Edit tour

Linux Analysis Report
openssh.elf

Overview

General Information

Sample name:openssh.elf
Analysis ID:1617625
MD5:a94d6cf934b35f261e2f011ef39c360e
SHA1:c85efe4c8ade4f41b83e79fb694a348a138de5a1
SHA256:c2e0a184abac97b8b9ae4589dec8f0a9e05edb608ec1098c8a1dd016aebe51f2
Tags:elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai
Score:92
Range:0 - 100

Signatures

Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected Gafgyt
Yara detected Mirai
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Sample and/or dropped files contains symbols with suspicious names
Sample contains strings that are user agent strings indicative of HTTP manipulation
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1617625
Start date and time:2025-02-18 05:37:18 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 4s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:openssh.elf
Detection:MAL
Classification:mal92.spre.troj.linELF@0/0@2/0
  • VT rate limit hit for: 84.200.154.119:4567
Command:/tmp/openssh.elf
PID:5509
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
BUILD HERAV1
buf: BUILD HERAV1 HERAV1

BUILD HERAV1
Standard Error:
  • system is lnxubuntu20
  • openssh.elf (PID: 5509, Parent: 5432, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/openssh.elf
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
openssh.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    openssh.elfJoeSecurity_Mirai_3Yara detected MiraiJoe Security
      openssh.elfLinux_Trojan_Gafgyt_fb14e81funknownunknown
      • 0x105ec:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
      SourceRuleDescriptionAuthorStrings
      5509.1.00007fe890400000.00007fe890412000.r-x.sdmpJoeSecurity_Mirai_3Yara detected MiraiJoe Security
        5509.1.00007fe890400000.00007fe890412000.r-x.sdmpLinux_Trojan_Gafgyt_fb14e81funknownunknown
        • 0x105ec:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
        5511.1.00007fe890400000.00007fe890412000.r-x.sdmpJoeSecurity_Mirai_3Yara detected MiraiJoe Security
          5511.1.00007fe890400000.00007fe890412000.r-x.sdmpLinux_Trojan_Gafgyt_fb14e81funknownunknown
          • 0x105ec:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
          TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
          2025-02-18T05:38:09.532750+010028471801A Network Trojan was detected192.168.2.144248484.200.154.1194567TCP

          Click to jump to signature section

          Show All Signature Results

          AV Detection

          barindex
          Source: openssh.elfMalware Configuration Extractor: Gafgyt {"C2 url": "84.200.154.119:4567"}
          Source: openssh.elfReversingLabs: Detection: 62%
          Source: openssh.elfVirustotal: Detection: 57%Perma Link

          Spreading

          barindex
          Source: /tmp/openssh.elf (PID: 5509)Opens: /proc/net/routeJump to behavior

          Networking

          barindex
          Source: Network trafficSuricata IDS: 2847180 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.14:42484 -> 84.200.154.119:4567
          Source: global trafficTCP traffic: 192.168.2.14:42484 -> 84.200.154.119:4567
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com
          Source: openssh.elfString found in binary or memory: http://84.200.154.119/bins.sh;

          System Summary

          barindex
          Source: openssh.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
          Source: 5509.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
          Source: 5511.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
          Source: openssh.elfELF static info symbol of initial sample: passwords
          Source: openssh.elfELF static info symbol of initial sample: usernames
          Source: openssh.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
          Source: 5509.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
          Source: 5511.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
          Source: classification engineClassification label: mal92.spre.troj.linELF@0/0@2/0
          Source: openssh.elfELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
          Source: openssh.elfELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
          Source: openssh.elfELF static info symbol of initial sample: libc/string/sh/sh4/memcpy.S
          Source: openssh.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/crt1.S
          Source: openssh.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/crti.S
          Source: openssh.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/crtn.S
          Source: openssh.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/vfork.S
          Source: /tmp/openssh.elf (PID: 5509)Queries kernel information via 'uname': Jump to behavior
          Source: openssh.elf, 5509.1.00007ffe8930f000.00007ffe89330000.rw-.sdmp, openssh.elf, 5511.1.00007ffe8930f000.00007ffe89330000.rw-.sdmpBinary or memory string: qx86_64/usr/bin/qemu-sh4/tmp/openssh.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/openssh.elf
          Source: openssh.elf, 5509.1.00007ffe8930f000.00007ffe89330000.rw-.sdmp, openssh.elf, 5511.1.00007ffe8930f000.00007ffe89330000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sh4
          Source: openssh.elf, 5509.1.0000563392b86000.0000563392be9000.rw-.sdmp, openssh.elf, 5511.1.0000563392b86000.0000563392be9000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sh4
          Source: openssh.elf, 5509.1.0000563392b86000.0000563392be9000.rw-.sdmp, openssh.elf, 5511.1.0000563392b86000.0000563392be9000.rw-.sdmpBinary or memory string: 3V5!/etc/qemu-binfmt/sh4

          Stealing of Sensitive Information

          barindex
          Source: Yara matchFile source: openssh.elf, type: SAMPLE
          Source: Yara matchFile source: openssh.elf, type: SAMPLE
          Source: Yara matchFile source: 5509.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 5511.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORY
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285
          Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2
          Source: Initial sampleUser agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
          Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01
          Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
          Source: Initial sampleUser agent string found: Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000

          Remote Access Functionality

          barindex
          Source: Yara matchFile source: openssh.elf, type: SAMPLE
          Source: Yara matchFile source: openssh.elf, type: SAMPLE
          Source: Yara matchFile source: 5509.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 5511.1.00007fe890400000.00007fe890412000.r-x.sdmp, type: MEMORY
          ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
          Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
          Masquerading
          OS Credential Dumping11
          Security Software Discovery
          Remote ServicesData from Local System1
          Data Obfuscation
          Exfiltration Over Other Network MediumAbuse Accessibility Features
          CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
          Remote System Discovery
          Remote Desktop ProtocolData from Removable Media1
          Non-Standard Port
          Exfiltration Over BluetoothNetwork Denial of Service
          Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
          Non-Application Layer Protocol
          Automated ExfiltrationData Encrypted for Impact
          Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
          Application Layer Protocol
          Traffic DuplicationData Destruction
          {
            "C2 url": "84.200.154.119:4567"
          }
          Hide Legend

          Legend:

          • Process
          • Signature
          • Created File
          • DNS/IP Info
          • Is Dropped
          • Number of created Files
          • Is malicious
          • Internet
          behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1617625 Sample: openssh.elf Startdate: 18/02/2025 Architecture: LINUX Score: 92 15 84.200.154.119, 42484, 4567 ACCELERATED-ITDE Germany 2->15 17 daisy.ubuntu.com 2->17 19 Suricata IDS alerts for network traffic 2->19 21 Found malware configuration 2->21 23 Malicious sample detected (through community Yara rule) 2->23 25 3 other signatures 2->25 8 openssh.elf 2->8         started        signatures3 process4 signatures5 27 Opens /proc/net/* files useful for finding connected devices and routers 8->27 11 openssh.elf 8->11         started        process6 process7 13 openssh.elf 11->13         started       

          This section contains all screenshots as thumbnails, including those not shown in the slideshow.


          windows-stand
          SourceDetectionScannerLabelLink
          openssh.elf62%ReversingLabsLinux.Trojan.Gafgyt
          openssh.elf57%VirustotalBrowse
          No Antivirus matches
          No Antivirus matches
          No Antivirus matches

          Download Network PCAP: filteredfull

          NameIPActiveMaliciousAntivirus DetectionReputation
          daisy.ubuntu.com
          162.213.35.24
          truefalse
            high
            NameMaliciousAntivirus DetectionReputation
            84.200.154.119:4567true
              unknown
              NameSourceMaliciousAntivirus DetectionReputation
              http://84.200.154.119/bins.sh;openssh.elffalse
                high
                • No. of IPs < 25%
                • 25% < No. of IPs < 50%
                • 50% < No. of IPs < 75%
                • 75% < No. of IPs
                IPDomainCountryFlagASNASN NameMalicious
                84.200.154.119
                unknownGermany
                31400ACCELERATED-ITDEtrue
                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                84.200.154.119ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                  na.elfGet hashmaliciousGafgyt, MiraiBrowse
                    wget.elfGet hashmaliciousGafgyt, MiraiBrowse
                      cron.elfGet hashmaliciousGafgyt, MiraiBrowse
                        sh.elfGet hashmaliciousGafgyt, MiraiBrowse
                          pftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                            tftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                              openssh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                sshd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                  bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                    daisy.ubuntu.comboatnet.arm.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.24
                                    boatnet.spc.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.24
                                    boatnet.arm6.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.25
                                    boatnet.ppc.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.25
                                    boatnet.arm.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.24
                                    na.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 162.213.35.24
                                    arm5.elfGet hashmaliciousUnknownBrowse
                                    • 162.213.35.25
                                    arm6.elfGet hashmaliciousMirai, MoobotBrowse
                                    • 162.213.35.24
                                    cron.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 162.213.35.25
                                    sh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 162.213.35.24
                                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                    ACCELERATED-ITDEntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    na.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    wget.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    cron.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    sh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    pftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    tftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    openssh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    sshd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    • 84.200.154.119
                                    No context
                                    No context
                                    No created / dropped files found
                                    File type:ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, not stripped
                                    Entropy (8bit):6.273407917185354
                                    TrID:
                                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                    File name:openssh.elf
                                    File size:145'715 bytes
                                    MD5:a94d6cf934b35f261e2f011ef39c360e
                                    SHA1:c85efe4c8ade4f41b83e79fb694a348a138de5a1
                                    SHA256:c2e0a184abac97b8b9ae4589dec8f0a9e05edb608ec1098c8a1dd016aebe51f2
                                    SHA512:f0c6d39a5b2c0c7c766365925aa43018850524447ff838ad9d341941f17d3e0b73247fda011bc372e4d83ccfa97f5dd84136d6e308fdcc3c3f68d0cf875aab7d
                                    SSDEEP:3072:0Jy07udVpShp1QMmw2IhWYVCm+UkYACLg/F7:0Jy00/cp1Q+2IhYm+UkYACLg/F7
                                    TLSH:B5E333EB1523AD36C08F6D3A0521A87C1663AC3B09664E5A7C7B3F124DA65CF7D3A4D0
                                    File Content Preview:.ELF..............*.......@.4...........4. ...(...............@...@.0...0................ ... B.. B.....4...........Q.td............................././"O.n........#.*@........#.*@.....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

                                    ELF header

                                    Class:ELF32
                                    Data:2's complement, little endian
                                    Version:1 (current)
                                    Machine:<unknown>
                                    Version Number:0x1
                                    Type:EXEC (Executable file)
                                    OS/ABI:UNIX - System V
                                    ABI Version:0
                                    Entry Point Address:0x4001a0
                                    Flags:0x9
                                    ELF Header Size:52
                                    Program Header Offset:52
                                    Program Header Size:32
                                    Number of Program Headers:3
                                    Section Header Offset:124808
                                    Section Header Size:40
                                    Number of Section Headers:16
                                    Header String Table Index:13
                                    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                    NULL0x00x00x00x00x0000
                                    .initPROGBITS0x4000940x940x300x00x6AX004
                                    .textPROGBITS0x4000e00xe00xf1c00x00x6AX0032
                                    .finiPROGBITS0x40f2a00xf2a00x240x00x6AX004
                                    .rodataPROGBITS0x40f2c40xf2c40x2b680x00x2A004
                                    .eh_framePROGBITS0x411e2c0x11e2c0x40x00x2A004
                                    .ctorsPROGBITS0x4220000x120000x80x00x3WA004
                                    .dtorsPROGBITS0x4220080x120080x80x00x3WA004
                                    .jcrPROGBITS0x4220100x120100x40x00x3WA004
                                    .dataPROGBITS0x4220140x120140xbba40x00x3WA004
                                    .gotPROGBITS0x42dbb80x1dbb80x100x40x3WA004
                                    .bssNOBITS0x42dbc80x1dbc80x636c0x00x3WA004
                                    .commentPROGBITS0x00x1dbc80xb520x00x0001
                                    .shstrtabSTRTAB0x00x1e71a0x6b0x00x0001
                                    .symtabSYMTAB0x00x1ea080x2d300x100x0152664
                                    .strtabSTRTAB0x00x217380x21fb0x00x0001
                                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                    LOAD0x00x4000000x4000000x11e300x11e306.90060x5R E0x10000.init .text .fini .rodata .eh_frame
                                    LOAD0x120000x4220000x4220000xbbc80x11f343.91300x6RW 0x10000.ctors .dtors .jcr .data .got .bss
                                    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                                    NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                    .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    .symtab0x4000940SECTION<unknown>DEFAULT1
                                    .symtab0x4000e00SECTION<unknown>DEFAULT2
                                    .symtab0x40f2a00SECTION<unknown>DEFAULT3
                                    .symtab0x40f2c40SECTION<unknown>DEFAULT4
                                    .symtab0x411e2c0SECTION<unknown>DEFAULT5
                                    .symtab0x4220000SECTION<unknown>DEFAULT6
                                    .symtab0x4220080SECTION<unknown>DEFAULT7
                                    .symtab0x4220100SECTION<unknown>DEFAULT8
                                    .symtab0x4220140SECTION<unknown>DEFAULT9
                                    .symtab0x42dbb80SECTION<unknown>DEFAULT10
                                    .symtab0x42dbc80SECTION<unknown>DEFAULT11
                                    .symtab0x00SECTION<unknown>DEFAULT12
                                    .symtab0x00SECTION<unknown>DEFAULT13
                                    .symtab0x00SECTION<unknown>DEFAULT14
                                    .symtab0x00SECTION<unknown>DEFAULT15
                                    /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    L1.symtab0x40832c0NOTYPE<unknown>DEFAULT2
                                    L_abort.symtab0x4001d00NOTYPE<unknown>DEFAULT2
                                    L_fini.symtab0x4001c80NOTYPE<unknown>DEFAULT2
                                    L_init.symtab0x4001c40NOTYPE<unknown>DEFAULT2
                                    L_main.symtab0x4001c00NOTYPE<unknown>DEFAULT2
                                    L_uClibc_main.symtab0x4001cc0NOTYPE<unknown>DEFAULT2
                                    Q.symtab0x42dbfc16384OBJECT<unknown>DEFAULT11
                                    StartTheLelz.symtab0x402fa06838FUNC<unknown>DEFAULT2
                                    _GLOBAL_OFFSET_TABLE_.symtab0x42dbb80OBJECT<unknown>HIDDEN10
                                    _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __CTOR_END__.symtab0x4220040OBJECT<unknown>DEFAULT6
                                    __CTOR_LIST__.symtab0x4220000OBJECT<unknown>DEFAULT6
                                    __C_ctype_b.symtab0x42d8584OBJECT<unknown>DEFAULT9
                                    __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __C_ctype_b_data.symtab0x4107c4768OBJECT<unknown>DEFAULT4
                                    __C_ctype_tolower.symtab0x42dbb04OBJECT<unknown>DEFAULT9
                                    __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __C_ctype_tolower_data.symtab0x411b2c768OBJECT<unknown>DEFAULT4
                                    __C_ctype_toupper.symtab0x42d8604OBJECT<unknown>DEFAULT9
                                    __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __C_ctype_toupper_data.symtab0x410ac4768OBJECT<unknown>DEFAULT4
                                    __DTOR_END__.symtab0x42200c0OBJECT<unknown>DEFAULT7
                                    __DTOR_LIST__.symtab0x4220080OBJECT<unknown>DEFAULT7
                                    __EH_FRAME_BEGIN__.symtab0x411e2c0OBJECT<unknown>DEFAULT5
                                    __FRAME_END__.symtab0x411e2c0OBJECT<unknown>DEFAULT5
                                    __GI___C_ctype_b.symtab0x42d8584OBJECT<unknown>HIDDEN9
                                    __GI___C_ctype_b_data.symtab0x4107c4768OBJECT<unknown>HIDDEN4
                                    __GI___C_ctype_tolower.symtab0x42dbb04OBJECT<unknown>HIDDEN9
                                    __GI___C_ctype_tolower_data.symtab0x411b2c768OBJECT<unknown>HIDDEN4
                                    __GI___C_ctype_toupper.symtab0x42d8604OBJECT<unknown>HIDDEN9
                                    __GI___C_ctype_toupper_data.symtab0x410ac4768OBJECT<unknown>HIDDEN4
                                    __GI___ctype_b.symtab0x42d85c4OBJECT<unknown>HIDDEN9
                                    __GI___ctype_tolower.symtab0x42dbb44OBJECT<unknown>HIDDEN9
                                    __GI___ctype_toupper.symtab0x42d8644OBJECT<unknown>HIDDEN9
                                    __GI___errno_location.symtab0x408a6020FUNC<unknown>HIDDEN2
                                    __GI___fgetc_unlocked.symtab0x40ee84216FUNC<unknown>HIDDEN2
                                    __GI___glibc_strerror_r.symtab0x40a23832FUNC<unknown>HIDDEN2
                                    __GI___h_errno_location.symtab0x40bde820FUNC<unknown>HIDDEN2
                                    __GI___libc_fcntl.symtab0x4083f0172FUNC<unknown>HIDDEN2
                                    __GI___libc_fcntl64.symtab0x40849c152FUNC<unknown>HIDDEN2
                                    __GI___libc_open.symtab0x4087b4160FUNC<unknown>HIDDEN2
                                    __GI___uClibc_fini.symtab0x40b8e0104FUNC<unknown>HIDDEN2
                                    __GI___uClibc_init.symtab0x40b9ac80FUNC<unknown>HIDDEN2
                                    __GI___xpg_strerror_r.symtab0x40a258200FUNC<unknown>HIDDEN2
                                    __GI__exit.symtab0x40853448FUNC<unknown>HIDDEN2
                                    __GI_abort.symtab0x40ae50244FUNC<unknown>HIDDEN2
                                    __GI_atoi.symtab0x40b4a424FUNC<unknown>HIDDEN2
                                    __GI_atol.symtab0x40b4a424FUNC<unknown>HIDDEN2
                                    __GI_chdir.symtab0x40856456FUNC<unknown>HIDDEN2
                                    __GI_close.symtab0x40859c56FUNC<unknown>HIDDEN2
                                    __GI_connect.symtab0x40a82440FUNC<unknown>HIDDEN2
                                    __GI_dup2.symtab0x4085d456FUNC<unknown>HIDDEN2
                                    __GI_errno.symtab0x433e3c4OBJECT<unknown>HIDDEN11
                                    __GI_execl.symtab0x40b684228FUNC<unknown>HIDDEN2
                                    __GI_execve.symtab0x40bc6056FUNC<unknown>HIDDEN2
                                    __GI_exit.symtab0x40b614112FUNC<unknown>HIDDEN2
                                    __GI_fclose.symtab0x40d944272FUNC<unknown>HIDDEN2
                                    __GI_fcntl.symtab0x4083f0172FUNC<unknown>HIDDEN2
                                    __GI_fcntl64.symtab0x40849c152FUNC<unknown>HIDDEN2
                                    __GI_fflush_unlocked.symtab0x40dfc8320FUNC<unknown>HIDDEN2
                                    __GI_fgetc_unlocked.symtab0x40ee84216FUNC<unknown>HIDDEN2
                                    __GI_fgets.symtab0x40de70120FUNC<unknown>HIDDEN2
                                    __GI_fgets_unlocked.symtab0x40e108128FUNC<unknown>HIDDEN2
                                    __GI_fopen.symtab0x40da5424FUNC<unknown>HIDDEN2
                                    __GI_fork.symtab0x40860c56FUNC<unknown>HIDDEN2
                                    __GI_fputs_unlocked.symtab0x409a7c68FUNC<unknown>HIDDEN2
                                    __GI_fseek.symtab0x40da6c28FUNC<unknown>HIDDEN2
                                    __GI_fseeko64.symtab0x40da88232FUNC<unknown>HIDDEN2
                                    __GI_fwrite_unlocked.symtab0x409ac0156FUNC<unknown>HIDDEN2
                                    __GI_getc_unlocked.symtab0x40ee84216FUNC<unknown>HIDDEN2
                                    __GI_getdtablesize.symtab0x40864452FUNC<unknown>HIDDEN2
                                    __GI_getegid.symtab0x40bc9856FUNC<unknown>HIDDEN2
                                    __GI_geteuid.symtab0x40bcd056FUNC<unknown>HIDDEN2
                                    __GI_getgid.symtab0x40bd0856FUNC<unknown>HIDDEN2
                                    __GI_gethostbyname.symtab0x40a53072FUNC<unknown>HIDDEN2
                                    __GI_gethostbyname_r.symtab0x40a578684FUNC<unknown>HIDDEN2
                                    __GI_getpid.symtab0x40867856FUNC<unknown>HIDDEN2
                                    __GI_getrlimit.symtab0x4086b056FUNC<unknown>HIDDEN2
                                    __GI_getsockname.symtab0x40a84c40FUNC<unknown>HIDDEN2
                                    __GI_getuid.symtab0x40bd4056FUNC<unknown>HIDDEN2
                                    __GI_h_errno.symtab0x433e404OBJECT<unknown>HIDDEN11
                                    __GI_inet_addr.symtab0x40a50444FUNC<unknown>HIDDEN2
                                    __GI_inet_aton.symtab0x40cdd4204FUNC<unknown>HIDDEN2
                                    __GI_inet_ntoa.symtab0x40a4ec24FUNC<unknown>HIDDEN2
                                    __GI_inet_ntoa_r.symtab0x40a474120FUNC<unknown>HIDDEN2
                                    __GI_inet_ntop.symtab0x40e6a8492FUNC<unknown>HIDDEN2
                                    __GI_inet_pton.symtab0x40e3d4408FUNC<unknown>HIDDEN2
                                    __GI_initstate_r.symtab0x40b304176FUNC<unknown>HIDDEN2
                                    __GI_ioctl.symtab0x4086e8148FUNC<unknown>HIDDEN2
                                    __GI_isatty.symtab0x40a35036FUNC<unknown>HIDDEN2
                                    __GI_kill.symtab0x40877c56FUNC<unknown>HIDDEN2
                                    __GI_lseek64.symtab0x40edfc96FUNC<unknown>HIDDEN2
                                    __GI_memchr.symtab0x40c7a4204FUNC<unknown>HIDDEN2
                                    __GI_memcpy.symtab0x409be0636FUNC<unknown>HIDDEN2
                                    __GI_memmove.symtab0x40c870978FUNC<unknown>HIDDEN2
                                    __GI_mempcpy.symtab0x40cc4436FUNC<unknown>HIDDEN2
                                    __GI_memrchr.symtab0x40cc68204FUNC<unknown>HIDDEN2
                                    __GI_memset.symtab0x409e60124FUNC<unknown>HIDDEN2
                                    __GI_nanosleep.symtab0x40bd7856FUNC<unknown>HIDDEN2
                                    __GI_open.symtab0x4087b4160FUNC<unknown>HIDDEN2
                                    __GI_pipe.symtab0x40833464FUNC<unknown>HIDDEN2
                                    __GI_poll.symtab0x40d90c56FUNC<unknown>HIDDEN2
                                    __GI_printf.symtab0x408a74132FUNC<unknown>HIDDEN2
                                    __GI_raise.symtab0x40d77040FUNC<unknown>HIDDEN2
                                    __GI_random.symtab0x40af58100FUNC<unknown>HIDDEN2
                                    __GI_random_r.symtab0x40b1d8104FUNC<unknown>HIDDEN2
                                    __GI_rawmemchr.symtab0x40e188152FUNC<unknown>HIDDEN2
                                    __GI_read.symtab0x4088a056FUNC<unknown>HIDDEN2
                                    __GI_recv.symtab0x40a8a040FUNC<unknown>HIDDEN2
                                    __GI_sbrk.symtab0x40bbd088FUNC<unknown>HIDDEN2
                                    __GI_select.symtab0x4088d852FUNC<unknown>HIDDEN2
                                    __GI_send.symtab0x40a8c840FUNC<unknown>HIDDEN2
                                    __GI_sendto.symtab0x40a8f048FUNC<unknown>HIDDEN2
                                    __GI_setsid.symtab0x40890c56FUNC<unknown>HIDDEN2
                                    __GI_setsockopt.symtab0x40a92044FUNC<unknown>HIDDEN2
                                    __GI_setstate_r.symtab0x40b100216FUNC<unknown>HIDDEN2
                                    __GI_sigaction.symtab0x40d798160FUNC<unknown>HIDDEN2
                                    __GI_sigaddset.symtab0x40a97460FUNC<unknown>HIDDEN2
                                    __GI_sigemptyset.symtab0x40a9b032FUNC<unknown>HIDDEN2
                                    __GI_signal.symtab0x40a9d0184FUNC<unknown>HIDDEN2
                                    __GI_sigprocmask.symtab0x40894484FUNC<unknown>HIDDEN2
                                    __GI_sleep.symtab0x40b768376FUNC<unknown>HIDDEN2
                                    __GI_socket.symtab0x40a94c40FUNC<unknown>HIDDEN2
                                    __GI_sprintf.symtab0x408af8132FUNC<unknown>HIDDEN2
                                    __GI_srandom_r.symtab0x40b240196FUNC<unknown>HIDDEN2
                                    __GI_strcasecmp.symtab0x40ef5c64FUNC<unknown>HIDDEN2
                                    __GI_strchr.symtab0x409edc192FUNC<unknown>HIDDEN2
                                    __GI_strcmp.symtab0x409f9c34FUNC<unknown>HIDDEN2
                                    __GI_strcoll.symtab0x409f9c34FUNC<unknown>HIDDEN2
                                    __GI_strcpy.symtab0x409fbe30FUNC<unknown>HIDDEN2
                                    __GI_strdup.symtab0x40e2ec76FUNC<unknown>HIDDEN2
                                    __GI_strlen.symtab0x409fdc136FUNC<unknown>HIDDEN2
                                    __GI_strncat.symtab0x40e220154FUNC<unknown>HIDDEN2
                                    __GI_strncpy.symtab0x40a064142FUNC<unknown>HIDDEN2
                                    __GI_strnlen.symtab0x40a0f4132FUNC<unknown>HIDDEN2
                                    __GI_strpbrk.symtab0x40cdac40FUNC<unknown>HIDDEN2
                                    __GI_strspn.symtab0x40e2ba48FUNC<unknown>HIDDEN2
                                    __GI_strstr.symtab0x40a178192FUNC<unknown>HIDDEN2
                                    __GI_strtok.symtab0x40a33824FUNC<unknown>HIDDEN2
                                    __GI_strtok_r.symtab0x40cd34120FUNC<unknown>HIDDEN2
                                    __GI_strtol.symtab0x40b4bc20FUNC<unknown>HIDDEN2
                                    __GI_tcgetattr.symtab0x40a374116FUNC<unknown>HIDDEN2
                                    __GI_time.symtab0x40899856FUNC<unknown>HIDDEN2
                                    __GI_tolower.symtab0x40ee5c40FUNC<unknown>HIDDEN2
                                    __GI_toupper.symtab0x408a3840FUNC<unknown>HIDDEN2
                                    __GI_vfork.symtab0x40838054FUNC<unknown>HIDDEN2
                                    __GI_vfprintf.symtab0x408d74164FUNC<unknown>HIDDEN2
                                    __GI_vsnprintf.symtab0x408b7c168FUNC<unknown>HIDDEN2
                                    __GI_wait4.symtab0x40bdb056FUNC<unknown>HIDDEN2
                                    __GI_waitpid.symtab0x4089d020FUNC<unknown>HIDDEN2
                                    __GI_wcrtomb.symtab0x40bdfc68FUNC<unknown>HIDDEN2
                                    __GI_wcsnrtombs.symtab0x40be60112FUNC<unknown>HIDDEN2
                                    __GI_wcsrtombs.symtab0x40be4032FUNC<unknown>HIDDEN2
                                    __GI_write.symtab0x4089e456FUNC<unknown>HIDDEN2
                                    __JCR_END__.symtab0x4220100OBJECT<unknown>DEFAULT8
                                    __JCR_LIST__.symtab0x4220100OBJECT<unknown>DEFAULT8
                                    __app_fini.symtab0x433e304OBJECT<unknown>HIDDEN11
                                    __atexit_lock.symtab0x42db7824OBJECT<unknown>DEFAULT9
                                    __bsd_signal.symtab0x40a9d0184FUNC<unknown>HIDDEN2
                                    __bss_start.symtab0x42dbc80NOTYPE<unknown>DEFAULTSHN_ABS
                                    __check_one_fd.symtab0x40b96274FUNC<unknown>DEFAULT2
                                    __ctype_b.symtab0x42d85c4OBJECT<unknown>DEFAULT9
                                    __ctype_tolower.symtab0x42dbb44OBJECT<unknown>DEFAULT9
                                    __ctype_toupper.symtab0x42d8644OBJECT<unknown>DEFAULT9
                                    __curbrk.symtab0x433e604OBJECT<unknown>HIDDEN11
                                    __data_start.symtab0x4220140NOTYPE<unknown>DEFAULT9
                                    __decode_answer.symtab0x40ea70228FUNC<unknown>HIDDEN2
                                    __decode_dotted.symtab0x40f048200FUNC<unknown>HIDDEN2
                                    __decode_header.symtab0x40e954148FUNC<unknown>HIDDEN2
                                    __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    __dns_lookup.symtab0x40cea01604FUNC<unknown>HIDDEN2
                                    __do_global_ctors_aux.symtab0x40f2600FUNC<unknown>DEFAULT2
                                    __do_global_dtors_aux.symtab0x4000e00FUNC<unknown>DEFAULT2
                                    __dso_handle.symtab0x4220140OBJECT<unknown>HIDDEN9
                                    __encode_dotted.symtab0x40ef9c172FUNC<unknown>HIDDEN2
                                    __encode_header.symtab0x40e894192FUNC<unknown>HIDDEN2
                                    __encode_question.symtab0x40e9e8104FUNC<unknown>HIDDEN2
                                    __environ.symtab0x433e284OBJECT<unknown>DEFAULT11
                                    __errno_location.symtab0x408a6020FUNC<unknown>DEFAULT2
                                    __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __exit_cleanup.symtab0x433e204OBJECT<unknown>HIDDEN11
                                    __fgetc_unlocked.symtab0x40ee84216FUNC<unknown>DEFAULT2
                                    __fini_array_end.symtab0x4220000NOTYPE<unknown>HIDDENSHN_ABS
                                    __fini_array_start.symtab0x4220000NOTYPE<unknown>HIDDENSHN_ABS
                                    __get_hosts_byname_r.symtab0x40d73c52FUNC<unknown>HIDDEN2
                                    __glibc_strerror_r.symtab0x40a23832FUNC<unknown>DEFAULT2
                                    __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __h_errno_location.symtab0x40bde820FUNC<unknown>DEFAULT2
                                    __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __heap_alloc.symtab0x40ad0098FUNC<unknown>DEFAULT2
                                    __heap_free.symtab0x40ada0176FUNC<unknown>DEFAULT2
                                    __heap_link_free_area.symtab0x40ad6434FUNC<unknown>DEFAULT2
                                    __heap_link_free_area_after.symtab0x40ad8626FUNC<unknown>DEFAULT2
                                    __init_array_end.symtab0x4220000NOTYPE<unknown>HIDDENSHN_ABS
                                    __init_array_start.symtab0x4220000NOTYPE<unknown>HIDDENSHN_ABS
                                    __init_brk.symtab0x40d89068FUNC<unknown>HIDDEN2
                                    __init_brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __length_dotted.symtab0x40f11064FUNC<unknown>HIDDEN2
                                    __length_question.symtab0x40ea5032FUNC<unknown>HIDDEN2
                                    __libc_close.symtab0x40859c56FUNC<unknown>DEFAULT2
                                    __libc_connect.symtab0x40a82440FUNC<unknown>DEFAULT2
                                    __libc_creat.symtab0x40885424FUNC<unknown>DEFAULT2
                                    __libc_fcntl.symtab0x4083f0172FUNC<unknown>DEFAULT2
                                    __libc_fcntl64.symtab0x40849c152FUNC<unknown>DEFAULT2
                                    __libc_fork.symtab0x40860c56FUNC<unknown>DEFAULT2
                                    __libc_getpid.symtab0x40867856FUNC<unknown>DEFAULT2
                                    __libc_lseek64.symtab0x40edfc96FUNC<unknown>DEFAULT2
                                    __libc_nanosleep.symtab0x40bd7856FUNC<unknown>DEFAULT2
                                    __libc_open.symtab0x4087b4160FUNC<unknown>DEFAULT2
                                    __libc_poll.symtab0x40d90c56FUNC<unknown>DEFAULT2
                                    __libc_read.symtab0x4088a056FUNC<unknown>DEFAULT2
                                    __libc_recv.symtab0x40a8a040FUNC<unknown>DEFAULT2
                                    __libc_select.symtab0x4088d852FUNC<unknown>DEFAULT2
                                    __libc_send.symtab0x40a8c840FUNC<unknown>DEFAULT2
                                    __libc_sendto.symtab0x40a8f048FUNC<unknown>DEFAULT2
                                    __libc_sigaction.symtab0x40d798160FUNC<unknown>DEFAULT2
                                    __libc_stack_end.symtab0x433e244OBJECT<unknown>DEFAULT11
                                    __libc_system.symtab0x40b3b4240FUNC<unknown>DEFAULT2
                                    __libc_waitpid.symtab0x4089d020FUNC<unknown>DEFAULT2
                                    __libc_write.symtab0x4089e456FUNC<unknown>DEFAULT2
                                    __malloc_heap.symtab0x42d9a44OBJECT<unknown>DEFAULT9
                                    __malloc_heap_lock.symtab0x433e0424OBJECT<unknown>DEFAULT11
                                    __malloc_sbrk_lock.symtab0x433ef024OBJECT<unknown>DEFAULT11
                                    __nameserver.symtab0x433f1812OBJECT<unknown>HIDDEN11
                                    __nameservers.symtab0x433f244OBJECT<unknown>HIDDEN11
                                    __open_etc_hosts.symtab0x40eb5468FUNC<unknown>HIDDEN2
                                    __open_nameservers.symtab0x40d4e4600FUNC<unknown>HIDDEN2
                                    __pagesize.symtab0x433e2c4OBJECT<unknown>DEFAULT11
                                    __preinit_array_end.symtab0x4220000NOTYPE<unknown>HIDDENSHN_ABS
                                    __preinit_array_start.symtab0x4220000NOTYPE<unknown>HIDDENSHN_ABS
                                    __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    __pthread_mutex_init.symtab0x40b94814FUNC<unknown>DEFAULT2
                                    __pthread_mutex_lock.symtab0x40b94814FUNC<unknown>DEFAULT2
                                    __pthread_mutex_trylock.symtab0x40b94814FUNC<unknown>DEFAULT2
                                    __pthread_mutex_unlock.symtab0x40b94814FUNC<unknown>DEFAULT2
                                    __pthread_return_0.symtab0x40b94814FUNC<unknown>DEFAULT2
                                    __pthread_return_void.symtab0x40b95612FUNC<unknown>DEFAULT2
                                    __raise.symtab0x40d77040FUNC<unknown>HIDDEN2
                                    __read_etc_hosts_r.symtab0x40eb98612FUNC<unknown>HIDDEN2
                                    __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    __resolv_lock.symtab0x42db9824OBJECT<unknown>DEFAULT9
                                    __rtld_fini.symtab0x433e344OBJECT<unknown>HIDDEN11
                                    __sdivsi3_i4.symtab0x40f24814FUNC<unknown>HIDDEN2
                                    __searchdomain.symtab0x433f0816OBJECT<unknown>HIDDEN11
                                    __searchdomains.symtab0x433f284OBJECT<unknown>HIDDEN11
                                    __sigaddset.symtab0x40aab440FUNC<unknown>DEFAULT2
                                    __sigdelset.symtab0x40aadc42FUNC<unknown>DEFAULT2
                                    __sigismember.symtab0x40aa8844FUNC<unknown>DEFAULT2
                                    __socketcall.symtab0x40bc2856FUNC<unknown>HIDDEN2
                                    __socketcall.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __stdin.symtab0x42d8744OBJECT<unknown>DEFAULT9
                                    __stdio_READ.symtab0x40f15080FUNC<unknown>HIDDEN2
                                    __stdio_WRITE.symtab0x40bed0148FUNC<unknown>HIDDEN2
                                    __stdio_adjust_position.symtab0x40db70180FUNC<unknown>HIDDEN2
                                    __stdio_fwrite.symtab0x40bf64264FUNC<unknown>HIDDEN2
                                    __stdio_init_mutex.symtab0x408c9028FUNC<unknown>HIDDEN2
                                    __stdio_mutex_initializer.3812.symtab0x410dc424OBJECT<unknown>DEFAULT4
                                    __stdio_rfill.symtab0x40f1a048FUNC<unknown>HIDDEN2
                                    __stdio_seek.symtab0x40de3c52FUNC<unknown>HIDDEN2
                                    __stdio_trans2r_o.symtab0x40f1d0120FUNC<unknown>HIDDEN2
                                    __stdio_trans2w_o.symtab0x40c06c176FUNC<unknown>HIDDEN2
                                    __stdio_wcommit.symtab0x408d4052FUNC<unknown>HIDDEN2
                                    __stdout.symtab0x42d8784OBJECT<unknown>DEFAULT9
                                    __syscall_error.symtab0x4083c00NOTYPE<unknown>DEFAULT2
                                    __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __syscall_fcntl64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __syscall_rt_sigaction.symtab0x40d8d456FUNC<unknown>HIDDEN2
                                    __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __uClibc_fini.symtab0x40b8e0104FUNC<unknown>DEFAULT2
                                    __uClibc_init.symtab0x40b9ac80FUNC<unknown>DEFAULT2
                                    __uClibc_main.symtab0x40b9fc468FUNC<unknown>DEFAULT2
                                    __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __uclibc_progname.symtab0x42db904OBJECT<unknown>HIDDEN9
                                    __udivsi3_i4.symtab0x40830448FUNC<unknown>HIDDEN2
                                    __vfork.symtab0x40838054FUNC<unknown>HIDDEN2
                                    __xpg_strerror_r.symtab0x40a258200FUNC<unknown>DEFAULT2
                                    __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _brk.symtab0x40d85856FUNC<unknown>HIDDEN2
                                    _charpad.symtab0x408e1880FUNC<unknown>DEFAULT2
                                    _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _dl_aux_init.symtab0x40d83832FUNC<unknown>DEFAULT2
                                    _dl_phdr.symtab0x433f2c4OBJECT<unknown>DEFAULT11
                                    _dl_phnum.symtab0x433f304OBJECT<unknown>DEFAULT11
                                    _edata.symtab0x42dbc80NOTYPE<unknown>DEFAULTSHN_ABS
                                    _end.symtab0x433f340NOTYPE<unknown>DEFAULTSHN_ABS
                                    _errno.symtab0x433e3c4OBJECT<unknown>DEFAULT11
                                    _exit.symtab0x40853448FUNC<unknown>DEFAULT2
                                    _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _fini.symtab0x40f2a012FUNC<unknown>HIDDEN3
                                    _fixed_buffers.symtab0x431c108192OBJECT<unknown>DEFAULT11
                                    _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _fp_out_narrow.symtab0x408e68124FUNC<unknown>DEFAULT2
                                    _fpmaxtostr.symtab0x40c2b41264FUNC<unknown>HIDDEN2
                                    _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _h_errno.symtab0x433e404OBJECT<unknown>DEFAULT11
                                    _init.symtab0x40009412FUNC<unknown>HIDDEN1
                                    _load_inttype.symtab0x40c11c92FUNC<unknown>HIDDEN2
                                    _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _ppfs_init.symtab0x409428120FUNC<unknown>HIDDEN2
                                    _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _ppfs_parsespec.symtab0x4096f4902FUNC<unknown>HIDDEN2
                                    _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _ppfs_prepargs.symtab0x4094a072FUNC<unknown>HIDDEN2
                                    _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _ppfs_setargs.symtab0x4094e8464FUNC<unknown>HIDDEN2
                                    _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _promoted_size.symtab0x4096b860FUNC<unknown>DEFAULT2
                                    _pthread_cleanup_pop_restore.symtab0x40b95612FUNC<unknown>DEFAULT2
                                    _pthread_cleanup_push_defer.symtab0x40b95612FUNC<unknown>DEFAULT2
                                    _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _sigintr.symtab0x433e70128OBJECT<unknown>HIDDEN11
                                    _start.symtab0x4001a030FUNC<unknown>DEFAULT2
                                    _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _stdio_fopen.symtab0x40dc24536FUNC<unknown>HIDDEN2
                                    _stdio_init.symtab0x408c24108FUNC<unknown>HIDDEN2
                                    _stdio_openlist.symtab0x42d87c4OBJECT<unknown>DEFAULT9
                                    _stdio_openlist_add_lock.symtab0x42d88024OBJECT<unknown>DEFAULT9
                                    _stdio_openlist_dec_use.symtab0x40dee8224FUNC<unknown>DEFAULT2
                                    _stdio_openlist_del_count.symtab0x431c0c4OBJECT<unknown>DEFAULT11
                                    _stdio_openlist_del_lock.symtab0x42d89824OBJECT<unknown>DEFAULT9
                                    _stdio_openlist_use_count.symtab0x431c084OBJECT<unknown>DEFAULT11
                                    _stdio_streams.symtab0x42d8b4240OBJECT<unknown>DEFAULT9
                                    _stdio_term.symtab0x408cac148FUNC<unknown>HIDDEN2
                                    _stdio_user_locking.symtab0x42d8b04OBJECT<unknown>DEFAULT9
                                    _stdlib_strto_l.symtab0x40b4d0324FUNC<unknown>HIDDEN2
                                    _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _store_inttype.symtab0x40c17856FUNC<unknown>HIDDEN2
                                    _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _string_syserrmsgs.symtab0x410e942906OBJECT<unknown>HIDDEN4
                                    _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _uintmaxtostr.symtab0x40c1b0260FUNC<unknown>HIDDEN2
                                    _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _vfprintf_internal.symtab0x408ee41348FUNC<unknown>HIDDEN2
                                    _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    abort.symtab0x40ae50244FUNC<unknown>DEFAULT2
                                    abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    atoi.symtab0x40b4a424FUNC<unknown>DEFAULT2
                                    atol.symtab0x40b4a424FUNC<unknown>DEFAULT2
                                    atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    bcopy.symtab0x40a32024FUNC<unknown>DEFAULT2
                                    bcopy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    been_there_done_that.symtab0x433e1c4OBJECT<unknown>DEFAULT11
                                    been_there_done_that.2753.symtab0x433e384OBJECT<unknown>DEFAULT11
                                    bot.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    bsd_signal.symtab0x40a9d0184FUNC<unknown>DEFAULT2
                                    buf.2577.symtab0x433c1416OBJECT<unknown>DEFAULT11
                                    buf.4814.symtab0x433c24460OBJECT<unknown>DEFAULT11
                                    c.symtab0x42d8504OBJECT<unknown>DEFAULT9
                                    chdir.symtab0x40856456FUNC<unknown>DEFAULT2
                                    chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    close.symtab0x40859c56FUNC<unknown>DEFAULT2
                                    close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    commServer.symtab0x4220244OBJECT<unknown>DEFAULT9
                                    completed.2217.symtab0x42dbc81OBJECT<unknown>DEFAULT11
                                    connect.symtab0x40a82440FUNC<unknown>DEFAULT2
                                    connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    connectTimeout.symtab0x401d6c772FUNC<unknown>DEFAULT2
                                    creat.symtab0x40885424FUNC<unknown>DEFAULT2
                                    crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    csum.symtab0x402c7c232FUNC<unknown>DEFAULT2
                                    currentServer.symtab0x42d7ec4OBJECT<unknown>DEFAULT9
                                    data_start.symtab0x42201c0NOTYPE<unknown>DEFAULT9
                                    decodea.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    dup2.symtab0x4085d456FUNC<unknown>DEFAULT2
                                    dup2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    environ.symtab0x433e284OBJECT<unknown>DEFAULT11
                                    errno.symtab0x433e3c4OBJECT<unknown>DEFAULT11
                                    errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    execl.symtab0x40b684228FUNC<unknown>DEFAULT2
                                    execl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    execve.symtab0x40bc6056FUNC<unknown>DEFAULT2
                                    execve.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    exit.symtab0x40b614112FUNC<unknown>DEFAULT2
                                    exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    exp10_table.symtab0x411a4872OBJECT<unknown>DEFAULT4
                                    fclose.symtab0x40d944272FUNC<unknown>DEFAULT2
                                    fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fcntl.symtab0x4083f0172FUNC<unknown>DEFAULT2
                                    fcntl64.symtab0x40849c152FUNC<unknown>DEFAULT2
                                    fdgets.symtab0x401306198FUNC<unknown>DEFAULT2
                                    fdopen_pids.symtab0x431bfc4OBJECT<unknown>DEFAULT11
                                    fdpclose.symtab0x401180390FUNC<unknown>DEFAULT2
                                    fdpopen.symtab0x400f48568FUNC<unknown>DEFAULT2
                                    fflush_unlocked.symtab0x40dfc8320FUNC<unknown>DEFAULT2
                                    fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fgetc_unlocked.symtab0x40ee84216FUNC<unknown>DEFAULT2
                                    fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fgets.symtab0x40de70120FUNC<unknown>DEFAULT2
                                    fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fgets_unlocked.symtab0x40e108128FUNC<unknown>DEFAULT2
                                    fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fmt.symtab0x411a3420OBJECT<unknown>DEFAULT4
                                    fopen.symtab0x40da5424FUNC<unknown>DEFAULT2
                                    fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fork.symtab0x40860c56FUNC<unknown>DEFAULT2
                                    fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fputs_unlocked.symtab0x409a7c68FUNC<unknown>DEFAULT2
                                    fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    frame_dummy.symtab0x4001400FUNC<unknown>DEFAULT2
                                    free.symtab0x40ac10240FUNC<unknown>DEFAULT2
                                    free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fseek.symtab0x40da6c28FUNC<unknown>DEFAULT2
                                    fseeko.symtab0x40da6c28FUNC<unknown>DEFAULT2
                                    fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fseeko64.symtab0x40da88232FUNC<unknown>DEFAULT2
                                    fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fwrite_unlocked.symtab0x409ac0156FUNC<unknown>DEFAULT2
                                    fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getBogos.symtab0x401658524FUNC<unknown>DEFAULT2
                                    getBuild.symtab0x407a0820FUNC<unknown>DEFAULT2
                                    getCores.symtab0x401864232FUNC<unknown>DEFAULT2
                                    getHost.symtab0x4015a884FUNC<unknown>DEFAULT2
                                    getOurIP.symtab0x407760680FUNC<unknown>DEFAULT2
                                    getRandomIP.symtab0x402c2092FUNC<unknown>DEFAULT2
                                    getRandomPublicIP.symtab0x4027b41132FUNC<unknown>DEFAULT2
                                    get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getc_unlocked.symtab0x40ee84216FUNC<unknown>DEFAULT2
                                    getdtablesize.symtab0x40864452FUNC<unknown>DEFAULT2
                                    getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getegid.symtab0x40bc9856FUNC<unknown>DEFAULT2
                                    getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    geteuid.symtab0x40bcd056FUNC<unknown>DEFAULT2
                                    geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getgid.symtab0x40bd0856FUNC<unknown>DEFAULT2
                                    getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gethostbyname.symtab0x40a53072FUNC<unknown>DEFAULT2
                                    gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gethostbyname_r.symtab0x40a578684FUNC<unknown>DEFAULT2
                                    gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getpid.symtab0x40867856FUNC<unknown>DEFAULT2
                                    getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getrlimit.symtab0x4086b056FUNC<unknown>DEFAULT2
                                    getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getsockname.symtab0x40a84c40FUNC<unknown>DEFAULT2
                                    getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getsockopt.symtab0x40a87444FUNC<unknown>DEFAULT2
                                    getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getuid.symtab0x40bd4056FUNC<unknown>DEFAULT2
                                    getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gotIP.symtab0x42dbe84OBJECT<unknown>DEFAULT11
                                    h.4813.symtab0x433df020OBJECT<unknown>DEFAULT11
                                    h_errno.symtab0x433e404OBJECT<unknown>DEFAULT11
                                    heap_alloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    heap_free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    hextable.symtab0x4100ac1024OBJECT<unknown>DEFAULT4
                                    htonl.symtab0x40a42e46FUNC<unknown>DEFAULT2
                                    htons.symtab0x40a45c22FUNC<unknown>DEFAULT2
                                    i.4092.symtab0x42d8544OBJECT<unknown>DEFAULT9
                                    index.symtab0x409edc192FUNC<unknown>DEFAULT2
                                    inet_addr.symtab0x40a50444FUNC<unknown>DEFAULT2
                                    inet_aton.symtab0x40cdd4204FUNC<unknown>DEFAULT2
                                    inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    inet_ntoa.symtab0x40a4ec24FUNC<unknown>DEFAULT2
                                    inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    inet_ntoa_r.symtab0x40a474120FUNC<unknown>DEFAULT2
                                    inet_ntop.symtab0x40e6a8492FUNC<unknown>DEFAULT2
                                    inet_ntop4.symtab0x40e56c316FUNC<unknown>DEFAULT2
                                    inet_pton.symtab0x40e3d4408FUNC<unknown>DEFAULT2
                                    inet_pton4.symtab0x40e338156FUNC<unknown>DEFAULT2
                                    infectline.symtab0x4220204OBJECT<unknown>DEFAULT9
                                    initConnection.symtab0x40760c340FUNC<unknown>DEFAULT2
                                    init_rand.symtab0x4001d4180FUNC<unknown>DEFAULT2
                                    initial_fa.symtab0x42d9a8260OBJECT<unknown>DEFAULT9
                                    initstate.symtab0x40b028120FUNC<unknown>DEFAULT2
                                    initstate_r.symtab0x40b304176FUNC<unknown>DEFAULT2
                                    ioctl.symtab0x4086e8148FUNC<unknown>DEFAULT2
                                    ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    ipState.symtab0x431c005OBJECT<unknown>DEFAULT11
                                    isatty.symtab0x40a35036FUNC<unknown>DEFAULT2
                                    isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    isspace.symtab0x408a1c28FUNC<unknown>DEFAULT2
                                    isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    kill.symtab0x40877c56FUNC<unknown>DEFAULT2
                                    kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    lengthd.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    lengthq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/sh/sh4/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/sh/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/sh/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/sh/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/sh/vfork.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    listFork.symtab0x402070308FUNC<unknown>DEFAULT2
                                    llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    lseek64.symtab0x40edfc96FUNC<unknown>DEFAULT2
                                    macAddress.symtab0x42dbf46OBJECT<unknown>DEFAULT11
                                    main.symtab0x407a1c2280FUNC<unknown>DEFAULT2
                                    mainCommSock.symtab0x42dbe44OBJECT<unknown>DEFAULT11
                                    makeIPPacket.symtab0x402e78224FUNC<unknown>DEFAULT2
                                    makeRandomStr.symtab0x40194c156FUNC<unknown>DEFAULT2
                                    malloc.symtab0x40ab08264FUNC<unknown>DEFAULT2
                                    malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    matchPrompt.symtab0x402320360FUNC<unknown>DEFAULT2
                                    memchr.symtab0x40c7a4204FUNC<unknown>DEFAULT2
                                    memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    memcpy.symtab0x409be0636FUNC<unknown>DEFAULT2
                                    memmove.symtab0x40c870978FUNC<unknown>DEFAULT2
                                    memmove.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    mempcpy.symtab0x40cc4436FUNC<unknown>DEFAULT2
                                    mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    memrchr.symtab0x40cc68204FUNC<unknown>DEFAULT2
                                    memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    memset.symtab0x409e60124FUNC<unknown>DEFAULT2
                                    memset.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    mylock.symtab0x42daac24OBJECT<unknown>DEFAULT9
                                    mylock.symtab0x42dac424OBJECT<unknown>DEFAULT9
                                    mylock.symtab0x433e4424OBJECT<unknown>DEFAULT11
                                    nanosleep.symtab0x40bd7856FUNC<unknown>DEFAULT2
                                    nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    negotiate.symtab0x4021a4380FUNC<unknown>DEFAULT2
                                    next_start.1030.symtab0x433c104OBJECT<unknown>DEFAULT11
                                    ntohl.symtab0x40a3e848FUNC<unknown>DEFAULT2
                                    ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    ntohs.symtab0x40a41822FUNC<unknown>DEFAULT2
                                    ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    numpids.symtab0x42dbec8OBJECT<unknown>DEFAULT11
                                    object.2270.symtab0x42dbcc24OBJECT<unknown>DEFAULT11
                                    open.symtab0x4087b4160FUNC<unknown>DEFAULT2
                                    open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    opennameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    ourIP.symtab0x433e644OBJECT<unknown>DEFAULT11
                                    p.2215.symtab0x4220180OBJECT<unknown>DEFAULT9
                                    parseHex.symtab0x4013cc124FUNC<unknown>DEFAULT2
                                    passwords.symtab0x42d81064OBJECT<unknown>DEFAULT9
                                    pids.symtab0x433e6c4OBJECT<unknown>DEFAULT11
                                    pipe.symtab0x40833464FUNC<unknown>DEFAULT2
                                    pipe.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    poll.symtab0x40d90c56FUNC<unknown>DEFAULT2
                                    poll.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    prctl.symtab0x40886c52FUNC<unknown>DEFAULT2
                                    prctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    prefix.4023.symtab0x410dec12OBJECT<unknown>DEFAULT4
                                    print.symtab0x4008241072FUNC<unknown>DEFAULT2
                                    printchar.symtab0x4004cc104FUNC<unknown>DEFAULT2
                                    printf.symtab0x408a74132FUNC<unknown>DEFAULT2
                                    printf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    printi.symtab0x40068c408FUNC<unknown>DEFAULT2
                                    prints.symtab0x400534344FUNC<unknown>DEFAULT2
                                    processCmd.symtab0x4064704508FUNC<unknown>DEFAULT2
                                    qual_chars.4029.symtab0x410e0020OBJECT<unknown>DEFAULT4
                                    raise.symtab0x40d77040FUNC<unknown>DEFAULT2
                                    raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    rand.symtab0x40af4420FUNC<unknown>DEFAULT2
                                    rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    rand_cmwc.symtab0x400288272FUNC<unknown>DEFAULT2
                                    random.symtab0x40af58100FUNC<unknown>DEFAULT2
                                    random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    random_poly_info.symtab0x4119f040OBJECT<unknown>DEFAULT4
                                    random_r.symtab0x40b1d8104FUNC<unknown>DEFAULT2
                                    random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    randtbl.symtab0x42daf8128OBJECT<unknown>DEFAULT9
                                    rawmemchr.symtab0x40e188152FUNC<unknown>DEFAULT2
                                    rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    read.symtab0x4088a056FUNC<unknown>DEFAULT2
                                    read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    readUntil.symtab0x402488812FUNC<unknown>DEFAULT2
                                    read_etc_hosts_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    recv.symtab0x40a8a040FUNC<unknown>DEFAULT2
                                    recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    recvLine.symtab0x4019e8900FUNC<unknown>DEFAULT2
                                    sbrk.symtab0x40bbd088FUNC<unknown>DEFAULT2
                                    sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    scanPid.symtab0x433e684OBJECT<unknown>DEFAULT11
                                    sclose.symtab0x402f5872FUNC<unknown>DEFAULT2
                                    select.symtab0x4088d852FUNC<unknown>DEFAULT2
                                    select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    send.symtab0x40a8c840FUNC<unknown>DEFAULT2
                                    send.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    sendCNC.symtab0x40518c228FUNC<unknown>DEFAULT2
                                    sendHOLD.symtab0x405ddc1684FUNC<unknown>DEFAULT2
                                    sendHTTP.symtab0x404f88516FUNC<unknown>DEFAULT2
                                    sendJUNK.symtab0x40581c1472FUNC<unknown>DEFAULT2
                                    sendTCP.symtab0x4052701452FUNC<unknown>DEFAULT2
                                    sendUDP.symtab0x404a561042FUNC<unknown>DEFAULT2
                                    sendto.symtab0x40a8f048FUNC<unknown>DEFAULT2
                                    sendto.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    setsid.symtab0x40890c56FUNC<unknown>DEFAULT2
                                    setsid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    setsockopt.symtab0x40a92044FUNC<unknown>DEFAULT2
                                    setsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    setstate.symtab0x40afbc108FUNC<unknown>DEFAULT2
                                    setstate_r.symtab0x40b100216FUNC<unknown>DEFAULT2
                                    sigaction.symtab0x40d798160FUNC<unknown>DEFAULT2
                                    sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    sigaddset.symtab0x40a97460FUNC<unknown>DEFAULT2
                                    sigaddset.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    sigempty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    sigemptyset.symtab0x40a9b032FUNC<unknown>DEFAULT2
                                    signal.symtab0x40a9d0184FUNC<unknown>DEFAULT2
                                    signal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    sigprocmask.symtab0x40894484FUNC<unknown>DEFAULT2
                                    sigprocmask.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    sigsetops.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    sleep.symtab0x40b768376FUNC<unknown>DEFAULT2
                                    sleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    socket.symtab0x40a94c40FUNC<unknown>DEFAULT2
                                    socket.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    socket_connect.symtab0x404e68288FUNC<unknown>DEFAULT2
                                    sockprintf.symtab0x400dc4388FUNC<unknown>DEFAULT2
                                    spec_and_mask.4028.symtab0x410e1416OBJECT<unknown>DEFAULT4
                                    spec_base.4022.symtab0x410df87OBJECT<unknown>DEFAULT4
                                    spec_chars.4025.symtab0x410e4021OBJECT<unknown>DEFAULT4
                                    spec_flags.4024.symtab0x410e588OBJECT<unknown>DEFAULT4
                                    spec_or_mask.4027.symtab0x410e2416OBJECT<unknown>DEFAULT4
                                    spec_ranges.4026.symtab0x410e349OBJECT<unknown>DEFAULT4
                                    sprintf.symtab0x408af8132FUNC<unknown>DEFAULT2
                                    sprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    srand.symtab0x40b0a096FUNC<unknown>DEFAULT2
                                    srandom.symtab0x40b0a096FUNC<unknown>DEFAULT2
                                    srandom_r.symtab0x40b240196FUNC<unknown>DEFAULT2
                                    static_id.symtab0x42db942OBJECT<unknown>DEFAULT9
                                    static_ns.symtab0x433e5c4OBJECT<unknown>DEFAULT11
                                    stderr.symtab0x42d8704OBJECT<unknown>DEFAULT9
                                    stdin.symtab0x42d8684OBJECT<unknown>DEFAULT9
                                    stdout.symtab0x42d86c4OBJECT<unknown>DEFAULT9
                                    strcasecmp.symtab0x40ef5c64FUNC<unknown>DEFAULT2
                                    strcasecmp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strchr.symtab0x409edc192FUNC<unknown>DEFAULT2
                                    strchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strcmp.symtab0x409f9c34FUNC<unknown>DEFAULT2
                                    strcmp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strcoll.symtab0x409f9c34FUNC<unknown>DEFAULT2
                                    strcpy.symtab0x409fbe30FUNC<unknown>DEFAULT2
                                    strcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strdup.symtab0x40e2ec76FUNC<unknown>DEFAULT2
                                    strdup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strerror_r.symtab0x40a258200FUNC<unknown>DEFAULT2
                                    strlen.symtab0x409fdc136FUNC<unknown>DEFAULT2
                                    strlen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strncat.symtab0x40e220154FUNC<unknown>DEFAULT2
                                    strncat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strncpy.symtab0x40a064142FUNC<unknown>DEFAULT2
                                    strncpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strnlen.symtab0x40a0f4132FUNC<unknown>DEFAULT2
                                    strnlen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strpbrk.symtab0x40cdac40FUNC<unknown>DEFAULT2
                                    strpbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strspn.symtab0x40e2ba48FUNC<unknown>DEFAULT2
                                    strspn.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strstr.symtab0x40a178192FUNC<unknown>DEFAULT2
                                    strstr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strtok.symtab0x40a33824FUNC<unknown>DEFAULT2
                                    strtok.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strtok_r.symtab0x40cd34120FUNC<unknown>DEFAULT2
                                    strtok_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    strtol.symtab0x40b4bc20FUNC<unknown>DEFAULT2
                                    strtol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    system.symtab0x40b3b4240FUNC<unknown>DEFAULT2
                                    system.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    szprintf.symtab0x400d08188FUNC<unknown>DEFAULT2
                                    tcgetattr.symtab0x40a374116FUNC<unknown>DEFAULT2
                                    tcgetattr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    tcpcsum.symtab0x402d64276FUNC<unknown>DEFAULT2
                                    time.symtab0x40899856FUNC<unknown>DEFAULT2
                                    time.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    tolower.symtab0x40ee5c40FUNC<unknown>DEFAULT2
                                    tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    toupper.symtab0x408a3840FUNC<unknown>DEFAULT2
                                    toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    trim.symtab0x400398308FUNC<unknown>DEFAULT2
                                    trivial.symtab0x4083280NOTYPE<unknown>DEFAULT2
                                    type_codes.symtab0x410e6024OBJECT<unknown>DEFAULT4
                                    type_sizes.symtab0x410e7812OBJECT<unknown>DEFAULT4
                                    uastrings.symtab0x42202847044OBJECT<unknown>DEFAULT9
                                    unknown.1072.symtab0x410e8414OBJECT<unknown>DEFAULT4
                                    unsafe_state.symtab0x42dadc28OBJECT<unknown>DEFAULT9
                                    uppercase.symtab0x4015fc92FUNC<unknown>DEFAULT2
                                    usernames.symtab0x42d7f032OBJECT<unknown>DEFAULT9
                                    vfork.symtab0x40838054FUNC<unknown>DEFAULT2
                                    vfprintf.symtab0x408d74164FUNC<unknown>DEFAULT2
                                    vfprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    vsnprintf.symtab0x408b7c168FUNC<unknown>DEFAULT2
                                    vsnprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    wait4.symtab0x40bdb056FUNC<unknown>DEFAULT2
                                    wait4.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    waitpid.symtab0x4089d020FUNC<unknown>DEFAULT2
                                    waitpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    wcrtomb.symtab0x40bdfc68FUNC<unknown>DEFAULT2
                                    wcrtomb.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    wcsnrtombs.symtab0x40be60112FUNC<unknown>DEFAULT2
                                    wcsnrtombs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    wcsrtombs.symtab0x40be4032FUNC<unknown>DEFAULT2
                                    wcsrtombs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    wildString.symtab0x401448352FUNC<unknown>DEFAULT2
                                    write.symtab0x4089e456FUNC<unknown>DEFAULT2
                                    write.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    xdigits.3026.symtab0x411af417OBJECT<unknown>DEFAULT4
                                    zprintf.symtab0x400c54180FUNC<unknown>DEFAULT2

                                    Download Network PCAP: filteredfull

                                    TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                    2025-02-18T05:38:09.532750+01002847180ETPRO MALWARE ELF/BASHLITE Variant CnC Activity1192.168.2.144248484.200.154.1194567TCP
                                    • Total Packets: 223
                                    • 4567 undefined
                                    • 53 (DNS)
                                    TimestampSource PortDest PortSource IPDest IP
                                    Feb 18, 2025 05:38:09.384533882 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:09.390774012 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:09.390832901 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:09.532749891 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:09.539215088 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:10.370383978 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:10.370723009 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:11.370672941 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:11.370934963 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:12.370852947 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:12.371040106 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:13.371023893 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:13.371345043 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:14.371298075 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:14.371666908 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:15.371651888 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:15.372045994 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:16.371773958 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:16.371978998 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:17.371813059 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:17.371964931 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:18.371993065 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:18.372068882 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:19.372419119 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:19.372596025 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:20.373539925 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:20.373671055 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:21.372915030 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:21.373050928 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:22.372843981 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:22.372980118 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:23.417241096 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:23.417340040 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:24.374459028 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:24.374675035 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:25.373549938 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:25.373884916 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:26.373466969 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:26.373580933 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:27.373925924 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:27.374048948 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:28.377357006 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:28.377556086 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:29.374413013 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:29.374619007 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:30.374469995 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:30.374593019 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:31.374739885 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:31.374874115 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:32.374727964 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:32.374808073 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:33.375036001 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:33.375159979 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:34.376404047 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:34.376648903 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:35.375900030 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:35.376156092 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:36.376164913 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:36.376319885 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:37.376461029 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:37.376691103 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:38.376564980 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:38.376645088 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:39.376833916 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:39.377240896 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:40.377019882 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:40.377172947 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:41.400713921 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:41.400886059 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:42.377398968 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:42.377559900 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:43.377556086 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:43.377677917 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:44.377685070 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:44.377825022 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:45.377918959 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:45.378036976 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:46.378190994 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:46.378428936 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:47.378401995 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:47.378534079 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:48.378470898 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:48.378652096 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:49.378612995 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:49.378776073 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:50.378912926 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:50.379084110 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:51.379096985 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:51.379360914 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:52.379493952 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:52.379690886 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:53.379407883 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:53.379592896 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:54.379786015 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:54.379925966 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:55.379836082 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:55.380057096 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:56.381467104 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:56.381644964 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:57.381701946 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:57.381844044 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:58.381362915 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:58.381474972 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:38:59.380599976 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:38:59.380697966 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:00.381058931 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:00.381315947 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:01.381475925 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:01.381633043 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:02.381835938 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:02.381962061 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:03.382075071 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:03.382220984 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:04.382031918 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:04.382358074 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:05.382380962 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:05.382560015 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:06.382621050 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:06.382901907 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:07.382817030 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:07.383073092 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:08.383095980 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:08.383416891 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:09.383173943 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:09.383629084 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:10.383342981 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:10.383665085 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:11.383687973 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:11.383965969 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:12.906301975 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:12.906404018 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:12.907310009 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:12.907362938 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:12.908242941 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:12.908287048 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:13.383899927 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:13.384138107 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:14.384191036 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:14.384366989 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:15.384373903 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:15.384635925 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:16.384438992 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:16.384579897 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:17.384799957 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:17.385027885 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:18.384845972 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:18.384916067 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:19.892083883 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:19.892220974 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:19.892978907 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:19.893017054 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:20.385449886 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:20.385549068 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:21.385658979 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:21.385816097 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:22.387515068 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:22.387671947 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:23.385967016 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:23.386096001 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:24.386230946 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:24.386421919 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:25.386606932 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:25.386888027 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:26.386687040 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:26.386861086 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:27.389740944 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:27.390042067 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:28.387039900 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:28.387398958 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:29.387165070 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:29.387454033 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:30.387459040 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:30.387595892 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:31.387581110 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:31.387691021 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:32.387909889 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:32.388089895 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:33.387964010 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:33.388184071 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:34.388000011 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:34.388134003 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:35.388323069 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:35.388473988 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:36.388454914 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:36.388730049 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:37.388596058 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:37.388930082 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:38.388818979 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:38.388925076 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:39.389055967 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:39.389199972 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:40.394259930 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:40.394448996 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:41.389611006 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:41.389797926 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:42.389631987 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:42.390042067 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:43.389951944 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:43.390171051 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:44.390213966 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:44.390333891 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:45.390351057 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:45.390474081 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:46.390557051 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:46.390853882 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:47.390734911 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:47.391100883 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:48.391081095 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:48.391197920 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:49.391343117 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:49.391506910 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:50.391478062 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:50.391575098 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:51.391603947 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:51.391738892 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:52.391825914 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:52.391930103 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:53.392694950 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:53.392823935 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:54.395435095 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:54.395654917 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:55.392918110 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:55.393136024 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:56.393572092 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:56.393707037 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:57.393544912 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:57.393656015 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:58.393421888 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:58.393501997 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:39:59.393706083 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:39:59.393934011 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:00.397295952 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:00.397617102 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:01.394285917 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:01.394435883 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:02.394936085 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:02.395071030 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:03.408271074 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:03.408384085 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:04.394967079 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:04.395142078 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:05.395875931 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:05.396053076 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:06.395555973 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:06.395669937 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:07.395593882 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:07.395739079 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:08.396982908 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:08.397183895 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:09.396364927 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:09.396608114 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:10.396137953 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:10.396277905 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:11.396327019 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:11.396553040 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:12.396455050 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:12.396599054 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:13.396600962 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:13.396749973 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:14.396744013 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:14.397033930 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:15.397079945 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:15.397380114 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:16.397298098 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:16.397586107 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:17.397491932 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:17.397866964 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:18.397703886 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:18.397926092 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:19.398072958 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:19.398190022 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:20.399373055 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:20.399641037 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:21.400618076 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:21.400851011 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:22.398884058 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:22.399107933 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:23.593497038 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:23.593658924 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:24.399121046 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:24.399250031 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:25.399251938 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:25.399375916 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:26.399498940 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:26.399640083 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:27.402264118 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:27.402441978 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:28.399744987 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:28.399885893 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:29.400201082 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:29.400347948 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:30.400496006 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:30.400616884 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:31.401238918 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:31.401509047 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:32.400846004 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:32.400981903 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:33.400994062 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:33.401207924 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:34.401736021 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:34.401906013 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:35.402925968 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:35.403070927 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:36.404000998 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:36.404221058 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:37.404658079 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:37.404884100 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:38.404687881 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:38.404757023 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:39.402621984 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:39.402764082 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:40.402864933 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:40.402977943 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:41.402960062 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:41.403115988 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:42.403343916 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:42.403497934 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:43.403548002 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:43.403737068 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:44.403795958 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:44.403912067 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:45.404088020 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:45.404238939 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:46.404222012 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:46.404356956 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:47.404414892 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:47.404567003 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:48.404700041 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:48.404839993 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:49.405376911 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:49.405522108 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:50.405297995 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:50.405653954 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:51.405607939 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:51.405895948 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:52.405661106 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:52.405800104 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:53.405932903 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:53.406044960 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:54.406258106 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:54.406320095 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:55.406356096 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:55.406423092 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:56.440452099 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:56.440706968 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:57.406827927 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:57.407006979 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:58.407234907 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:58.407322884 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:40:59.407381058 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:40:59.407574892 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:00.407814026 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:00.407967091 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:01.409842968 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:01.410164118 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:02.408073902 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:02.408340931 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:03.408466101 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:03.408740044 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:04.408495903 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:04.408679962 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:05.408941984 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:05.409202099 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:06.409070015 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:06.409308910 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:07.409122944 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:07.409293890 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:08.409293890 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:08.409533024 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:09.409984112 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:09.410429955 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:10.409769058 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:10.409985065 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:11.411200047 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:11.411405087 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:12.410577059 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:12.411007881 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:13.410808086 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:13.411017895 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:14.411088943 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:14.411381960 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:15.411400080 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:15.411655903 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:16.411535978 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:16.411776066 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:17.411698103 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:17.411962032 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:18.411901951 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:18.412126064 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:19.412153006 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:19.412396908 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:20.412537098 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:20.412806034 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:21.412635088 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:21.412802935 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:22.412877083 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:22.413124084 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:23.412899971 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:23.413213015 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:24.413145065 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:24.413305044 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:25.413369894 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:25.413533926 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:26.415750980 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:26.415944099 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:27.413767099 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:27.413975000 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:28.414026022 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:28.414189100 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:29.414052010 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:29.414283991 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:30.414491892 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:30.414647102 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:31.414422035 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:31.414572001 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:32.415394068 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:32.415761948 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:33.414881945 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:33.415258884 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:34.415297031 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:34.415565014 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:35.415391922 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:35.415728092 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:36.416101933 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:36.416286945 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:37.416445971 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:37.416635036 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:38.416214943 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:38.416382074 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:39.416157961 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:39.416505098 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:40.416574955 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:40.416812897 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:41.416661024 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:41.417001009 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:42.416941881 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:42.417098045 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:43.417162895 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:43.417314053 CET424844567192.168.2.1484.200.154.119
                                    Feb 18, 2025 05:41:44.417211056 CET45674248484.200.154.119192.168.2.14
                                    Feb 18, 2025 05:41:44.417406082 CET424844567192.168.2.1484.200.154.119
                                    TimestampSource PortDest PortSource IPDest IP
                                    Feb 18, 2025 05:40:54.587857962 CET4006653192.168.2.141.1.1.1
                                    Feb 18, 2025 05:40:54.587857962 CET5980353192.168.2.141.1.1.1
                                    Feb 18, 2025 05:40:54.594568968 CET53598031.1.1.1192.168.2.14
                                    Feb 18, 2025 05:40:54.594644070 CET53400661.1.1.1192.168.2.14
                                    TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                    Feb 18, 2025 05:40:54.587857962 CET192.168.2.141.1.1.10xb3b9Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                                    Feb 18, 2025 05:40:54.587857962 CET192.168.2.141.1.1.10xb8f5Standard query (0)daisy.ubuntu.com28IN (0x0001)false
                                    TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                    Feb 18, 2025 05:40:54.594644070 CET1.1.1.1192.168.2.140xb3b9No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
                                    Feb 18, 2025 05:40:54.594644070 CET1.1.1.1192.168.2.140xb3b9No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

                                    System Behavior

                                    Start time (UTC):04:38:08
                                    Start date (UTC):18/02/2025
                                    Path:/tmp/openssh.elf
                                    Arguments:/tmp/openssh.elf
                                    File size:4139976 bytes
                                    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                                    Start time (UTC):04:38:08
                                    Start date (UTC):18/02/2025
                                    Path:/tmp/openssh.elf
                                    Arguments:-
                                    File size:4139976 bytes
                                    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                                    Start time (UTC):04:38:08
                                    Start date (UTC):18/02/2025
                                    Path:/tmp/openssh.elf
                                    Arguments:-
                                    File size:4139976 bytes
                                    MD5 hash:8943e5f8f8c280467b4472c15ae93ba9