Edit tour

Linux Analysis Report
armv4l.elf

Overview

General Information

Sample name:	armv4l.elf
Analysis ID:	1590162
MD5:	588029afb8e514bc635688add6ec635d
SHA1:	758a3834433eeb24342c74ecfc00a232465734d6
SHA256:	01346d937d7169e281b786599ba34021f265e585da48ca7c331d13d1b7662c6b
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590162
Start date and time:	2025-01-13 17:11:30 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	armv4l.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: armv4l.elf

Runtime Messages

Command:	/tmp/armv4l.elf
PID:	6257
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6240, Parent: 4331)

rm (PID: 6240, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.Ih1kGE0P0n /tmp/tmp.26PKzF3T9u /tmp/tmp.DSFrravwr4

dash New Fork (PID: 6241, Parent: 4331)

rm (PID: 6241, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.Ih1kGE0P0n /tmp/tmp.26PKzF3T9u /tmp/tmp.DSFrravwr4

armv4l.elf (PID: 6257, Parent: 6177, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/armv4l.elf

armv4l.elf New Fork (PID: 6259, Parent: 6257)

armv4l.elf New Fork (PID: 6261, Parent: 6259)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
armv4l.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
armv4l.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
armv4l.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6257.1.00007fe590017000.00007fe590029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6257.1.00007fe590017000.00007fe590029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6259.1.00007fe590017000.00007fe590029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6259.1.00007fe590017000.00007fe590029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: armv4l.elf PID: 6257	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv4l.elf PID: 6257	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1000:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1014:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1028:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x103c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: armv4l.elf PID: 6259	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: armv4l.elf PID: 6259	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x15572:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15586:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1559a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15612:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15626:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1563a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1564e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15662:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15676:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1568a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1569e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x156b2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x156c6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x156da:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x156ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15702:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-13T17:12:27.172790+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35438	185.189.13.91	25565	TCP
2025-01-13T17:12:28.894567+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35440	185.189.13.91	25565	TCP
2025-01-13T17:12:30.663886+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35442	185.189.13.91	25565	TCP
2025-01-13T17:12:32.433590+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35444	185.189.13.91	25565	TCP
2025-01-13T17:12:34.198053+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35446	185.189.13.91	25565	TCP
2025-01-13T17:12:35.959910+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35448	185.189.13.91	25565	TCP
2025-01-13T17:12:37.728960+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35450	185.189.13.91	25565	TCP
2025-01-13T17:12:39.491733+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35452	185.189.13.91	25565	TCP
2025-01-13T17:12:41.258995+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35454	185.189.13.91	25565	TCP
2025-01-13T17:12:43.007598+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35456	185.189.13.91	25565	TCP
2025-01-13T17:12:44.774622+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35458	185.189.13.91	25565	TCP
2025-01-13T17:12:46.503592+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35460	185.189.13.91	25565	TCP
2025-01-13T17:12:48.259858+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35462	185.189.13.91	25565	TCP
2025-01-13T17:12:50.021243+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35464	185.189.13.91	25565	TCP
2025-01-13T17:12:54.181182+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35466	185.189.13.91	25565	TCP
2025-01-13T17:12:55.989891+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35468	185.189.13.91	25565	TCP
2025-01-13T17:12:57.805285+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35470	185.189.13.91	25565	TCP
2025-01-13T17:12:59.576189+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35472	185.189.13.91	25565	TCP
2025-01-13T17:13:01.368159+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35474	185.189.13.91	25565	TCP
2025-01-13T17:13:03.117116+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35476	185.189.13.91	25565	TCP
2025-01-13T17:13:04.866731+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35478	185.189.13.91	25565	TCP
2025-01-13T17:13:06.649999+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35480	185.189.13.91	25565	TCP
2025-01-13T17:13:08.380451+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35482	185.189.13.91	25565	TCP
2025-01-13T17:13:10.131778+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35484	185.189.13.91	25565	TCP
2025-01-13T17:13:11.899334+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35486	185.189.13.91	25565	TCP
2025-01-13T17:13:13.982972+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35488	185.189.13.91	25565	TCP
2025-01-13T17:13:15.828065+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35490	185.189.13.91	25565	TCP
2025-01-13T17:13:17.739573+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35492	185.189.13.91	25565	TCP
2025-01-13T17:13:19.499817+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35494	185.189.13.91	25565	TCP
2025-01-13T17:13:21.272167+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35496	185.189.13.91	25565	TCP
2025-01-13T17:13:23.023835+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35498	185.189.13.91	25565	TCP
2025-01-13T17:13:24.775880+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35500	185.189.13.91	25565	TCP
2025-01-13T17:13:26.586226+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35502	185.189.13.91	25565	TCP
2025-01-13T17:13:28.336511+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35504	185.189.13.91	25565	TCP
2025-01-13T17:13:30.086941+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35506	185.189.13.91	25565	TCP
2025-01-13T17:13:31.819185+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35508	185.189.13.91	25565	TCP
2025-01-13T17:13:33.550765+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35510	185.189.13.91	25565	TCP
2025-01-13T17:13:35.342809+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35512	185.189.13.91	25565	TCP
2025-01-13T17:13:37.083479+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35514	185.189.13.91	25565	TCP
2025-01-13T17:13:38.815846+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35516	185.189.13.91	25565	TCP
2025-01-13T17:13:42.966319+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35518	185.189.13.91	25565	TCP
2025-01-13T17:13:44.716033+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35520	185.189.13.91	25565	TCP
2025-01-13T17:13:46.477801+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35522	185.189.13.91	25565	TCP
2025-01-13T17:13:48.209901+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35524	185.189.13.91	25565	TCP
2025-01-13T17:13:49.975459+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35526	185.189.13.91	25565	TCP
2025-01-13T17:13:51.744332+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35528	185.189.13.91	25565	TCP
2025-01-13T17:13:53.612489+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35530	185.189.13.91	25565	TCP
2025-01-13T17:13:55.802241+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35532	185.189.13.91	25565	TCP
2025-01-13T17:13:57.571100+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35534	185.189.13.91	25565	TCP
2025-01-13T17:13:59.373542+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35536	185.189.13.91	25565	TCP
2025-01-13T17:14:01.183104+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35538	185.189.13.91	25565	TCP
2025-01-13T17:14:02.944813+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35540	185.189.13.91	25565	TCP
2025-01-13T17:14:04.731703+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35542	185.189.13.91	25565	TCP
2025-01-13T17:14:06.457314+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35544	185.189.13.91	25565	TCP
2025-01-13T17:14:08.197395+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35546	185.189.13.91	25565	TCP
2025-01-13T17:14:09.966838+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35548	185.189.13.91	25565	TCP
2025-01-13T17:14:11.875828+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35550	185.189.13.91	25565	TCP
2025-01-13T17:14:13.612318+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35552	185.189.13.91	25565	TCP
2025-01-13T17:14:15.381605+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35554	185.189.13.91	25565	TCP
2025-01-13T17:14:17.150446+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35556	185.189.13.91	25565	TCP
2025-01-13T17:14:18.900686+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35558	185.189.13.91	25565	TCP
2025-01-13T17:14:20.665256+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35560	185.189.13.91	25565	TCP
2025-01-13T17:14:22.557177+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35562	185.189.13.91	25565	TCP
2025-01-13T17:14:24.287003+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35564	185.189.13.91	25565	TCP
2025-01-13T17:14:26.244051+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35566	185.189.13.91	25565	TCP
2025-01-13T17:14:28.030007+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35568	185.189.13.91	25565	TCP
2025-01-13T17:14:29.869641+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35570	185.189.13.91	25565	TCP
2025-01-13T17:14:31.620647+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35572	185.189.13.91	25565	TCP
2025-01-13T17:14:33.378743+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35574	185.189.13.91	25565	TCP
2025-01-13T17:14:35.114882+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35576	185.189.13.91	25565	TCP
2025-01-13T17:14:36.904839+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35578	185.189.13.91	25565	TCP
2025-01-13T17:14:38.653264+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35580	185.189.13.91	25565	TCP
2025-01-13T17:14:40.400147+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35582	185.189.13.91	25565	TCP
2025-01-13T17:14:42.184641+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35584	185.189.13.91	25565	TCP
2025-01-13T17:14:43.970662+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35586	185.189.13.91	25565	TCP
2025-01-13T17:14:45.780982+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35588	185.189.13.91	25565	TCP
2025-01-13T17:14:47.547800+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35590	185.189.13.91	25565	TCP
2025-01-13T17:14:49.392523+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35592	185.189.13.91	25565	TCP
2025-01-13T17:14:51.138161+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35594	185.189.13.91	25565	TCP
2025-01-13T17:14:52.969443+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35596	185.189.13.91	25565	TCP
2025-01-13T17:14:54.722919+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35598	185.189.13.91	25565	TCP
2025-01-13T17:14:56.477269+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35600	185.189.13.91	25565	TCP
2025-01-13T17:14:58.273579+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35602	185.189.13.91	25565	TCP
2025-01-13T17:15:00.056486+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35604	185.189.13.91	25565	TCP
2025-01-13T17:15:01.807724+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35606	185.189.13.91	25565	TCP
2025-01-13T17:15:03.625719+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35608	185.189.13.91	25565	TCP
2025-01-13T17:15:05.420867+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35610	185.189.13.91	25565	TCP
2025-01-13T17:15:07.165271+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35612	185.189.13.91	25565	TCP
2025-01-13T17:15:08.939468+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35614	185.189.13.91	25565	TCP
2025-01-13T17:15:10.660841+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35616	185.189.13.91	25565	TCP
2025-01-13T17:15:12.433849+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35618	185.189.13.91	25565	TCP
2025-01-13T17:15:14.196058+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35620	185.189.13.91	25565	TCP
2025-01-13T17:15:15.943636+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35622	185.189.13.91	25565	TCP
2025-01-13T17:15:17.709274+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35624	185.189.13.91	25565	TCP
2025-01-13T17:15:19.451528+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35626	185.189.13.91	25565	TCP
2025-01-13T17:15:21.213634+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35628	185.189.13.91	25565	TCP
2025-01-13T17:15:22.946300+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35630	185.189.13.91	25565	TCP
2025-01-13T17:15:24.703028+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35632	185.189.13.91	25565	TCP
2025-01-13T17:15:26.435710+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35634	185.189.13.91	25565	TCP
2025-01-13T17:15:28.184164+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35636	185.189.13.91	25565	TCP
2025-01-13T17:15:29.913444+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35638	185.189.13.91	25565	TCP
2025-01-13T17:15:31.665501+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35640	185.189.13.91	25565	TCP
2025-01-13T17:15:33.411507+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35642	185.189.13.91	25565	TCP
2025-01-13T17:15:35.151510+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35644	185.189.13.91	25565	TCP
2025-01-13T17:15:36.901607+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35646	185.189.13.91	25565	TCP
2025-01-13T17:15:38.632846+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35648	185.189.13.91	25565	TCP
2025-01-13T17:15:40.536524+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35650	185.189.13.91	25565	TCP
2025-01-13T17:15:42.300922+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35652	185.189.13.91	25565	TCP
2025-01-13T17:15:44.044704+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35654	185.189.13.91	25565	TCP
2025-01-13T17:15:46.018928+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35656	185.189.13.91	25565	TCP
2025-01-13T17:15:47.742346+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35658	185.189.13.91	25565	TCP
2025-01-13T17:15:49.479910+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35660	185.189.13.91	25565	TCP
2025-01-13T17:15:51.270613+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35662	185.189.13.91	25565	TCP
2025-01-13T17:15:53.025916+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35664	185.189.13.91	25565	TCP
2025-01-13T17:15:54.785637+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35666	185.189.13.91	25565	TCP
2025-01-13T17:15:56.527667+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35668	185.189.13.91	25565	TCP
2025-01-13T17:15:58.311881+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35670	185.189.13.91	25565	TCP
2025-01-13T17:16:00.052258+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35672	185.189.13.91	25565	TCP
2025-01-13T17:16:01.793351+0100	2846526	1	A Network Trojan was detected	192.168.2.23	35674	185.189.13.91	25565	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: armv4l.elf

Avira: detected

Found malware configuration

Source: armv4l.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.189.13.91:25565"}

Multi AV Scanner detection for submitted file

Source: armv4l.elf

ReversingLabs: Detection: 75%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/armv4l.elf (PID: 6257)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35474 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35458 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35438 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35564 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35496 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35642 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35500 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35552 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35672 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35602 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35470 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35510 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35472 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35450 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35502 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35454 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35506 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35512 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35604 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35540 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35538 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35620 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35524 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35610 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35494 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35630 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35612 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35528 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35480 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35546 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35598 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35442 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35674 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35484 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35448 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35478 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35468 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35626 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35476 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35460 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35482 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35452 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35514 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35576 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35516 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35580 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35584 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35532 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35632 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35464 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35618 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35588 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35508 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35658 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35504 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35570 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35522 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35562 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35444 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35490 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35542 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35466 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35568 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35554 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35462 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35558 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35596 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35550 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35440 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35486 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35530 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35498 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35634 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35488 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35594 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35456 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35666 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35548 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35586 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35544 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35590 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35614 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35556 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35492 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35644 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35638 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35518 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35574 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35624 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35640 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35520 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35606 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35536 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35646 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35534 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35650 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35652 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35582 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35526 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35560 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35636 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35446 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35600 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35648 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35608 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35654 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35662 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35664 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35656 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35572 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35578 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35668 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35616 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35622 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35660 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35566 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35592 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35628 -> 185.189.13.91:25565
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:35670 -> 185.189.13.91:25565

Source: global traffic

TCP traffic: 192.168.2.23:35438 -> 185.189.13.91:25565

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.189.13.91

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: armv4l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6257.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6259.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: armv4l.elf PID: 6257, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: armv4l.elf PID: 6259, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: armv4l.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6257.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6259.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: armv4l.elf PID: 6257, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: armv4l.elf PID: 6259, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@0/0

Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: armv4l.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: armv4l.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /usr/bin/dash (PID: 6240)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.Ih1kGE0P0n /tmp/tmp.26PKzF3T9u /tmp/tmp.DSFrravwr4			Jump to behavior
Source: /usr/bin/dash (PID: 6241)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.Ih1kGE0P0n /tmp/tmp.26PKzF3T9u /tmp/tmp.DSFrravwr4			Jump to behavior

Source: /tmp/armv4l.elf (PID: 6257)

Queries kernel information via 'uname':

Jump to behavior

Source: armv4l.elf, 6257.1.0000558b3e500000.0000558b3e62e000.rw-.sdmp, armv4l.elf, 6259.1.0000558b3e500000.0000558b3e62e000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: armv4l.elf, 6257.1.00007ffc5472c000.00007ffc5474d000.rw-.sdmp, armv4l.elf, 6259.1.00007ffc5472c000.00007ffc5474d000.rw-.sdmp	Binary or memory string: E}x86_64/usr/bin/qemu-arm/tmp/armv4l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/armv4l.elf
Source: armv4l.elf, 6257.1.0000558b3e500000.0000558b3e62e000.rw-.sdmp, armv4l.elf, 6259.1.0000558b3e500000.0000558b3e62e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: armv4l.elf, 6257.1.00007ffc5472c000.00007ffc5474d000.rw-.sdmp, armv4l.elf, 6259.1.00007ffc5472c000.00007ffc5474d000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: armv4l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: armv4l.elf, type: SAMPLE
Source: Yara match	File source: 6257.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6259.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv4l.elf PID: 6257, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv4l.elf PID: 6259, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: armv4l.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: armv4l.elf, type: SAMPLE
Source: Yara match	File source: 6257.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6259.1.00007fe590017000.00007fe590029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: armv4l.elf PID: 6257, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: armv4l.elf PID: 6259, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.189.13.91:25565"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
armv4l.elf	75%	ReversingLabs	Linux.Backdoor.Gafgyt
armv4l.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.189.13.91:25565	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.189.13.91	unknown	Russian Federation	50113	SUPERSERVERSDATACENTERRU	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.189.13.91	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	t3.elf	Get hash	malicious	Unknown	Browse
	t2.elf	Get hash	malicious	Unknown	Browse
	hikarm6.elf	Get hash	malicious	Unknown	Browse
	g6.elf	Get hash	malicious	Unknown	Browse
	t1.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	t3.elf	Get hash	malicious	Unknown	Browse
	t2.elf	Get hash	malicious	Unknown	Browse
	hikarm4.elf	Get hash	malicious	Unknown	Browse
	hikarm6.elf	Get hash	malicious	Unknown	Browse
	g6.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	t3.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	t2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hikarm4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	96.62.214.10-boatnet.x86-2025-01-13T13_31_47.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	t3.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	t2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hikarm4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
SUPERSERVERSDATACENTERRU	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.189.13.91
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.189.13.91
	armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.189.13.91
	mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.189.13.91
	covid.arm7.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	covid.mips.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	covid.arm6.elf	Get hash	malicious	Unknown	Browse	185.255.135.104
	covid.x86.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	byte.mpsl.elf	Get hash	malicious	Mirai	Browse	185.255.135.104
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	185.206.2.20
INIT7CH	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	t3.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	t2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	hikarm4.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	hikarm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	g6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	5.9569557448893375
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	armv4l.elf
File size:	108'417 bytes
MD5:	588029afb8e514bc635688add6ec635d
SHA1:	758a3834433eeb24342c74ecfc00a232465734d6
SHA256:	01346d937d7169e281b786599ba34021f265e585da48ca7c331d13d1b7662c6b
SHA512:	586bd980934882b26896c3d6a041f884685d4841bb90534efa1b8163fc67acc93266db9d9c857c8d8888d06e6985780813e6d0c17ca5ccba4d2cb4725418554c
SSDEEP:	3072:MSY+46m1qOzssuFPPKNy+AmkZrQAhPDCXFke:06mgOzJuFPzmkZrQAhPDCXFke
TLSH:	B5B31845F8408727C2D327BAE78F479D3B36579467DB33116A38BEB42BC17892E29520
File Content Preview:	.ELF...a..........(.........4....?......4. ...(.....................P...P................ ... ... .......g..........Q.td..................................-...L."....<..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	81820
Section Header Size:	40
Number of Section Headers:	20
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0xf3f8	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x174a8	0xf4a8	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x174bc	0xf4bc	0x2690	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x19b4c	0x11b4c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x22000	0x12000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x22008	0x12008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x22010	0x12010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x22014	0x12014	0x3a0	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x223b4	0x123b4	0x635c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x123b4	0xa90	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x12e48	0x120	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x12f68	0x578	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x134e0	0xb4	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x13594	0x8bd	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x13e54	0xa0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x13ef4	0xa8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x142bc	0x41c0	0x10	0x0		19	579	4
.strtab	STRTAB	0x0	0x1847c	0x2305	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x11b50	0x11b50	6.1091	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x12000	0x22000	0x22000	0x3b4	0x6710	2.7254	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x174a8	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x174bc	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x19b4c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x22000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x22008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x22010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x22014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x223b4	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x174a8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174b4	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1746c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x174b8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x956c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb5e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeeb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf00c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf05c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf17c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf70c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfaac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1025c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1047c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1053c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1076c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1090c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1102c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11084	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1191c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12530	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12548	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1256c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12754	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13010	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1329c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1393c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13adc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1409c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14158	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1481c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ad4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1539c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1558c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15898	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1631c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16504	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1670c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1673c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22000	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x22008	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x2201c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1749c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x997c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa820	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17970	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa9a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb324	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb5dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcb1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdb24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf1f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf224	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22050	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x22058	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf230	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf704	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfca4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfe50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22060	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xff40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1024c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22168	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x102c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10350	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x103e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10464	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22180	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1068c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1075c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18af4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22234	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10b40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10bec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10eb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2224c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10fc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11130	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26614	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x111bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22254	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x12564	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x125a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ac4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ad4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2226c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x18b78	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12c44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13574	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13934	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13c50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x223a8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x14808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x162f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19b04	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16410	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16630	0	NOTYPE	<unknown>	DEFAULT	2
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.111.5062	.symtab	0x17970	8	OBJECT	<unknown>	DEFAULT	4
C.148.5389	.symtab	0x182ec	24	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xf348	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xf364	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x223e8	16384	OBJECT	<unknown>	DEFAULT	10
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0xb328	340	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0xa83c	364	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0xb5e0	376	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x9d00	1228	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x22004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x22000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x22050	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x184f4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x223a8	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x18bda	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x22058	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x187f4	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x2200c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x22008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x19b4c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x19b4c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x22050	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x184f4	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x223a8	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x18bda	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x22058	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x187f4	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x22054	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x223ac	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x2205c	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0xf228	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xef08	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x10114	328	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1256c	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xef5c	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xef88	44	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xfa80	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x26614	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x1090c	148	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x125d4	384	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x12bc0	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x12754	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xefb4	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x16504	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x16510	304	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x11000	44	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1102c	44	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x11058	44	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xefe0	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xfaac	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x11084	44	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x26618	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x13368	528	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10698	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xf00c	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x13210	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xf05c	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1673c	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1631c	252	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xf250	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x117a0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x16418	236	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xf260	156	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x125a8	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x10260	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1053c	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xf0f4	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xfb08	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x110dc	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xf120	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xfb34	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0xfb60	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xf150	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x109a0	420	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xfbc4	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xf380	264	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xf488	28	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x131e0	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xf320	96	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x130c8	200	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x117b0	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x151c0	224	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x13190	80	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xf4a4	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xf59c	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x11868	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1076c	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xf17c	44	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x13f84	52	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xf1f4	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x13fec	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x11188	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x155d8	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x15648	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x15628	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xf1b0	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x22010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x22010	0	OBJECT	<unknown>	DEFAULT	8
__adddf3	.symtab	0x169d0	736	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmpeq	.symtab	0x173a0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmple	.symtab	0x173a0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdrcmple	.symtab	0x17384	48	FUNC	<unknown>	DEFAULT	2
__aeabi_d2uiz	.symtab	0x17418	84	FUNC	<unknown>	DEFAULT	2
__aeabi_dadd	.symtab	0x169d0	736	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpeq	.symtab	0x173b4	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpge	.symtab	0x173f0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpgt	.symtab	0x17404	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmple	.symtab	0x173dc	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmplt	.symtab	0x173c8	20	FUNC	<unknown>	DEFAULT	2
__aeabi_ddiv	.symtab	0x170ec	516	FUNC	<unknown>	DEFAULT	2
__aeabi_dmul	.symtab	0x16dc4	808	FUNC	<unknown>	DEFAULT	2
__aeabi_drsub	.symtab	0x169c4	0	FUNC	<unknown>	DEFAULT	2
__aeabi_dsub	.symtab	0x169cc	740	FUNC	<unknown>	DEFAULT	2
__aeabi_f2d	.symtab	0x16d04	64	FUNC	<unknown>	DEFAULT	2
__aeabi_i2d	.symtab	0x16cd8	44	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv	.symtab	0x167a0	0	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_idivmod	.symtab	0x168c8	24	FUNC	<unknown>	DEFAULT	2
__aeabi_l2d	.symtab	0x16d58	108	FUNC	<unknown>	DEFAULT	2
__aeabi_ldiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x16cb0	40	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xec14	0	FUNC	<unknown>	DEFAULT	2
__aeabi_uidivmod	.symtab	0xed0c	24	FUNC	<unknown>	DEFAULT	2
__aeabi_ul2d	.symtab	0x16d44	128	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x26608	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x22234	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__bss_end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10c08	56	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x22054	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x223ac	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x2205c	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x26638	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x22014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x13b4c	220	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x154c0	204	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x13a24	184	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x10fd0	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x10fcc	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__divdf3	.symtab	0x170ec	516	FUNC	<unknown>	DEFAULT	2
__divsi3	.symtab	0x167a0	296	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x11a08	2060	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1746c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x22018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x15418	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1393c	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x13adc	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x26600	4	OBJECT	<unknown>	DEFAULT	10
__eqdf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__errno_location	.symtab	0xf228	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x265f8	4	OBJECT	<unknown>	HIDDEN	10
__extendsfdf2	.symtab	0x16d04	64	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fixunsdfsi	.symtab	0x17418	84	FUNC	<unknown>	DEFAULT	2
__floatdidf	.symtab	0x16d58	108	FUNC	<unknown>	DEFAULT	2
__floatsidf	.symtab	0x16cd8	44	FUNC	<unknown>	DEFAULT	2
__floatundidf	.symtab	0x16d44	128	FUNC	<unknown>	DEFAULT	2
__floatunsidf	.symtab	0x16cb0	40	FUNC	<unknown>	DEFAULT	2
__gedf2	.symtab	0x172f0	148	FUNC	<unknown>	DEFAULT	2
__get_hosts_byname_r	.symtab	0x124e8	72	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x172f0	148	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0xff58	148	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x10020	244	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0xffec	32	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1000c	20	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__ledf2	.symtab	0x172f8	140	FUNC	<unknown>	DEFAULT	2
__length_dotted	.symtab	0x1558c	76	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x13b38	20	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1673c	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x265fc	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xf1b0	44	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x172f8	140	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x22060	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x265dc	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x286cc	24	OBJECT	<unknown>	DEFAULT	10
__modsi3	.symtab	0x168e0	228	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x16dc4	808	FUNC	<unknown>	DEFAULT	2
__muldi3	.symtab	0xedf4	80	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x286f4	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x28700	4	OBJECT	<unknown>	HIDDEN	10
__nedf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x13c28	52	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x12214	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x26604	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x13c5c	808	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x22254	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x2660c	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x286e4	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x28704	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0xfccc	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xfcf0	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xfca8	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x22278	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x15704	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1409c	188	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x16640	204	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x15760	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x12ac8	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3929	.symtab	0x18b78	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x15898	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1670c	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x158c4	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x15980	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x12b90	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2227c	4	OBJECT	<unknown>	DEFAULT	9
__subdf3	.symtab	0x169cc	740	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x10fd4	44	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x10c9c	588	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2224c	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xec14	248	FUNC	<unknown>	DEFAULT	2
__umodsi3	.symtab	0xed24	204	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x14158	76	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x12548	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x28708	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2870c	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x26614	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xef08	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x174a8	4	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x26644	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x141a4	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x15b28	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x26618	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	4	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x15a84	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x11310	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x1481c	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x14ad4	1220	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x148b4	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x148ec	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x14a88	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2864c	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x12760	760	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x12a58	112	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x22280	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x22284	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x12c54	320	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x26640	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x2229c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x2663c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x222b8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x12ad8	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x222b4	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x10774	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x15af4	52	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x18f94	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x111c0	336	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x14228	1524	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x10114	328	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0xef30	44	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0xc8e8	356	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0xc278	1648	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0xbc64	1556	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0xf240	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x265f4	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2789	.symtab	0x26610	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x1256c	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
buf.2613	.symtab	0x263ec	16	OBJECT	<unknown>	DEFAULT	10
buf.4901	.symtab	0x263fc	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x22048	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x174a0	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xef5c	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x22024	4	OBJECT	<unknown>	DEFAULT	9
completed.2555	.symtab	0x223b4	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x956c	640	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x9984	344	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x22044	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x22020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x26600	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x26614	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1090c	148	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x19b04	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x125d4	384	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x12bc0	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x19af0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x12754	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x22014	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x223b0	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0xfe68	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x16504	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x16504	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x16510	304	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0xa1cc	1648	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xca4c	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91ac	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	740	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0xca68	204	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x11000	44	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1102c	44	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x11058	44	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xfaac	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xfad8	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x11084	44	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x223d4	4	OBJECT	<unknown>	DEFAULT	10
h.4900	.symtab	0x265c8	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x26618	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0xf5e0	36	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xf604	20	FUNC	<unknown>	DEFAULT	2
i.4126	.symtab	0x2204c	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x13578	356	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x13368	528	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1329c	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xe274	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x22064	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x10368	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10698	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xf00c	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x13210	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xf1dc	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xf05c	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x97ec	408	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1673c	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x223e0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xe400	2068	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x223d0	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x9bec	276	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x9210	136	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xaaf4	312	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0xfd14	340	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1631c	252	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xf250	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x117a0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x16418	236	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xf260	156	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x22168	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x22180	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x2661c	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1066	.symtab	0x263e8	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0xf5a8	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xf5cc	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x223d8	8	OBJECT	<unknown>	DEFAULT	10
object.2636	.symtab	0x223b8	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x28644	4	OBJECT	<unknown>	DEFAULT	10
p.2553	.symtab	0x2201c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x28648	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4141	.symtab	0x18eec	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8cf4	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x891c	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b0c	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8988	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xcb34	5952	FUNC	<unknown>	DEFAULT	2
qual_chars.4147	.symtab	0x18f00	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x12530	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x1025c	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x10260	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x18af4	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1053c	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x221b4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9298	724	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0xb758	1292	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x110dc	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0xf150	44	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x102dc	140	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x109a0	420	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0xfbc4	44	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0xa9a8	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x90e4	200	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4146	.symtab	0x18f14	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4140	.symtab	0x18ef8	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4143	.symtab	0x18f40	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4142	.symtab	0x18f58	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4145	.symtab	0x18f24	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4144	.symtab	0x18f34	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x22250	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x26634	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x22274	4	OBJECT	<unknown>	DEFAULT	9
stdhexflood	.symtab	0xb47c	356	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x2226c	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x22270	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0xf488	28	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x131e0	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0xf320	96	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x130c8	200	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x117b0	184	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x151c0	224	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x13190	80	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0xf4a4	248	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0xf59c	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x11868	116	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1076c	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x9adc	272	FUNC	<unknown>	DEFAULT	2
time	.symtab	0xf17c	44	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-13T17:12:27.172790+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35438	185.189.13.91	25565	TCP
2025-01-13T17:12:28.894567+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35440	185.189.13.91	25565	TCP
2025-01-13T17:12:30.663886+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35442	185.189.13.91	25565	TCP
2025-01-13T17:12:32.433590+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35444	185.189.13.91	25565	TCP
2025-01-13T17:12:34.198053+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35446	185.189.13.91	25565	TCP
2025-01-13T17:12:35.959910+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35448	185.189.13.91	25565	TCP
2025-01-13T17:12:37.728960+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35450	185.189.13.91	25565	TCP
2025-01-13T17:12:39.491733+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35452	185.189.13.91	25565	TCP
2025-01-13T17:12:41.258995+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35454	185.189.13.91	25565	TCP
2025-01-13T17:12:43.007598+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35456	185.189.13.91	25565	TCP
2025-01-13T17:12:44.774622+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35458	185.189.13.91	25565	TCP
2025-01-13T17:12:46.503592+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35460	185.189.13.91	25565	TCP
2025-01-13T17:12:48.259858+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35462	185.189.13.91	25565	TCP
2025-01-13T17:12:50.021243+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35464	185.189.13.91	25565	TCP
2025-01-13T17:12:54.181182+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35466	185.189.13.91	25565	TCP
2025-01-13T17:12:55.989891+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35468	185.189.13.91	25565	TCP
2025-01-13T17:12:57.805285+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35470	185.189.13.91	25565	TCP
2025-01-13T17:12:59.576189+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35472	185.189.13.91	25565	TCP
2025-01-13T17:13:01.368159+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35474	185.189.13.91	25565	TCP
2025-01-13T17:13:03.117116+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35476	185.189.13.91	25565	TCP
2025-01-13T17:13:04.866731+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35478	185.189.13.91	25565	TCP
2025-01-13T17:13:06.649999+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35480	185.189.13.91	25565	TCP
2025-01-13T17:13:08.380451+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35482	185.189.13.91	25565	TCP
2025-01-13T17:13:10.131778+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35484	185.189.13.91	25565	TCP
2025-01-13T17:13:11.899334+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35486	185.189.13.91	25565	TCP
2025-01-13T17:13:13.982972+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35488	185.189.13.91	25565	TCP
2025-01-13T17:13:15.828065+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35490	185.189.13.91	25565	TCP
2025-01-13T17:13:17.739573+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35492	185.189.13.91	25565	TCP
2025-01-13T17:13:19.499817+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35494	185.189.13.91	25565	TCP
2025-01-13T17:13:21.272167+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35496	185.189.13.91	25565	TCP
2025-01-13T17:13:23.023835+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35498	185.189.13.91	25565	TCP
2025-01-13T17:13:24.775880+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35500	185.189.13.91	25565	TCP
2025-01-13T17:13:26.586226+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35502	185.189.13.91	25565	TCP
2025-01-13T17:13:28.336511+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35504	185.189.13.91	25565	TCP
2025-01-13T17:13:30.086941+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35506	185.189.13.91	25565	TCP
2025-01-13T17:13:31.819185+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35508	185.189.13.91	25565	TCP
2025-01-13T17:13:33.550765+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35510	185.189.13.91	25565	TCP
2025-01-13T17:13:35.342809+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35512	185.189.13.91	25565	TCP
2025-01-13T17:13:37.083479+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35514	185.189.13.91	25565	TCP
2025-01-13T17:13:38.815846+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35516	185.189.13.91	25565	TCP
2025-01-13T17:13:42.966319+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35518	185.189.13.91	25565	TCP
2025-01-13T17:13:44.716033+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35520	185.189.13.91	25565	TCP
2025-01-13T17:13:46.477801+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35522	185.189.13.91	25565	TCP
2025-01-13T17:13:48.209901+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35524	185.189.13.91	25565	TCP
2025-01-13T17:13:49.975459+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35526	185.189.13.91	25565	TCP
2025-01-13T17:13:51.744332+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35528	185.189.13.91	25565	TCP
2025-01-13T17:13:53.612489+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35530	185.189.13.91	25565	TCP
2025-01-13T17:13:55.802241+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35532	185.189.13.91	25565	TCP
2025-01-13T17:13:57.571100+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35534	185.189.13.91	25565	TCP
2025-01-13T17:13:59.373542+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35536	185.189.13.91	25565	TCP
2025-01-13T17:14:01.183104+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35538	185.189.13.91	25565	TCP
2025-01-13T17:14:02.944813+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35540	185.189.13.91	25565	TCP
2025-01-13T17:14:04.731703+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35542	185.189.13.91	25565	TCP
2025-01-13T17:14:06.457314+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35544	185.189.13.91	25565	TCP
2025-01-13T17:14:08.197395+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35546	185.189.13.91	25565	TCP
2025-01-13T17:14:09.966838+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35548	185.189.13.91	25565	TCP
2025-01-13T17:14:11.875828+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35550	185.189.13.91	25565	TCP
2025-01-13T17:14:13.612318+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35552	185.189.13.91	25565	TCP
2025-01-13T17:14:15.381605+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35554	185.189.13.91	25565	TCP
2025-01-13T17:14:17.150446+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35556	185.189.13.91	25565	TCP
2025-01-13T17:14:18.900686+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35558	185.189.13.91	25565	TCP
2025-01-13T17:14:20.665256+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35560	185.189.13.91	25565	TCP
2025-01-13T17:14:22.557177+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35562	185.189.13.91	25565	TCP
2025-01-13T17:14:24.287003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35564	185.189.13.91	25565	TCP
2025-01-13T17:14:26.244051+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35566	185.189.13.91	25565	TCP
2025-01-13T17:14:28.030007+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35568	185.189.13.91	25565	TCP
2025-01-13T17:14:29.869641+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35570	185.189.13.91	25565	TCP
2025-01-13T17:14:31.620647+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35572	185.189.13.91	25565	TCP
2025-01-13T17:14:33.378743+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35574	185.189.13.91	25565	TCP
2025-01-13T17:14:35.114882+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35576	185.189.13.91	25565	TCP
2025-01-13T17:14:36.904839+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35578	185.189.13.91	25565	TCP
2025-01-13T17:14:38.653264+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35580	185.189.13.91	25565	TCP
2025-01-13T17:14:40.400147+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35582	185.189.13.91	25565	TCP
2025-01-13T17:14:42.184641+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35584	185.189.13.91	25565	TCP
2025-01-13T17:14:43.970662+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35586	185.189.13.91	25565	TCP
2025-01-13T17:14:45.780982+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35588	185.189.13.91	25565	TCP
2025-01-13T17:14:47.547800+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35590	185.189.13.91	25565	TCP
2025-01-13T17:14:49.392523+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35592	185.189.13.91	25565	TCP
2025-01-13T17:14:51.138161+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35594	185.189.13.91	25565	TCP
2025-01-13T17:14:52.969443+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35596	185.189.13.91	25565	TCP
2025-01-13T17:14:54.722919+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35598	185.189.13.91	25565	TCP
2025-01-13T17:14:56.477269+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35600	185.189.13.91	25565	TCP
2025-01-13T17:14:58.273579+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35602	185.189.13.91	25565	TCP
2025-01-13T17:15:00.056486+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35604	185.189.13.91	25565	TCP
2025-01-13T17:15:01.807724+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35606	185.189.13.91	25565	TCP
2025-01-13T17:15:03.625719+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35608	185.189.13.91	25565	TCP
2025-01-13T17:15:05.420867+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35610	185.189.13.91	25565	TCP
2025-01-13T17:15:07.165271+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35612	185.189.13.91	25565	TCP
2025-01-13T17:15:08.939468+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35614	185.189.13.91	25565	TCP
2025-01-13T17:15:10.660841+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35616	185.189.13.91	25565	TCP
2025-01-13T17:15:12.433849+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35618	185.189.13.91	25565	TCP
2025-01-13T17:15:14.196058+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35620	185.189.13.91	25565	TCP
2025-01-13T17:15:15.943636+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35622	185.189.13.91	25565	TCP
2025-01-13T17:15:17.709274+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35624	185.189.13.91	25565	TCP
2025-01-13T17:15:19.451528+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35626	185.189.13.91	25565	TCP
2025-01-13T17:15:21.213634+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35628	185.189.13.91	25565	TCP
2025-01-13T17:15:22.946300+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35630	185.189.13.91	25565	TCP
2025-01-13T17:15:24.703028+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35632	185.189.13.91	25565	TCP
2025-01-13T17:15:26.435710+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35634	185.189.13.91	25565	TCP
2025-01-13T17:15:28.184164+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35636	185.189.13.91	25565	TCP
2025-01-13T17:15:29.913444+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35638	185.189.13.91	25565	TCP
2025-01-13T17:15:31.665501+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35640	185.189.13.91	25565	TCP
2025-01-13T17:15:33.411507+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35642	185.189.13.91	25565	TCP
2025-01-13T17:15:35.151510+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35644	185.189.13.91	25565	TCP
2025-01-13T17:15:36.901607+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35646	185.189.13.91	25565	TCP
2025-01-13T17:15:38.632846+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35648	185.189.13.91	25565	TCP
2025-01-13T17:15:40.536524+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35650	185.189.13.91	25565	TCP
2025-01-13T17:15:42.300922+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35652	185.189.13.91	25565	TCP
2025-01-13T17:15:44.044704+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35654	185.189.13.91	25565	TCP
2025-01-13T17:15:46.018928+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35656	185.189.13.91	25565	TCP
2025-01-13T17:15:47.742346+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35658	185.189.13.91	25565	TCP
2025-01-13T17:15:49.479910+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35660	185.189.13.91	25565	TCP
2025-01-13T17:15:51.270613+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35662	185.189.13.91	25565	TCP
2025-01-13T17:15:53.025916+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35664	185.189.13.91	25565	TCP
2025-01-13T17:15:54.785637+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35666	185.189.13.91	25565	TCP
2025-01-13T17:15:56.527667+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35668	185.189.13.91	25565	TCP
2025-01-13T17:15:58.311881+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35670	185.189.13.91	25565	TCP
2025-01-13T17:16:00.052258+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35672	185.189.13.91	25565	TCP
2025-01-13T17:16:01.793351+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	35674	185.189.13.91	25565	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 17:12:27.166455030 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:27.171366930 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:27.171447992 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:27.172790051 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:27.177582979 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:28.795706034 CET	42836	443	192.168.2.23	91.189.91.43
Jan 13, 2025 17:12:28.885997057 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:28.887046099 CET	35438	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:28.889559031 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:28.891828060 CET	25565	35438	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:28.894356966 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:28.894439936 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:28.894567013 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:28.899358988 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:29.819498062 CET	42516	80	192.168.2.23	109.202.202.202
Jan 13, 2025 17:12:30.653852940 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:30.654105902 CET	35440	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:30.658864975 CET	25565	35440	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:30.659015894 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:30.663774967 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:30.663830042 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:30.663886070 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:30.668613911 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:32.423732042 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:32.424031973 CET	35442	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:32.427170038 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:32.430608988 CET	25565	35442	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:32.433393002 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:32.433454990 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:32.433589935 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:32.440016031 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:34.192128897 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:34.192377090 CET	35444	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:34.192991018 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:34.197269917 CET	25565	35444	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:34.197891951 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:34.197951078 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:34.198052883 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:34.202809095 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:35.954139948 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:35.954408884 CET	35446	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:35.954981089 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:35.959376097 CET	25565	35446	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:35.959764004 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:35.959813118 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:35.959909916 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:35.964670897 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:37.722803116 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:37.723102093 CET	35448	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:37.723814964 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:37.728108883 CET	25565	35448	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:37.728755951 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:37.728825092 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:37.728960037 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:37.733824968 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:39.485578060 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:39.485893965 CET	35450	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:39.486809969 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:39.490720987 CET	25565	35450	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:39.491614103 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:39.491693974 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:39.491733074 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:39.496463060 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:41.252975941 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:41.253253937 CET	35452	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:41.253983974 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:41.258141041 CET	25565	35452	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:41.258867025 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:41.258951902 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:41.258995056 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:41.263895035 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:43.001327038 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:43.001754999 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:43.001808882 CET	35454	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:43.002670050 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:43.007337093 CET	25565	35454	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:43.007438898 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:43.007491112 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:43.007597923 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:43.012361050 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:44.153562069 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 17:12:44.768433094 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:44.768659115 CET	35456	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:44.769711971 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:44.773566961 CET	25565	35456	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:44.774504900 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:44.774559021 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:44.774621964 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:44.779393911 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:46.497473955 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:46.497833967 CET	35458	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:46.498631001 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:46.502650023 CET	25565	35458	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:46.503433943 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:46.503542900 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:46.503592014 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:46.508359909 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:48.251867056 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:48.252211094 CET	35460	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:48.253017902 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:48.259556055 CET	25565	35460	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:48.259673119 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:48.259735107 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:48.259857893 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:48.266259909 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:50.015079021 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:50.015358925 CET	35462	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:50.016311884 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:50.020865917 CET	25565	35462	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:50.021137953 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:50.021205902 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:50.021243095 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:50.026009083 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:54.175046921 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:54.175425053 CET	35464	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:54.176198959 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:54.180310965 CET	25565	35464	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:54.181041956 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:54.181145906 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:54.181181908 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:54.186024904 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:54.392165899 CET	42836	443	192.168.2.23	91.189.91.43
Jan 13, 2025 17:12:55.982476950 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:55.982887030 CET	35466	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:55.984947920 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:55.987751961 CET	25565	35466	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:55.989768028 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:55.989856005 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:55.989891052 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:55.994699001 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:57.798639059 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:57.799034119 CET	35468	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:57.800193071 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:57.804004908 CET	25565	35468	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:57.805111885 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:57.805181980 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:57.805284977 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:57.810185909 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:59.569902897 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:59.570168972 CET	35470	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:59.571126938 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:59.575087070 CET	25565	35470	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:59.576045990 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:12:59.576143026 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:59.576189041 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:12:59.580970049 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:00.535303116 CET	42516	80	192.168.2.23	109.202.202.202
Jan 13, 2025 17:13:01.362025023 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:01.362344027 CET	35472	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:01.363151073 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:01.367300034 CET	25565	35472	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:01.368019104 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:01.368084908 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:01.368159056 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:01.373013020 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:03.111238956 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:03.111469984 CET	35474	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:03.112225056 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:03.116354942 CET	25565	35474	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:03.117018938 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:03.117067099 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:03.117115974 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:03.121891022 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:04.860567093 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:04.860742092 CET	35476	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:04.861762047 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:04.865642071 CET	25565	35476	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:04.866624117 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:04.866691113 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:04.866730928 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:04.871571064 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:06.643831968 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:06.643985033 CET	35478	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:06.645076990 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:06.648776054 CET	25565	35478	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:06.649884939 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:06.649934053 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:06.649998903 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:06.654715061 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:08.374542952 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:08.374793053 CET	35480	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:08.375478983 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:08.379563093 CET	25565	35480	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:08.380276918 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:08.380354881 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:08.380450964 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:08.385219097 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:10.125967979 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:10.126274109 CET	35482	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:10.126770020 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:10.131206989 CET	25565	35482	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:10.131633997 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:10.131694078 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:10.131778002 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:10.136713982 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:11.893481016 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:11.893645048 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:11.893685102 CET	35484	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:11.894279957 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:11.898595095 CET	25565	35484	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:11.899126053 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:11.899219990 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:11.899333954 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:11.904128075 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:13.977019072 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:13.977206945 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:13.977392912 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:13.977449894 CET	35486	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:13.977972031 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:13.982043982 CET	25565	35486	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:13.982825041 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:13.982925892 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:13.982971907 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:13.987782955 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:15.821943998 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:15.822190046 CET	35488	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:15.823113918 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:15.827090979 CET	25565	35488	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:15.827905893 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:15.827989101 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:15.828064919 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:15.832853079 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:17.733189106 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:17.733520985 CET	35490	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:17.734572887 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:17.738348007 CET	25565	35490	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:17.739399910 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:17.739475965 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:17.739573002 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:17.744327068 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:19.490201950 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:19.490401030 CET	35492	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:19.492352962 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:19.495187044 CET	25565	35492	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:19.499658108 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:19.499730110 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:19.499816895 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:19.505522013 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:21.266047955 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:21.266393900 CET	35494	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:21.267178059 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:21.271354914 CET	25565	35494	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:21.271991014 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:21.272070885 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:21.272166967 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:21.277043104 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:23.017342091 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:23.017740011 CET	35496	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:23.018798113 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:23.022658110 CET	25565	35496	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:23.023637056 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:23.023731947 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:23.023834944 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:23.028691053 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:24.769341946 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:24.769654036 CET	35498	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:24.770869970 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:24.774493933 CET	25565	35498	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:24.775748014 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:24.775832891 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:24.775880098 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:24.781153917 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:25.111116886 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 17:13:26.580313921 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:26.580504894 CET	35500	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:26.581273079 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:26.585263968 CET	25565	35500	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:26.586050987 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:26.586111069 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:26.586225986 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:26.590961933 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:28.330241919 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:28.330434084 CET	35502	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:28.331506968 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:28.335223913 CET	25565	35502	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:28.336375952 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:28.336447001 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:28.336510897 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:28.341255903 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:30.081026077 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:30.081192970 CET	35504	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:30.082014084 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:30.085931063 CET	25565	35504	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:30.086852074 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:30.086900949 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:30.086941004 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:30.091715097 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:31.812645912 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:31.812819004 CET	35506	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:31.814199924 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:31.817610979 CET	25565	35506	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:31.819056034 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:31.819185019 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:31.819185019 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:31.823951960 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:33.545010090 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:33.545228958 CET	35508	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:33.545814037 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:33.550045013 CET	25565	35508	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:33.550633907 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:33.550745964 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:33.550765038 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:33.555613041 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:35.336770058 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:35.336970091 CET	35510	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:35.337807894 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:35.342108011 CET	25565	35510	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:35.342695951 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:35.342762947 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:35.342808962 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:35.347611904 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:37.076870918 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:37.077366114 CET	35512	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:37.078516960 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:37.082298994 CET	25565	35512	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:37.083345890 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:37.083425045 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:37.083478928 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:37.088340044 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:38.809968948 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:38.810206890 CET	35514	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:38.810929060 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:38.814970016 CET	25565	35514	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:38.815707922 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:38.815798044 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:38.815845966 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:38.820616961 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:42.959321976 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:42.959573030 CET	35516	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:42.960925102 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:42.964576960 CET	25565	35516	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:42.966130018 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:42.966219902 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:42.966319084 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:42.971132040 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:44.709860086 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:44.710306883 CET	35518	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:44.711107016 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:44.715085030 CET	25565	35518	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:44.715873957 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:44.716032982 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:44.716032982 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:44.720851898 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:45.585108042 CET	42836	443	192.168.2.23	91.189.91.43
Jan 13, 2025 17:13:46.470909119 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:46.471167088 CET	35520	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:46.471955061 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:46.476807117 CET	25565	35520	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:46.477612972 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:46.477678061 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:46.477801085 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:46.483525991 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:48.204152107 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:48.204332113 CET	35522	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:48.204926014 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:48.209125042 CET	25565	35522	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:48.209779024 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:48.209856033 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:48.209901094 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:48.214833975 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:49.969842911 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:49.970022917 CET	35524	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:49.970490932 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:49.974877119 CET	25565	35524	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:49.975358009 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:49.975414038 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:49.975459099 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:49.980217934 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:51.738271952 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:51.738636971 CET	35526	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:51.739404917 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:51.743510008 CET	25565	35526	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:51.744164944 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:51.744235992 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:51.744332075 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:51.749047995 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:53.604892015 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:53.605115891 CET	35528	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:53.607496023 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:53.609950066 CET	25565	35528	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:53.612297058 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:53.612360001 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:53.612488985 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:53.617234945 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:55.796103954 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:55.796339035 CET	35530	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:55.797208071 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:55.801111937 CET	25565	35530	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:55.802036047 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:55.802117109 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:55.802241087 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:55.806973934 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:57.564999104 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:57.565274954 CET	35532	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:57.566153049 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:57.570821047 CET	25565	35532	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:57.570945978 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:57.571099997 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:57.571099997 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:57.575998068 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:59.367636919 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:59.367813110 CET	35534	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:59.368626118 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:59.372594118 CET	25565	35534	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:59.373354912 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:13:59.373478889 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:59.373542070 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:13:59.378277063 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:01.176810980 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:01.177027941 CET	35536	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:01.178137064 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:01.181858063 CET	25565	35536	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:01.182914019 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:01.183013916 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:01.183104038 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:01.187856913 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:02.938657045 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:02.939062119 CET	35538	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:02.939764023 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:02.943963051 CET	25565	35538	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:02.944633007 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:02.944726944 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:02.944813013 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:02.949604988 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:04.725697994 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:04.726072073 CET	35540	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:04.726758003 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:04.730875969 CET	25565	35540	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:04.731508017 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:04.731602907 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:04.731703043 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:04.736433983 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:06.450992107 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:06.451558113 CET	35542	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:06.452337027 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:06.456307888 CET	25565	35542	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:06.457118988 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:06.457207918 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:06.457314014 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:06.462064028 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:08.190552950 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:08.190974951 CET	35544	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:08.192389011 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:08.195990086 CET	25565	35544	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:08.197199106 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:08.197303057 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:08.197395086 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:08.202194929 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:09.960161924 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:09.960722923 CET	35546	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:09.961886883 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:09.965538979 CET	25565	35546	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:09.966651917 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:09.966749907 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:09.966837883 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:09.971592903 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:11.718256950 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:11.718522072 CET	35548	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:11.719329119 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:11.875329018 CET	25565	35548	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:11.875406981 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:11.875485897 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:11.875828028 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:11.880613089 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:13.606441021 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:13.606781006 CET	35550	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:13.607289076 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:13.611603022 CET	25565	35550	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:13.612135887 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:13.612236977 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:13.612318039 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:13.617063046 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:15.374387026 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:15.374821901 CET	35552	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:15.376095057 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:15.379590034 CET	25565	35552	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:15.381423950 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:15.381494045 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:15.381604910 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:15.386351109 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:17.143362999 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:17.143614054 CET	35554	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:17.144412041 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:17.148443937 CET	25565	35554	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:17.150238991 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:17.150326967 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:17.150445938 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:17.155363083 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:18.893199921 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:18.893589020 CET	35556	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:18.894479990 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:18.899642944 CET	25565	35556	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:18.900516033 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:18.900579929 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:18.900686026 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:18.905420065 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:20.659112930 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:20.659409046 CET	35558	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:20.660168886 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:20.664166927 CET	25565	35558	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:20.665081978 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:20.665155888 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:20.665256023 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:20.670032024 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:22.551316977 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:22.551611900 CET	35560	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:22.552242041 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:22.556432009 CET	25565	35560	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:22.556989908 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:22.557055950 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:22.557177067 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:22.561906099 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:24.281076908 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:24.281543970 CET	35562	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:24.282083988 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:24.286369085 CET	25565	35562	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:24.286849022 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:24.286917925 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:24.287003040 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:24.291743040 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:26.237900019 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:26.238213062 CET	35564	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:26.239093065 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:26.243036985 CET	25565	35564	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:26.243869066 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:26.243940115 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:26.244050980 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:26.248776913 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:28.023932934 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:28.024198055 CET	35566	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:28.024925947 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:28.028975010 CET	25565	35566	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:28.029696941 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:28.029906988 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:28.030006886 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:28.034744978 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:29.862795115 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:29.863255978 CET	35568	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:29.864660025 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:29.868015051 CET	25565	35568	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:29.869456053 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:29.869553089 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:29.869641066 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:29.874366045 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:31.614610910 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:31.614824057 CET	35570	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:31.615663052 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:31.619616985 CET	25565	35570	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:31.620528936 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:31.620605946 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:31.620646954 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:31.625395060 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:33.372847080 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:33.373090029 CET	35572	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:33.373783112 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:33.377924919 CET	25565	35572	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:33.378617048 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:33.378710032 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:33.378742933 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:33.383552074 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:35.108459949 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:35.108876944 CET	35574	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:35.109901905 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:35.113755941 CET	25565	35574	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:35.114738941 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:35.114834070 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:35.114881992 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:35.119657040 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:36.897244930 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:36.897746086 CET	35576	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:36.899727106 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:36.902600050 CET	25565	35576	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:36.904515028 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:36.904614925 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:36.904839039 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:36.909744024 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:38.646485090 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:38.646845102 CET	35578	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:38.648108959 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:38.651657104 CET	25565	35578	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:38.653069973 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:38.653263092 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:38.653264046 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:38.658196926 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:40.393929958 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:40.394179106 CET	35580	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:40.395214081 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:40.398966074 CET	25565	35580	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:40.400007963 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:40.400070906 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:40.400146961 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:40.404903889 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:42.179114103 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:42.179310083 CET	35582	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:42.179737091 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:42.184123993 CET	25565	35582	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:42.184540033 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:42.184592962 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:42.184640884 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:42.189481020 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:43.962466955 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:43.962961912 CET	35584	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:43.965641975 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:43.968256950 CET	25565	35584	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:43.970547915 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:43.970603943 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:43.970662117 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:43.975555897 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:45.774746895 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:45.774995089 CET	35586	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:45.775970936 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:45.779825926 CET	25565	35586	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:45.780788898 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:45.780879021 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:45.780982018 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:45.785722971 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:47.541315079 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:47.541678905 CET	35588	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:47.542798996 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:47.546552896 CET	25565	35588	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:47.547616959 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:47.547693968 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:47.547800064 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:47.552581072 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:49.382481098 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:49.382821083 CET	35590	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:49.383593082 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:49.387664080 CET	25565	35590	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:49.392009974 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:49.392090082 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:49.392523050 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:49.397315979 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:51.132499933 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:51.132705927 CET	35592	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:51.133232117 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:51.137475967 CET	25565	35592	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:51.138061047 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:51.138113022 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:51.138160944 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:51.142919064 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:52.963929892 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:52.964034081 CET	35594	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:52.964422941 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:52.968847036 CET	25565	35594	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:52.969305992 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:52.969386101 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:52.969443083 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:52.974200964 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:54.707402945 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:54.707679987 CET	35596	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:54.712507010 CET	25565	35596	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:54.715552092 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:54.720376015 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:54.720454931 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:54.722918987 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:54.727675915 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:56.471498966 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:56.471707106 CET	35598	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:56.472279072 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:56.476605892 CET	25565	35598	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:56.477083921 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:56.477165937 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:56.477268934 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:56.482084990 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:58.267663002 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:58.268026114 CET	35600	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:58.268604040 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:58.272919893 CET	25565	35600	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:58.273458958 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:14:58.273534060 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:58.273578882 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:14:58.278498888 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:00.050363064 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:00.050662994 CET	35602	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:00.051477909 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:00.055471897 CET	25565	35602	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:00.056372881 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:00.056444883 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:00.056485891 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:00.061317921 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:01.801861048 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:01.802076101 CET	35604	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:01.802681923 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:01.807039976 CET	25565	35604	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:01.807581902 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:01.807687044 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:01.807723999 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:01.812567949 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:03.619395018 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:03.619728088 CET	35606	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:03.620635033 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:03.625576973 CET	25565	35606	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:03.625613928 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:03.625680923 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:03.625719070 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:03.631350040 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:05.414056063 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:05.414475918 CET	35608	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:05.415762901 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:05.419426918 CET	25565	35608	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:05.420661926 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:05.420758963 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:05.420866966 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:05.425708055 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:07.159593105 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:07.159888983 CET	35610	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:07.160340071 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:07.164769888 CET	25565	35610	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:07.165157080 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:07.165215969 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:07.165271044 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:07.170043945 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:08.923742056 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:08.923998117 CET	35612	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:08.928792000 CET	25565	35612	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:08.928901911 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:08.933759928 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:08.933859110 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:08.939467907 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:08.944375992 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:10.654728889 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:10.655323029 CET	35614	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:10.655925989 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:10.660303116 CET	25565	35614	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:10.660727978 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:10.660780907 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:10.660840988 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:10.665579081 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:12.427838087 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:12.428169966 CET	35616	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:12.428770065 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:12.433105946 CET	25565	35616	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:12.433713913 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:12.433785915 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:12.433849096 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:12.438648939 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:14.189843893 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:14.190285921 CET	35618	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:14.191095114 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:14.195193052 CET	25565	35618	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:14.195949078 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:14.195998907 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:14.196058035 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:14.200871944 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:15.937895060 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:15.938095093 CET	35620	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:15.938754082 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:15.942941904 CET	25565	35620	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:15.943538904 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:15.943586111 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:15.943635941 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:15.948375940 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:17.703134060 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:17.703496933 CET	35622	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:17.704278946 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:17.708344936 CET	25565	35622	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:17.709151030 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:17.709217072 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:17.709274054 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:17.714138985 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:19.445113897 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:19.445310116 CET	35624	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:19.446386099 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:19.450265884 CET	25565	35624	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:19.451270103 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:19.451446056 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:19.451528072 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:19.456363916 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:21.207257986 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:21.207634926 CET	35626	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:21.208611012 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:21.212575912 CET	25565	35626	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:21.213515043 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:21.213587046 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:21.213634014 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:21.218554974 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:22.939872980 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:22.940135002 CET	35628	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:22.941195011 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:22.945127010 CET	25565	35628	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:22.946089029 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:22.946166992 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:22.946300030 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:22.951132059 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:24.696672916 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:24.696976900 CET	35630	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:24.697614908 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:24.701921940 CET	25565	35630	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:24.702490091 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:24.702938080 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:24.703027964 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:24.707865000 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:26.421814919 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:26.422420979 CET	35632	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:26.425789118 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:26.427231073 CET	25565	35632	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:26.430672884 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:26.430747032 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:26.435709953 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:26.440543890 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:28.177973032 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:28.178225040 CET	35634	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:28.179006100 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:28.183145046 CET	25565	35634	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:28.183995962 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:28.184108973 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:28.184164047 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:28.189042091 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:29.906898975 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:29.907315016 CET	35636	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:29.908348083 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:29.912483931 CET	25565	35636	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:29.913252115 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:29.913362026 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:29.913444042 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:29.918297052 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:31.658771038 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:31.659295082 CET	35638	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:31.660398006 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:31.664354086 CET	25565	35638	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:31.665282011 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:31.665432930 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:31.665501118 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:31.670309067 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:33.405405998 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:33.405677080 CET	35640	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:33.406475067 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:33.410613060 CET	25565	35640	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:33.411381960 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:33.411453009 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:33.411506891 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:33.416428089 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:35.143069983 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:35.143347979 CET	35642	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:35.144490957 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:35.150130033 CET	25565	35642	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:35.151236057 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:35.151320934 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:35.151510000 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:35.158183098 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:36.895178080 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:36.895730972 CET	35644	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:36.896518946 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:36.900597095 CET	25565	35644	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:36.901336908 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:36.901396990 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:36.901607037 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:36.906430960 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:38.624766111 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:38.625222921 CET	35646	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:38.625899076 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:38.632482052 CET	25565	35646	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:38.632679939 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:38.632738113 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:38.632846117 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:38.638710022 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:40.519298077 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:40.523308992 CET	35648	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:40.528139114 CET	25565	35648	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:40.531291008 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:40.536055088 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:40.536106110 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:40.536524057 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:40.541229963 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:42.291853905 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:42.294092894 CET	35650	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:42.295887947 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:42.298913956 CET	25565	35650	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:42.300736904 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:42.300812960 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:42.300921917 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:42.305694103 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:44.037951946 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:44.038578033 CET	35652	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:44.039673090 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:44.043420076 CET	25565	35652	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:44.044509888 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:44.044590950 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:44.044703960 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:44.049535990 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:45.805135012 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:45.805713892 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:45.806256056 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:46.016330957 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:46.017251015 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:46.017347097 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:46.018647909 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:46.018666983 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:46.018734932 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:46.018928051 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:46.021157026 CET	25565	35654	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:46.021240950 CET	35654	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:46.023726940 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:47.735428095 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:47.735902071 CET	35656	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:47.737253904 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:47.740789890 CET	25565	35656	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:47.742146969 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:47.742214918 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:47.742346048 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:47.747121096 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:49.472043037 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:49.472242117 CET	35658	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:49.474828959 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:49.477005005 CET	25565	35658	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:49.479649067 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:49.479724884 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:49.479909897 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:49.484707117 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:51.263240099 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:51.263521910 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:51.263571024 CET	35660	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:51.265659094 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:51.268379927 CET	25565	35660	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:51.270468950 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:51.270560026 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:51.270612955 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:51.275434971 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:53.020487070 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:53.020687103 CET	35662	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:53.021043062 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:53.025444984 CET	25565	35662	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:53.025830030 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:53.025877953 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:53.025916100 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:53.030706882 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:54.779732943 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:54.779963970 CET	35664	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:54.780509949 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:54.784828901 CET	25565	35664	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:54.785310030 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:54.785604000 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:54.785636902 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:54.790430069 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:56.519915104 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:56.520227909 CET	35666	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:56.521374941 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:56.526412010 CET	25565	35666	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:56.527518988 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:56.527574062 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:56.527667046 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:56.533798933 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:58.305826902 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:58.306113005 CET	35668	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:58.306917906 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:58.310890913 CET	25565	35668	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:58.311686993 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:15:58.311784029 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:58.311881065 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:15:58.316693068 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:00.046624899 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:00.046847105 CET	35670	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:00.047328949 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:00.051635981 CET	25565	35670	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:00.052125931 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:00.052258015 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:00.052258015 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:00.057316065 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:01.787678003 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:01.787952900 CET	35672	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:01.788459063 CET	35674	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:01.792881966 CET	25565	35672	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:01.793241978 CET	25565	35674	185.189.13.91	192.168.2.23
Jan 13, 2025 17:16:01.793286085 CET	35674	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:01.793350935 CET	35674	25565	192.168.2.23	185.189.13.91
Jan 13, 2025 17:16:01.798115969 CET	25565	35674	185.189.13.91	192.168.2.23

System Behavior

Analysis Process: dash PID: 6240, Parent PID: 4331

General

Start time (UTC):	16:12:13
Start date (UTC):	13/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6240, Parent PID: 4331

General

Start time (UTC):	16:12:13
Start date (UTC):	13/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.Ih1kGE0P0n /tmp/tmp.26PKzF3T9u /tmp/tmp.DSFrravwr4
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Analysis Process: dash PID: 6241, Parent PID: 4331

General

Start time (UTC):	16:12:13
Start date (UTC):	13/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6241, Parent PID: 4331

General

Start time (UTC):	16:12:13
Start date (UTC):	13/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.Ih1kGE0P0n /tmp/tmp.26PKzF3T9u /tmp/tmp.DSFrravwr4
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Analysis Process: armv4l.elf PID: 6257, Parent PID: 6177

General

Start time (UTC):	16:12:26
Start date (UTC):	13/01/2025
Path:	/tmp/armv4l.elf
Arguments:	/tmp/armv4l.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv4l.elf PID: 6259, Parent PID: 6257

General

Start time (UTC):	16:12:26
Start date (UTC):	13/01/2025
Path:	/tmp/armv4l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: armv4l.elf PID: 6261, Parent PID: 6259

General

Start time (UTC):	16:12:26
Start date (UTC):	13/01/2025
Path:	/tmp/armv4l.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report armv4l.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: dash PID: 6240, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6240, Parent PID: 4331

General

Analysis Process: dash PID: 6241, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6241, Parent PID: 4331

General

Analysis Process: armv4l.elf PID: 6257, Parent PID: 6177

General

Chronological Activities

Analysis Process: armv4l.elf PID: 6259, Parent PID: 6257

General

Chronological Activities

Linux Analysis Report
armv4l.elf