP
2025-01-07T22:29:47.579588+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53468	45.128.233.186	23	TCP
2025-01-07T22:29:49.329941+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53470	45.128.233.186	23	TCP
2025-01-07T22:29:51.106457+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53472	45.128.233.186	23	TCP
2025-01-07T22:29:52.868127+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53474	45.128.233.186	23	TCP
2025-01-07T22:29:54.654096+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53476	45.128.233.186	23	TCP
2025-01-07T22:29:56.404841+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53478	45.128.233.186	23	TCP
2025-01-07T22:29:58.174397+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53480	45.128.233.186	23	TCP
2025-01-07T22:30:00.046483+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53482	45.128.233.186	23	TCP
2025-01-07T22:30:01.838767+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53484	45.128.233.186	23	TCP
2025-01-07T22:30:03.587491+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53486	45.128.233.186	23	TCP
2025-01-07T22:30:05.327489+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53488	45.128.233.186	23	TCP
2025-01-07T22:30:07.120682+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53490	45.128.233.186	23	TCP
2025-01-07T22:30:08.949403+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53492	45.128.233.186	23	TCP
2025-01-07T22:30:10.690196+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53494	45.128.233.186	23	TCP
2025-01-07T22:30:12.477666+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53496	45.128.233.186	23	TCP
2025-01-07T22:30:14.322183+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53498	45.128.233.186	23	TCP
2025-01-07T22:30:16.063431+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53500	45.128.233.186	23	TCP
2025-01-07T22:30:17.860277+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53502	45.128.233.186	23	TCP
2025-01-07T22:30:19.645229+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53504	45.128.233.186	23	TCP
2025-01-07T22:30:21.374491+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53506	45.128.233.186	23	TCP
2025-01-07T22:30:23.145238+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53508	45.128.233.186	23	TCP
2025-01-07T22:30:24.905882+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53510	45.128.233.186	23	TCP
2025-01-07T22:30:26.688166+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53512	45.128.233.186	23	TCP
2025-01-07T22:30:28.464195+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53514	45.128.233.186	23	TCP
2025-01-07T22:30:30.207274+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53516	45.128.233.186	23	TCP
2025-01-07T22:30:32.014050+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53518	45.128.233.186	23	TCP
2025-01-07T22:30:33.808855+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53520	45.128.233.186	23	TCP
2025-01-07T22:30:35.613625+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53522	45.128.233.186	23	TCP
2025-01-07T22:30:37.386966+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53524	45.128.233.186	23	TCP
2025-01-07T22:30:39.132967+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53526	45.128.233.186	23	TCP
2025-01-07T22:30:40.920591+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53528	45.128.233.186	23	TCP
2025-01-07T22:30:42.704912+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53530	45.128.233.186	23	TCP
2025-01-07T22:30:44.480946+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53532	45.128.233.186	23	TCP
2025-01-07T22:30:46.263610+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53534	45.128.233.186	23	TCP
2025-01-07T22:30:48.050116+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53536	45.128.233.186	23	TCP
2025-01-07T22:30:49.833194+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.14	53538	45.128.233.186	23	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:27:16.652847052 CET	53300	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:16.657768965 CET	23	53300	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:16.657810926 CET	53300	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:16.790076971 CET	53300	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:16.794914007 CET	23	53300	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:18.448245049 CET	23	53300	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:18.448899984 CET	53300	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:18.449421883 CET	53302	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:18.453742027 CET	23	53300	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:18.454231977 CET	23	53302	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:18.454458952 CET	53302	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:18.474473000 CET	53302	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:18.479355097 CET	23	53302	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:20.237313032 CET	23	53302	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:20.237639904 CET	53302	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:20.238061905 CET	53304	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:20.242399931 CET	23	53302	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:20.242851019 CET	23	53304	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:20.242899895 CET	53304	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:20.258011103 CET	53304	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:20.262756109 CET	23	53304	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:22.068809986 CET	23	53304	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:22.069102049 CET	53304	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:22.069498062 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:22.074343920 CET	23	53304	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:22.074517965 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:22.074561119 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:22.089947939 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:22.298227072 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:22.510139942 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:22.942153931 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:23.111078024 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:23.111090899 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:23.111094952 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:23.111099005 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:23.111103058 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:23.111207008 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:24.924973011 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:24.925282001 CET	53306	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:24.925724030 CET	53308	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:24.930116892 CET	23	53306	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:24.930612087 CET	23	53308	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:24.930669069 CET	53308	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:24.945019960 CET	53308	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:24.949903011 CET	23	53308	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:26.693578959 CET	23	53308	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:26.693991899 CET	53308	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:26.694499969 CET	53310	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:26.698833942 CET	23	53308	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:26.699255943 CET	23	53310	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:26.699310064 CET	53310	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:26.714662075 CET	53310	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:26.719439030 CET	23	53310	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:28.429476976 CET	23	53310	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:28.429714918 CET	53310	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:28.430269003 CET	53312	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:28.434448004 CET	23	53310	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:28.435056925 CET	23	53312	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:28.435113907 CET	53312	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:28.450584888 CET	53312	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:28.455380917 CET	23	53312	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:30.186717987 CET	23	53312	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:30.187051058 CET	53312	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:30.187537909 CET	53314	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:30.191836119 CET	23	53312	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:30.192359924 CET	23	53314	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:30.192452908 CET	53314	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:30.208750963 CET	53314	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:30.213529110 CET	23	53314	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:31.952579021 CET	23	53314	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:31.952846050 CET	53314	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:31.953655958 CET	53316	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:31.957600117 CET	23	53314	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:31.958442926 CET	23	53316	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:31.958508968 CET	53316	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:31.977078915 CET	53316	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:31.981873035 CET	23	53316	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:33.735898972 CET	23	53316	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:33.736152887 CET	53316	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:33.736671925 CET	53318	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:33.741000891 CET	23	53316	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:33.741458893 CET	23	53318	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:33.741508961 CET	53318	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:33.756548882 CET	53318	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:33.761579037 CET	23	53318	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:35.522927046 CET	23	53318	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:35.523123026 CET	53318	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:35.523632050 CET	53320	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:35.527968884 CET	23	53318	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:35.528393030 CET	23	53320	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:35.528434992 CET	53320	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:35.541973114 CET	53320	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:35.546704054 CET	23	53320	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:37.275641918 CET	23	53320	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:37.275888920 CET	53320	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:37.277110100 CET	53322	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:37.280746937 CET	23	53320	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:37.282023907 CET	23	53322	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:37.282111883 CET	53322	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:37.303472996 CET	53322	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:37.308904886 CET	23	53322	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:39.050923109 CET	23	53322	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:39.051419973 CET	53322	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:39.051991940 CET	53324	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:39.056217909 CET	23	53322	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:39.056849003 CET	23	53324	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:39.056909084 CET	53324	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:39.076268911 CET	53324	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:39.081052065 CET	23	53324	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:40.843096018 CET	23	53324	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:40.843285084 CET	53324	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:40.844038963 CET	53326	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:40.848113060 CET	23	53324	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:40.848818064 CET	23	53326	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:40.848885059 CET	53326	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:40.871757030 CET	53326	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:40.876610041 CET	23	53326	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:42.627976894 CET	23	53326	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:42.628366947 CET	53326	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:42.629421949 CET	53328	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:42.633197069 CET	23	53326	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:42.634313107 CET	23	53328	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:42.634413958 CET	53328	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:42.653062105 CET	53328	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:42.657902956 CET	23	53328	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:44.410569906 CET	23	53328	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:44.410801888 CET	53328	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:44.411305904 CET	53330	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:44.415807009 CET	23	53328	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:44.416083097 CET	23	53330	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:44.416189909 CET	53330	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:44.430768967 CET	53330	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:44.435580015 CET	23	53330	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:46.199990988 CET	23	53330	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:46.200295925 CET	53330	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:46.200826883 CET	53332	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:46.205126047 CET	23	53330	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:46.205604076 CET	23	53332	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:46.205665112 CET	53332	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:46.220647097 CET	53332	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:46.225471973 CET	23	53332	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:47.978853941 CET	23	53332	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:47.979302883 CET	53332	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:47.980195999 CET	53334	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:47.985780954 CET	23	53332	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:47.986774921 CET	23	53334	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:47.986855984 CET	53334	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:48.007175922 CET	53334	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:48.012074947 CET	23	53334	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:49.765038013 CET	23	53334	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:49.765575886 CET	53334	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:49.766067028 CET	53336	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:49.770450115 CET	23	53334	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:49.770946026 CET	23	53336	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:49.770994902 CET	53336	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:49.785978079 CET	53336	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:49.790884018 CET	23	53336	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:51.537764072 CET	23	53336	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:51.538161993 CET	53336	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:51.538789034 CET	53338	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:51.542989969 CET	23	53336	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:51.543611050 CET	23	53338	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:51.543704033 CET	53338	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:51.558175087 CET	53338	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:51.563030958 CET	23	53338	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:53.275787115 CET	23	53338	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:53.276165962 CET	53338	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:53.276808977 CET	53340	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:53.281121016 CET	23	53338	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:53.281722069 CET	23	53340	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:53.281795979 CET	53340	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:53.300117970 CET	53340	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:53.305212975 CET	23	53340	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:55.057648897 CET	23	53340	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:55.058151007 CET	53340	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:55.058768034 CET	53342	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:55.063019037 CET	23	53340	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:55.063545942 CET	23	53342	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:55.063644886 CET	53342	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:55.081124067 CET	53342	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:55.085906029 CET	23	53342	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:56.826292038 CET	23	53342	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:56.826997995 CET	53342	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:56.827763081 CET	53344	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:56.831852913 CET	23	53342	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:56.832551003 CET	23	53344	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:56.832638025 CET	53344	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:56.852221012 CET	53344	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:56.857644081 CET	23	53344	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:58.599086046 CET	23	53344	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:58.599469900 CET	53344	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:58.599977970 CET	53346	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:58.604286909 CET	23	53344	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:58.604743958 CET	23	53346	45.128.233.186	192.168.2.14
Jan 7, 2025 22:27:58.604790926 CET	53346	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:58.618407011 CET	53346	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:27:58.623260021 CET	23	53346	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:00.337989092 CET	23	53346	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:00.338272095 CET	53346	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:00.338886023 CET	53348	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:00.343102932 CET	23	53346	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:00.343738079 CET	23	53348	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:00.343862057 CET	53348	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:00.357614994 CET	53348	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:00.362456083 CET	23	53348	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:02.127240896 CET	23	53348	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:02.127774000 CET	53348	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:02.128278971 CET	53350	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:02.132747889 CET	23	53348	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:02.133089066 CET	23	53350	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:02.133186102 CET	53350	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:02.148587942 CET	53350	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:02.153497934 CET	23	53350	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:03.888062000 CET	23	53350	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:03.888379097 CET	53350	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:03.888789892 CET	53352	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:03.893336058 CET	23	53350	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:03.893627882 CET	23	53352	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:03.893739939 CET	53352	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:03.907624960 CET	53352	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:03.912446022 CET	23	53352	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:05.661159039 CET	23	53352	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:05.661487103 CET	53352	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:05.661870956 CET	53354	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:05.666338921 CET	23	53352	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:05.666683912 CET	23	53354	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:05.666737080 CET	53354	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:05.681175947 CET	53354	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:05.686006069 CET	23	53354	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:07.457391024 CET	23	53354	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:07.457598925 CET	53354	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:07.458050013 CET	53356	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:07.465403080 CET	23	53354	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:07.465877056 CET	23	53356	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:07.465996981 CET	53356	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:07.480509996 CET	53356	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:07.485414982 CET	23	53356	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:09.221023083 CET	23	53356	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:09.221337080 CET	53356	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:09.222059011 CET	53358	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:09.226144075 CET	23	53356	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:09.226876974 CET	23	53358	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:09.226950884 CET	53358	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:09.246886015 CET	53358	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:09.251696110 CET	23	53358	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:11.010519981 CET	23	53358	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:11.010860920 CET	53358	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:11.011518955 CET	53360	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:11.015706062 CET	23	53358	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:11.016427994 CET	23	53360	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:11.016531944 CET	53360	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:11.035936117 CET	53360	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:11.040954113 CET	23	53360	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:12.844719887 CET	23	53360	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:12.845033884 CET	53360	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:12.845582008 CET	53362	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:12.849975109 CET	23	53360	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:12.850390911 CET	23	53362	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:12.850533009 CET	53362	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:12.867321968 CET	53362	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:12.872454882 CET	23	53362	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:14.651719093 CET	23	53362	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:14.652092934 CET	53362	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:14.652688980 CET	53364	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:14.656883955 CET	23	53362	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:14.657449007 CET	23	53364	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:14.657495022 CET	53364	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:14.674005985 CET	53364	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:14.678822041 CET	23	53364	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:16.445395947 CET	23	53364	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:16.445676088 CET	53364	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:16.446129084 CET	53366	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:16.450551987 CET	23	53364	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:16.450896025 CET	23	53366	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:16.451001883 CET	53366	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:16.464268923 CET	53366	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:16.469029903 CET	23	53366	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:18.230798960 CET	23	53366	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:18.231153965 CET	53366	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:18.231626987 CET	53368	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:18.236424923 CET	23	53366	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:18.236893892 CET	23	53368	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:18.236948013 CET	53368	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:18.250493050 CET	53368	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:18.255747080 CET	23	53368	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:20.029000044 CET	23	53368	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:20.029190063 CET	53368	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:20.029655933 CET	53370	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:20.034622908 CET	23	53368	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:20.034982920 CET	23	53370	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:20.035103083 CET	53370	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:20.051414967 CET	53370	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:20.056782961 CET	23	53370	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:21.780695915 CET	23	53370	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:21.780975103 CET	53370	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:21.781457901 CET	53372	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:21.785847902 CET	23	53370	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:21.786314964 CET	23	53372	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:21.786365986 CET	53372	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:21.800297976 CET	53372	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:21.805068970 CET	23	53372	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:23.574193954 CET	23	53372	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:23.574455023 CET	53372	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:23.575082064 CET	53374	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:23.579257011 CET	23	53372	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:23.579834938 CET	23	53374	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:23.579961061 CET	53374	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:23.599345922 CET	53374	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:23.604154110 CET	23	53374	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:25.560698986 CET	23	53374	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:25.560879946 CET	23	53374	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:25.560885906 CET	53374	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:25.560925961 CET	53374	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:25.561294079 CET	53376	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:25.565725088 CET	23	53374	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:25.566114902 CET	23	53376	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:25.566160917 CET	53376	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:25.580610991 CET	53376	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:25.585414886 CET	23	53376	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:27.292263985 CET	23	53376	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:27.292445898 CET	53376	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:27.292988062 CET	53378	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:27.297257900 CET	23	53376	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:27.297748089 CET	23	53378	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:27.297890902 CET	53378	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:27.316095114 CET	53378	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:27.321028948 CET	23	53378	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:29.061678886 CET	23	53378	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:29.062344074 CET	53378	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:29.063086987 CET	53380	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:29.067199945 CET	23	53378	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:29.067961931 CET	23	53380	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:29.068008900 CET	53380	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:29.084501028 CET	53380	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:29.089360952 CET	23	53380	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:30.791620970 CET	23	53380	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:30.791945934 CET	53380	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:30.792651892 CET	53382	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:30.796752930 CET	23	53380	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:30.797440052 CET	23	53382	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:30.797554016 CET	53382	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:30.818484068 CET	53382	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:30.824048996 CET	23	53382	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:32.566252947 CET	23	53382	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:32.566602945 CET	53382	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:32.567019939 CET	53384	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:32.571360111 CET	23	53382	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:32.571824074 CET	23	53384	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:32.571897030 CET	53384	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:32.587289095 CET	53384	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:32.592109919 CET	23	53384	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:34.291368008 CET	23	53384	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:34.291559935 CET	53384	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:34.292035103 CET	53386	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:34.296358109 CET	23	53384	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:34.296855927 CET	23	53386	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:34.296951056 CET	53386	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:34.317312956 CET	53386	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:34.322057962 CET	23	53386	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:36.068798065 CET	23	53386	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:36.069186926 CET	53386	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:36.069936037 CET	53388	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:36.074073076 CET	23	53386	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:36.074737072 CET	23	53388	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:36.074842930 CET	53388	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:36.092607021 CET	53388	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:36.097399950 CET	23	53388	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:37.847153902 CET	23	53388	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:37.847568035 CET	53388	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:37.848282099 CET	53390	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:37.852422953 CET	23	53388	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:37.853123903 CET	23	53390	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:37.853209972 CET	53390	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:37.871217012 CET	53390	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:37.876080990 CET	23	53390	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:39.660832882 CET	23	53390	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:39.661166906 CET	53390	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:39.661891937 CET	53392	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:39.665941954 CET	23	53390	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:39.666663885 CET	23	53392	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:39.666723013 CET	53392	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:39.682859898 CET	53392	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:39.687630892 CET	23	53392	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:41.421390057 CET	23	53392	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:41.421803951 CET	53392	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:41.422508955 CET	53394	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:41.426635027 CET	23	53392	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:41.427272081 CET	23	53394	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:41.427359104 CET	53394	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:41.448100090 CET	53394	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:41.452904940 CET	23	53394	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:43.231054068 CET	23	53394	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:43.231528997 CET	53394	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:43.232403040 CET	53396	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:43.236377001 CET	23	53394	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:43.237194061 CET	23	53396	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:43.237334967 CET	53396	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:43.258408070 CET	53396	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:43.263241053 CET	23	53396	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:45.028301001 CET	23	53396	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:45.028781891 CET	53396	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:45.029222012 CET	53398	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:45.035235882 CET	23	53396	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:45.035689116 CET	23	53398	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:45.035747051 CET	53398	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:45.050221920 CET	53398	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:45.055054903 CET	23	53398	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:46.799426079 CET	23	53398	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:46.799686909 CET	53398	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:46.800383091 CET	53400	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:46.805603981 CET	23	53398	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:46.806195021 CET	23	53400	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:46.806301117 CET	53400	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:46.821319103 CET	53400	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:46.826186895 CET	23	53400	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:48.621088982 CET	23	53400	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:48.621618986 CET	53400	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:48.622082949 CET	53402	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:48.626473904 CET	23	53400	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:48.626885891 CET	23	53402	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:48.626940966 CET	53402	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:48.639735937 CET	53402	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:48.644575119 CET	23	53402	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:50.410909891 CET	23	53402	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:50.411230087 CET	53402	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:50.411815882 CET	53404	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:50.416049004 CET	23	53402	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:50.416610003 CET	23	53404	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:50.416716099 CET	53404	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:50.427593946 CET	53404	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:50.432414055 CET	23	53404	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:52.173731089 CET	23	53404	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:52.174068928 CET	53404	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:52.174555063 CET	53406	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:52.178961992 CET	23	53404	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:52.179328918 CET	23	53406	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:52.179383039 CET	53406	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:52.191560030 CET	53406	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:52.196348906 CET	23	53406	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:53.900763988 CET	23	53406	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:53.901060104 CET	53406	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:53.901392937 CET	53408	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:53.905929089 CET	23	53406	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:53.906198978 CET	23	53408	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:53.906244993 CET	53408	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:53.916171074 CET	53408	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:53.920922041 CET	23	53408	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:55.692111969 CET	23	53408	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:55.692348003 CET	53408	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:55.692811012 CET	53410	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:55.697137117 CET	23	53408	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:55.697571039 CET	23	53410	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:55.697642088 CET	53410	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:55.708285093 CET	53410	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:55.713031054 CET	23	53410	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:57.434783936 CET	23	53410	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:57.435291052 CET	53410	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:57.435770035 CET	53412	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:57.440063000 CET	23	53410	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:57.440570116 CET	23	53412	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:57.440625906 CET	53412	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:57.451286077 CET	53412	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:57.456116915 CET	23	53412	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:59.227437973 CET	23	53412	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:59.227622986 CET	53412	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:59.228065968 CET	53414	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:59.232429028 CET	23	53412	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:59.232848883 CET	23	53414	45.128.233.186	192.168.2.14
Jan 7, 2025 22:28:59.232964993 CET	53414	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:59.243814945 CET	53414	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:28:59.248662949 CET	23	53414	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:01.012641907 CET	23	53414	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:01.012938976 CET	53414	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:01.013509989 CET	53416	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:01.017751932 CET	23	53414	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:01.018290043 CET	23	53416	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:01.018333912 CET	53416	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:01.029256105 CET	53416	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:01.034004927 CET	23	53416	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:02.793289900 CET	23	53416	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:02.793580055 CET	53416	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:02.793987989 CET	53418	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:02.798346043 CET	23	53416	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:02.798774004 CET	23	53418	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:02.798877954 CET	53418	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:02.808456898 CET	53418	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:02.813272953 CET	23	53418	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:04.525676966 CET	23	53418	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:04.525955915 CET	53418	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:04.526354074 CET	53420	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:04.530723095 CET	23	53418	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:04.531245947 CET	23	53420	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:04.531299114 CET	53420	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:04.541510105 CET	53420	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:04.546325922 CET	23	53420	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:06.281699896 CET	23	53420	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:06.281964064 CET	53420	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:06.282659054 CET	53422	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:06.286811113 CET	23	53420	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:06.287441015 CET	23	53422	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:06.287504911 CET	53422	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:06.304255962 CET	53422	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:06.309066057 CET	23	53422	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:08.050551891 CET	23	53422	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:08.050743103 CET	53422	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:08.051184893 CET	53424	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:08.055581093 CET	23	53422	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:08.056025982 CET	23	53424	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:08.056087971 CET	53424	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:08.067851067 CET	53424	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:08.072592020 CET	23	53424	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:10.037425995 CET	23	53424	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:10.037992001 CET	53424	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:10.038434982 CET	53426	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:10.215295076 CET	23	53424	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:10.215550900 CET	53424	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:10.216526985 CET	23	53424	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:10.216536045 CET	23	53426	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:10.216588974 CET	53426	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:10.229378939 CET	53426	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:10.234194994 CET	23	53426	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:11.994395971 CET	23	53426	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:11.994635105 CET	53426	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:11.995081902 CET	53428	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:11.999423027 CET	23	53426	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:11.999890089 CET	23	53428	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:11.999963045 CET	53428	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:12.010689020 CET	53428	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:12.015441895 CET	23	53428	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:13.803459883 CET	23	53428	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:13.803730011 CET	53428	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:13.804203987 CET	53430	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:13.808525085 CET	23	53428	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:13.809007883 CET	23	53430	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:13.809062004 CET	53430	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:13.819184065 CET	53430	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:13.824001074 CET	23	53430	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:15.601705074 CET	23	53430	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:15.601943016 CET	53430	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:15.602497101 CET	53432	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:15.606707096 CET	23	53430	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:15.607286930 CET	23	53432	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:15.607351065 CET	53432	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:15.618251085 CET	53432	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:15.623117924 CET	23	53432	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:17.339432955 CET	23	53432	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:17.339622021 CET	53432	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:17.340147972 CET	53434	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:17.344470978 CET	23	53432	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:17.344948053 CET	23	53434	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:17.345014095 CET	53434	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:17.354897976 CET	53434	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:17.359664917 CET	23	53434	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:19.074503899 CET	23	53434	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:19.074660063 CET	53434	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:19.075237989 CET	53436	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:19.079502106 CET	23	53434	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:19.080028057 CET	23	53436	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:19.080100060 CET	53436	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:19.091336966 CET	53436	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:19.096126080 CET	23	53436	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:20.829560041 CET	23	53436	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:20.831017971 CET	53436	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:20.831526041 CET	53438	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:20.835841894 CET	23	53436	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:20.836333036 CET	23	53438	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:20.836379051 CET	53438	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:20.845787048 CET	53438	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:20.850567102 CET	23	53438	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:22.576674938 CET	23	53438	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:22.576864004 CET	53438	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:22.577394962 CET	53440	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:22.581666946 CET	23	53438	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:22.582258940 CET	23	53440	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:22.582320929 CET	53440	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:22.593049049 CET	53440	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:22.597933054 CET	23	53440	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:24.353698969 CET	23	53440	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:24.354006052 CET	53440	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:24.354690075 CET	53442	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:24.358884096 CET	23	53440	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:24.359479904 CET	23	53442	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:24.359592915 CET	53442	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:24.375870943 CET	53442	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:24.380637884 CET	23	53442	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:26.149466991 CET	23	53442	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:26.149823904 CET	53442	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:26.150803089 CET	53444	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:26.154582024 CET	23	53442	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:26.155582905 CET	23	53444	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:26.155652046 CET	53444	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:26.169101954 CET	53444	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:26.173947096 CET	23	53444	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:27.950498104 CET	23	53444	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:27.950980902 CET	53444	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:27.951730013 CET	53446	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:27.955741882 CET	23	53444	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:27.956490040 CET	23	53446	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:27.956599951 CET	53446	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:27.970180035 CET	53446	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:27.974992037 CET	23	53446	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:29.745054960 CET	23	53446	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:29.745462894 CET	53446	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:29.746233940 CET	53448	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:29.750277996 CET	23	53446	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:29.751035929 CET	23	53448	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:29.751104116 CET	53448	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:29.766819954 CET	53448	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:29.771604061 CET	23	53448	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:31.559870958 CET	23	53448	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:31.560290098 CET	53448	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:31.561049938 CET	53450	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:31.565063000 CET	23	53448	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:31.565836906 CET	23	53450	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:31.565963984 CET	53450	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:31.579967022 CET	53450	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:31.584702015 CET	23	53450	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:33.292593002 CET	23	53450	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:33.292939901 CET	53450	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:33.293646097 CET	53452	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:33.297811985 CET	23	53450	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:33.298530102 CET	23	53452	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:33.298582077 CET	53452	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:33.309114933 CET	53452	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:33.313942909 CET	23	53452	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:35.092490911 CET	23	53452	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:35.092900038 CET	53452	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:35.093602896 CET	53454	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:35.097700119 CET	23	53452	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:35.098423958 CET	23	53454	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:35.098479986 CET	53454	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:35.109568119 CET	53454	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:35.114371061 CET	23	53454	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:36.862086058 CET	23	53454	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:36.862346888 CET	53454	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:36.862798929 CET	53456	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:36.867144108 CET	23	53454	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:36.867618084 CET	23	53456	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:36.867679119 CET	53456	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:36.877346039 CET	53456	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:36.882107973 CET	23	53456	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:38.652858019 CET	23	53456	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:38.653388023 CET	53456	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:38.654057026 CET	53458	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:38.658164024 CET	23	53456	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:38.658814907 CET	23	53458	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:38.658859015 CET	53458	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:38.671423912 CET	53458	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:38.676223993 CET	23	53458	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:40.386353016 CET	23	53458	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:40.386512041 CET	53458	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:40.386941910 CET	53460	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:40.391283989 CET	23	53458	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:40.391765118 CET	23	53460	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:40.391882896 CET	53460	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:40.401333094 CET	53460	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:40.406136990 CET	23	53460	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:42.123130083 CET	23	53460	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:42.123548031 CET	53460	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:42.124017954 CET	53462	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:42.128348112 CET	23	53460	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:42.128865004 CET	23	53462	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:42.128914118 CET	53462	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:42.140053988 CET	53462	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:42.144846916 CET	23	53462	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:43.900567055 CET	23	53462	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:43.900749922 CET	53462	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:43.901211023 CET	53464	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:43.905554056 CET	23	53462	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:43.906075954 CET	23	53464	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:43.906193972 CET	53464	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:43.917678118 CET	53464	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:43.923706055 CET	23	53464	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:45.690752029 CET	23	53464	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:45.691137075 CET	53464	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:45.691764116 CET	53466	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:45.695936918 CET	23	53464	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:45.696512938 CET	23	53466	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:45.696578979 CET	53466	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:45.709903002 CET	53466	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:45.715198994 CET	23	53466	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:47.559740067 CET	23	53466	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:47.560173035 CET	53466	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:47.560899973 CET	53468	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:47.564954042 CET	23	53466	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:47.565742970 CET	23	53468	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:47.565835953 CET	53468	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:47.579587936 CET	53468	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:47.584372044 CET	23	53468	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:49.312609911 CET	23	53468	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:49.313035011 CET	53468	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:49.313647985 CET	53470	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:49.317883968 CET	23	53468	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:49.318546057 CET	23	53470	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:49.318593025 CET	53470	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:49.329941034 CET	53470	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:49.334747076 CET	23	53470	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:51.084791899 CET	23	53470	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:51.085314035 CET	53470	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:51.086052895 CET	53472	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:51.090075016 CET	23	53470	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:51.090914011 CET	23	53472	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:51.090976000 CET	53472	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:51.106456995 CET	53472	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:51.111216068 CET	23	53472	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:52.848422050 CET	23	53472	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:52.848846912 CET	53472	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:52.849575043 CET	53474	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:52.853647947 CET	23	53472	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:52.854408979 CET	23	53474	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:52.854494095 CET	53474	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:52.868127108 CET	53474	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:52.872956038 CET	23	53474	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:54.638451099 CET	23	53474	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:54.638648033 CET	53474	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:54.639122963 CET	53476	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:54.643476963 CET	23	53474	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:54.643903971 CET	23	53476	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:54.643965006 CET	53476	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:54.654095888 CET	53476	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:54.658850908 CET	23	53476	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:56.389743090 CET	23	53476	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:56.389957905 CET	53476	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:56.390818119 CET	53478	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:56.394741058 CET	23	53476	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:56.395639896 CET	23	53478	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:56.395725012 CET	53478	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:56.404840946 CET	53478	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:56.409600019 CET	23	53478	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:58.159223080 CET	23	53478	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:58.159456015 CET	53478	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:58.159933090 CET	53480	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:58.164336920 CET	23	53478	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:58.164784908 CET	23	53480	45.128.233.186	192.168.2.14
Jan 7, 2025 22:29:58.164853096 CET	53480	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:58.174396992 CET	53480	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:29:58.179171085 CET	23	53480	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:00.023942947 CET	23	53480	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:00.024183035 CET	53480	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:00.024936914 CET	53482	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:00.029010057 CET	23	53480	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:00.029711008 CET	23	53482	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:00.029808044 CET	53482	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:00.046483040 CET	53482	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:00.051273108 CET	23	53482	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:01.797194004 CET	23	53482	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:01.797308922 CET	53482	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:01.797925949 CET	53484	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:01.802114964 CET	23	53482	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:01.802743912 CET	23	53484	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:01.802791119 CET	53484	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:01.838767052 CET	53484	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:01.843523026 CET	23	53484	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:03.567228079 CET	23	53484	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:03.567507029 CET	53484	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:03.567912102 CET	53486	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:03.572314978 CET	23	53484	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:03.572727919 CET	23	53486	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:03.572890043 CET	53486	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:03.587491035 CET	53486	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:03.592278004 CET	23	53486	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:05.312122107 CET	23	53486	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:05.312499046 CET	53486	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:05.312870026 CET	53488	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:05.317332983 CET	23	53486	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:05.317769051 CET	23	53488	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:05.317833900 CET	53488	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:05.327488899 CET	53488	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:05.332247972 CET	23	53488	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:07.104955912 CET	23	53488	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:07.105165958 CET	53488	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:07.105678082 CET	53490	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:07.109957933 CET	23	53488	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:07.110462904 CET	23	53490	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:07.110517979 CET	53490	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:07.120682001 CET	53490	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:07.125497103 CET	23	53490	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:08.932156086 CET	23	53490	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:08.932373047 CET	53490	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:08.932888985 CET	53492	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:08.937227964 CET	23	53490	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:08.937653065 CET	23	53492	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:08.937721014 CET	53492	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:08.949403048 CET	53492	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:08.954269886 CET	23	53492	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:10.670207024 CET	23	53492	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:10.670556068 CET	53492	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:10.671111107 CET	53494	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:10.675390959 CET	23	53492	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:10.675914049 CET	23	53494	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:10.675966024 CET	53494	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:10.690196037 CET	53494	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:10.694946051 CET	23	53494	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:12.456465960 CET	23	53494	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:12.456732035 CET	53494	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:12.457310915 CET	53496	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:12.461796999 CET	23	53494	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:12.462441921 CET	23	53496	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:12.462508917 CET	53496	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:12.477665901 CET	53496	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:12.482827902 CET	23	53496	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:14.306317091 CET	23	53496	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:14.306499004 CET	53496	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:14.307048082 CET	53498	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:14.311326027 CET	23	53496	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:14.311810970 CET	23	53498	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:14.311851978 CET	53498	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:14.322182894 CET	53498	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:14.326925039 CET	23	53498	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:16.047667027 CET	23	53498	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:16.048058987 CET	53498	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:16.048471928 CET	53500	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:16.052822113 CET	23	53498	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:16.053250074 CET	23	53500	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:16.053347111 CET	53500	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:16.063431025 CET	53500	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:16.068170071 CET	23	53500	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:17.842758894 CET	23	53500	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:17.842925072 CET	53500	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:17.843710899 CET	53502	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:17.847711086 CET	23	53500	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:17.848489046 CET	23	53502	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:17.848535061 CET	53502	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:17.860276937 CET	53502	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:17.865042925 CET	23	53502	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:19.621300936 CET	23	53502	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:19.621659994 CET	53502	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:19.622400045 CET	53504	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:19.626492977 CET	23	53502	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:19.627232075 CET	23	53504	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:19.627300978 CET	53504	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:19.645229101 CET	53504	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:19.650002003 CET	23	53504	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:21.357877970 CET	23	53504	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:21.358015060 CET	53504	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:21.358544111 CET	53506	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:21.362801075 CET	23	53504	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:21.363367081 CET	23	53506	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:21.363452911 CET	53506	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:21.374490976 CET	53506	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:21.379266024 CET	23	53506	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:23.128632069 CET	23	53506	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:23.128976107 CET	53506	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:23.129575968 CET	53508	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:23.133795977 CET	23	53506	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:23.134367943 CET	23	53508	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:23.134414911 CET	53508	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:23.145237923 CET	53508	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:23.149992943 CET	23	53508	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:24.890743017 CET	23	53508	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:24.891005993 CET	53508	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:24.891334057 CET	53510	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:24.895808935 CET	23	53508	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:24.896162987 CET	23	53510	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:24.896230936 CET	53510	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:24.905881882 CET	53510	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:24.910612106 CET	23	53510	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:26.669322014 CET	23	53510	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:26.669688940 CET	53510	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:26.670269966 CET	53512	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:26.674453020 CET	23	53510	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:26.675131083 CET	23	53512	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:26.675198078 CET	53512	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:26.688165903 CET	53512	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:26.692958117 CET	23	53512	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:28.441521883 CET	23	53512	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:28.441854000 CET	53512	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:28.442435980 CET	53514	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:28.446645975 CET	23	53512	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:28.447227001 CET	23	53514	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:28.447335005 CET	53514	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:28.464195013 CET	53514	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:28.469031096 CET	23	53514	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:30.186503887 CET	23	53514	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:30.186819077 CET	53514	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:30.186860085 CET	53514	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:30.187536955 CET	53516	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:30.191608906 CET	23	53514	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:30.192342043 CET	23	53516	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:30.192435980 CET	53516	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:30.207273960 CET	53516	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:30.212126970 CET	23	53516	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:31.999085903 CET	23	53516	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:31.999243975 CET	53516	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:31.999659061 CET	53518	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:32.004412889 CET	23	53516	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:32.004440069 CET	23	53518	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:32.004540920 CET	53518	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:32.014050007 CET	53518	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:32.018769026 CET	23	53518	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:33.792143106 CET	23	53518	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:33.792335033 CET	53518	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:33.792977095 CET	53520	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:33.797157049 CET	23	53518	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:33.797744036 CET	23	53520	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:33.797799110 CET	53520	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:33.808855057 CET	53520	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:33.813651085 CET	23	53520	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:35.607280970 CET	23	53520	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:35.607722998 CET	53520	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:35.608125925 CET	53522	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:35.612538099 CET	23	53520	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:35.612960100 CET	23	53522	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:35.613013029 CET	53522	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:35.613625050 CET	53522	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:35.618442059 CET	23	53522	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:37.381361961 CET	23	53522	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:37.381520987 CET	53522	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:37.381998062 CET	53524	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:37.386291981 CET	23	53522	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:37.386800051 CET	23	53524	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:37.386912107 CET	53524	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:37.386965990 CET	53524	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:37.391746044 CET	23	53524	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:39.127159119 CET	23	53524	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:39.127464056 CET	53524	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:39.127943993 CET	53526	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:39.132502079 CET	23	53524	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:39.132867098 CET	23	53526	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:39.132922888 CET	53526	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:39.132966995 CET	53526	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:39.138397932 CET	23	53526	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:40.915076971 CET	23	53526	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:40.915256977 CET	53526	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:40.915687084 CET	53528	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:40.920053005 CET	23	53526	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:40.920479059 CET	23	53528	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:40.920548916 CET	53528	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:40.920591116 CET	53528	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:40.925380945 CET	23	53528	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:42.698636055 CET	23	53528	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:42.699141026 CET	53528	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:42.699870110 CET	53530	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:42.703931093 CET	23	53528	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:42.704710007 CET	23	53530	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:42.704766035 CET	53530	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:42.704911947 CET	53530	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:42.709666014 CET	23	53530	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:44.474956036 CET	23	53530	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:44.475240946 CET	53530	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:44.475840092 CET	53532	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:44.480132103 CET	23	53530	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:44.480833054 CET	23	53532	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:44.480889082 CET	53532	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:44.480946064 CET	53532	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:44.486027002 CET	23	53532	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:46.258275986 CET	23	53532	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:46.258394003 CET	53532	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:46.258722067 CET	53534	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:46.263219118 CET	23	53532	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:46.263509035 CET	23	53534	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:46.263562918 CET	53534	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:46.263609886 CET	53534	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:46.268436909 CET	23	53534	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:48.044017076 CET	23	53534	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:48.044465065 CET	53534	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:48.045097113 CET	53536	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:48.049273014 CET	23	53534	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:48.049850941 CET	23	53536	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:48.049905062 CET	53536	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:48.050116062 CET	53536	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:48.054852962 CET	23	53536	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:49.825228930 CET	23	53536	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:49.825450897 CET	53536	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:49.826049089 CET	53538	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:49.830276012 CET	23	53536	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:49.830826044 CET	23	53538	45.128.233.186	192.168.2.14
Jan 7, 2025 22:30:49.830879927 CET	53538	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:49.833194017 CET	53538	23	192.168.2.14	45.128.233.186
Jan 7, 2025 22:30:49.837951899 CET	23	53538	45.128.233.186	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:30:02.131934881 CET	55552	53	192.168.2.14	8.8.8.8
Jan 7, 2025 22:30:02.131988049 CET	36115	53	192.168.2.14	8.8.8.8
Jan 7, 2025 22:30:02.138283014 CET	53	55552	8.8.8.8	192.168.2.14
Jan 7, 2025 22:30:02.138633966 CET	53	36115	8.8.8.8	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 22:30:02.131934881 CET	192.168.2.14	8.8.8.8	0x68ce	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:30:02.131988049 CET	192.168.2.14	8.8.8.8	0xf44b	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 22:30:02.138283014 CET	8.8.8.8	192.168.2.14	0x68ce	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:30:02.138283014 CET	8.8.8.8	192.168.2.14	0x68ce	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: gigops.arm5.elf PID: 5488, Parent PID: 5415

General

Start time (UTC):	21:27:15
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm5.elf
Arguments:	/tmp/gigops.arm5.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: gigops.arm5.elf PID: 5490, Parent PID: 5488

General

Start time (UTC):	21:27:15
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: gigops.arm5.elf PID: 5492, Parent PID: 5490

General

Start time (UTC):	21:27:15
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigops.arm5.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: gigops.arm5.elf PID: 5488, Parent PID: 5415

General

Chronological Activities

Analysis Process: gigops.arm5.elf PID: 5490, Parent PID: 5488

General

Chronological Activities

Analysis Process: gigops.arm5.elf PID: 5492, Parent PID: 5490

General

Chronological Activities

Linux Analysis Report
gigops.arm5.elf