Create Interactive Tour

Linux Analysis Report
psmpsl.elf

Overview

General Information

Sample name:psmpsl.elf
Analysis ID:1644217
MD5:505655807ca1c28a6010ac7527db2440
SHA1:0c3940e82db71de87648138ed91424183b396ca6
SHA256:07bfadf77683ea7d65b41edd90244c5776d1e280508a1edbe44c2fa7c1dcf3b4
Tags:elfuser-abuse_ch
Infos:

Detection

Score:56
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Enumerates processes within the "proc" file system
Executes commands using a shell command-line interpreter
Executes the "ps" command used to list the status of processes
Executes the "rm" command used to delete files or directories
Reads CPU information from /sys indicative of miner or evasive malware
Reads system information from the proc file system
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1644217
Start date and time:2025-03-20 13:08:46 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 55s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:psmpsl.elf
Detection:MAL
Classification:mal56.linELF@0/0@0/0
  • Report size exceeded maximum capacity and may have missing behavior information.
Command:/tmp/psmpsl.elf
PID:6290
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:
  • system is lnxubuntu20
  • psmpsl.elf (PID: 6290, Parent: 6215, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/psmpsl.elf
    • psmpsl.elf New Fork (PID: 6292, Parent: 6290)
      • sh (PID: 6294, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6303, Parent: 6294)
        • ps (PID: 6303, Parent: 6294, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6305, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6307, Parent: 6305)
        • ps (PID: 6307, Parent: 6305, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6310, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6316, Parent: 6310)
        • ps (PID: 6316, Parent: 6310, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6317, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6319, Parent: 6317)
        • ps (PID: 6319, Parent: 6317, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6322, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6327, Parent: 6322)
        • ps (PID: 6327, Parent: 6322, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6328, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6330, Parent: 6328)
        • ps (PID: 6330, Parent: 6328, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6333, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6335, Parent: 6333)
        • ps (PID: 6335, Parent: 6333, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6336, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6342, Parent: 6336)
        • ps (PID: 6342, Parent: 6336, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6366, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6371, Parent: 6366)
        • ps (PID: 6371, Parent: 6366, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6372, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6377, Parent: 6372)
        • ps (PID: 6377, Parent: 6372, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6380, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6382, Parent: 6380)
        • ps (PID: 6382, Parent: 6380, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6383, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6388, Parent: 6383)
        • ps (PID: 6388, Parent: 6383, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6391, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6395, Parent: 6391)
        • ps (PID: 6395, Parent: 6391, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6397, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6402, Parent: 6397)
        • ps (PID: 6402, Parent: 6397, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6406, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6412, Parent: 6406)
        • ps (PID: 6412, Parent: 6406, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6413, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6415, Parent: 6413)
        • ps (PID: 6415, Parent: 6413, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6418, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6423, Parent: 6418)
        • ps (PID: 6423, Parent: 6418, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6424, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6426, Parent: 6424)
        • ps (PID: 6426, Parent: 6424, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6429, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6433, Parent: 6429)
        • ps (PID: 6433, Parent: 6429, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6437, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6443, Parent: 6437)
        • ps (PID: 6443, Parent: 6437, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6446, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6448, Parent: 6446)
        • ps (PID: 6448, Parent: 6446, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6451, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6453, Parent: 6451)
        • ps (PID: 6453, Parent: 6451, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6454, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6456, Parent: 6454)
        • ps (PID: 6456, Parent: 6454, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6459, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6464, Parent: 6459)
        • ps (PID: 6464, Parent: 6459, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6466, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6468, Parent: 6466)
        • ps (PID: 6468, Parent: 6466, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6471, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6473, Parent: 6471)
        • ps (PID: 6473, Parent: 6471, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6474, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6476, Parent: 6474)
        • ps (PID: 6476, Parent: 6474, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6479, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6485, Parent: 6479)
        • ps (PID: 6485, Parent: 6479, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6486, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6488, Parent: 6486)
        • ps (PID: 6488, Parent: 6486, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6513, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6518, Parent: 6513)
        • ps (PID: 6518, Parent: 6513, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6519, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6524, Parent: 6519)
        • ps (PID: 6524, Parent: 6519, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6527, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6529, Parent: 6527)
        • ps (PID: 6529, Parent: 6527, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6530, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6536, Parent: 6530)
        • ps (PID: 6536, Parent: 6530, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6539, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6544, Parent: 6539)
        • ps (PID: 6544, Parent: 6539, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6545, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6547, Parent: 6545)
        • ps (PID: 6547, Parent: 6545, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6550, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6552, Parent: 6550)
        • ps (PID: 6552, Parent: 6550, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6554, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6556, Parent: 6554)
        • ps (PID: 6556, Parent: 6554, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6560, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6566, Parent: 6560)
        • ps (PID: 6566, Parent: 6560, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6569, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6571, Parent: 6569)
        • ps (PID: 6571, Parent: 6569, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6572, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6574, Parent: 6572)
        • ps (PID: 6574, Parent: 6572, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6577, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6582, Parent: 6577)
        • ps (PID: 6582, Parent: 6577, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6583, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6585, Parent: 6583)
        • ps (PID: 6585, Parent: 6583, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6586, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6588, Parent: 6586)
        • ps (PID: 6588, Parent: 6586, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6593, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6595, Parent: 6593)
        • ps (PID: 6595, Parent: 6593, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6596, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6602, Parent: 6596)
        • ps (PID: 6602, Parent: 6596, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6605, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6607, Parent: 6605)
        • ps (PID: 6607, Parent: 6605, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6608, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6613, Parent: 6608)
        • ps (PID: 6613, Parent: 6608, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6616, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6618, Parent: 6616)
        • ps (PID: 6618, Parent: 6616, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6620, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6626, Parent: 6620)
        • ps (PID: 6626, Parent: 6620, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
      • sh (PID: 6629, Parent: 6292, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps w"
        • sh New Fork (PID: 6631, Parent: 6629)
        • ps (PID: 6631, Parent: 6629, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps w
  • dash New Fork (PID: 6489, Parent: 4332)
  • rm (PID: 6489, Parent: 4332, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.hA8dUxSD2j /tmp/tmp.lSG5KTmQok /tmp/tmp.qgcoIaD7xy
  • dash New Fork (PID: 6490, Parent: 4332)
  • rm (PID: 6490, Parent: 4332, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.hA8dUxSD2j /tmp/tmp.lSG5KTmQok /tmp/tmp.qgcoIaD7xy
  • cleanup
No yara matches
No Suricata rule has matched

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Source: psmpsl.elfAvira: detected
Source: psmpsl.elfVirustotal: Detection: 14%Perma Link
Source: psmpsl.elfReversingLabs: Detection: 16%
Source: /usr/bin/ps (PID: 6303)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6307)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6316)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6319)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6327)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6330)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6335)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6342)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6371)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6377)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6382)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6388)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6395)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6402)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6412)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6415)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6423)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6426)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6433)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6443)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6448)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6453)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6456)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6464)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6468)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6473)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6476)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6485)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6488)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6518)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6524)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6529)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6536)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6544)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6547)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6552)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6556)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6566)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6571)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6574)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6582)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6585)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6588)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6595)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6602)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6607)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6613)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6618)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6626)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6631)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 39254
Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 39254 -> 443
Source: classification engineClassification label: mal56.linELF@0/0@0/0
Source: psmpsl.elfELF static info symbol of initial sample: libc/string/mips/memcpy.S
Source: psmpsl.elfELF static info symbol of initial sample: libc/string/mips/memset.S
Source: psmpsl.elfELF static info symbol of initial sample: libc/sysdeps/linux/mips/crt1.S
Source: psmpsl.elfELF static info symbol of initial sample: libc/sysdeps/linux/mips/crti.S
Source: psmpsl.elfELF static info symbol of initial sample: libc/sysdeps/linux/mips/crtn.S
Source: psmpsl.elfELF static info symbol of initial sample: libc/sysdeps/linux/mips/pipe.S
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1582/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1582/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1582/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/3088/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/3088/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/3088/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/230/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/230/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/230/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/110/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/110/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/110/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/231/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/231/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/231/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/111/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/111/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/111/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/232/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/232/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/232/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1579/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1579/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1579/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/112/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/112/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/112/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/233/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/233/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/233/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1699/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1699/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1699/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/113/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/113/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/113/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/234/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/234/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/234/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1335/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1335/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1335/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1698/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1698/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1698/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/114/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/114/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/114/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/235/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/235/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/235/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1334/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1334/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1334/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1576/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1576/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/1576/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/2302/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/2302/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/2302/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/115/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/115/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/115/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/236/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/236/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/236/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/116/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/116/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/116/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/237/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/237/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/237/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/117/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/117/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/117/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/118/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/118/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/118/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/910/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/910/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/910/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/119/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/119/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/119/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/912/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/912/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/912/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/10/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/10/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/10/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/2307/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/2307/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/2307/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/11/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/11/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/11/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/918/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/918/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/918/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/12/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/12/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/12/cmdline
Source: /usr/bin/ps (PID: 6395)File opened: /proc/13/stat
Source: /usr/bin/ps (PID: 6395)File opened: /proc/13/status
Source: /usr/bin/ps (PID: 6395)File opened: /proc/13/cmdline
Source: /tmp/psmpsl.elf (PID: 6294)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6305)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6310)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6317)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6322)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6328)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6333)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6336)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6366)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6372)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6380)Shell command executed: sh -c "ps w"Jump to behavior
Source: /tmp/psmpsl.elf (PID: 6383)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6391)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6397)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6406)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6413)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6418)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6424)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6429)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6437)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6446)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6451)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6454)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6459)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6466)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6471)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6474)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6479)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6486)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6513)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6519)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6527)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6530)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6539)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6545)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6550)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6554)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6560)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6569)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6572)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6577)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6583)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6586)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6593)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6596)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6605)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6608)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6616)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6620)Shell command executed: sh -c "ps w"
Source: /tmp/psmpsl.elf (PID: 6629)Shell command executed: sh -c "ps w"
Source: /bin/sh (PID: 6303)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6307)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6316)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6319)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6327)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6330)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6335)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6342)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6371)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6377)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6382)Ps executable: /usr/bin/ps -> ps wJump to behavior
Source: /bin/sh (PID: 6388)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6395)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6402)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6412)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6415)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6423)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6426)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6433)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6443)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6448)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6453)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6456)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6464)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6468)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6473)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6476)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6485)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6488)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6518)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6524)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6529)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6536)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6544)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6547)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6552)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6556)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6566)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6571)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6574)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6582)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6585)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6588)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6595)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6602)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6607)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6613)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6618)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6626)Ps executable: /usr/bin/ps -> ps w
Source: /bin/sh (PID: 6631)Ps executable: /usr/bin/ps -> ps w
Source: /usr/bin/dash (PID: 6489)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.hA8dUxSD2j /tmp/tmp.lSG5KTmQok /tmp/tmp.qgcoIaD7xy
Source: /usr/bin/dash (PID: 6490)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.hA8dUxSD2j /tmp/tmp.lSG5KTmQok /tmp/tmp.qgcoIaD7xy
Source: /usr/bin/ps (PID: 6303)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6307)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6316)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6319)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6327)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6330)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6335)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6342)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6371)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6377)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6382)Reads from proc file: /proc/meminfoJump to behavior
Source: /usr/bin/ps (PID: 6388)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6395)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6402)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6412)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6415)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6423)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6426)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6433)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6443)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6448)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6453)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6456)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6464)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6468)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6473)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6476)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6485)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6488)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6518)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6524)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6529)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6536)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6544)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6547)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6552)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6556)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6566)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6571)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6574)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6582)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6585)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6588)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6595)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6602)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6607)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6613)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6618)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6626)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6631)Reads from proc file: /proc/meminfo
Source: /usr/bin/ps (PID: 6303)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6307)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6316)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6319)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6327)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6330)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6335)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6342)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6371)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6377)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6382)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/bin/ps (PID: 6388)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6395)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6402)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6412)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6415)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6423)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6426)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6433)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6443)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6448)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6453)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6456)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6464)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6468)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6473)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6476)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6485)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6488)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6518)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6524)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6529)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6536)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6544)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6547)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6552)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6556)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6566)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6571)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6574)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6582)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6585)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6588)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6595)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6602)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6607)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6613)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6618)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6626)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/ps (PID: 6631)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /tmp/psmpsl.elf (PID: 6290)Queries kernel information via 'uname': Jump to behavior
Source: psmpsl.elf, 6290.1.000056524f432000.000056524f4b9000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/mipsel
Source: psmpsl.elf, 6290.1.000056524f432000.000056524f4b9000.rw-.sdmpBinary or memory string: wDORV pDORV!/etc/qemu-binfmt/mipsel
Source: psmpsl.elf, 6290.1.00007ffecf0fb000.00007ffecf11c000.rw-.sdmpBinary or memory string: /usr/bin/qemu-mipsel
Source: psmpsl.elf, 6290.1.00007ffecf0fb000.00007ffecf11c000.rw-.sdmpBinary or memory string: dx86_64/usr/bin/qemu-mipsel/tmp/psmpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/psmpsl.elf
ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity Information1
Scripting
Valid AccountsWindows Management Instrumentation1
Scripting
Path Interception1
File Deletion
1
OS Credential Dumping
11
Security Software Discovery
Remote ServicesData from Local System1
Encrypted Channel
Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
Process Discovery
Remote Desktop ProtocolData from Removable Media1
Application Layer Protocol
Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account Manager2
System Information Discovery
SMB/Windows Admin SharesData from Network Shared DriveSteganographyAutomated ExfiltrationData Encrypted for Impact
No configs have been found
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1644217 Sample: psmpsl.elf Startdate: 20/03/2025 Architecture: LINUX Score: 56 39 109.202.202.202, 80 INIT7CH Switzerland 2->39 41 91.189.91.42, 443 CANONICAL-ASGB United Kingdom 2->41 43 2 other IPs or domains 2->43 45 Antivirus / Scanner detection for submitted sample 2->45 47 Multi AV Scanner detection for submitted file 2->47 9 psmpsl.elf 2->9         started        11 dash rm 2->11         started        13 dash rm 2->13         started        signatures3 process4 process5 15 psmpsl.elf 9->15         started        process6 17 psmpsl.elf sh 15->17         started        19 psmpsl.elf sh 15->19         started        21 psmpsl.elf sh 15->21         started        23 47 other processes 15->23 process7 25 sh ps 17->25         started        27 sh ps 19->27         started        29 sh ps 21->29         started        31 sh ps 23->31         started        33 sh ps 23->33         started        35 sh ps 23->35         started        37 44 other processes 23->37
SourceDetectionScannerLabelLink
psmpsl.elf14%VirustotalBrowse
psmpsl.elf17%ReversingLabsLinux.Trojan.Generic
psmpsl.elf100%AviraLINUX/AVI.Agent.kxxuo
No Antivirus matches
No Antivirus matches
No Antivirus matches

Download Network PCAP: filteredfull

No contacted domains info
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs
IPDomainCountryFlagASNASN NameMalicious
34.249.145.219
unknownUnited States
16509AMAZON-02USfalse
109.202.202.202
unknownSwitzerland
13030INIT7CHfalse
91.189.91.43
unknownUnited Kingdom
41231CANONICAL-ASGBfalse
91.189.91.42
unknownUnited Kingdom
41231CANONICAL-ASGBfalse
MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
34.249.145.219yakuza.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
    .5r3fqt67ew531has4231.mpsl.elfGet hashmaliciousUnknownBrowse
      .5r3fqt67ew531has4231.ppc.elfGet hashmaliciousUnknownBrowse
        main_m68k.elfGet hashmaliciousMiraiBrowse
          main_x86.elfGet hashmaliciousMiraiBrowse
            main_mips.elfGet hashmaliciousMiraiBrowse
              main_mpsl.elfGet hashmaliciousMiraiBrowse
                bot.arm.elfGet hashmaliciousUnknownBrowse
                  tftp.elfGet hashmaliciousUnknownBrowse
                    miner.elfGet hashmaliciousUnknownBrowse
                      109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
                      • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
                      91.189.91.43yakuza.mpsl.elfGet hashmaliciousGafgyt, MiraiBrowse
                        yakuza.x86.elfGet hashmaliciousGafgyt, MiraiBrowse
                          .5r3fqt67ew531has4231.m68k.elfGet hashmaliciousGafgyt, Mirai, Moobot, OkiruBrowse
                            .5r3fqt67ew531has4231.ppc.elfGet hashmaliciousUnknownBrowse
                              main_m68k.elfGet hashmaliciousMiraiBrowse
                                m68k.elfGet hashmaliciousUnknownBrowse
                                  x86.elfGet hashmaliciousMiraiBrowse
                                    arm6.elfGet hashmaliciousMiraiBrowse
                                      main_mpsl.elfGet hashmaliciousMiraiBrowse
                                        bot.ppc.elfGet hashmaliciousUnknownBrowse
                                          91.189.91.42yakuza.mpsl.elfGet hashmaliciousGafgyt, MiraiBrowse
                                            yakuza.x86.elfGet hashmaliciousGafgyt, MiraiBrowse
                                              yakuza.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                .5r3fqt67ew531has4231.mpsl.elfGet hashmaliciousUnknownBrowse
                                                  .5r3fqt67ew531has4231.m68k.elfGet hashmaliciousGafgyt, Mirai, Moobot, OkiruBrowse
                                                    .5r3fqt67ew531has4231.ppc.elfGet hashmaliciousUnknownBrowse
                                                      main_m68k.elfGet hashmaliciousMiraiBrowse
                                                        main_x86.elfGet hashmaliciousMiraiBrowse
                                                          main_mips.elfGet hashmaliciousMiraiBrowse
                                                            m68k.elfGet hashmaliciousUnknownBrowse
                                                              No context
                                                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                              CANONICAL-ASGB.5r3fqt67ew531has4231.sh4.elfGet hashmaliciousGafgyt, Mirai, Moobot, OkiruBrowse
                                                              • 185.125.190.26
                                                              yakuza.mpsl.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 91.189.91.42
                                                              yakuza.x86.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 91.189.91.42
                                                              yakuza.m68k.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 185.125.190.26
                                                              yakuza.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.mpsl.elfGet hashmaliciousUnknownBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.m68k.elfGet hashmaliciousGafgyt, Mirai, Moobot, OkiruBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.ppc.elfGet hashmaliciousUnknownBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.arm5.elfGet hashmaliciousUnknownBrowse
                                                              • 185.125.190.26
                                                              main_arm6.elfGet hashmaliciousMiraiBrowse
                                                              • 185.125.190.26
                                                              CANONICAL-ASGB.5r3fqt67ew531has4231.sh4.elfGet hashmaliciousGafgyt, Mirai, Moobot, OkiruBrowse
                                                              • 185.125.190.26
                                                              yakuza.mpsl.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 91.189.91.42
                                                              yakuza.x86.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 91.189.91.42
                                                              yakuza.m68k.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 185.125.190.26
                                                              yakuza.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.mpsl.elfGet hashmaliciousUnknownBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.m68k.elfGet hashmaliciousGafgyt, Mirai, Moobot, OkiruBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.ppc.elfGet hashmaliciousUnknownBrowse
                                                              • 91.189.91.42
                                                              .5r3fqt67ew531has4231.arm5.elfGet hashmaliciousUnknownBrowse
                                                              • 185.125.190.26
                                                              main_arm6.elfGet hashmaliciousMiraiBrowse
                                                              • 185.125.190.26
                                                              INIT7CHyakuza.mpsl.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 109.202.202.202
                                                              yakuza.x86.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 109.202.202.202
                                                              yakuza.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 109.202.202.202
                                                              .5r3fqt67ew531has4231.mpsl.elfGet hashmaliciousUnknownBrowse
                                                              • 109.202.202.202
                                                              .5r3fqt67ew531has4231.m68k.elfGet hashmaliciousGafgyt, Mirai, Moobot, OkiruBrowse
                                                              • 109.202.202.202
                                                              .5r3fqt67ew531has4231.ppc.elfGet hashmaliciousUnknownBrowse
                                                              • 109.202.202.202
                                                              main_m68k.elfGet hashmaliciousMiraiBrowse
                                                              • 109.202.202.202
                                                              main_x86.elfGet hashmaliciousMiraiBrowse
                                                              • 109.202.202.202
                                                              main_mips.elfGet hashmaliciousMiraiBrowse
                                                              • 109.202.202.202
                                                              m68k.elfGet hashmaliciousUnknownBrowse
                                                              • 109.202.202.202
                                                              AMAZON-02USpsmips.elfGet hashmaliciousUnknownBrowse
                                                              • 54.217.10.153
                                                              yakuza.mpsl.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 54.171.230.55
                                                              yakuza.m68k.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 54.217.10.153
                                                              https://sharepointsync.zoholandingpage.com/vandpsolutions.com?PO60267SP-20-2025Get hashmaliciousHTMLPhisherBrowse
                                                              • 13.249.91.126
                                                              yakuza.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                              • 34.249.145.219
                                                              na.elfGet hashmaliciousPrometeiBrowse
                                                              • 54.255.164.76
                                                              .5r3fqt67ew531has4231.mpsl.elfGet hashmaliciousUnknownBrowse
                                                              • 34.249.145.219
                                                              .5r3fqt67ew531has4231.ppc.elfGet hashmaliciousUnknownBrowse
                                                              • 34.249.145.219
                                                              http://escogruupo.comGet hashmaliciousUnknownBrowse
                                                              • 18.238.55.64
                                                              main_m68k.elfGet hashmaliciousMiraiBrowse
                                                              • 34.249.145.219
                                                              No context
                                                              No context
                                                              No created / dropped files found
                                                              File type:ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
                                                              Entropy (8bit):5.328995332792254
                                                              TrID:
                                                              • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                              File name:psmpsl.elf
                                                              File size:59'288 bytes
                                                              MD5:505655807ca1c28a6010ac7527db2440
                                                              SHA1:0c3940e82db71de87648138ed91424183b396ca6
                                                              SHA256:07bfadf77683ea7d65b41edd90244c5776d1e280508a1edbe44c2fa7c1dcf3b4
                                                              SHA512:11def22b76eb8fdb17deb63526b628148dde6fad9c8d727d31c2129d1b6d6a16b36b50c2d451f9b442d3f5b541ecccd156dcbe449aac8776cf213173e28fff0f
                                                              SSDEEP:1536:eX8LuU6eZYv5ch1VAHjGqhslvQyfYute/S:SouIROtslvQyfYute/S
                                                              TLSH:1943E603EF01DEB7C85FDD7607FA871120CEB8671560631A3278EA6C7B1B58A49A3E54
                                                              File Content Preview:.ELF......................@.4...........4. ...(........p......@...@...........................@...@...........................D...D......&..........Q.td..................................................E....<...'!......'.......................<...'!... ..

                                                              ELF header

                                                              Class:ELF32
                                                              Data:2's complement, little endian
                                                              Version:1 (current)
                                                              Machine:MIPS R3000
                                                              Version Number:0x1
                                                              Type:EXEC (Executable file)
                                                              OS/ABI:UNIX - System V
                                                              ABI Version:0
                                                              Entry Point Address:0x4002a0
                                                              Flags:0x1007
                                                              ELF Header Size:52
                                                              Program Header Offset:52
                                                              Program Header Size:32
                                                              Number of Program Headers:4
                                                              Section Header Offset:45076
                                                              Section Header Size:40
                                                              Number of Section Headers:20
                                                              Header String Table Index:17
                                                              NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                              NULL0x00x00x00x00x0000
                                                              .reginfoMIPS_REGINFO0x4000b40xb40x180x180x2A004
                                                              .initPROGBITS0x4000cc0xcc0x8c0x00x6AX004
                                                              .textPROGBITS0x4001600x1600x7b500x00x6AX0016
                                                              .finiPROGBITS0x407cb00x7cb00x5c0x00x6AX004
                                                              .rodataPROGBITS0x407d100x7d100x14800x00x2A0016
                                                              .eh_framePROGBITS0x4091900x91900x40x00x2A004
                                                              .ctorsPROGBITS0x4491940x91940x80x00x3WA004
                                                              .dtorsPROGBITS0x44919c0x919c0x80x00x3WA004
                                                              .jcrPROGBITS0x4491a40x91a40x40x00x3WA004
                                                              .dataPROGBITS0x4491b00x91b00x3200x00x3WA0016
                                                              .gotPROGBITS0x4494d00x94d00x2ac0x40x10000003WAp0016
                                                              .sbssNOBITS0x44977c0x977c0x80x00x10000003WAp004
                                                              .bssNOBITS0x4497900x977c0x20d80x00x3WA0016
                                                              .commentPROGBITS0x00x977c0x7860x00x0001
                                                              .mdebug.abi32PROGBITS0x7860x9f020x00x00x0001
                                                              .pdrPROGBITS0x00x9f040x10800x00x0004
                                                              .shstrtabSTRTAB0x00xaf840x8d0x00x0001
                                                              .symtabSYMTAB0x00xb3340x1db00x100x0192034
                                                              .strtabSTRTAB0x00xd0e40x16b40x00x0001
                                                              TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                              <unknown>0xb40x4000b40x4000b40x180x180.98340x4R 0x4.reginfo
                                                              LOAD0x00x4000000x4000000x91940x91945.41970x5R E0x10000.reginfo .init .text .fini .rodata .eh_frame
                                                              LOAD0x91940x4491940x4491940x5e80x26d42.95870x6RW 0x10000.ctors .dtors .jcr .data .got .sbss .bss
                                                              GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                                                              NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                                              .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                              .symtab0x4000b40SECTION<unknown>DEFAULT1
                                                              .symtab0x4000cc0SECTION<unknown>DEFAULT2
                                                              .symtab0x4001600SECTION<unknown>DEFAULT3
                                                              .symtab0x407cb00SECTION<unknown>DEFAULT4
                                                              .symtab0x407d100SECTION<unknown>DEFAULT5
                                                              .symtab0x4091900SECTION<unknown>DEFAULT6
                                                              .symtab0x4491940SECTION<unknown>DEFAULT7
                                                              .symtab0x44919c0SECTION<unknown>DEFAULT8
                                                              .symtab0x4491a40SECTION<unknown>DEFAULT9
                                                              .symtab0x4491b00SECTION<unknown>DEFAULT10
                                                              .symtab0x4494d00SECTION<unknown>DEFAULT11
                                                              .symtab0x44977c0SECTION<unknown>DEFAULT12
                                                              .symtab0x4497900SECTION<unknown>DEFAULT13
                                                              .symtab0x00SECTION<unknown>DEFAULT14
                                                              .symtab0x7860SECTION<unknown>DEFAULT15
                                                              .symtab0x00SECTION<unknown>DEFAULT16
                                                              .symtab0x00SECTION<unknown>DEFAULT17
                                                              .symtab0x00SECTION<unknown>DEFAULT18
                                                              .symtab0x00SECTION<unknown>DEFAULT19
                                                              _GLOBAL_OFFSET_TABLE_.symtab0x4494d00OBJECT<unknown>DEFAULT11
                                                              _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                              _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __CTOR_END__.symtab0x4491980OBJECT<unknown>DEFAULT7
                                                              __CTOR_LIST__.symtab0x4491940OBJECT<unknown>DEFAULT7
                                                              __C_ctype_b.symtab0x4494704OBJECT<unknown>DEFAULT10
                                                              __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __C_ctype_b_data.symtab0x408af0768OBJECT<unknown>DEFAULT5
                                                              __C_ctype_tolower.symtab0x4494804OBJECT<unknown>DEFAULT10
                                                              __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __C_ctype_tolower_data.symtab0x408df0768OBJECT<unknown>DEFAULT5
                                                              __DTOR_END__.symtab0x4491a00OBJECT<unknown>DEFAULT8
                                                              __DTOR_LIST__.symtab0x44919c0OBJECT<unknown>DEFAULT8
                                                              __EH_FRAME_BEGIN__.symtab0x4091900OBJECT<unknown>DEFAULT6
                                                              __FRAME_END__.symtab0x4091900OBJECT<unknown>DEFAULT6
                                                              __GI___C_ctype_b.symtab0x4494704OBJECT<unknown>HIDDEN10
                                                              __GI___C_ctype_b_data.symtab0x408af0768OBJECT<unknown>HIDDEN5
                                                              __GI___C_ctype_tolower.symtab0x4494804OBJECT<unknown>HIDDEN10
                                                              __GI___C_ctype_tolower_data.symtab0x408df0768OBJECT<unknown>HIDDEN5
                                                              __GI___ctype_b.symtab0x4494744OBJECT<unknown>HIDDEN10
                                                              __GI___ctype_tolower.symtab0x4494844OBJECT<unknown>HIDDEN10
                                                              __GI___errno_location.symtab0x40098024FUNC<unknown>HIDDEN3
                                                              __GI___fgetc_unlocked.symtab0x4069b0388FUNC<unknown>HIDDEN3
                                                              __GI___glibc_strerror_r.symtab0x402d9068FUNC<unknown>HIDDEN3
                                                              __GI___libc_fcntl.symtab0x4047f0136FUNC<unknown>HIDDEN3
                                                              __GI___libc_fcntl64.symtab0x404880104FUNC<unknown>HIDDEN3
                                                              __GI___libc_open.symtab0x404c50124FUNC<unknown>HIDDEN3
                                                              __GI___uClibc_fini.symtab0x404260196FUNC<unknown>HIDDEN3
                                                              __GI___uClibc_init.symtab0x4043bc140FUNC<unknown>HIDDEN3
                                                              __GI___xpg_strerror_r.symtab0x402de0392FUNC<unknown>HIDDEN3
                                                              __GI__exit.symtab0x4048f080FUNC<unknown>HIDDEN3
                                                              __GI_abort.symtab0x406de0428FUNC<unknown>HIDDEN3
                                                              __GI_brk.symtab0x4070b0112FUNC<unknown>HIDDEN3
                                                              __GI_close.symtab0x40086084FUNC<unknown>HIDDEN3
                                                              __GI_connect.symtab0x4039e084FUNC<unknown>HIDDEN3
                                                              __GI_dup2.symtab0x40494084FUNC<unknown>HIDDEN3
                                                              __GI_errno.symtab0x44b8104OBJECT<unknown>HIDDEN13
                                                              __GI_execl.symtab0x404100204FUNC<unknown>HIDDEN3
                                                              __GI_execve.symtab0x4049a084FUNC<unknown>HIDDEN3
                                                              __GI_exit.symtab0x406f90236FUNC<unknown>HIDDEN3
                                                              __GI_fclose.symtab0x404f80512FUNC<unknown>HIDDEN3
                                                              __GI_fcntl.symtab0x4047f0136FUNC<unknown>HIDDEN3
                                                              __GI_fcntl64.symtab0x404880104FUNC<unknown>HIDDEN3
                                                              __GI_fdopen.symtab0x405180128FUNC<unknown>HIDDEN3
                                                              __GI_fflush_unlocked.symtab0x406730628FUNC<unknown>HIDDEN3
                                                              __GI_fgetc_unlocked.symtab0x4069b0388FUNC<unknown>HIDDEN3
                                                              __GI_fgets.symtab0x402470216FUNC<unknown>HIDDEN3
                                                              __GI_fgets_unlocked.symtab0x402550268FUNC<unknown>HIDDEN3
                                                              __GI_fork.symtab0x4008c084FUNC<unknown>HIDDEN3
                                                              __GI_fprintf.symtab0x400a0072FUNC<unknown>HIDDEN3
                                                              __GI_fputs_unlocked.symtab0x402660128FUNC<unknown>HIDDEN3
                                                              __GI_fseek.symtab0x40742068FUNC<unknown>HIDDEN3
                                                              __GI_fseeko64.symtab0x407470388FUNC<unknown>HIDDEN3
                                                              __GI_fwrite_unlocked.symtab0x4026e0280FUNC<unknown>HIDDEN3
                                                              __GI_getc_unlocked.symtab0x4069b0388FUNC<unknown>HIDDEN3
                                                              __GI_getegid.symtab0x404a0088FUNC<unknown>HIDDEN3
                                                              __GI_geteuid.symtab0x404a6088FUNC<unknown>HIDDEN3
                                                              __GI_getgid.symtab0x404ac084FUNC<unknown>HIDDEN3
                                                              __GI_getpid.symtab0x407a7084FUNC<unknown>HIDDEN3
                                                              __GI_getuid.symtab0x404b2084FUNC<unknown>HIDDEN3
                                                              __GI_h_errno.symtab0x44b8144OBJECT<unknown>HIDDEN13
                                                              __GI_inet_ntop.symtab0x403680852FUNC<unknown>HIDDEN3
                                                              __GI_inet_pton.symtab0x4031d0700FUNC<unknown>HIDDEN3
                                                              __GI_ioctl.symtab0x404b80104FUNC<unknown>HIDDEN3
                                                              __GI_isatty.symtab0x402f7060FUNC<unknown>HIDDEN3
                                                              __GI_kill.symtab0x407ad088FUNC<unknown>HIDDEN3
                                                              __GI_lseek64.symtab0x407b30164FUNC<unknown>HIDDEN3
                                                              __GI_memchr.symtab0x406b40264FUNC<unknown>HIDDEN3
                                                              __GI_memcpy.symtab0x402800308FUNC<unknown>HIDDEN3
                                                              __GI_mempcpy.symtab0x406c5076FUNC<unknown>HIDDEN3
                                                              __GI_memrchr.symtab0x406ca0272FUNC<unknown>HIDDEN3
                                                              __GI_memset.symtab0x402940144FUNC<unknown>HIDDEN3
                                                              __GI_nanosleep.symtab0x404bf084FUNC<unknown>HIDDEN3
                                                              __GI_open.symtab0x404c50124FUNC<unknown>HIDDEN3
                                                              __GI_perror.symtab0x4009a084FUNC<unknown>HIDDEN3
                                                              __GI_pipe.symtab0x4047b064FUNC<unknown>HIDDEN3
                                                              __GI_raise.symtab0x40799076FUNC<unknown>HIDDEN3
                                                              __GI_read.symtab0x407be084FUNC<unknown>HIDDEN3
                                                              __GI_sbrk.symtab0x404cf0144FUNC<unknown>HIDDEN3
                                                              __GI_send.symtab0x403a4084FUNC<unknown>HIDDEN3
                                                              __GI_setsid.symtab0x40092084FUNC<unknown>HIDDEN3
                                                              __GI_sigaction.symtab0x407170232FUNC<unknown>HIDDEN3
                                                              __GI_sigprocmask.symtab0x4072c0148FUNC<unknown>HIDDEN3
                                                              __GI_socket.symtab0x403aa084FUNC<unknown>HIDDEN3
                                                              __GI_sprintf.symtab0x40520080FUNC<unknown>HIDDEN3
                                                              __GI_strchr.symtab0x4029d0256FUNC<unknown>HIDDEN3
                                                              __GI_strcpy.symtab0x406db036FUNC<unknown>HIDDEN3
                                                              __GI_strlen.symtab0x402ad0184FUNC<unknown>HIDDEN3
                                                              __GI_strnlen.symtab0x402b90256FUNC<unknown>HIDDEN3
                                                              __GI_strstr.symtab0x402c90256FUNC<unknown>HIDDEN3
                                                              __GI_tcgetattr.symtab0x402fb0176FUNC<unknown>HIDDEN3
                                                              __GI_tolower.symtab0x404da060FUNC<unknown>HIDDEN3
                                                              __GI_vfprintf.symtab0x401080260FUNC<unknown>HIDDEN3
                                                              __GI_vsnprintf.symtab0x405250260FUNC<unknown>HIDDEN3
                                                              __GI_wait4.symtab0x40736088FUNC<unknown>HIDDEN3
                                                              __GI_waitpid.symtab0x404d8028FUNC<unknown>HIDDEN3
                                                              __GI_wcrtomb.symtab0x404de0112FUNC<unknown>HIDDEN3
                                                              __GI_wcsnrtombs.symtab0x404e90228FUNC<unknown>HIDDEN3
                                                              __GI_wcsrtombs.symtab0x404e5064FUNC<unknown>HIDDEN3
                                                              __GI_write.symtab0x4073c084FUNC<unknown>HIDDEN3
                                                              __JCR_END__.symtab0x4491a40OBJECT<unknown>DEFAULT9
                                                              __JCR_LIST__.symtab0x4491a40OBJECT<unknown>DEFAULT9
                                                              __app_fini.symtab0x44b7fc4OBJECT<unknown>HIDDEN13
                                                              __atexit_lock.symtab0x4494b024OBJECT<unknown>DEFAULT10
                                                              __bss_start.symtab0x44977c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                              __check_one_fd.symtab0x404334136FUNC<unknown>DEFAULT3
                                                              __ctype_b.symtab0x4494744OBJECT<unknown>DEFAULT10
                                                              __ctype_tolower.symtab0x4494844OBJECT<unknown>DEFAULT10
                                                              __curbrk.symtab0x44b8404OBJECT<unknown>HIDDEN13
                                                              __data_start.symtab0x4491d00OBJECT<unknown>DEFAULT10
                                                              __deregister_frame_info.symtab0x00FUNC<unknown>DEFAULTSHN_UNDEF
                                                              __do_global_ctors_aux.symtab0x407c400FUNC<unknown>DEFAULT3
                                                              __do_global_dtors_aux.symtab0x4001600FUNC<unknown>DEFAULT3
                                                              __dso_handle.symtab0x4491b00OBJECT<unknown>HIDDEN10
                                                              __environ.symtab0x44b7f44OBJECT<unknown>DEFAULT13
                                                              __errno_location.symtab0x40098024FUNC<unknown>DEFAULT3
                                                              __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __exit_cleanup.symtab0x44b8304OBJECT<unknown>HIDDEN13
                                                              __fgetc_unlocked.symtab0x4069b0388FUNC<unknown>DEFAULT3
                                                              __fini_array_end.symtab0x4491940NOTYPE<unknown>HIDDENSHN_ABS
                                                              __fini_array_start.symtab0x4491940NOTYPE<unknown>HIDDENSHN_ABS
                                                              __glibc_strerror_r.symtab0x402d9068FUNC<unknown>DEFAULT3
                                                              __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __h_errno_location.symtab0x00FUNC<unknown>DEFAULTSHN_UNDEF
                                                              __heap_alloc.symtab0x403e80188FUNC<unknown>DEFAULT3
                                                              __heap_free.symtab0x403f88364FUNC<unknown>DEFAULT3
                                                              __heap_link_free_area.symtab0x403f4044FUNC<unknown>DEFAULT3
                                                              __heap_link_free_area_after.symtab0x403f6c28FUNC<unknown>DEFAULT3
                                                              __init_array_end.symtab0x4491940NOTYPE<unknown>HIDDENSHN_ABS
                                                              __init_array_start.symtab0x4491940NOTYPE<unknown>HIDDENSHN_ABS
                                                              __libc_close.symtab0x40086084FUNC<unknown>DEFAULT3
                                                              __libc_connect.symtab0x4039e084FUNC<unknown>DEFAULT3
                                                              __libc_creat.symtab0x404ccc28FUNC<unknown>DEFAULT3
                                                              __libc_fcntl.symtab0x4047f0136FUNC<unknown>DEFAULT3
                                                              __libc_fcntl64.symtab0x404880104FUNC<unknown>DEFAULT3
                                                              __libc_fork.symtab0x4008c084FUNC<unknown>DEFAULT3
                                                              __libc_getpid.symtab0x407a7084FUNC<unknown>DEFAULT3
                                                              __libc_lseek64.symtab0x407b30164FUNC<unknown>DEFAULT3
                                                              __libc_nanosleep.symtab0x404bf084FUNC<unknown>DEFAULT3
                                                              __libc_open.symtab0x404c50124FUNC<unknown>DEFAULT3
                                                              __libc_read.symtab0x407be084FUNC<unknown>DEFAULT3
                                                              __libc_send.symtab0x403a4084FUNC<unknown>DEFAULT3
                                                              __libc_sigaction.symtab0x407170232FUNC<unknown>DEFAULT3
                                                              __libc_stack_end.symtab0x44b7f04OBJECT<unknown>DEFAULT13
                                                              __libc_waitpid.symtab0x404d8028FUNC<unknown>DEFAULT3
                                                              __libc_write.symtab0x4073c084FUNC<unknown>DEFAULT3
                                                              __malloc_heap.symtab0x4494504OBJECT<unknown>DEFAULT10
                                                              __malloc_heap_lock.symtab0x44b7d024OBJECT<unknown>DEFAULT13
                                                              __malloc_sbrk_lock.symtab0x44b85024OBJECT<unknown>DEFAULT13
                                                              __pagesize.symtab0x44b7f84OBJECT<unknown>DEFAULT13
                                                              __preinit_array_end.symtab0x4491940NOTYPE<unknown>HIDDENSHN_ABS
                                                              __preinit_array_start.symtab0x4491940NOTYPE<unknown>HIDDENSHN_ABS
                                                              __pthread_initialize_minimal.symtab0x00FUNC<unknown>DEFAULTSHN_UNDEF
                                                              __pthread_mutex_init.symtab0x4043248FUNC<unknown>DEFAULT3
                                                              __pthread_mutex_lock.symtab0x4043248FUNC<unknown>DEFAULT3
                                                              __pthread_mutex_trylock.symtab0x4043248FUNC<unknown>DEFAULT3
                                                              __pthread_mutex_unlock.symtab0x4043248FUNC<unknown>DEFAULT3
                                                              __pthread_return_0.symtab0x4043248FUNC<unknown>DEFAULT3
                                                              __pthread_return_void.symtab0x40432c8FUNC<unknown>DEFAULT3
                                                              __raise.symtab0x40799076FUNC<unknown>HIDDEN3
                                                              __register_frame_info.symtab0x00FUNC<unknown>DEFAULTSHN_UNDEF
                                                              __rtld_fini.symtab0x44b8004OBJECT<unknown>HIDDEN13
                                                              __sigaddset.symtab0x407a0844FUNC<unknown>DEFAULT3
                                                              __sigdelset.symtab0x407a3448FUNC<unknown>DEFAULT3
                                                              __sigismember.symtab0x4079e040FUNC<unknown>DEFAULT3
                                                              __start.symtab0x4002a0100FUNC<unknown>DEFAULT3
                                                              __stdin.symtab0x44923c4OBJECT<unknown>DEFAULT10
                                                              __stdio_READ.symtab0x407600140FUNC<unknown>HIDDEN3
                                                              __stdio_WRITE.symtab0x405360280FUNC<unknown>HIDDEN3
                                                              __stdio_adjust_position.symtab0x407690320FUNC<unknown>HIDDEN3
                                                              __stdio_fwrite.symtab0x4057f0472FUNC<unknown>HIDDEN3
                                                              __stdio_init_mutex.symtab0x400ec832FUNC<unknown>HIDDEN3
                                                              __stdio_mutex_initializer.3833.symtab0x407db024OBJECT<unknown>DEFAULT5
                                                              __stdio_rfill.symtab0x4077d088FUNC<unknown>HIDDEN3
                                                              __stdio_seek.symtab0x407920112FUNC<unknown>HIDDEN3
                                                              __stdio_trans2r_o.symtab0x407830228FUNC<unknown>HIDDEN3
                                                              __stdio_trans2w_o.symtab0x4059d0308FUNC<unknown>HIDDEN3
                                                              __stdio_wcommit.symtab0x401010100FUNC<unknown>HIDDEN3
                                                              __stdout.symtab0x4492404OBJECT<unknown>DEFAULT10
                                                              __syscall_error.symtab0x40712072FUNC<unknown>HIDDEN3
                                                              __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __syscall_fcntl64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __syscall_rt_sigaction.symtab0x40726084FUNC<unknown>HIDDEN3
                                                              __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __uClibc_fini.symtab0x404260196FUNC<unknown>DEFAULT3
                                                              __uClibc_init.symtab0x4043bc140FUNC<unknown>DEFAULT3
                                                              __uClibc_main.symtab0x404448864FUNC<unknown>DEFAULT3
                                                              __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              __uclibc_progname.symtab0x4494604OBJECT<unknown>HIDDEN10
                                                              __xpg_strerror_r.symtab0x402de0392FUNC<unknown>DEFAULT3
                                                              __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _charpad.symtab0x401190128FUNC<unknown>DEFAULT3
                                                              _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _dl_aux_init.symtab0x40708044FUNC<unknown>DEFAULT3
                                                              _dl_phdr.symtab0x44977c4OBJECT<unknown>DEFAULT12
                                                              _dl_phnum.symtab0x4497804OBJECT<unknown>DEFAULT12
                                                              _edata.symtab0x44977c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                              _end.symtab0x44b8680NOTYPE<unknown>DEFAULTSHN_ABS
                                                              _errno.symtab0x44b8104OBJECT<unknown>DEFAULT13
                                                              _exit.symtab0x4048f080FUNC<unknown>DEFAULT3
                                                              _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _fbss.symtab0x44977c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                              _fdata.symtab0x4491b00NOTYPE<unknown>DEFAULT10
                                                              _fini.symtab0x407cb028FUNC<unknown>DEFAULT4
                                                              _fixed_buffers.symtab0x4497c88192OBJECT<unknown>DEFAULT13
                                                              _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _fp_out_narrow.symtab0x401210228FUNC<unknown>DEFAULT3
                                                              _fpmaxtostr.symtab0x405d502120FUNC<unknown>HIDDEN3
                                                              _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _ftext.symtab0x4001600NOTYPE<unknown>DEFAULT3
                                                              _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _gp.symtab0x4514c00NOTYPE<unknown>DEFAULTSHN_ABS
                                                              _gp_disp.symtab0x00OBJECT<unknown>DEFAULTSHN_UNDEF
                                                              _h_errno.symtab0x44b8144OBJECT<unknown>DEFAULT13
                                                              _init.symtab0x4000cc28FUNC<unknown>DEFAULT2
                                                              _load_inttype.symtab0x405b10136FUNC<unknown>HIDDEN3
                                                              _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _ppfs_init.symtab0x401aa0220FUNC<unknown>HIDDEN3
                                                              _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _ppfs_parsespec.symtab0x401e7c1512FUNC<unknown>HIDDEN3
                                                              _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _ppfs_prepargs.symtab0x401b80100FUNC<unknown>HIDDEN3
                                                              _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _ppfs_setargs.symtab0x401bf0544FUNC<unknown>HIDDEN3
                                                              _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _promoted_size.symtab0x401e10108FUNC<unknown>DEFAULT3
                                                              _pthread_cleanup_pop_restore.symtab0x40432c8FUNC<unknown>DEFAULT3
                                                              _pthread_cleanup_push_defer.symtab0x40432c8FUNC<unknown>DEFAULT3
                                                              _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _stdio_fopen.symtab0x405480880FUNC<unknown>HIDDEN3
                                                              _stdio_init.symtab0x400e10184FUNC<unknown>HIDDEN3
                                                              _stdio_openlist.symtab0x4492444OBJECT<unknown>DEFAULT10
                                                              _stdio_openlist_add_lock.symtab0x4491f024OBJECT<unknown>DEFAULT10
                                                              _stdio_openlist_dec_use.symtab0x4065a0400FUNC<unknown>DEFAULT3
                                                              _stdio_openlist_del_count.symtab0x4497c44OBJECT<unknown>DEFAULT13
                                                              _stdio_openlist_del_lock.symtab0x44920824OBJECT<unknown>DEFAULT10
                                                              _stdio_openlist_use_count.symtab0x4497c04OBJECT<unknown>DEFAULT13
                                                              _stdio_streams.symtab0x449248240OBJECT<unknown>DEFAULT10
                                                              _stdio_term.symtab0x400ee8284FUNC<unknown>HIDDEN3
                                                              _stdio_user_locking.symtab0x4492204OBJECT<unknown>DEFAULT10
                                                              _store_inttype.symtab0x405ba068FUNC<unknown>HIDDEN3
                                                              _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _string_syserrmsgs.symtab0x407f202934OBJECT<unknown>HIDDEN5
                                                              _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _uintmaxtostr.symtab0x405bf0340FUNC<unknown>HIDDEN3
                                                              _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _vfprintf_internal.symtab0x4012f41960FUNC<unknown>HIDDEN3
                                                              _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              abort.symtab0x406de0428FUNC<unknown>DEFAULT3
                                                              abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              been_there_done_that.symtab0x44b8204OBJECT<unknown>DEFAULT13
                                                              been_there_done_that.2792.symtab0x44b8044OBJECT<unknown>DEFAULT13
                                                              blacklist.symtab0x4491e012OBJECT<unknown>DEFAULT10
                                                              brk.symtab0x4070b0112FUNC<unknown>DEFAULT3
                                                              brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              close.symtab0x40086084FUNC<unknown>DEFAULT3
                                                              close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              completed.2296.symtab0x4497901OBJECT<unknown>DEFAULT13
                                                              connect.symtab0x4039e084FUNC<unknown>DEFAULT3
                                                              connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              creat.symtab0x404ccc28FUNC<unknown>DEFAULT3
                                                              crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              data_start.symtab0x4491d00OBJECT<unknown>DEFAULT10
                                                              dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              dup2.symtab0x40494084FUNC<unknown>DEFAULT3
                                                              dup2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              environ.symtab0x44b7f44OBJECT<unknown>DEFAULT13
                                                              errno.symtab0x44b8104OBJECT<unknown>DEFAULT13
                                                              errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              estridx.symtab0x407e90126OBJECT<unknown>DEFAULT5
                                                              execl.symtab0x404100204FUNC<unknown>DEFAULT3
                                                              execl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              execve.symtab0x4049a084FUNC<unknown>DEFAULT3
                                                              execve.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              exit.symtab0x406f90236FUNC<unknown>DEFAULT3
                                                              exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              exp10_table.symtab0x40914872OBJECT<unknown>DEFAULT5
                                                              fclose.symtab0x404f80512FUNC<unknown>DEFAULT3
                                                              fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fcntl.symtab0x4047f0136FUNC<unknown>DEFAULT3
                                                              fcntl64.symtab0x404880104FUNC<unknown>DEFAULT3
                                                              fdopen.symtab0x405180128FUNC<unknown>DEFAULT3
                                                              fdopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fflush_unlocked.symtab0x406730628FUNC<unknown>DEFAULT3
                                                              fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fgetc_unlocked.symtab0x4069b0388FUNC<unknown>DEFAULT3
                                                              fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fgets.symtab0x402470216FUNC<unknown>DEFAULT3
                                                              fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fgets_unlocked.symtab0x402550268FUNC<unknown>DEFAULT3
                                                              fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fmt.symtab0x40913020OBJECT<unknown>DEFAULT5
                                                              fork.symtab0x4008c084FUNC<unknown>DEFAULT3
                                                              fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fprintf.symtab0x400a0072FUNC<unknown>DEFAULT3
                                                              fprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fputs_unlocked.symtab0x402660128FUNC<unknown>DEFAULT3
                                                              fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              frame_dummy.symtab0x40021c0FUNC<unknown>DEFAULT3
                                                              free.symtab0x403cf0396FUNC<unknown>DEFAULT3
                                                              free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fseek.symtab0x40742068FUNC<unknown>DEFAULT3
                                                              fseeko.symtab0x40742068FUNC<unknown>DEFAULT3
                                                              fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fseeko64.symtab0x407470388FUNC<unknown>DEFAULT3
                                                              fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              fwrite_unlocked.symtab0x4026e0280FUNC<unknown>DEFAULT3
                                                              fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              getc_unlocked.symtab0x4069b0388FUNC<unknown>DEFAULT3
                                                              getegid.symtab0x404a0088FUNC<unknown>DEFAULT3
                                                              getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              geteuid.symtab0x404a6088FUNC<unknown>DEFAULT3
                                                              geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              getgid.symtab0x404ac084FUNC<unknown>DEFAULT3
                                                              getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              getpid.symtab0x407a7084FUNC<unknown>DEFAULT3
                                                              getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              getuid.symtab0x404b2084FUNC<unknown>DEFAULT3
                                                              getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              h_errno.symtab0x44b8144OBJECT<unknown>DEFAULT13
                                                              heap_alloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              heap_free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              hlt.symtab0x4002fc0NOTYPE<unknown>DEFAULT3
                                                              htonl.symtab0x4030a040FUNC<unknown>DEFAULT3
                                                              htons.symtab0x4030c824FUNC<unknown>DEFAULT3
                                                              index.symtab0x4029d0256FUNC<unknown>DEFAULT3
                                                              inet_ntop.symtab0x403680852FUNC<unknown>DEFAULT3
                                                              inet_ntop4.symtab0x40348c500FUNC<unknown>DEFAULT3
                                                              inet_pton.symtab0x4031d0700FUNC<unknown>DEFAULT3
                                                              inet_pton4.symtab0x4030e0240FUNC<unknown>DEFAULT3
                                                              initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              initial_fa.symtab0x449340264OBJECT<unknown>DEFAULT10
                                                              ioctl.symtab0x404b80104FUNC<unknown>DEFAULT3
                                                              ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              is_blacklisted.symtab0x4004cc200FUNC<unknown>DEFAULT3
                                                              isatty.symtab0x402f7060FUNC<unknown>DEFAULT3
                                                              isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              kill.symtab0x407ad088FUNC<unknown>DEFAULT3
                                                              kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              libc/string/mips/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              libc/string/mips/memset.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              libc/sysdeps/linux/mips/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              libc/sysdeps/linux/mips/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              libc/sysdeps/linux/mips/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              libc/sysdeps/linux/mips/pipe.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              lseek64.symtab0x407b30164FUNC<unknown>DEFAULT3
                                                              main.symtab0x40077c220FUNC<unknown>DEFAULT3
                                                              malloc.symtab0x403b00492FUNC<unknown>DEFAULT3
                                                              malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              memchr.symtab0x406b40264FUNC<unknown>DEFAULT3
                                                              memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              memcpy.symtab0x402800308FUNC<unknown>DEFAULT3
                                                              mempcpy.symtab0x406c5076FUNC<unknown>DEFAULT3
                                                              mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              memrchr.symtab0x406ca0272FUNC<unknown>DEFAULT3
                                                              memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              memset.symtab0x402940144FUNC<unknown>DEFAULT3
                                                              monitor_processes.symtab0x400594488FUNC<unknown>DEFAULT3
                                                              mylock.symtab0x44949024OBJECT<unknown>DEFAULT10
                                                              nanosleep.symtab0x404bf084FUNC<unknown>DEFAULT3
                                                              nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              ntohl.symtab0x40306040FUNC<unknown>DEFAULT3
                                                              ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              ntohs.symtab0x40308824FUNC<unknown>DEFAULT3
                                                              ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              object.2349.symtab0x44979424OBJECT<unknown>DEFAULT13
                                                              open.symtab0x404c50124FUNC<unknown>DEFAULT3
                                                              open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              p.2294.symtab0x4491c00OBJECT<unknown>DEFAULT10
                                                              pclose.symtab0x400a50324FUNC<unknown>DEFAULT3
                                                              perror.symtab0x4009a084FUNC<unknown>DEFAULT3
                                                              perror.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              pipe.symtab0x4047b064FUNC<unknown>DEFAULT3
                                                              popen.symtab0x400b94636FUNC<unknown>DEFAULT3
                                                              popen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              popen_list.symtab0x4497b04OBJECT<unknown>DEFAULT13
                                                              prefix.4045.symtab0x407de012OBJECT<unknown>DEFAULT5
                                                              ps.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              qual_chars.4050.symtab0x407e0020OBJECT<unknown>DEFAULT5
                                                              raise.symtab0x40799076FUNC<unknown>DEFAULT3
                                                              raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              read.symtab0x407be084FUNC<unknown>DEFAULT3
                                                              read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              sbrk.symtab0x404cf0144FUNC<unknown>DEFAULT3
                                                              sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              send.symtab0x403a4084FUNC<unknown>DEFAULT3
                                                              send.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              send_to_server.symtab0x400310444FUNC<unknown>DEFAULT3
                                                              setsid.symtab0x40092084FUNC<unknown>DEFAULT3
                                                              setsid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              sigaction.symtab0x407170232FUNC<unknown>DEFAULT3
                                                              sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              sigprocmask.symtab0x4072c0148FUNC<unknown>DEFAULT3
                                                              sigprocmask.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              sigsetops.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              socket.symtab0x403aa084FUNC<unknown>DEFAULT3
                                                              socket.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              spec_and_mask.4049.symtab0x407e1416OBJECT<unknown>DEFAULT5
                                                              spec_base.4044.symtab0x407dec7OBJECT<unknown>DEFAULT5
                                                              spec_chars.4046.symtab0x407e4021OBJECT<unknown>DEFAULT5
                                                              spec_flags.4045.symtab0x407e588OBJECT<unknown>DEFAULT5
                                                              spec_or_mask.4048.symtab0x407e2416OBJECT<unknown>DEFAULT5
                                                              spec_ranges.4047.symtab0x407e349OBJECT<unknown>DEFAULT5
                                                              sprintf.symtab0x40520080FUNC<unknown>DEFAULT3
                                                              sprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              stderr.symtab0x4492384OBJECT<unknown>DEFAULT10
                                                              stdin.symtab0x4492304OBJECT<unknown>DEFAULT10
                                                              stdout.symtab0x4492344OBJECT<unknown>DEFAULT10
                                                              strchr.symtab0x4029d0256FUNC<unknown>DEFAULT3
                                                              strchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              strcpy.symtab0x406db036FUNC<unknown>DEFAULT3
                                                              strcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              strerror_r.symtab0x402de0392FUNC<unknown>DEFAULT3
                                                              strlen.symtab0x402ad0184FUNC<unknown>DEFAULT3
                                                              strlen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              strnlen.symtab0x402b90256FUNC<unknown>DEFAULT3
                                                              strnlen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              strstr.symtab0x402c90256FUNC<unknown>DEFAULT3
                                                              strstr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              tcgetattr.symtab0x402fb0176FUNC<unknown>DEFAULT3
                                                              tcgetattr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              tolower.symtab0x404da060FUNC<unknown>DEFAULT3
                                                              tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              type_codes.symtab0x407e6024OBJECT<unknown>DEFAULT5
                                                              type_sizes.symtab0x407e7812OBJECT<unknown>DEFAULT5
                                                              unknown.1088.symtab0x407f1014OBJECT<unknown>DEFAULT5
                                                              usleep.symtab0x4041d0144FUNC<unknown>DEFAULT3
                                                              usleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              vfprintf.symtab0x401080260FUNC<unknown>DEFAULT3
                                                              vfprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              vsnprintf.symtab0x405250260FUNC<unknown>DEFAULT3
                                                              vsnprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              wait4.symtab0x40736088FUNC<unknown>DEFAULT3
                                                              wait4.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              waitpid.symtab0x404d8028FUNC<unknown>DEFAULT3
                                                              waitpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              wcrtomb.symtab0x404de0112FUNC<unknown>DEFAULT3
                                                              wcrtomb.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              wcsnrtombs.symtab0x404e90228FUNC<unknown>DEFAULT3
                                                              wcsnrtombs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              wcsrtombs.symtab0x404e5064FUNC<unknown>DEFAULT3
                                                              wcsrtombs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              write.symtab0x4073c084FUNC<unknown>DEFAULT3
                                                              write.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                              xdigits.3043.symtab0x408ab417OBJECT<unknown>DEFAULT5

                                                              Download Network PCAP: filteredfull

                                                              • Total Packets: 11
                                                              • 443 (HTTPS)
                                                              • 80 (HTTP)
                                                              TimestampSource PortDest PortSource IPDest IP
                                                              Mar 20, 2025 13:09:42.607196093 CET43928443192.168.2.2391.189.91.42
                                                              Mar 20, 2025 13:09:47.982070923 CET42836443192.168.2.2391.189.91.43
                                                              Mar 20, 2025 13:09:48.237765074 CET4251680192.168.2.23109.202.202.202
                                                              Mar 20, 2025 13:09:52.780920029 CET39254443192.168.2.2334.249.145.219
                                                              Mar 20, 2025 13:09:52.780955076 CET4433925434.249.145.219192.168.2.23
                                                              Mar 20, 2025 13:09:52.780996084 CET39254443192.168.2.2334.249.145.219
                                                              Mar 20, 2025 13:09:52.781872034 CET39254443192.168.2.2334.249.145.219
                                                              Mar 20, 2025 13:09:52.781882048 CET4433925434.249.145.219192.168.2.23
                                                              Mar 20, 2025 13:10:03.851833105 CET43928443192.168.2.2391.189.91.42
                                                              Mar 20, 2025 13:10:14.090282917 CET42836443192.168.2.2391.189.91.43
                                                              Mar 20, 2025 13:10:18.185807943 CET4251680192.168.2.23109.202.202.202
                                                              Mar 20, 2025 13:10:44.808943033 CET43928443192.168.2.2391.189.91.42
                                                              Mar 20, 2025 13:10:52.773680925 CET39254443192.168.2.2334.249.145.219
                                                              Mar 20, 2025 13:10:52.816338062 CET4433925434.249.145.219192.168.2.23
                                                              Mar 20, 2025 13:11:45.999738932 CET4433925434.249.145.219192.168.2.23

                                                              System Behavior

                                                              Start time (UTC):12:09:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:/tmp/psmpsl.elf
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:09:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:09:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:09:48
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:48
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:48
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:48
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:09:50
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:50
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:50
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:50
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:09:53
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:53
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:53
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:53
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:09:56
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:56
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:56
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:56
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:09:58
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:09:58
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:58
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:09:58
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:10:01
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:10:01
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:10:01
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:10:01
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:10:04
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:10:04
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:10:04
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:10:04
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:10:06
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9

                                                              Start time (UTC):12:10:06
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:10:06
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                              Start time (UTC):12:10:06
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327

                                                              Start time (UTC):12:10:08
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:08
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:08
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:08
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:10
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:10
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:10
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:10
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:12
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:12
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:12
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:12
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:14
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:14
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:14
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:14
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:16
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:16
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:16
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:16
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:20
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:20
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:20
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:20
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:22
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:22
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:22
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:22
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:26
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:26
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:27
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:27
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:30
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:30
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:30
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:30
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:33
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:33
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:33
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:33
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:35
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:35
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:35
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:35
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:37
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:37
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:38
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:38
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:45
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:45
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:45
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:45
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:47
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:47
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:47
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:47
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:49
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:49
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:49
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:49
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:55
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:55
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:55
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:55
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:57
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:57
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:57
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:57
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:59
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:10:59
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:59
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:59
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:02
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:02
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:02
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:02
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:05
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:05
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:05
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:05
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:07
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:07
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:07
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:07
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:09
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:09
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:10
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:10
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:13
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:13
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:13
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:13
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:17
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:17
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:17
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:17
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:19
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:19
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:19
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:19
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:21
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:21
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:21
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:21
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:24
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:24
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:24
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:24
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:26
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:26
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:26
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:26
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:29
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:29
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:29
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:29
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:31
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:31
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:31
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:31
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:34
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:34
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:34
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:34
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:36
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:36
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:36
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:36
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:38
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:38
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:38
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:38
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:41
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:43
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:11:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/tmp/psmpsl.elf
                                                              Arguments:-
                                                              File size:5773336 bytes
                                                              MD5 hash:0d6f61f82cf2f781c6eb0661071d42d9
                                                              Start time (UTC):12:11:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:sh -c "ps w"
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/bin/sh
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:11:46
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/ps
                                                              Arguments:ps w
                                                              File size:137688 bytes
                                                              MD5 hash:ab48054475a6f70f8e7fa847331f3327
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/dash
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/rm
                                                              Arguments:rm -f /tmp/tmp.hA8dUxSD2j /tmp/tmp.lSG5KTmQok /tmp/tmp.qgcoIaD7xy
                                                              File size:72056 bytes
                                                              MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/dash
                                                              Arguments:-
                                                              File size:129816 bytes
                                                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c
                                                              Start time (UTC):12:10:52
                                                              Start date (UTC):20/03/2025
                                                              Path:/usr/bin/rm
                                                              Arguments:rm -f /tmp/tmp.hA8dUxSD2j /tmp/tmp.lSG5KTmQok /tmp/tmp.qgcoIaD7xy
                                                              File size:72056 bytes
                                                              MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b