Edit tour

Linux Analysis Report
armv6l.elf

Overview

General Information

Sample name:	armv6l.elf
Analysis ID:	1590160
MD5:	a1dbe596e19f5da7efcd75242b5c3d8c
SHA1:	ec67b5c162808ac4f74f5d7393593389309c35a9
SHA256:	514f184e701a93fc2df68a104acc7b7abd09743aaacabaa1d4ab0beda9524f60
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590160
Start date and time:	2025-01-13 17:07:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	armv6l.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: 185.189.13.91:25565

Runtime Messages

Command:	/tmp/armv6l.elf
PID:	5475
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

armv6l.elf (PID: 5475, Parent: 5400, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/armv6l.elf

armv6l.elf New Fork (PID: 5477, Parent: 5475)

armv6l.elf New Fork (PID: 5479, Parent: 5477)

dash New Fork (PID: 5520, Parent: 3635)

rm (PID: 5520, Parent: 3635, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.YG0nSu9WJX /tmp/tmp.33dmxlCUOp /tmp/tmp.vUmB7zsdCT

dash New Fork (PID: 5521, Parent: 3635)

rm (PID: 5521, Parent: 3635, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.YG0nSu9WJX /tmp/tmp.33dmxlCUOp /tmp/tmp.vUmB7zsdCT

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
armv6l.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
armv6l.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
armv6l.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1266c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1270c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1275c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5475.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5475.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1266c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1270c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1275c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5477.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5477.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1266c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1270c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1275c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: armv6l.elf PID: 5475	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv6l.elf PID: 5475	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xe92:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xea6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xece:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xef6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf0a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf1e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf32:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf46:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf5a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf82:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf96:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfaa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfe6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xffa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x100e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1022:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: armv6l.elf PID: 5477	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv6l.elf PID: 5477	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12df2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e06:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e1a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e2e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e42:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e56:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e6a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e7e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e92:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ea6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12eba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ece:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ee2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ef6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f0a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f1e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f32:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f46:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f5a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f6e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f82:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-13T17:07:52.403789+0100	2846526	1	A Network Trojan was detected	192.168.2.14	37998	185.189.13.91	25565	TCP
2025-01-13T17:07:54.148591+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38000	185.189.13.91	25565	TCP
2025-01-13T17:07:55.898838+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38002	185.189.13.91	25565	TCP
2025-01-13T17:07:57.647102+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38004	185.189.13.91	25565	TCP
2025-01-13T17:07:59.407576+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38006	185.189.13.91	25565	TCP
2025-01-13T17:08:01.175580+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38008	185.189.13.91	25565	TCP
2025-01-13T17:08:02.923173+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38010	185.189.13.91	25565	TCP
2025-01-13T17:08:04.655188+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38012	185.189.13.91	25565	TCP
2025-01-13T17:08:06.388460+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38014	185.189.13.91	25565	TCP
2025-01-13T17:08:08.154469+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38016	185.189.13.91	25565	TCP
2025-01-13T17:08:09.912609+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38018	185.189.13.91	25565	TCP
2025-01-13T17:08:11.638139+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38020	185.189.13.91	25565	TCP
2025-01-13T17:08:13.389303+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38022	185.189.13.91	25565	TCP
2025-01-13T17:08:15.150154+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38024	185.189.13.91	25565	TCP
2025-01-13T17:08:16.891777+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38026	185.189.13.91	25565	TCP
2025-01-13T17:08:18.625699+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38028	185.189.13.91	25565	TCP
2025-01-13T17:08:20.359663+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38030	185.189.13.91	25565	TCP
2025-01-13T17:08:22.114466+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38032	185.189.13.91	25565	TCP
2025-01-13T17:08:23.846630+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38034	185.189.13.91	25565	TCP
2025-01-13T17:08:25.597676+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38036	185.189.13.91	25565	TCP
2025-01-13T17:08:27.392511+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38038	185.189.13.91	25565	TCP
2025-01-13T17:08:29.144455+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38040	185.189.13.91	25565	TCP
2025-01-13T17:08:30.907624+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38042	185.189.13.91	25565	TCP
2025-01-13T17:08:32.692184+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38044	185.189.13.91	25565	TCP
2025-01-13T17:08:34.446988+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38046	185.189.13.91	25565	TCP
2025-01-13T17:08:36.190887+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38048	185.189.13.91	25565	TCP
2025-01-13T17:08:37.947676+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38050	185.189.13.91	25565	TCP
2025-01-13T17:08:39.712711+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38052	185.189.13.91	25565	TCP
2025-01-13T17:08:41.457808+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38054	185.189.13.91	25565	TCP
2025-01-13T17:08:43.194098+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38056	185.189.13.91	25565	TCP
2025-01-13T17:08:44.939369+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38058	185.189.13.91	25565	TCP
2025-01-13T17:08:46.690144+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38060	185.189.13.91	25565	TCP
2025-01-13T17:08:48.427118+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38062	185.189.13.91	25565	TCP
2025-01-13T17:08:50.336915+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38064	185.189.13.91	25565	TCP
2025-01-13T17:08:52.082927+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38066	185.189.13.91	25565	TCP
2025-01-13T17:08:53.835967+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38068	185.189.13.91	25565	TCP
2025-01-13T17:08:55.594760+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38070	185.189.13.91	25565	TCP
2025-01-13T17:08:57.351933+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38072	185.189.13.91	25565	TCP
2025-01-13T17:08:59.097606+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38074	185.189.13.91	25565	TCP
2025-01-13T17:09:00.866282+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38076	185.189.13.91	25565	TCP
2025-01-13T17:09:02.593156+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38078	185.189.13.91	25565	TCP
2025-01-13T17:09:04.391209+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38080	185.189.13.91	25565	TCP
2025-01-13T17:09:06.355930+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38082	185.189.13.91	25565	TCP
2025-01-13T17:09:08.101181+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38084	185.189.13.91	25565	TCP
2025-01-13T17:09:09.896445+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38086	185.189.13.91	25565	TCP
2025-01-13T17:09:11.626977+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38088	185.189.13.91	25565	TCP
2025-01-13T17:09:13.363641+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38090	185.189.13.91	25565	TCP
2025-01-13T17:09:15.134544+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38092	185.189.13.91	25565	TCP
2025-01-13T17:09:16.872760+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38094	185.189.13.91	25565	TCP
2025-01-13T17:09:18.626541+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38096	185.189.13.91	25565	TCP
2025-01-13T17:09:20.388569+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38098	185.189.13.91	25565	TCP
2025-01-13T17:09:22.124890+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38100	185.189.13.91	25565	TCP
2025-01-13T17:09:23.859044+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38102	185.189.13.91	25565	TCP
2025-01-13T17:09:25.627034+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38104	185.189.13.91	25565	TCP
2025-01-13T17:09:27.358314+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38106	185.189.13.91	25565	TCP
2025-01-13T17:09:29.117681+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38108	185.189.13.91	25565	TCP
2025-01-13T17:09:30.862552+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38110	185.189.13.91	25565	TCP
2025-01-13T17:09:32.612020+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38112	185.189.13.91	25565	TCP
2025-01-13T17:09:34.343579+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38114	185.189.13.91	25565	TCP
2025-01-13T17:09:36.081051+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38116	185.189.13.91	25565	TCP
2025-01-13T17:09:37.877275+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38118	185.189.13.91	25565	TCP
2025-01-13T17:09:39.614550+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38120	185.189.13.91	25565	TCP
2025-01-13T17:09:41.351084+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38122	185.189.13.91	25565	TCP
2025-01-13T17:09:43.111122+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38124	185.189.13.91	25565	TCP
2025-01-13T17:09:47.236342+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38126	185.189.13.91	25565	TCP
2025-01-13T17:09:48.970451+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38128	185.189.13.91	25565	TCP
2025-01-13T17:09:50.738111+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38130	185.189.13.91	25565	TCP
2025-01-13T17:09:52.487946+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38132	185.189.13.91	25565	TCP
2025-01-13T17:09:54.327152+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38134	185.189.13.91	25565	TCP
2025-01-13T17:09:56.159698+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38136	185.189.13.91	25565	TCP
2025-01-13T17:09:57.968958+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38138	185.189.13.91	25565	TCP
2025-01-13T17:09:59.706666+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38140	185.189.13.91	25565	TCP
2025-01-13T17:10:01.441841+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38142	185.189.13.91	25565	TCP
2025-01-13T17:10:03.177142+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38144	185.189.13.91	25565	TCP
2025-01-13T17:10:04.926565+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38146	185.189.13.91	25565	TCP
2025-01-13T17:10:06.681536+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38148	185.189.13.91	25565	TCP
2025-01-13T17:10:08.424819+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38150	185.189.13.91	25565	TCP
2025-01-13T17:10:10.192553+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38152	185.189.13.91	25565	TCP
2025-01-13T17:10:11.925122+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38154	185.189.13.91	25565	TCP
2025-01-13T17:10:13.697893+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38156	185.189.13.91	25565	TCP
2025-01-13T17:10:15.445497+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38158	185.189.13.91	25565	TCP
2025-01-13T17:10:17.191443+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38160	185.189.13.91	25565	TCP
2025-01-13T17:10:18.943106+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38162	185.189.13.91	25565	TCP
2025-01-13T17:10:20.673695+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38164	185.189.13.91	25565	TCP
2025-01-13T17:10:22.568402+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38166	185.189.13.91	25565	TCP
2025-01-13T17:10:24.334899+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38168	185.189.13.91	25565	TCP
2025-01-13T17:10:26.063782+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38170	185.189.13.91	25565	TCP
2025-01-13T17:10:27.802891+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38172	185.189.13.91	25565	TCP
2025-01-13T17:10:29.588635+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38174	185.189.13.91	25565	TCP
2025-01-13T17:10:31.340458+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38176	185.189.13.91	25565	TCP
2025-01-13T17:10:33.083413+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38178	185.189.13.91	25565	TCP
2025-01-13T17:10:34.835861+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38180	185.189.13.91	25565	TCP
2025-01-13T17:10:36.562653+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38182	185.189.13.91	25565	TCP
2025-01-13T17:10:43.691634+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38184	185.189.13.91	25565	TCP
2025-01-13T17:10:45.426002+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38186	185.189.13.91	25565	TCP
2025-01-13T17:10:47.162637+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38188	185.189.13.91	25565	TCP
2025-01-13T17:10:48.946270+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38190	185.189.13.91	25565	TCP
2025-01-13T17:10:50.701764+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38192	185.189.13.91	25565	TCP
2025-01-13T17:10:52.460721+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38194	185.189.13.91	25565	TCP
2025-01-13T17:10:54.229700+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38196	185.189.13.91	25565	TCP
2025-01-13T17:10:55.983251+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38198	185.189.13.91	25565	TCP
2025-01-13T17:10:57.737715+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38200	185.189.13.91	25565	TCP
2025-01-13T17:10:59.507608+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38202	185.189.13.91	25565	TCP
2025-01-13T17:11:01.236327+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38204	185.189.13.91	25565	TCP
2025-01-13T17:11:02.990521+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38206	185.189.13.91	25565	TCP
2025-01-13T17:11:04.775781+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38208	185.189.13.91	25565	TCP
2025-01-13T17:11:06.546412+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38210	185.189.13.91	25565	TCP
2025-01-13T17:11:08.351628+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38212	185.189.13.91	25565	TCP
2025-01-13T17:11:10.083515+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38214	185.189.13.91	25565	TCP
2025-01-13T17:11:11.827767+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38216	185.189.13.91	25565	TCP
2025-01-13T17:11:13.662004+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38218	185.189.13.91	25565	TCP
2025-01-13T17:11:15.426696+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38220	185.189.13.91	25565	TCP
2025-01-13T17:11:17.176972+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38222	185.189.13.91	25565	TCP
2025-01-13T17:11:18.929355+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38224	185.189.13.91	25565	TCP
2025-01-13T17:11:20.656670+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38226	185.189.13.91	25565	TCP
2025-01-13T17:11:22.425762+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38228	185.189.13.91	25565	TCP
2025-01-13T17:11:24.181925+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38230	185.189.13.91	25565	TCP
2025-01-13T17:11:25.989075+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38232	185.189.13.91	25565	TCP
2025-01-13T17:11:27.744391+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38234	185.189.13.91	25565	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: armv6l.elf

Avira: detected

Found malware configuration

Source: armv6l.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.189.13.91:25565"}

Multi AV Scanner detection for submitted file

Source: armv6l.elf	Virustotal: Detection: 70%			Perma Link
Source: armv6l.elf	ReversingLabs: Detection: 75%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/armv6l.elf (PID: 5475)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38040 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38046 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38004 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38148 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38124 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38002 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38168 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38164 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38206 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38010 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38014 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38100 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38086 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38008 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38118 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38056 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38000 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38018 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38022 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38060 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38092 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38174 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38158 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:37998 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38180 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38016 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38172 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38200 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38234 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38126 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38006 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38202 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38052 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38102 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38038 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38120 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38084 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38044 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38128 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38108 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38096 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38162 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38078 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38062 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38110 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38026 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38030 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38106 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38028 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38068 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38188 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38212 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38170 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38150 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38214 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38142 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38012 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38156 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38176 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38196 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38190 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38064 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38066 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38230 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38184 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38122 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38222 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38036 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38104 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38116 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38094 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38204 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38130 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38024 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38132 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38160 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38226 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38034 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38166 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38178 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38134 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38232 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38182 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38186 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38048 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38050 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38020 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38074 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38224 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38070 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38138 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38208 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38228 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38152 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38082 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38076 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38194 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38088 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38080 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38210 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38218 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38216 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38098 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38112 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38220 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38114 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38146 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38032 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38136 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38058 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38072 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38090 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38144 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38042 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38054 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38140 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38198 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38154 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38192 -> 185.189.13.91:25565

Source: global traffic

TCP traffic: 192.168.2.14:37998 -> 185.189.13.91:25565

Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43382
Source: unknown	Network traffic detected: HTTP traffic on port 43382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: armv6l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5475.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5477.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: armv6l.elf PID: 5475, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: armv6l.elf PID: 5477, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: armv6l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5475.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5477.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: armv6l.elf PID: 5475, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: armv6l.elf PID: 5477, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: armv6l.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv6l.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv6l.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv6l.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv6l.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv6l.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv6l.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/bzero.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: armv6l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /usr/bin/dash (PID: 5520)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.YG0nSu9WJX /tmp/tmp.33dmxlCUOp /tmp/tmp.vUmB7zsdCT			Jump to behavior
Source: /usr/bin/dash (PID: 5521)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.YG0nSu9WJX /tmp/tmp.33dmxlCUOp /tmp/tmp.vUmB7zsdCT			Jump to behavior

Source: /tmp/armv6l.elf (PID: 5475)

Queries kernel information via 'uname':

Jump to behavior

Source: armv6l.elf, 5475.1.00007fffc863c000.00007fffc865d000.rw-.sdmp, armv6l.elf, 5477.1.00007fffc863c000.00007fffc865d000.rw-.sdmp	Binary or memory string: 9x86_64/usr/bin/qemu-arm/tmp/armv6l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/armv6l.elf
Source: armv6l.elf, 5475.1.0000560317ccc000.0000560317dfa000.rw-.sdmp, armv6l.elf, 5477.1.0000560317ccc000.0000560317dfa000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: armv6l.elf, 5475.1.00007fffc863c000.00007fffc865d000.rw-.sdmp, armv6l.elf, 5477.1.00007fffc863c000.00007fffc865d000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: armv6l.elf, 5475.1.0000560317ccc000.0000560317dfa000.rw-.sdmp, armv6l.elf, 5477.1.0000560317ccc000.0000560317dfa000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: armv6l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: armv6l.elf, type: SAMPLE
Source: Yara match	File source: 5475.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5477.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5475, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5477, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: armv6l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: armv6l.elf, type: SAMPLE
Source: Yara match	File source: 5475.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5477.1.00007f0f30017000.00007f0f3002c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5475, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv6l.elf PID: 5477, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	2 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.189.13.91:25565"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
armv6l.elf	70%	Virustotal		Browse
armv6l.elf	75%	ReversingLabs	Linux.Trojan.Gafgyt
armv6l.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.189.13.91:25565	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.125.190.26	unknown	United Kingdom	41231	CANONICAL-ASGB	false
185.189.13.91	unknown	Russian Federation	50113	SUPERSERVERSDATACENTERRU	true
54.247.62.1	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.125.190.26	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse
	t6.elf	Get hash	malicious	Unknown	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse
	t5.elf	Get hash	malicious	Unknown	Browse
	t6.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	Cinquento.spc.elf	Get hash	malicious	Mirai	Browse
	Cinquento.mips.elf	Get hash	malicious	Mirai	Browse
54.247.62.1	185.232.205.45-boatnet.arm7-2025-01-03T23_59_47.elf	Get hash	malicious	Mirai	Browse
	ARMV7L.elf	Get hash	malicious	Mirai	Browse
	bot.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse
	main_arm7.elf	Get hash	malicious	Mirai	Browse
	snype.arm4.elf	Get hash	malicious	Gafgyt	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
	jwwofba5.elf	Get hash	malicious	Mirai	Browse
	Demon.m68k.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	nuklear.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse
	686i.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	elitebotnet.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	t5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	2.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	t6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	JUbmpeT.exe	Get hash	malicious	Vidar	Browse	18.244.18.122
	https://www.google.ca/url?0g1qta=https://www.flowersgarrett.au&Qg=P4&bg=FN&TA=Z1&bg=PR&TA=UN&q=%2561%256d%2570%2F%2562%2563%2535%256D%2537%2579%252E%2564%2565%256B%2563%2568%256F%2562%2574%2569%2565%2577%252E%2563%256F%256D%252F%256A%256D%2561%257A%256F%2575%2572%2540%2569%256E%256F%2576%2561%256C%256F%256E%252E%2563%256F%256D&opdg=QXY&dUM=MTA&eTY=azM	Get hash	malicious	HTMLPhisher	Browse	13.33.187.96
	https://37ja0w4ofs2v93pb78wrnw.blob.core.windows.net/37ja0w4ofs2v93pb78wrnw/HT00.html#qs=r-afidgaidkggiiejaghghkciacjbeegjkagehdfagehdfababagbaecdaccaibkaddiiaejihifadcc	Get hash	malicious	Phisher	Browse	52.222.236.11
	New Order#12125.exe	Get hash	malicious	FormBook	Browse	13.228.81.39
	https://deltacapoffers.com/prequalification.php?utm_source=klayvio&utm_medium=email&utm_campaign=scrapeddripcampaign&utm_id=efi&utm_term=efi&utm_content=scrapedlists6&_kx=YFJgSt5YAM6jpJldJ4ZDop7CB1jVRJhqJKw59Uk4HMU.QZibAu	Get hash	malicious	Unknown	Browse	143.204.98.115
	http://id1223.adsalliance.xyz	Get hash	malicious	Unknown	Browse	108.138.26.50
	https://www.google.ca/url?subgn1=https://www.fordbeckerandgutierrez.com&SQ=WA&SQ=F5&SQ=R7&TA=W4&SQ=L6&q=%2561%256d%2570%2F%2573%256D%2569%2568%256B%2538%252E%2564%2565%256B%2563%2568%256F%2562%2574%2569%2565%2577%252E%2563%256F%256D%252F%256A%2576%2561%256E%256E%2561%2574%2574%2565%256E%2540%2561%2572%2572%256F%2577%2562%2561%256E%256B%252E%2563%256F%256D&opdg=ejM&cFQ=QXo&STA=MHY	Get hash	malicious	HTMLPhisher	Browse	13.33.187.96
	DOCS974i7C63.pdf	Get hash	malicious	HTMLPhisher	Browse	13.35.58.119
	https://email.mg.decisiontime.online/c/eJxszjFvszAQgOFfYzbQ-c4mMHj4pK_M3TqDOZdTjR1hJyj_vkqVMeujd3hXZxnHi2_Y6Qv1hohgaHifJbbhyHu75n2W5M7z7Fb2UiSnKjt3OUVJ_CqjpJ9WVoeoxwEvL62PKz9VN5szGsd5AQoLgV-oZ2_1oPuFgrWAvWnEIaAFDaM2ZGHoAsy0DGwY2VpNoAzs328fottqvRZF_xROCqeyFV_flQonDLPC6c6HhEfr8_q0v9vmcB9xlsTdl8SS0__8qQyUfKsbH6ket1K7rfgkXeLa3B3-BgAA__-9dmXG	Get hash	malicious	Unknown	Browse	3.9.49.166
	https://shortener.kountryboyzbailbonds.com/orVbdaZDUTFihPy?https://go.microsoft.com/ref=?ONSKE6784f8047cd90___store=ot&url=ONSKE6784f8047cd90&utm_source=follow-up-email&utm_medium=email&utm_campaign=abandoned%20helpful%20link	Get hash	malicious	Unknown	Browse	3.248.108.242
SUPERSERVERSDATACENTERRU	covid.arm7.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	covid.mips.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	covid.arm6.elf	Get hash	malicious	Unknown	Browse	185.255.135.104
	covid.x86.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	byte.mpsl.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	185.206.2.20
	http://osregist.xyz/tdrig/CNBR.html	Get hash	malicious	Unknown	Browse	185.255.135.223
	Clienter.dll.dll	Get hash	malicious	Unknown	Browse	185.40.4.94
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	147.78.65.71
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	147.78.65.71
CANONICAL-ASGB	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	t3.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	t2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hikarm4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hikarm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	g6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.044220918063613
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	armv6l.elf
File size:	121'007 bytes
MD5:	a1dbe596e19f5da7efcd75242b5c3d8c
SHA1:	ec67b5c162808ac4f74f5d7393593389309c35a9
SHA256:	514f184e701a93fc2df68a104acc7b7abd09743aaacabaa1d4ab0beda9524f60
SHA512:	56fa0c321161dbee73c0731c5a2a58690453bc7b2eface247822b847a97454a9fc3c224d453d7dd1f3ee919b73217b53dc501f6bf19bf5db6c5e4e1b4fbc8612
SSDEEP:	3072:ekYPUfsgnsb0J2ag/VfOkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0OkDy+mTQOY5R3cn
TLSH:	06C32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E39921
File Content Preview:	.ELF..............(.........4....b......4. ...(........p.F.......................................... F.. F.............. F.. F.. F.......i..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81b0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	90860
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80b4	0xb4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80d0	0xd0	0x11e34	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x19f04	0x11f04	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x19f18	0x11f18	0x26e0	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x1c5f8	0x145f8	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1c610	0x14610	0x10	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x24620	0x14620	0x4	0x0	0x3	WA	0	0	4
.init_array	INIT_ARRAY	0x24624	0x14624	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x24628	0x14628	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2462c	0x1462c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x24630	0x14630	0x78	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x246a8	0x146a8	0x290	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x24938	0x14938	0x6668	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x14938	0xbf8	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x15530	0xe0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x15610	0x4b0	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x15ac0	0x8c	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x15b4c	0x655	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x161a4	0x58	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x161fc	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1620c	0xdd	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x166ac	0x4a20	0x10	0x0		23	643	4
.strtab	STRTAB	0x0	0x1b0cc	0x27e3	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x14610	0x1c610	0x1c610	0x10	0x10	2.4056	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x14620	0x14620	6.1434	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x14620	0x24620	0x24620	0x318	0x6980	3.7841	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x19f04	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x19f18	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1c5f8	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1c610	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x24620	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x24624	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x24628	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2462c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x24630	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x246a8	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x24938	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
$a	.symtab	0x80b4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x19f04	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80c0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x19f10	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x810c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x846c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x92f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x95cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x99e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa82c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xabd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb4d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb63c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc788	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc9d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd9fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe2a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeaac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xecac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xecc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xecfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeda4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeee4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf180	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf3e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf470	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf540	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf55c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf678	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf728	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf76c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf878	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1027c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1071c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1075c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1089c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10940	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ab8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10cd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10da8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10eac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11db4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11eb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ef0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ff4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12008	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12034	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12068	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1209c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x120d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12200	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1237c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12414	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12500	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1251c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13098	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13174	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13790	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13cdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13dd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ff4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x140ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1438c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14874	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14904	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14938	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ff8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16038	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1652c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16870	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1691c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16974	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ac0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17364	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17db4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17de8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18018	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1821c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x184b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18624	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19100	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19274	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19374	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19d70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19eb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8144	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24628	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x819c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24624	0	NOTYPE	<unknown>	DEFAULT	8
$d	.symtab	0x246ac	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x81e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x246b0	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x82bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8468	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9104	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x92f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x95c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x99e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa810	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a3cc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xabd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb244	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb384	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb4d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb638	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc76c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc9b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd9c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xea90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf050	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x246dc	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x246e4	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xf06c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf3d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf408	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf630	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf674	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf724	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf768	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf7a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf870	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10260	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x246ec	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x10700	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10870	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24704	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x10924	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x109dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2471c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x247b4	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x10c38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ccc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10d9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b550	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11080	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11120	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x247c8	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x111e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x118ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1195c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ad0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x247e0	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x11e98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11f10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11fec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x122c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12378	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b5cc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x124ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28b6c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x12514	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x128b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12dfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ef8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24820	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x247ec	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x1b5e4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x13160	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1321c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1338c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13d84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13ff0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x140e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x144a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14858	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x148a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x148f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x152d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x156a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15fd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16030	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1644c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16514	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17260	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1755c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17aa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2492c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x17c94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17da8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18010	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18210	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18df8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c2b0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x18f00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18fe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1904c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24930	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x19260	0	NOTYPE	<unknown>	DEFAULT	2
$t	.symtab	0x80d0	0	NOTYPE	<unknown>	DEFAULT	2
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.1.3506	.symtab	0x1b5cc	24	OBJECT	<unknown>	DEFAULT	4
C.108.5499	.symtab	0x1a3cc	8	OBJECT	<unknown>	DEFAULT	4
C.141.5806	.symtab	0x1ad48	24	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xf148	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xf164	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x24970	16384	OBJECT	<unknown>	DEFAULT	13
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0xb248	320	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0xa82c	344	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0xb4d8	356	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x9d10	1116	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0xefa0	44	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x24630	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x246dc	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1af50	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x24930	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1c2f8	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x246e4	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1b250	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x24620	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x24620	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x246dc	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower	.symtab	0x24930	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x246e4	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_b	.symtab	0x246e0	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower	.symtab	0x24934	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x246e8	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0xf058	28	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0xee78	108	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x135c4	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x17c9c	24	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x12500	28	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xee0c	108	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0xf89c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0xf8c0	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0xf878	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x119a4	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x11a74	108	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x17cb4	256	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xefa0	44	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1075c	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10e8c	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x148ac	76	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xed3c	52	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x11f2c	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xefcc	52	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x12108	248	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x12844	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x12878	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1251c	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xf5c4	56	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x28b6c	4	OBJECT	<unknown>	HIDDEN	13
__GI_exit	.symtab	0x11088	184	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x128c0	436	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xee0c	108	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x133b8	524	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x13098	220	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x135c4	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x13174	188	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x136f0	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x12a74	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xec78	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x17ad8	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x19100	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x19124	336	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x14938	88	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x17b10	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x135c4	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x12008	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x11f60	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x11f74	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x11ff4	20	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xf540	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0xf55c	104	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x140ec	672	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x16578	760	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x168a4	120	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x11ef0	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xec34	20	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x14904	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xf5fc	56	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0xedd8	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x11f18	20	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x28b70	4	OBJECT	<unknown>	HIDDEN	13
__GI_htonl	.symtab	0xf420	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0xf410	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0xf518	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x13ff4	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xf4fc	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xf470	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x15428	644	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x150c8	540	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10da8	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xef4c	84	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x13f54	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0xf000	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xeda4	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x16974	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x18e18	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xf1b0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x17bc0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x14f18	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x18f08	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xf080	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x11db4	104	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x14bc0	64	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x12034	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x12068	52	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0xf450	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0xf440	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xebd4	96	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x122d0	172	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x16870	52	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0xf7a4	28	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x1089c	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x10c40	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x13cdc	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xed70	52	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x12414	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xf678	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x11f88	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xecfc	64	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xf6b0	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0xf6e8	64	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xef18	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xf728	68	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x10b5c	228	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x11e1c	136	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xf7c0	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x120d0	56	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x11140	172	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xf76c	56	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x169d8	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x10cd0	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x1691c	88	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x18fe8	108	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xf2f0	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x13e28	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xf190	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xf190	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xf2cc	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x13c98	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x17db4	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xf120	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x14f3c	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x17bd0	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x13f14	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x13dd8	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x13d8c	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xf1d0	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xf3e0	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x13c20	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x10eac	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x11338	1496	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x13f78	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xec48	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xf028	48	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x1821c	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x16a0c	180	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x11ebc	52	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xecac	28	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x18250	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x182c8	176	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x182a4	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xeee4	52	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2462c	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x2462c	0	OBJECT	<unknown>	DEFAULT	10
__adddf3	.symtab	0x194c4	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x19e20	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x19e20	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x19e04	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x19eb0	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x194c4	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x19e38	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x19e80	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x19e98	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x19e68	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x19e50	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x19b64	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x198d4	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x194b8	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x194c0	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x19820	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x197f8	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x19374	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x194a0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x19874	96	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x197d4	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xeaac	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0xeba8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x19860	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x148f8	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr1	.symtab	0x148fc	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr2	.symtab	0x14900	4	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x28b64	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x247c8	24	OBJECT	<unknown>	DEFAULT	12
__bss_end__	.symtab	0x2afa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x24938	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x24938	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x11a20	84	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x16494	152	FUNC	<unknown>	HIDDEN	2
__cmpdf2	.symtab	0x19d80	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x246e0	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower	.symtab	0x24934	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x246e8	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x2ab7c	4	OBJECT	<unknown>	HIDDEN	13
__data_start	.symtab	0x246a8	0	NOTYPE	<unknown>	DEFAULT	12
__decode_dotted	.symtab	0x156ac	248	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x17ed4	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x11eb4	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x11ea8	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xebc0	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x19b64	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x19374	300	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x157a4	2024	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x810c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x24628	0	OBJECT	<unknown>	DEFAULT	9
__dso_handle	.symtab	0x246a8	0	OBJECT	<unknown>	HIDDEN	12
__encode_dotted	.symtab	0x19054	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x17de8	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x17f88	96	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x2afa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x28b5c	4	OBJECT	<unknown>	DEFAULT	13
__eqdf2	.symtab	0x19d80	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0xf058	28	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x1c620	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1c610	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x28b54	4	OBJECT	<unknown>	HIDDEN	13
__extendsfdf2	.symtab	0x19820	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0xee78	108	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x135c4	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2462c	0	NOTYPE	<unknown>	HIDDEN	9
__fini_array_start	.symtab	0x24628	0	NOTYPE	<unknown>	HIDDEN	9
__fixunsdfsi	.symtab	0x19eb0	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x19874	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x197f8	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x19860	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x197d4	36	FUNC	<unknown>	HIDDEN	2
__frame_dummy_init_array_entry	.symtab	0x24624	0	OBJECT	<unknown>	DEFAULT	8
__gedf2	.symtab	0x19d70	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x1652c	76	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x14c00	324	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x11ef0	40	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x17c9c	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x19d70	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x12500	28	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x24628	0	NOTYPE	<unknown>	HIDDEN	8
__init_array_start	.symtab	0x24624	0	NOTYPE	<unknown>	HIDDEN	8
__ledf2	.symtab	0x19d78	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xefcc	52	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xf5c4	56	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xee0c	108	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xec78	52	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x16974	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x12068	52	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xebd4	96	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xed70	52	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xf678	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xecfc	64	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xf6b0	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0xf6e8	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x11e1c	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x28b58	4	OBJECT	<unknown>	DEFAULT	13
__libc_waitpid	.symtab	0xecac	28	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xeee4	52	FUNC	<unknown>	DEFAULT	2
__local_nameserver	.symtab	0x1b660	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x19d78	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x1032c	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0xf8e4	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x246ec	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state	.symtab	0x2abbc	888	OBJECT	<unknown>	DEFAULT	13
__malloc_trim	.symtab	0x1027c	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x198d4	656	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x2af44	4	OBJECT	<unknown>	HIDDEN	13
__nameservers	.symtab	0x2af48	4	OBJECT	<unknown>	HIDDEN	13
__nedf2	.symtab	0x19d80	132	FUNC	<unknown>	HIDDEN	2
__open_etc_hosts	.symtab	0x17fe8	48	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x16038	1116	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x28b60	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x24624	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x24624	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__progname	.symtab	0x247e4	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x247e8	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x11968	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x11960	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x11960	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x11960	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x11960	8	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x18018	516	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x2af3c	4	OBJECT	<unknown>	HIDDEN	13
__resolv_attempts	.symtab	0x2492b	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock	.symtab	0x2ab84	24	OBJECT	<unknown>	DEFAULT	13
__resolv_timeout	.symtab	0x2492a	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini	.symtab	0x28b68	4	OBJECT	<unknown>	HIDDEN	13
__searchdomain	.symtab	0x2af40	4	OBJECT	<unknown>	HIDDEN	13
__searchdomains	.symtab	0x2af4c	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0xf89c	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xf8c0	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xf878	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x2482c	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x14d44	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x14d9c	180	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x19274	196	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x18378	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x12e04	52	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4636	.symtab	0x1b5e4	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x14e50	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x19338	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x14e80	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x184b8	208	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x12f0c	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x24830	4	OBJECT	<unknown>	DEFAULT	12
__subdf3	.symtab	0x194c0	788	FUNC	<unknown>	HIDDEN	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1209c	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x119a4	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x11a74	108	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x11ae0	724	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x247e0	4	OBJECT	<unknown>	HIDDEN	12
__udivsi3	.symtab	0xeaac	252	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x17cb4	256	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x14a5c	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x14990	204	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x14b08	184	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2aba0	10	OBJECT	<unknown>	DEFAULT	13
_bss_end__	.symtab	0x2afa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80d1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80d5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80d9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80dd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x80e1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x80e5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x80e9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x80ed	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x16ac0	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2af50	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_handler	.symtab	0x2af78	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_spec	.symtab	0x2492c	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x14874	56	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2af34	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x2af38	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x24938	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2afa0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x28b6c	4	OBJECT	<unknown>	DEFAULT	13
_exit	.symtab	0xefa0	44	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x19f04	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x28b7c	8192	OBJECT	<unknown>	DEFAULT	13
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x16b14	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x18624	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x28b70	4	OBJECT	<unknown>	DEFAULT	13
_init	.symtab	0x80b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x18588	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x13790	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x17280	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x17568	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x17320	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x17364	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x17514	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x11978	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x11970	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2abb4	8	OBJECT	<unknown>	HIDDEN	13
_start	.symtab	0x81b0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x12a94	776	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x12d9c	104	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x24834	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x247ec	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x13230	392	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x28b78	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x24804	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x28b74	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x24838	240	OBJECT	<unknown>	DEFAULT	12
_stdio_term	.symtab	0x12e38	212	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x2481c	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x10ec8	448	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x185f8	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1b728	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x12f3c	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x16b98	1768	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1075c	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0xecc8	52	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
aeabi_unwind_cpp_pr1.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0xc788	336	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0xc0c8	1728	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x10e8c	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10e8c	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0xbb34	1428	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0xf180	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x28b50	4	OBJECT	<unknown>	DEFAULT	13
brk	.symtab	0x148ac	76	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xf7c0	184	FUNC	<unknown>	DEFAULT	2
buf.2975	.symtab	0x28974	16	OBJECT	<unknown>	DEFAULT	13
buf.5444	.symtab	0x28984	440	OBJECT	<unknown>	DEFAULT	13
bzero	.symtab	0xf1c0	12	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x246d4	4	OBJECT	<unknown>	DEFAULT	12
calloc	.symtab	0x1438c	308	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0xed3c	52	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x11f2c	52	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xefcc	52	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x12108	248	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x246b0	4	OBJECT	<unknown>	DEFAULT	12
completed.4959	.symtab	0x24938	1	OBJECT	<unknown>	DEFAULT	13
connect	.symtab	0xf5c4	56	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x95cc	628	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x99e8	340	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x246d0	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x246ac	0	NOTYPE	<unknown>	DEFAULT	12
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x28b5c	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x28b6c	4	OBJECT	<unknown>	DEFAULT	13
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x11088	184	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1c2b0	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x128c0	436	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xee0c	108	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x12200	208	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x846c	212	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x1237c	152	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x133b8	524	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x13098	220	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x135c4	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x13174	188	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x136f0	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1c298	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x12a74	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0xec78	52	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x17ad8	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x104e0	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x19100	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x19100	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x19124	336	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x14938	88	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0xa16c	1728	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x17b10	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xc8d8	36	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91d4	104	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8540	700	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0xc8fc	212	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x8408	100	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x13098	220	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x135c4	300	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x12008	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x11f60	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x11f74	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x11ff4	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xf540	28	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0xf55c	104	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x140ec	672	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x16578	760	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x168a4	120	FUNC	<unknown>	DEFAULT	2
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x11ef0	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xec34	20	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x14904	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xf5fc	56	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xf634	68	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0xedd8	52	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x11f18	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x2495c	4	OBJECT	<unknown>	DEFAULT	13
h_errno	.symtab	0x28b70	4	OBJECT	<unknown>	DEFAULT	13
hoste.5443	.symtab	0x28b3c	20	OBJECT	<unknown>	DEFAULT	13
htonl	.symtab	0xf420	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xf410	16	FUNC	<unknown>	DEFAULT	2
i.4588	.symtab	0x246d8	4	OBJECT	<unknown>	DEFAULT	12
index	.symtab	0xf2f0	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xf518	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x13ff4	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xf4fc	28	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xf470	140	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x15428	644	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x152e4	324	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x150c8	540	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x14ff8	208	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xe114	400	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81ec	216	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x109f8	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10da8	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xef4c	84	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x13f54	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xf000	40	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xeda4	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.5501	.symtab	0x24928	2	OBJECT	<unknown>	DEFAULT	12
last_ns_num.5500	.symtab	0x2ab80	4	OBJECT	<unknown>	DEFAULT	13
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bzero.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9840	424	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x16974	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x24968	6	OBJECT	<unknown>	DEFAULT	13
main	.symtab	0xe2a4	2056	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x24958	4	OBJECT	<unknown>	DEFAULT	13
makeIPPacket	.symtab	0x9c10	256	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x923c	184	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xaab0	292	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0xf95c	2336	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x1071c	64	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x18e18	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xf1b0	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x17bc0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x14f18	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x18f08	224	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xf080	156	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x11db4	104	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x14bc0	64	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x12034	52	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x24704	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x2471c	24	OBJECT	<unknown>	DEFAULT	12
nanosleep	.symtab	0x12068	52	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1358	.symtab	0x28970	4	OBJECT	<unknown>	DEFAULT	13
nprocessors_onln	.symtab	0x111ec	332	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0xf450	32	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xf440	16	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x24960	8	OBJECT	<unknown>	DEFAULT	13

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-13T17:07:52.403789+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	37998	185.189.13.91	25565	TCP
2025-01-13T17:07:54.148591+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38000	185.189.13.91	25565	TCP
2025-01-13T17:07:55.898838+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38002	185.189.13.91	25565	TCP
2025-01-13T17:07:57.647102+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38004	185.189.13.91	25565	TCP
2025-01-13T17:07:59.407576+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38006	185.189.13.91	25565	TCP
2025-01-13T17:08:01.175580+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38008	185.189.13.91	25565	TCP
2025-01-13T17:08:02.923173+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38010	185.189.13.91	25565	TCP
2025-01-13T17:08:04.655188+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38012	185.189.13.91	25565	TCP
2025-01-13T17:08:06.388460+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38014	185.189.13.91	25565	TCP
2025-01-13T17:08:08.154469+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38016	185.189.13.91	25565	TCP
2025-01-13T17:08:09.912609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38018	185.189.13.91	25565	TCP
2025-01-13T17:08:11.638139+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38020	185.189.13.91	25565	TCP
2025-01-13T17:08:13.389303+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38022	185.189.13.91	25565	TCP
2025-01-13T17:08:15.150154+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38024	185.189.13.91	25565	TCP
2025-01-13T17:08:16.891777+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38026	185.189.13.91	25565	TCP
2025-01-13T17:08:18.625699+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38028	185.189.13.91	25565	TCP
2025-01-13T17:08:20.359663+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38030	185.189.13.91	25565	TCP
2025-01-13T17:08:22.114466+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38032	185.189.13.91	25565	TCP
2025-01-13T17:08:23.846630+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38034	185.189.13.91	25565	TCP
2025-01-13T17:08:25.597676+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38036	185.189.13.91	25565	TCP
2025-01-13T17:08:27.392511+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38038	185.189.13.91	25565	TCP
2025-01-13T17:08:29.144455+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38040	185.189.13.91	25565	TCP
2025-01-13T17:08:30.907624+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38042	185.189.13.91	25565	TCP
2025-01-13T17:08:32.692184+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38044	185.189.13.91	25565	TCP
2025-01-13T17:08:34.446988+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38046	185.189.13.91	25565	TCP
2025-01-13T17:08:36.190887+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38048	185.189.13.91	25565	TCP
2025-01-13T17:08:37.947676+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38050	185.189.13.91	25565	TCP
2025-01-13T17:08:39.712711+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38052	185.189.13.91	25565	TCP
2025-01-13T17:08:41.457808+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38054	185.189.13.91	25565	TCP
2025-01-13T17:08:43.194098+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38056	185.189.13.91	25565	TCP
2025-01-13T17:08:44.939369+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38058	185.189.13.91	25565	TCP
2025-01-13T17:08:46.690144+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38060	185.189.13.91	25565	TCP
2025-01-13T17:08:48.427118+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38062	185.189.13.91	25565	TCP
2025-01-13T17:08:50.336915+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38064	185.189.13.91	25565	TCP
2025-01-13T17:08:52.082927+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38066	185.189.13.91	25565	TCP
2025-01-13T17:08:53.835967+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38068	185.189.13.91	25565	TCP
2025-01-13T17:08:55.594760+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38070	185.189.13.91	25565	TCP
2025-01-13T17:08:57.351933+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38072	185.189.13.91	25565	TCP
2025-01-13T17:08:59.097606+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38074	185.189.13.91	25565	TCP
2025-01-13T17:09:00.866282+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38076	185.189.13.91	25565	TCP
2025-01-13T17:09:02.593156+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38078	185.189.13.91	25565	TCP
2025-01-13T17:09:04.391209+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38080	185.189.13.91	25565	TCP
2025-01-13T17:09:06.355930+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38082	185.189.13.91	25565	TCP
2025-01-13T17:09:08.101181+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38084	185.189.13.91	25565	TCP
2025-01-13T17:09:09.896445+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38086	185.189.13.91	25565	TCP
2025-01-13T17:09:11.626977+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38088	185.189.13.91	25565	TCP
2025-01-13T17:09:13.363641+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38090	185.189.13.91	25565	TCP
2025-01-13T17:09:15.134544+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38092	185.189.13.91	25565	TCP
2025-01-13T17:09:16.872760+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38094	185.189.13.91	25565	TCP
2025-01-13T17:09:18.626541+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38096	185.189.13.91	25565	TCP
2025-01-13T17:09:20.388569+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38098	185.189.13.91	25565	TCP
2025-01-13T17:09:22.124890+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38100	185.189.13.91	25565	TCP
2025-01-13T17:09:23.859044+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38102	185.189.13.91	25565	TCP
2025-01-13T17:09:25.627034+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38104	185.189.13.91	25565	TCP
2025-01-13T17:09:27.358314+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38106	185.189.13.91	25565	TCP
2025-01-13T17:09:29.117681+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38108	185.189.13.91	25565	TCP
2025-01-13T17:09:30.862552+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38110	185.189.13.91	25565	TCP
2025-01-13T17:09:32.612020+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38112	185.189.13.91	25565	TCP
2025-01-13T17:09:34.343579+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38114	185.189.13.91	25565	TCP
2025-01-13T17:09:36.081051+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38116	185.189.13.91	25565	TCP
2025-01-13T17:09:37.877275+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38118	185.189.13.91	25565	TCP
2025-01-13T17:09:39.614550+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38120	185.189.13.91	25565	TCP
2025-01-13T17:09:41.351084+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38122	185.189.13.91	25565	TCP
2025-01-13T17:09:43.111122+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38124	185.189.13.91	25565	TCP
2025-01-13T17:09:47.236342+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38126	185.189.13.91	25565	TCP
2025-01-13T17:09:48.970451+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38128	185.189.13.91	25565	TCP
2025-01-13T17:09:50.738111+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38130	185.189.13.91	25565	TCP
2025-01-13T17:09:52.487946+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38132	185.189.13.91	25565	TCP
2025-01-13T17:09:54.327152+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38134	185.189.13.91	25565	TCP
2025-01-13T17:09:56.159698+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38136	185.189.13.91	25565	TCP
2025-01-13T17:09:57.968958+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38138	185.189.13.91	25565	TCP
2025-01-13T17:09:59.706666+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38140	185.189.13.91	25565	TCP
2025-01-13T17:10:01.441841+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38142	185.189.13.91	25565	TCP
2025-01-13T17:10:03.177142+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38144	185.189.13.91	25565	TCP
2025-01-13T17:10:04.926565+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38146	185.189.13.91	25565	TCP
2025-01-13T17:10:06.681536+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38148	185.189.13.91	25565	TCP
2025-01-13T17:10:08.424819+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38150	185.189.13.91	25565	TCP
2025-01-13T17:10:10.192553+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38152	185.189.13.91	25565	TCP
2025-01-13T17:10:11.925122+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38154	185.189.13.91	25565	TCP
2025-01-13T17:10:13.697893+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38156	185.189.13.91	25565	TCP
2025-01-13T17:10:15.445497+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38158	185.189.13.91	25565	TCP
2025-01-13T17:10:17.191443+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38160	185.189.13.91	25565	TCP
2025-01-13T17:10:18.943106+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38162	185.189.13.91	25565	TCP
2025-01-13T17:10:20.673695+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38164	185.189.13.91	25565	TCP
2025-01-13T17:10:22.568402+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38166	185.189.13.91	25565	TCP
2025-01-13T17:10:24.334899+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38168	185.189.13.91	25565	TCP
2025-01-13T17:10:26.063782+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38170	185.189.13.91	25565	TCP
2025-01-13T17:10:27.802891+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38172	185.189.13.91	25565	TCP
2025-01-13T17:10:29.588635+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38174	185.189.13.91	25565	TCP
2025-01-13T17:10:31.340458+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38176	185.189.13.91	25565	TCP
2025-01-13T17:10:33.083413+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38178	185.189.13.91	25565	TCP
2025-01-13T17:10:34.835861+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38180	185.189.13.91	25565	TCP
2025-01-13T17:10:36.562653+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38182	185.189.13.91	25565	TCP
2025-01-13T17:10:43.691634+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38184	185.189.13.91	25565	TCP
2025-01-13T17:10:45.426002+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38186	185.189.13.91	25565	TCP
2025-01-13T17:10:47.162637+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38188	185.189.13.91	25565	TCP
2025-01-13T17:10:48.946270+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38190	185.189.13.91	25565	TCP
2025-01-13T17:10:50.701764+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38192	185.189.13.91	25565	TCP
2025-01-13T17:10:52.460721+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38194	185.189.13.91	25565	TCP
2025-01-13T17:10:54.229700+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38196	185.189.13.91	25565	TCP
2025-01-13T17:10:55.983251+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38198	185.189.13.91	25565	TCP
2025-01-13T17:10:57.737715+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38200	185.189.13.91	25565	TCP
2025-01-13T17:10:59.507608+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38202	185.189.13.91	25565	TCP
2025-01-13T17:11:01.236327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38204	185.189.13.91	25565	TCP
2025-01-13T17:11:02.990521+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38206	185.189.13.91	25565	TCP
2025-01-13T17:11:04.775781+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38208	185.189.13.91	25565	TCP
2025-01-13T17:11:06.546412+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38210	185.189.13.91	25565	TCP
2025-01-13T17:11:08.351628+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38212	185.189.13.91	25565	TCP
2025-01-13T17:11:10.083515+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38214	185.189.13.91	25565	TCP
2025-01-13T17:11:11.827767+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38216	185.189.13.91	25565	TCP
2025-01-13T17:11:13.662004+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38218	185.189.13.91	25565	TCP
2025-01-13T17:11:15.426696+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38220	185.189.13.91	25565	TCP
2025-01-13T17:11:17.176972+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38222	185.189.13.91	25565	TCP
2025-01-13T17:11:18.929355+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38224	185.189.13.91	25565	TCP
2025-01-13T17:11:20.656670+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38226	185.189.13.91	25565	TCP
2025-01-13T17:11:22.425762+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38228	185.189.13.91	25565	TCP
2025-01-13T17:11:24.181925+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38230	185.189.13.91	25565	TCP
2025-01-13T17:11:25.989075+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38232	185.189.13.91	25565	TCP
2025-01-13T17:11:27.744391+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38234	185.189.13.91	25565	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 17:07:52.397310972 CET	37998	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:52.402261019 CET	25565	37998	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:52.402327061 CET	37998	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:52.403789043 CET	37998	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:52.408525944 CET	25565	37998	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:54.140707970 CET	25565	37998	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:54.141062975 CET	37998	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:54.143479109 CET	38000	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:54.145925045 CET	25565	37998	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:54.148309946 CET	25565	38000	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:54.148364067 CET	38000	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:54.148591042 CET	38000	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:54.153382063 CET	25565	38000	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:55.892995119 CET	25565	38000	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:55.893377066 CET	38000	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:55.893891096 CET	38002	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:55.898190975 CET	25565	38000	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:55.898729086 CET	25565	38002	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:55.898791075 CET	38002	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:55.898838043 CET	38002	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:55.903570890 CET	25565	38002	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:57.641221046 CET	25565	38002	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:57.641570091 CET	38002	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:57.642138958 CET	38004	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:57.646451950 CET	25565	38002	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:57.646976948 CET	25565	38004	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:57.647047043 CET	38004	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:57.647102118 CET	38004	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:57.651896954 CET	25565	38004	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:59.400562048 CET	25565	38004	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:59.401128054 CET	38004	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:59.402640104 CET	38006	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:59.406004906 CET	25565	38004	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:59.407447100 CET	25565	38006	185.189.13.91	192.168.2.14
Jan 13, 2025 17:07:59.407511950 CET	38006	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:59.407576084 CET	38006	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:07:59.412412882 CET	25565	38006	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:01.167984962 CET	25565	38006	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:01.168399096 CET	38006	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:01.170481920 CET	38008	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:01.173386097 CET	25565	38006	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:01.175352097 CET	25565	38008	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:01.175487041 CET	38008	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:01.175580025 CET	38008	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:01.180371046 CET	25565	38008	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:02.607799053 CET	46540	443	192.168.2.14	185.125.190.26
Jan 13, 2025 17:08:02.916598082 CET	25565	38008	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:02.916906118 CET	38008	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:02.918153048 CET	38010	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:02.921947002 CET	25565	38008	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:02.923038960 CET	25565	38010	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:02.923101902 CET	38010	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:02.923172951 CET	38010	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:02.927952051 CET	25565	38010	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:04.648626089 CET	25565	38010	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:04.649329901 CET	38010	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:04.650100946 CET	38012	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:04.654289007 CET	25565	38010	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:04.654957056 CET	25565	38012	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:04.655076981 CET	38012	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:04.655188084 CET	38012	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:04.659931898 CET	25565	38012	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:06.381707907 CET	25565	38012	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:06.382204056 CET	38012	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:06.383369923 CET	38014	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:06.387209892 CET	25565	38012	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:06.388252020 CET	25565	38014	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:06.388343096 CET	38014	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:06.388459921 CET	38014	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:06.393361092 CET	25565	38014	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:08.145638943 CET	25565	38014	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:08.145935059 CET	38014	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:08.147450924 CET	38016	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:08.151525974 CET	25565	38014	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:08.154169083 CET	25565	38016	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:08.154267073 CET	38016	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:08.154469013 CET	38016	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:08.159281969 CET	25565	38016	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:09.904530048 CET	25565	38016	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:09.905174971 CET	38016	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:09.906959057 CET	38018	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:09.910274029 CET	25565	38016	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:09.912199020 CET	25565	38018	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:09.912311077 CET	38018	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:09.912609100 CET	38018	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:09.917695999 CET	25565	38018	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:11.632050991 CET	25565	38018	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:11.632316113 CET	38018	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:11.633107901 CET	38020	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:11.637109041 CET	25565	38018	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:11.637958050 CET	25565	38020	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:11.638006926 CET	38020	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:11.638139009 CET	38020	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:11.642893076 CET	25565	38020	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:13.382700920 CET	25565	38020	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:13.383331060 CET	38020	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:13.383331060 CET	38020	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:13.384294033 CET	38022	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:13.388226986 CET	25565	38020	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:13.389090061 CET	25565	38022	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:13.389164925 CET	38022	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:13.389302969 CET	38022	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:13.394138098 CET	25565	38022	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:15.143141985 CET	25565	38022	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:15.143553019 CET	38022	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:15.144582033 CET	38024	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:15.149183989 CET	25565	38022	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:15.149895906 CET	25565	38024	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:15.150055885 CET	38024	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:15.150154114 CET	38024	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:15.155075073 CET	25565	38024	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:16.885282040 CET	25565	38024	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:16.885634899 CET	38024	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:16.886601925 CET	38026	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:16.890645027 CET	25565	38024	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:16.891544104 CET	25565	38026	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:16.891638041 CET	38026	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:16.891777039 CET	38026	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:16.896591902 CET	25565	38026	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:18.619023085 CET	25565	38026	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:18.619456053 CET	38026	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:18.620544910 CET	38028	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:18.624429941 CET	25565	38026	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:18.625485897 CET	25565	38028	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:18.625612974 CET	38028	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:18.625699043 CET	38028	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:18.630558014 CET	25565	38028	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:20.352050066 CET	25565	38028	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:20.352658033 CET	38028	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:20.354335070 CET	38030	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:20.357615948 CET	25565	38028	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:20.359304905 CET	25565	38030	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:20.359528065 CET	38030	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:20.359663010 CET	38030	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:20.364559889 CET	25565	38030	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:22.107675076 CET	25565	38030	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:22.108113050 CET	38030	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:22.109401941 CET	38032	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:22.113013029 CET	25565	38030	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:22.114254951 CET	25565	38032	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:22.114329100 CET	38032	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:22.114465952 CET	38032	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:22.119236946 CET	25565	38032	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:22.589479923 CET	43382	443	192.168.2.14	54.247.62.1
Jan 13, 2025 17:08:22.595094919 CET	443	43382	54.247.62.1	192.168.2.14
Jan 13, 2025 17:08:22.595199108 CET	43382	443	192.168.2.14	54.247.62.1
Jan 13, 2025 17:08:23.839818001 CET	25565	38032	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:23.840090990 CET	38032	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:23.841418982 CET	38034	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:23.844965935 CET	25565	38032	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:23.846429110 CET	25565	38034	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:23.846522093 CET	38034	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:23.846630096 CET	38034	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:23.851433992 CET	25565	38034	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:25.589293003 CET	25565	38034	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:25.589740992 CET	38034	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:25.592330933 CET	38036	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:25.595176935 CET	25565	38034	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:25.597441912 CET	25565	38036	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:25.597629070 CET	38036	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:25.597676039 CET	38036	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:25.602941990 CET	25565	38036	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:27.385782957 CET	25565	38036	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:27.386223078 CET	38036	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:27.387346029 CET	38038	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:27.391140938 CET	25565	38036	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:27.392290115 CET	25565	38038	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:27.392401934 CET	38038	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:27.392510891 CET	38038	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:27.397340059 CET	25565	38038	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:29.138622046 CET	25565	38038	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:29.138891935 CET	38038	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:29.139439106 CET	38040	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:29.143739939 CET	25565	38038	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:29.144280910 CET	25565	38040	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:29.144345045 CET	38040	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:29.144454956 CET	38040	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:29.149254084 CET	25565	38040	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:30.899558067 CET	25565	38040	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:30.899868965 CET	38040	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:30.902301073 CET	38042	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:30.905179024 CET	25565	38040	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:30.907398939 CET	25565	38042	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:30.907624006 CET	38042	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:30.907624006 CET	38042	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:30.912677050 CET	25565	38042	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:32.686050892 CET	25565	38042	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:32.686285973 CET	38042	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:32.687098980 CET	38044	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:32.691102982 CET	25565	38042	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:32.691962957 CET	25565	38044	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:32.692053080 CET	38044	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:32.692183971 CET	38044	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:32.696906090 CET	25565	38044	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:32.814523935 CET	46540	443	192.168.2.14	185.125.190.26
Jan 13, 2025 17:08:34.438924074 CET	25565	38044	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:34.439493895 CET	38044	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:34.441313028 CET	38046	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:34.444825888 CET	25565	38044	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:34.446819067 CET	25565	38046	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:34.446886063 CET	38046	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:34.446988106 CET	38046	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:34.451903105 CET	25565	38046	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:36.184206009 CET	25565	38046	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:36.184756041 CET	38046	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:36.185839891 CET	38048	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:36.190105915 CET	25565	38046	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:36.190709114 CET	25565	38048	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:36.190778017 CET	38048	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:36.190886974 CET	38048	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:36.195672989 CET	25565	38048	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:37.940426111 CET	25565	38048	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:37.940823078 CET	38048	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:37.941988945 CET	38050	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:37.946089029 CET	25565	38048	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:37.947256088 CET	25565	38050	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:37.947515011 CET	38050	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:37.947675943 CET	38050	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:37.952708960 CET	25565	38050	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:39.704219103 CET	25565	38050	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:39.704727888 CET	38050	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:39.707019091 CET	38052	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:39.710445881 CET	25565	38050	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:39.712423086 CET	25565	38052	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:39.712711096 CET	38052	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:39.712711096 CET	38052	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:39.717969894 CET	25565	38052	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:41.451472998 CET	25565	38052	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:41.451766014 CET	38052	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:41.452756882 CET	38054	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:41.456618071 CET	25565	38052	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:41.457624912 CET	25565	38054	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:41.457710028 CET	38054	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:41.457808018 CET	38054	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:41.462554932 CET	25565	38054	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:43.186208963 CET	25565	38054	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:43.186538935 CET	38054	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:43.187582970 CET	38056	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:43.193607092 CET	25565	38054	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:43.193949938 CET	25565	38056	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:43.194036961 CET	38056	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:43.194097996 CET	38056	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:43.200258970 CET	25565	38056	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:44.932729006 CET	25565	38056	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:44.933139086 CET	38056	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:44.934226036 CET	38058	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:44.938122988 CET	25565	38056	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:44.939019918 CET	25565	38058	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:44.939232111 CET	38058	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:44.939368963 CET	38058	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:44.944477081 CET	25565	38058	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:46.683063984 CET	25565	38058	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:46.683475018 CET	38058	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:46.684911013 CET	38060	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:46.688404083 CET	25565	38058	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:46.689933062 CET	25565	38060	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:46.690043926 CET	38060	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:46.690144062 CET	38060	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:46.695077896 CET	25565	38060	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:48.419682026 CET	25565	38060	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:48.420366049 CET	38060	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:48.421592951 CET	38062	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:48.425679922 CET	25565	38060	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:48.426757097 CET	25565	38062	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:48.426853895 CET	38062	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:48.427118063 CET	38062	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:48.432013035 CET	25565	38062	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:50.328536987 CET	25565	38062	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:50.329226017 CET	38062	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:50.331546068 CET	38064	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:50.334585905 CET	25565	38062	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:50.336708069 CET	25565	38064	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:50.336827040 CET	38064	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:50.336915016 CET	38064	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:50.341758013 CET	25565	38064	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:52.075999975 CET	25565	38064	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:52.076509953 CET	38064	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:52.077440023 CET	38066	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:52.081636906 CET	25565	38064	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:52.082540989 CET	25565	38066	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:52.082631111 CET	38066	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:52.082926989 CET	38066	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:52.087912083 CET	25565	38066	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:53.830202103 CET	25565	38066	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:53.830455065 CET	38066	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:53.831078053 CET	38068	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:53.835263014 CET	25565	38066	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:53.835828066 CET	25565	38068	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:53.835897923 CET	38068	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:53.835967064 CET	38068	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:53.840730906 CET	25565	38068	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:55.588505983 CET	25565	38068	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:55.589011908 CET	38068	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:55.589819908 CET	38070	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:55.593877077 CET	25565	38068	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:55.594600916 CET	25565	38070	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:55.594687939 CET	38070	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:55.594759941 CET	38070	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:55.599502087 CET	25565	38070	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:57.345120907 CET	25565	38070	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:57.345588923 CET	38070	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:57.346791983 CET	38072	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:57.350630999 CET	25565	38070	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:57.351694107 CET	25565	38072	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:57.351783991 CET	38072	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:57.351933002 CET	38072	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:57.356719971 CET	25565	38072	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:59.089829922 CET	25565	38072	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:59.090091944 CET	38072	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:59.090774059 CET	38074	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:59.095202923 CET	25565	38072	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:59.097459078 CET	25565	38074	185.189.13.91	192.168.2.14
Jan 13, 2025 17:08:59.097559929 CET	38074	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:59.097605944 CET	38074	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:08:59.102415085 CET	25565	38074	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:00.860183001 CET	25565	38074	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:00.860404015 CET	38074	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:00.861186981 CET	38076	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:00.865282059 CET	25565	38074	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:00.866009951 CET	25565	38076	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:00.866182089 CET	38076	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:00.866281986 CET	38076	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:00.871014118 CET	25565	38076	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:02.586869001 CET	25565	38076	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:02.587300062 CET	38076	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:02.588191032 CET	38078	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:02.592078924 CET	25565	38076	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:02.592938900 CET	25565	38078	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:02.593008041 CET	38078	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:02.593156099 CET	38078	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:02.597934961 CET	25565	38078	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:04.385014057 CET	25565	38078	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:04.385386944 CET	38078	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:04.386111021 CET	38080	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:04.390357018 CET	25565	38078	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:04.391026020 CET	25565	38080	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:04.391083956 CET	38080	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:04.391208887 CET	38080	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:04.396023989 CET	25565	38080	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:06.345626116 CET	25565	38080	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:06.345947981 CET	38080	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:06.346635103 CET	38082	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:06.351023912 CET	25565	38080	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:06.355695963 CET	25565	38082	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:06.355808973 CET	38082	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:06.355930090 CET	38082	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:06.360768080 CET	25565	38082	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:08.095243931 CET	25565	38082	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:08.095427036 CET	38082	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:08.096220970 CET	38084	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:08.100178957 CET	25565	38082	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:08.101047039 CET	25565	38084	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:08.101141930 CET	38084	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:08.101181030 CET	38084	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:08.106007099 CET	25565	38084	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:09.890021086 CET	25565	38084	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:09.890515089 CET	38084	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:09.891446114 CET	38086	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:09.895410061 CET	25565	38084	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:09.896243095 CET	25565	38086	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:09.896343946 CET	38086	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:09.896445036 CET	38086	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:09.901184082 CET	25565	38086	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:11.620584965 CET	25565	38086	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:11.620729923 CET	38086	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:11.621438980 CET	38088	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:11.626825094 CET	25565	38086	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:11.626841068 CET	25565	38088	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:11.626925945 CET	38088	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:11.626976967 CET	38088	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:11.634567976 CET	25565	38088	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:13.357244015 CET	25565	38088	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:13.357520103 CET	38088	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:13.358592987 CET	38090	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:13.362339973 CET	25565	38088	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:13.363425016 CET	25565	38090	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:13.363523960 CET	38090	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:13.363641024 CET	38090	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:13.368418932 CET	25565	38090	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:15.126480103 CET	25565	38090	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:15.126986980 CET	38090	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:15.129420042 CET	38092	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:15.132113934 CET	25565	38090	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:15.134295940 CET	25565	38092	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:15.134434938 CET	38092	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:15.134543896 CET	38092	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:15.139547110 CET	25565	38092	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:16.866621971 CET	25565	38092	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:16.866908073 CET	38092	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:16.867676020 CET	38094	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:16.871778011 CET	25565	38092	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:16.872510910 CET	25565	38094	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:16.872606039 CET	38094	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:16.872760057 CET	38094	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:16.878890991 CET	25565	38094	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:18.619965076 CET	25565	38094	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:18.620219946 CET	38094	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:18.621264935 CET	38096	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:18.625098944 CET	25565	38094	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:18.626348019 CET	25565	38096	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:18.626429081 CET	38096	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:18.626540899 CET	38096	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:18.631370068 CET	25565	38096	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:20.377218962 CET	25565	38096	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:20.377489090 CET	38096	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:20.378181934 CET	38098	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:20.387267113 CET	25565	38096	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:20.387995005 CET	25565	38098	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:20.388092041 CET	38098	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:20.388569117 CET	38098	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:20.395144939 CET	25565	38098	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:22.118391991 CET	25565	38098	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:22.118839979 CET	38098	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:22.119723082 CET	38100	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:22.123717070 CET	25565	38098	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:22.124627113 CET	25565	38100	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:22.124731064 CET	38100	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:22.124890089 CET	38100	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:22.129699945 CET	25565	38100	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:23.852915049 CET	25565	38100	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:23.853113890 CET	38100	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:23.854053020 CET	38102	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:23.857935905 CET	25565	38100	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:23.858858109 CET	25565	38102	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:23.858982086 CET	38102	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:23.859044075 CET	38102	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:23.863871098 CET	25565	38102	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:25.620394945 CET	25565	38102	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:25.621043921 CET	38102	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:25.621932983 CET	38104	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:25.625955105 CET	25565	38102	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:25.626833916 CET	25565	38104	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:25.626929045 CET	38104	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:25.627033949 CET	38104	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:25.631977081 CET	25565	38104	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:27.351900101 CET	25565	38104	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:27.352404118 CET	38104	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:27.352468014 CET	38104	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:27.353363037 CET	38106	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:27.357314110 CET	25565	38104	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:27.358144999 CET	25565	38106	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:27.358254910 CET	38106	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:27.358314037 CET	38106	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:27.363063097 CET	25565	38106	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:29.110806942 CET	25565	38106	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:29.111175060 CET	38106	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:29.112576962 CET	38108	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:29.116076946 CET	25565	38106	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:29.117500067 CET	25565	38108	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:29.117588043 CET	38108	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:29.117681026 CET	38108	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:29.122533083 CET	25565	38108	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:30.856736898 CET	25565	38108	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:30.857049942 CET	38108	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:30.857630014 CET	38110	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:30.861820936 CET	25565	38108	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:30.862440109 CET	25565	38110	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:30.862494946 CET	38110	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:30.862551928 CET	38110	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:30.867290020 CET	25565	38110	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:32.604106903 CET	25565	38110	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:32.604634047 CET	38110	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:32.605628967 CET	38112	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:32.610578060 CET	25565	38110	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:32.611819029 CET	25565	38112	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:32.611911058 CET	38112	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:32.612020016 CET	38112	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:32.616775036 CET	25565	38112	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:34.337536097 CET	25565	38112	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:34.337806940 CET	38112	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:34.338634014 CET	38114	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:34.342581987 CET	25565	38112	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:34.343396902 CET	25565	38114	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:34.343477011 CET	38114	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:34.343579054 CET	38114	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:34.348295927 CET	25565	38114	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:36.074071884 CET	25565	38114	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:36.074641943 CET	38114	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:36.075916052 CET	38116	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:36.079618931 CET	25565	38114	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:36.080842018 CET	25565	38116	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:36.080945015 CET	38116	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:36.081051111 CET	38116	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:36.086390972 CET	25565	38116	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:37.870950937 CET	25565	38116	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:37.871566057 CET	38116	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:37.872277975 CET	38118	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:37.876501083 CET	25565	38116	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:37.877135992 CET	25565	38118	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:37.877223969 CET	38118	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:37.877274990 CET	38118	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:37.882108927 CET	25565	38118	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:39.607455969 CET	25565	38118	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:39.608091116 CET	38118	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:39.608091116 CET	38118	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:39.609302044 CET	38120	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:39.613059998 CET	25565	38118	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:39.614336014 CET	25565	38120	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:39.614447117 CET	38120	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:39.614550114 CET	38120	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:39.619405031 CET	25565	38120	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:41.343260050 CET	25565	38120	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:41.343839884 CET	38120	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:41.344553947 CET	38122	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:41.350445986 CET	25565	38120	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:41.350969076 CET	25565	38122	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:41.351044893 CET	38122	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:41.351083994 CET	38122	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:41.356000900 CET	25565	38122	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:43.102685928 CET	25565	38122	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:43.103256941 CET	38122	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:43.104927063 CET	38124	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:43.109006882 CET	25565	38122	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:43.110905886 CET	25565	38124	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:43.111002922 CET	38124	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:43.111121893 CET	38124	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:43.115920067 CET	25565	38124	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:47.229765892 CET	25565	38124	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:47.230273962 CET	38124	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:47.231235027 CET	38126	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:47.235179901 CET	25565	38124	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:47.236125946 CET	25565	38126	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:47.236222029 CET	38126	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:47.236341953 CET	38126	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:47.241096973 CET	25565	38126	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:48.964355946 CET	25565	38126	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:48.964876890 CET	38126	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:48.965497971 CET	38128	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:48.969702959 CET	25565	38126	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:48.970271111 CET	25565	38128	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:48.970330954 CET	38128	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:48.970451117 CET	38128	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:48.975200891 CET	25565	38128	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:50.731427908 CET	25565	38128	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:50.731929064 CET	38128	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:50.733004093 CET	38130	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:50.736891985 CET	25565	38128	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:50.737911940 CET	25565	38130	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:50.737993002 CET	38130	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:50.738111019 CET	38130	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:50.742979050 CET	25565	38130	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:52.480499029 CET	25565	38130	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:52.481038094 CET	38130	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:52.482439041 CET	38132	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:52.486394882 CET	25565	38130	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:52.487588882 CET	25565	38132	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:52.487809896 CET	38132	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:52.487946033 CET	38132	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:52.492780924 CET	25565	38132	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:54.320466995 CET	25565	38132	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:54.320992947 CET	38132	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:54.322038889 CET	38134	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:54.326000929 CET	25565	38132	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:54.326951981 CET	25565	38134	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:54.327079058 CET	38134	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:54.327152014 CET	38134	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:54.333755970 CET	25565	38134	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:56.153561115 CET	25565	38134	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:56.153799057 CET	38134	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:56.154562950 CET	38136	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:56.158621073 CET	25565	38134	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:56.159478903 CET	25565	38136	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:56.159593105 CET	38136	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:56.159698009 CET	38136	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:56.164525986 CET	25565	38136	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:57.961211920 CET	25565	38136	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:57.961723089 CET	38136	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:57.963490009 CET	38138	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:57.966833115 CET	25565	38136	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:57.968452930 CET	25565	38138	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:57.968713999 CET	38138	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:57.968957901 CET	38138	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:57.973985910 CET	25565	38138	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:59.699233055 CET	25565	38138	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:59.699816942 CET	38138	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:59.701142073 CET	38140	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:59.705635071 CET	25565	38138	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:59.706451893 CET	25565	38140	185.189.13.91	192.168.2.14
Jan 13, 2025 17:09:59.706553936 CET	38140	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:59.706665993 CET	38140	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:09:59.711476088 CET	25565	38140	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:01.434536934 CET	25565	38140	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:01.434943914 CET	38140	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:01.436439991 CET	38142	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:01.440335989 CET	25565	38140	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:01.441443920 CET	25565	38142	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:01.441524029 CET	38142	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:01.441840887 CET	38142	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:01.446774006 CET	25565	38142	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:03.170492887 CET	25565	38142	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:03.170938969 CET	38142	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:03.171062946 CET	38142	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:03.171997070 CET	38144	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:03.175967932 CET	25565	38142	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:03.176902056 CET	25565	38144	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:03.176999092 CET	38144	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:03.177141905 CET	38144	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:03.181978941 CET	25565	38144	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:04.920542955 CET	25565	38144	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:04.920912981 CET	38144	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:04.921564102 CET	38146	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:04.925678015 CET	25565	38144	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:04.926366091 CET	25565	38146	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:04.926445007 CET	38146	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:04.926564932 CET	38146	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:04.931322098 CET	25565	38146	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:06.674972057 CET	25565	38146	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:06.675230980 CET	38146	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:06.676295042 CET	38148	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:06.680278063 CET	25565	38146	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:06.681355000 CET	25565	38148	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:06.681494951 CET	38148	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:06.681535959 CET	38148	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:06.686465025 CET	25565	38148	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:08.418498039 CET	25565	38148	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:08.418914080 CET	38148	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:08.419744968 CET	38150	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:08.423872948 CET	25565	38148	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:08.424676895 CET	25565	38150	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:08.424765110 CET	38150	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:08.424818993 CET	38150	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:08.429666042 CET	25565	38150	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:10.185726881 CET	25565	38150	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:10.186002016 CET	38150	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:10.186866045 CET	38152	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:10.191818953 CET	25565	38150	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:10.192363977 CET	25565	38152	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:10.192460060 CET	38152	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:10.192553043 CET	38152	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:10.197374105 CET	25565	38152	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:11.919096947 CET	25565	38152	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:11.919367075 CET	38152	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:11.920145988 CET	38154	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:11.924206972 CET	25565	38152	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:11.924917936 CET	25565	38154	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:11.925004005 CET	38154	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:11.925122023 CET	38154	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:11.929887056 CET	25565	38154	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:13.689910889 CET	25565	38154	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:13.690402985 CET	38154	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:13.691240072 CET	38156	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:13.697694063 CET	25565	38154	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:13.697717905 CET	25565	38156	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:13.697834969 CET	38156	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:13.697892904 CET	38156	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:13.702665091 CET	25565	38156	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:15.438925028 CET	25565	38156	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:15.439343929 CET	38156	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:15.440412045 CET	38158	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:15.444297075 CET	25565	38156	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:15.445281029 CET	25565	38158	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:15.445389032 CET	38158	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:15.445497036 CET	38158	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:15.450297117 CET	25565	38158	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:17.185015917 CET	25565	38158	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:17.185453892 CET	38158	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:17.186368942 CET	38160	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:17.190440893 CET	25565	38158	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:17.191262960 CET	25565	38160	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:17.191334963 CET	38160	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:17.191442966 CET	38160	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:17.196274042 CET	25565	38160	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:18.936430931 CET	25565	38160	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:18.937005043 CET	38160	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:18.938023090 CET	38162	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:18.941960096 CET	25565	38160	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:18.942900896 CET	25565	38162	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:18.943001986 CET	38162	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:18.943105936 CET	38162	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:18.947937012 CET	25565	38162	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:20.666974068 CET	25565	38162	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:20.667623997 CET	38162	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:20.668555975 CET	38164	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:20.672574997 CET	25565	38162	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:20.673441887 CET	25565	38164	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:20.673544884 CET	38164	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:20.673695087 CET	38164	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:20.678601980 CET	25565	38164	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:22.561906099 CET	25565	38164	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:22.562176943 CET	38164	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:22.562267065 CET	38164	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:22.563278913 CET	38166	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:22.567203999 CET	25565	38164	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:22.568151951 CET	25565	38166	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:22.568248034 CET	38166	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:22.568402052 CET	38166	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:22.573229074 CET	25565	38166	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:24.328279972 CET	25565	38166	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:24.328876972 CET	38166	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:24.329762936 CET	38168	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:24.333893061 CET	25565	38166	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:24.334707975 CET	25565	38168	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:24.334796906 CET	38168	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:24.334898949 CET	38168	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:24.339726925 CET	25565	38168	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:26.057090044 CET	25565	38168	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:26.057415009 CET	38168	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:26.058516026 CET	38170	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:26.062364101 CET	25565	38168	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:26.063476086 CET	25565	38170	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:26.063571930 CET	38170	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:26.063781977 CET	38170	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:26.068620920 CET	25565	38170	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:27.794842958 CET	25565	38170	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:27.795109034 CET	38170	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:27.796024084 CET	38172	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:27.801780939 CET	25565	38170	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:27.802762985 CET	25565	38172	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:27.802831888 CET	38172	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:27.802891016 CET	38172	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:27.808845997 CET	25565	38172	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:29.582609892 CET	25565	38172	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:29.582855940 CET	38172	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:29.583636045 CET	38174	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:29.587749004 CET	25565	38172	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:29.588475943 CET	25565	38174	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:29.588587046 CET	38174	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:29.588634968 CET	38174	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:29.593430042 CET	25565	38174	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:31.331566095 CET	25565	38174	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:31.331847906 CET	38174	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:31.332570076 CET	38176	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:31.336777925 CET	25565	38174	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:31.340317011 CET	25565	38176	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:31.340409994 CET	38176	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:31.340457916 CET	38176	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:31.345428944 CET	25565	38176	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:33.076972008 CET	25565	38176	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:33.077495098 CET	38176	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:33.078274965 CET	38178	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:33.082465887 CET	25565	38176	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:33.083177090 CET	25565	38178	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:33.083270073 CET	38178	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:33.083412886 CET	38178	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:33.088207960 CET	25565	38178	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:34.829301119 CET	25565	38178	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:34.829579115 CET	38178	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:34.830725908 CET	38180	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:34.834717989 CET	25565	38178	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:34.835690022 CET	25565	38180	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:34.835762024 CET	38180	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:34.835860968 CET	38180	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:34.840735912 CET	25565	38180	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:36.557140112 CET	25565	38180	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:36.557245970 CET	38180	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:36.557776928 CET	38182	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:36.562086105 CET	25565	38180	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:36.562556028 CET	25565	38182	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:36.562608004 CET	38182	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:36.562653065 CET	38182	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:36.567369938 CET	25565	38182	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:43.685549021 CET	25565	38182	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:43.686019897 CET	38182	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:43.686676025 CET	38184	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:43.690902948 CET	25565	38182	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:43.691498995 CET	25565	38184	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:43.691586018 CET	38184	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:43.691633940 CET	38184	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:43.696399927 CET	25565	38184	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:45.419810057 CET	25565	38184	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:45.420345068 CET	38184	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:45.420965910 CET	38186	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:45.425276041 CET	25565	38184	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:45.425893068 CET	25565	38186	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:45.425956964 CET	38186	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:45.426002026 CET	38186	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:45.430845976 CET	25565	38186	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:47.156539917 CET	25565	38186	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:47.157037973 CET	38186	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:47.157650948 CET	38188	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:47.161957026 CET	25565	38186	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:47.162518024 CET	25565	38188	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:47.162579060 CET	38188	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:47.162636995 CET	38188	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:47.167501926 CET	25565	38188	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:48.938951015 CET	25565	38188	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:48.939649105 CET	38188	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:48.941082001 CET	38190	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:48.944616079 CET	25565	38188	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:48.945997953 CET	25565	38190	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:48.946196079 CET	38190	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:48.946269989 CET	38190	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:48.951174021 CET	25565	38190	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:50.689330101 CET	25565	38190	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:50.689968109 CET	38190	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:50.691190958 CET	38192	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:50.700288057 CET	25565	38190	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:50.701407909 CET	25565	38192	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:50.701539040 CET	38192	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:50.701764107 CET	38192	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:50.712016106 CET	25565	38192	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:52.454376936 CET	25565	38192	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:52.454885006 CET	38192	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:52.455692053 CET	38194	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:52.459728956 CET	25565	38192	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:52.460505962 CET	25565	38194	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:52.460611105 CET	38194	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:52.460721016 CET	38194	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:52.465475082 CET	25565	38194	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:54.222323895 CET	25565	38194	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:54.222918987 CET	38194	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:54.224633932 CET	38196	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:54.228046894 CET	25565	38194	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:54.229569912 CET	25565	38196	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:54.229636908 CET	38196	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:54.229700089 CET	38196	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:54.234572887 CET	25565	38196	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:55.971025944 CET	25565	38196	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:55.971561909 CET	38196	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:55.972215891 CET	38198	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:55.977037907 CET	25565	38196	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:55.982949018 CET	25565	38198	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:55.983005047 CET	38198	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:55.983251095 CET	38198	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:55.988033056 CET	25565	38198	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:57.729440928 CET	25565	38198	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:57.730063915 CET	38198	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:57.731136084 CET	38200	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:57.736226082 CET	25565	38198	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:57.737373114 CET	25565	38200	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:57.737478971 CET	38200	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:57.737715006 CET	38200	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:57.743711948 CET	25565	38200	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:59.501152992 CET	25565	38200	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:59.501449108 CET	38200	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:59.502564907 CET	38202	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:59.506535053 CET	25565	38200	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:59.507452011 CET	25565	38202	185.189.13.91	192.168.2.14
Jan 13, 2025 17:10:59.507536888 CET	38202	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:59.507607937 CET	38202	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:10:59.512492895 CET	25565	38202	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:01.229676008 CET	25565	38202	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:01.230195999 CET	38202	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:01.231101990 CET	38204	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:01.235111952 CET	25565	38202	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:01.236103058 CET	25565	38204	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:01.236208916 CET	38204	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:01.236326933 CET	38204	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:01.241190910 CET	25565	38204	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:02.983885050 CET	25565	38204	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:02.984285116 CET	38204	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:02.985469103 CET	38206	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:02.989329100 CET	25565	38204	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:02.990358114 CET	25565	38206	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:02.990463018 CET	38206	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:02.990520954 CET	38206	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:02.995420933 CET	25565	38206	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:04.769550085 CET	25565	38206	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:04.769815922 CET	38206	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:04.770701885 CET	38208	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:04.774883986 CET	25565	38206	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:04.775661945 CET	25565	38208	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:04.775739908 CET	38208	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:04.775780916 CET	38208	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:04.780606031 CET	25565	38208	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:06.538008928 CET	25565	38208	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:06.538676023 CET	38208	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:06.540788889 CET	38210	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:06.543804884 CET	25565	38208	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:06.546046972 CET	25565	38210	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:06.546185017 CET	38210	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:06.546411991 CET	38210	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:06.551373005 CET	25565	38210	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:08.345310926 CET	25565	38210	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:08.345521927 CET	38210	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:08.346659899 CET	38212	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:08.350359917 CET	25565	38210	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:08.351497889 CET	25565	38212	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:08.351556063 CET	38212	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:08.351628065 CET	38212	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:08.357141018 CET	25565	38212	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:10.076750994 CET	25565	38212	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:10.077243090 CET	38212	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:10.078322887 CET	38214	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:10.082413912 CET	25565	38212	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:10.083268881 CET	25565	38214	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:10.083444118 CET	38214	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:10.083514929 CET	38214	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:10.088354111 CET	25565	38214	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:11.821305990 CET	25565	38214	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:11.821789980 CET	38214	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:11.822706938 CET	38216	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:11.826751947 CET	25565	38214	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:11.827579021 CET	25565	38216	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:11.827646971 CET	38216	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:11.827766895 CET	38216	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:11.832528114 CET	25565	38216	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:13.655935049 CET	25565	38216	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:13.656197071 CET	38216	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:13.657052994 CET	38218	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:13.660988092 CET	25565	38216	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:13.661818027 CET	25565	38218	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:13.661892891 CET	38218	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:13.662003994 CET	38218	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:13.666712046 CET	25565	38218	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:15.420069933 CET	25565	38218	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:15.420401096 CET	38218	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:15.421530008 CET	38220	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:15.425359964 CET	25565	38218	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:15.426454067 CET	25565	38220	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:15.426543951 CET	38220	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:15.426696062 CET	38220	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:15.431554079 CET	25565	38220	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:17.170036077 CET	25565	38220	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:17.170424938 CET	38220	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:17.171710968 CET	38222	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:17.175467014 CET	25565	38220	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:17.176788092 CET	25565	38222	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:17.176912069 CET	38222	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:17.176971912 CET	38222	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:17.181816101 CET	25565	38222	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:18.923036098 CET	25565	38222	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:18.923341036 CET	38222	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:18.924354076 CET	38224	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:18.928189993 CET	25565	38222	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:18.929177999 CET	25565	38224	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:18.929258108 CET	38224	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:18.929354906 CET	38224	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:18.934124947 CET	25565	38224	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:20.650573969 CET	25565	38224	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:20.650871038 CET	38224	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:20.651726007 CET	38226	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:20.655673027 CET	25565	38224	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:20.656522989 CET	25565	38226	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:20.656586885 CET	38226	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:20.656670094 CET	38226	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:20.661468983 CET	25565	38226	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:22.419487000 CET	25565	38226	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:22.419743061 CET	38226	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:22.419814110 CET	38226	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:22.420675993 CET	38228	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:22.424688101 CET	25565	38226	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:22.425589085 CET	25565	38228	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:22.425698996 CET	38228	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:22.425761938 CET	38228	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:22.430579901 CET	25565	38228	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:24.175710917 CET	25565	38228	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:24.176248074 CET	38228	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:24.176979065 CET	38230	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:24.181082964 CET	25565	38228	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:24.181813955 CET	25565	38230	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:24.181864023 CET	38230	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:24.181925058 CET	38230	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:24.186651945 CET	25565	38230	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:25.982697964 CET	25565	38230	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:25.983031988 CET	38230	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:25.984090090 CET	38232	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:25.987814903 CET	25565	38230	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:25.988899946 CET	25565	38232	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:25.989039898 CET	38232	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:25.989074945 CET	38232	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:25.993803024 CET	25565	38232	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:27.738327980 CET	25565	38232	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:27.738684893 CET	38232	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:27.739393950 CET	38234	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:27.743474007 CET	25565	38232	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:27.744195938 CET	25565	38234	185.189.13.91	192.168.2.14
Jan 13, 2025 17:11:27.744281054 CET	38234	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:27.744390965 CET	38234	25565	192.168.2.14	185.189.13.91
Jan 13, 2025 17:11:27.749121904 CET	25565	38234	185.189.13.91	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 17:10:36.606580973 CET	59047	53	192.168.2.14	1.1.1.1
Jan 13, 2025 17:10:36.606637955 CET	51100	53	192.168.2.14	1.1.1.1
Jan 13, 2025 17:10:36.614046097 CET	53	51100	1.1.1.1	192.168.2.14
Jan 13, 2025 17:10:36.614092112 CET	53	59047	1.1.1.1	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 17:10:36.606580973 CET	192.168.2.14	1.1.1.1	0xc8f5	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:10:36.606637955 CET	192.168.2.14	1.1.1.1	0xf7c5	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 17:10:36.614092112 CET	1.1.1.1	192.168.2.14	0xc8f5	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:10:36.614092112 CET	1.1.1.1	192.168.2.14	0xc8f5	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: armv6l.elf PID: 5475, Parent PID: 5400

General

Start time (UTC):	16:07:51
Start date (UTC):	13/01/2025
Path:	/tmp/armv6l.elf
Arguments:	/tmp/armv6l.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv6l.elf PID: 5477, Parent PID: 5475

General

Start time (UTC):	16:07:51
Start date (UTC):	13/01/2025
Path:	/tmp/armv6l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv6l.elf PID: 5479, Parent PID: 5477

General

Start time (UTC):	16:07:51
Start date (UTC):	13/01/2025
Path:	/tmp/armv6l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: dash PID: 5520, Parent PID: 3635

General

Start time (UTC):	16:08:21
Start date (UTC):	13/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5520, Parent PID: 3635

General

Start time (UTC):	16:08:21
Start date (UTC):	13/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.YG0nSu9WJX /tmp/tmp.33dmxlCUOp /tmp/tmp.vUmB7zsdCT
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 5521, Parent PID: 3635

General

Start time (UTC):	16:08:22
Start date (UTC):	13/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5521, Parent PID: 3635

General

Start time (UTC):	16:08:22
Start date (UTC):	13/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.YG0nSu9WJX /tmp/tmp.33dmxlCUOp /tmp/tmp.vUmB7zsdCT
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report armv6l.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: armv6l.elf PID: 5475, Parent PID: 5400

General

Chronological Activities

Analysis Process: armv6l.elf PID: 5477, Parent PID: 5475

General

Chronological Activities

Analysis Process: armv6l.elf PID: 5479, Parent PID: 5477

General

Chronological Activities

Analysis Process: dash PID: 5520, Parent PID: 3635

General

Linux Analysis Report
armv6l.elf