Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
pXdN91.armv4l.elf

Overview

General Information

Sample name:pXdN91.armv4l.elf
Analysis ID:1571430
MD5:afed65ad40cc73b376ce08e54bb2ae28
SHA1:dbf9dbf836a59dcf37993fbe21878d1c86a8c171
SHA256:aa0183c87fad630a9813924dfb76170324745d8e44b2a555e68bb1c8f9aa7e30
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt
Score:100
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Detected Mirai
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected Gafgyt
Yara detected Mirai
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Sample contains strings that are user agent strings indicative of HTTP manipulation
Suricata IDS alerts with low severity for network traffic
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1571430
Start date and time:2024-12-09 11:17:11 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 54s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:pXdN91.armv4l.elf
Detection:MAL
Classification:mal100.spre.troj.linELF@0/0@2/0

Warnings

  • VT rate limit hit for: pXdN91.armv4l.elf

Runtime Messages

Command:/tmp/pXdN91.armv4l.elf
PID:5429
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
pXdN91.armv4l.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    pXdN91.armv4l.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      pXdN91.armv4l.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
      • 0x13624:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13638:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1364c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13660:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13674:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13688:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1369c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x136b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x136c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x136d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x136ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13700:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13714:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13728:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1373c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13750:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13764:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x13778:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1378c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x137a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x137b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      pXdN91.armv4l.elfLinux_Trojan_Gafgyt_ea92cca8unknownunknown
      • 0x128f4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
      • 0x135d4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

      Memory Dumps

      SourceRuleDescriptionAuthorStrings
      5433.1.00007efd44017000.00007efd4402d000.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security
        5433.1.00007efd44017000.00007efd4402d000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
          5433.1.00007efd44017000.00007efd4402d000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
          • 0x13624:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13638:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x1364c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13660:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13674:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13688:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x1369c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x136b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x136c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x136d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x136ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13700:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13714:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13728:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x1373c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13750:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13764:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x13778:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x1378c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x137a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x137b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          5433.1.00007efd44017000.00007efd4402d000.r-x.sdmpLinux_Trojan_Gafgyt_ea92cca8unknownunknown
          • 0x128f4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
          • 0x135d4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
          5429.1.00007efd44017000.00007efd4402d000.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security
            Click to see the 9 entries

            Suricata Signatures

            TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
            2024-12-09T11:17:56.042807+010028464071A Network Trojan was detected192.168.2.1337394154.213.187.1413387TCP
            2024-12-09T11:17:58.308574+010028464071A Network Trojan was detected192.168.2.1337396154.213.187.1413387TCP
            2024-12-09T11:18:00.591088+010028464071A Network Trojan was detected192.168.2.1337398154.213.187.1413387TCP
            2024-12-09T11:18:02.871608+010028464071A Network Trojan was detected192.168.2.1337400154.213.187.1413387TCP
            2024-12-09T11:18:07.630216+010028464071A Network Trojan was detected192.168.2.1337402154.213.187.1413387TCP
            2024-12-09T11:18:10.019364+010028464071A Network Trojan was detected192.168.2.1337404154.213.187.1413387TCP
            2024-12-09T11:18:12.273921+010028464071A Network Trojan was detected192.168.2.1337406154.213.187.1413387TCP
            2024-12-09T11:18:14.551695+010028464071A Network Trojan was detected192.168.2.1337408154.213.187.1413387TCP
            2024-12-09T11:18:16.824370+010028464071A Network Trojan was detected192.168.2.1337410154.213.187.1413387TCP
            2024-12-09T11:18:19.207107+010028464071A Network Trojan was detected192.168.2.1337412154.213.187.1413387TCP
            2024-12-09T11:18:21.576400+010028464071A Network Trojan was detected192.168.2.1337414154.213.187.1413387TCP
            2024-12-09T11:18:23.862073+010028464071A Network Trojan was detected192.168.2.1337416154.213.187.1413387TCP
            2024-12-09T11:18:26.237346+010028464071A Network Trojan was detected192.168.2.1337418154.213.187.1413387TCP
            2024-12-09T11:18:28.612390+010028464071A Network Trojan was detected192.168.2.1337420154.213.187.1413387TCP
            2024-12-09T11:18:30.887419+010028464071A Network Trojan was detected192.168.2.1337422154.213.187.1413387TCP
            2024-12-09T11:18:33.218449+010028464071A Network Trojan was detected192.168.2.1337424154.213.187.1413387TCP
            2024-12-09T11:18:35.501554+010028464071A Network Trojan was detected192.168.2.1337426154.213.187.1413387TCP
            2024-12-09T11:18:40.269501+010028464071A Network Trojan was detected192.168.2.1337428154.213.187.1413387TCP
            2024-12-09T11:18:42.559538+010028464071A Network Trojan was detected192.168.2.1337430154.213.187.1413387TCP
            2024-12-09T11:18:56.838260+010028464071A Network Trojan was detected192.168.2.1337432154.213.187.1413387TCP
            2024-12-09T11:18:59.106685+010028464071A Network Trojan was detected192.168.2.1337434154.213.187.1413387TCP
            2024-12-09T11:19:01.387100+010028464071A Network Trojan was detected192.168.2.1337436154.213.187.1413387TCP
            2024-12-09T11:19:03.652878+010028464071A Network Trojan was detected192.168.2.1337438154.213.187.1413387TCP
            2024-12-09T11:19:05.918886+010028464071A Network Trojan was detected192.168.2.1337440154.213.187.1413387TCP
            2024-12-09T11:19:08.184492+010028464071A Network Trojan was detected192.168.2.1337442154.213.187.1413387TCP
            2024-12-09T11:19:10.431299+010028464071A Network Trojan was detected192.168.2.1337444154.213.187.1413387TCP
            2024-12-09T11:19:12.700063+010028464071A Network Trojan was detected192.168.2.1337446154.213.187.1413387TCP
            2024-12-09T11:19:14.966421+010028464071A Network Trojan was detected192.168.2.1337448154.213.187.1413387TCP
            2024-12-09T11:19:17.232187+010028464071A Network Trojan was detected192.168.2.1337450154.213.187.1413387TCP
            2024-12-09T11:19:19.486882+010028464071A Network Trojan was detected192.168.2.1337452154.213.187.1413387TCP
            2024-12-09T11:19:21.743554+010028464071A Network Trojan was detected192.168.2.1337454154.213.187.1413387TCP
            2024-12-09T11:19:24.013138+010028464071A Network Trojan was detected192.168.2.1337456154.213.187.1413387TCP
            2024-12-09T11:19:26.274637+010028464071A Network Trojan was detected192.168.2.1337458154.213.187.1413387TCP
            2024-12-09T11:19:28.544626+010028464071A Network Trojan was detected192.168.2.1337460154.213.187.1413387TCP
            2024-12-09T11:19:30.791165+010028464071A Network Trojan was detected192.168.2.1337462154.213.187.1413387TCP
            2024-12-09T11:19:33.041179+010028464071A Network Trojan was detected192.168.2.1337464154.213.187.1413387TCP
            2024-12-09T11:19:35.291178+010028464071A Network Trojan was detected192.168.2.1337466154.213.187.1413387TCP
            2024-12-09T11:19:37.555130+010028464071A Network Trojan was detected192.168.2.1337468154.213.187.1413387TCP
            2024-12-09T11:19:39.826427+010028464071A Network Trojan was detected192.168.2.1337470154.213.187.1413387TCP
            2024-12-09T11:19:42.108004+010028464071A Network Trojan was detected192.168.2.1337472154.213.187.1413387TCP
            2024-12-09T11:19:44.388661+010028464071A Network Trojan was detected192.168.2.1337474154.213.187.1413387TCP
            2024-12-09T11:19:46.635703+010028464071A Network Trojan was detected192.168.2.1337476154.213.187.1413387TCP
            2024-12-09T11:19:48.900113+010028464071A Network Trojan was detected192.168.2.1337478154.213.187.1413387TCP
            2024-12-09T11:19:51.171535+010028464071A Network Trojan was detected192.168.2.1337480154.213.187.1413387TCP
            2024-12-09T11:19:53.416728+010028464071A Network Trojan was detected192.168.2.1337482154.213.187.1413387TCP
            2024-12-09T11:19:55.686669+010028464071A Network Trojan was detected192.168.2.1337484154.213.187.1413387TCP
            2024-12-09T11:19:57.947789+010028464071A Network Trojan was detected192.168.2.1337486154.213.187.1413387TCP
            2024-12-09T11:20:00.218024+010028464071A Network Trojan was detected192.168.2.1337488154.213.187.1413387TCP
            2024-12-09T11:20:02.498069+010028464071A Network Trojan was detected192.168.2.1337490154.213.187.1413387TCP
            2024-12-09T11:20:04.779104+010028464071A Network Trojan was detected192.168.2.1337492154.213.187.1413387TCP
            2024-12-09T11:20:07.026883+010028464071A Network Trojan was detected192.168.2.1337494154.213.187.1413387TCP
            2024-12-09T11:20:09.275758+010028464071A Network Trojan was detected192.168.2.1337496154.213.187.1413387TCP
            2024-12-09T11:20:11.526494+010028464071A Network Trojan was detected192.168.2.1337498154.213.187.1413387TCP
            2024-12-09T11:20:13.791616+010028464071A Network Trojan was detected192.168.2.1337500154.213.187.1413387TCP
            2024-12-09T11:20:16.061352+010028464071A Network Trojan was detected192.168.2.1337502154.213.187.1413387TCP
            2024-12-09T11:20:18.342462+010028464071A Network Trojan was detected192.168.2.1337504154.213.187.1413387TCP
            2024-12-09T11:20:20.607774+010028464071A Network Trojan was detected192.168.2.1337506154.213.187.1413387TCP
            2024-12-09T11:20:22.889384+010028464071A Network Trojan was detected192.168.2.1337508154.213.187.1413387TCP
            2024-12-09T11:20:25.135234+010028464071A Network Trojan was detected192.168.2.1337510154.213.187.1413387TCP
            2024-12-09T11:20:27.404301+010028464071A Network Trojan was detected192.168.2.1337512154.213.187.1413387TCP
            2024-12-09T11:20:29.670649+010028464071A Network Trojan was detected192.168.2.1337514154.213.187.1413387TCP
            2024-12-09T11:20:31.935621+010028464071A Network Trojan was detected192.168.2.1337516154.213.187.1413387TCP
            2024-12-09T11:20:34.218888+010028464071A Network Trojan was detected192.168.2.1337518154.213.187.1413387TCP
            2024-12-09T11:20:36.464253+010028464071A Network Trojan was detected192.168.2.1337520154.213.187.1413387TCP
            2024-12-09T11:20:38.714210+010028464071A Network Trojan was detected192.168.2.1337522154.213.187.1413387TCP
            2024-12-09T11:20:40.964013+010028464071A Network Trojan was detected192.168.2.1337524154.213.187.1413387TCP
            2024-12-09T11:20:43.233147+010028464071A Network Trojan was detected192.168.2.1337526154.213.187.1413387TCP
            2024-12-09T11:20:45.479701+010028464071A Network Trojan was detected192.168.2.1337528154.213.187.1413387TCP
            2024-12-09T11:20:47.746328+010028464071A Network Trojan was detected192.168.2.1337530154.213.187.1413387TCP
            2024-12-09T11:20:50.024908+010028464071A Network Trojan was detected192.168.2.1337532154.213.187.1413387TCP
            2024-12-09T11:20:52.296219+010028464071A Network Trojan was detected192.168.2.1337534154.213.187.1413387TCP
            2024-12-09T11:20:54.577201+010028464071A Network Trojan was detected192.168.2.1337536154.213.187.1413387TCP
            2024-12-09T11:20:56.823870+010028464071A Network Trojan was detected192.168.2.1337538154.213.187.1413387TCP
            2024-12-09T11:20:59.094131+010028464071A Network Trojan was detected192.168.2.1337540154.213.187.1413387TCP
            2024-12-09T11:21:01.348930+010028464071A Network Trojan was detected192.168.2.1337542154.213.187.1413387TCP
            2024-12-09T11:21:03.624749+010028464071A Network Trojan was detected192.168.2.1337544154.213.187.1413387TCP
            2024-12-09T11:21:05.871136+010028464071A Network Trojan was detected192.168.2.1337546154.213.187.1413387TCP
            2024-12-09T11:21:08.120920+010028464071A Network Trojan was detected192.168.2.1337548154.213.187.1413387TCP
            2024-12-09T11:21:10.372422+010028464071A Network Trojan was detected192.168.2.1337550154.213.187.1413387TCP
            2024-12-09T11:21:12.641311+010028464071A Network Trojan was detected192.168.2.1337552154.213.187.1413387TCP
            2024-12-09T11:21:14.901953+010028464071A Network Trojan was detected192.168.2.1337554154.213.187.1413387TCP
            2024-12-09T11:21:17.216007+010028464071A Network Trojan was detected192.168.2.1337556154.213.187.1413387TCP
            2024-12-09T11:21:19.465214+010028464071A Network Trojan was detected192.168.2.1337558154.213.187.1413387TCP
            2024-12-09T11:21:21.715018+010028464071A Network Trojan was detected192.168.2.1337560154.213.187.1413387TCP
            2024-12-09T11:21:23.966613+010028464071A Network Trojan was detected192.168.2.1337562154.213.187.1413387TCP
            2024-12-09T11:21:26.215874+010028464071A Network Trojan was detected192.168.2.1337564154.213.187.1413387TCP
            2024-12-09T11:21:28.465898+010028464071A Network Trojan was detected192.168.2.1337566154.213.187.1413387TCP
            TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
            2024-12-09T11:17:56.162245+010028484481A Network Trojan was detected192.168.2.1337394154.213.187.1413387TCP
            2024-12-09T11:17:58.427910+010028484481A Network Trojan was detected192.168.2.1337396154.213.187.1413387TCP
            2024-12-09T11:18:00.710796+010028484481A Network Trojan was detected192.168.2.1337398154.213.187.1413387TCP
            2024-12-09T11:18:02.991083+010028484481A Network Trojan was detected192.168.2.1337400154.213.187.1413387TCP
            2024-12-09T11:18:07.749603+010028484481A Network Trojan was detected192.168.2.1337402154.213.187.1413387TCP
            2024-12-09T11:18:10.138919+010028484481A Network Trojan was detected192.168.2.1337404154.213.187.1413387TCP
            2024-12-09T11:18:12.393334+010028484481A Network Trojan was detected192.168.2.1337406154.213.187.1413387TCP
            2024-12-09T11:18:14.672218+010028484481A Network Trojan was detected192.168.2.1337408154.213.187.1413387TCP
            2024-12-09T11:18:16.943945+010028484481A Network Trojan was detected192.168.2.1337410154.213.187.1413387TCP
            2024-12-09T11:18:19.326474+010028484481A Network Trojan was detected192.168.2.1337412154.213.187.1413387TCP
            2024-12-09T11:18:21.695895+010028484481A Network Trojan was detected192.168.2.1337414154.213.187.1413387TCP
            2024-12-09T11:18:23.981449+010028484481A Network Trojan was detected192.168.2.1337416154.213.187.1413387TCP
            2024-12-09T11:18:26.356759+010028484481A Network Trojan was detected192.168.2.1337418154.213.187.1413387TCP
            2024-12-09T11:18:28.735650+010028484481A Network Trojan was detected192.168.2.1337420154.213.187.1413387TCP
            2024-12-09T11:18:31.006948+010028484481A Network Trojan was detected192.168.2.1337422154.213.187.1413387TCP
            2024-12-09T11:18:33.337786+010028484481A Network Trojan was detected192.168.2.1337424154.213.187.1413387TCP
            2024-12-09T11:18:35.620950+010028484481A Network Trojan was detected192.168.2.1337426154.213.187.1413387TCP
            2024-12-09T11:18:40.391930+010028484481A Network Trojan was detected192.168.2.1337428154.213.187.1413387TCP
            2024-12-09T11:18:42.678959+010028484481A Network Trojan was detected192.168.2.1337430154.213.187.1413387TCP
            2024-12-09T11:18:56.957697+010028484481A Network Trojan was detected192.168.2.1337432154.213.187.1413387TCP
            2024-12-09T11:18:59.226256+010028484481A Network Trojan was detected192.168.2.1337434154.213.187.1413387TCP
            2024-12-09T11:19:01.507536+010028484481A Network Trojan was detected192.168.2.1337436154.213.187.1413387TCP
            2024-12-09T11:19:03.772362+010028484481A Network Trojan was detected192.168.2.1337438154.213.187.1413387TCP
            2024-12-09T11:19:06.038499+010028484481A Network Trojan was detected192.168.2.1337440154.213.187.1413387TCP
            2024-12-09T11:19:08.303981+010028484481A Network Trojan was detected192.168.2.1337442154.213.187.1413387TCP
            2024-12-09T11:19:10.550810+010028484481A Network Trojan was detected192.168.2.1337444154.213.187.1413387TCP
            2024-12-09T11:19:12.819806+010028484481A Network Trojan was detected192.168.2.1337446154.213.187.1413387TCP
            2024-12-09T11:19:15.085923+010028484481A Network Trojan was detected192.168.2.1337448154.213.187.1413387TCP
            2024-12-09T11:19:17.351688+010028484481A Network Trojan was detected192.168.2.1337450154.213.187.1413387TCP
            2024-12-09T11:19:19.606305+010028484481A Network Trojan was detected192.168.2.1337452154.213.187.1413387TCP
            2024-12-09T11:19:21.862983+010028484481A Network Trojan was detected192.168.2.1337454154.213.187.1413387TCP
            2024-12-09T11:19:24.133468+010028484481A Network Trojan was detected192.168.2.1337456154.213.187.1413387TCP
            2024-12-09T11:19:26.393975+010028484481A Network Trojan was detected192.168.2.1337458154.213.187.1413387TCP
            2024-12-09T11:19:28.664152+010028484481A Network Trojan was detected192.168.2.1337460154.213.187.1413387TCP
            2024-12-09T11:19:30.910663+010028484481A Network Trojan was detected192.168.2.1337462154.213.187.1413387TCP
            2024-12-09T11:19:33.161361+010028484481A Network Trojan was detected192.168.2.1337464154.213.187.1413387TCP
            2024-12-09T11:19:35.410793+010028484481A Network Trojan was detected192.168.2.1337466154.213.187.1413387TCP
            2024-12-09T11:19:37.674825+010028484481A Network Trojan was detected192.168.2.1337468154.213.187.1413387TCP
            2024-12-09T11:19:39.946037+010028484481A Network Trojan was detected192.168.2.1337470154.213.187.1413387TCP
            2024-12-09T11:19:42.227452+010028484481A Network Trojan was detected192.168.2.1337472154.213.187.1413387TCP
            2024-12-09T11:19:44.508126+010028484481A Network Trojan was detected192.168.2.1337474154.213.187.1413387TCP
            2024-12-09T11:19:46.755685+010028484481A Network Trojan was detected192.168.2.1337476154.213.187.1413387TCP
            2024-12-09T11:19:49.019513+010028484481A Network Trojan was detected192.168.2.1337478154.213.187.1413387TCP
            2024-12-09T11:19:51.291043+010028484481A Network Trojan was detected192.168.2.1337480154.213.187.1413387TCP
            2024-12-09T11:19:53.536168+010028484481A Network Trojan was detected192.168.2.1337482154.213.187.1413387TCP
            2024-12-09T11:19:55.806176+010028484481A Network Trojan was detected192.168.2.1337484154.213.187.1413387TCP
            2024-12-09T11:19:58.067217+010028484481A Network Trojan was detected192.168.2.1337486154.213.187.1413387TCP
            2024-12-09T11:20:00.337549+010028484481A Network Trojan was detected192.168.2.1337488154.213.187.1413387TCP
            2024-12-09T11:20:02.617516+010028484481A Network Trojan was detected192.168.2.1337490154.213.187.1413387TCP
            2024-12-09T11:20:04.898459+010028484481A Network Trojan was detected192.168.2.1337492154.213.187.1413387TCP
            2024-12-09T11:20:07.146686+010028484481A Network Trojan was detected192.168.2.1337494154.213.187.1413387TCP
            2024-12-09T11:20:09.395194+010028484481A Network Trojan was detected192.168.2.1337496154.213.187.1413387TCP
            2024-12-09T11:20:11.646058+010028484481A Network Trojan was detected192.168.2.1337498154.213.187.1413387TCP
            2024-12-09T11:20:13.911204+010028484481A Network Trojan was detected192.168.2.1337500154.213.187.1413387TCP
            2024-12-09T11:20:16.180804+010028484481A Network Trojan was detected192.168.2.1337502154.213.187.1413387TCP
            2024-12-09T11:20:18.461835+010028484481A Network Trojan was detected192.168.2.1337504154.213.187.1413387TCP
            2024-12-09T11:20:20.728896+010028484481A Network Trojan was detected192.168.2.1337506154.213.187.1413387TCP
            2024-12-09T11:20:23.008749+010028484481A Network Trojan was detected192.168.2.1337508154.213.187.1413387TCP
            2024-12-09T11:20:25.255144+010028484481A Network Trojan was detected192.168.2.1337510154.213.187.1413387TCP
            2024-12-09T11:20:27.523615+010028484481A Network Trojan was detected192.168.2.1337512154.213.187.1413387TCP
            2024-12-09T11:20:29.790166+010028484481A Network Trojan was detected192.168.2.1337514154.213.187.1413387TCP
            2024-12-09T11:20:32.054908+010028484481A Network Trojan was detected192.168.2.1337516154.213.187.1413387TCP
            2024-12-09T11:20:34.338784+010028484481A Network Trojan was detected192.168.2.1337518154.213.187.1413387TCP
            2024-12-09T11:20:36.583744+010028484481A Network Trojan was detected192.168.2.1337520154.213.187.1413387TCP
            2024-12-09T11:20:38.833656+010028484481A Network Trojan was detected192.168.2.1337522154.213.187.1413387TCP
            2024-12-09T11:20:41.083969+010028484481A Network Trojan was detected192.168.2.1337524154.213.187.1413387TCP
            2024-12-09T11:20:43.352858+010028484481A Network Trojan was detected192.168.2.1337526154.213.187.1413387TCP
            2024-12-09T11:20:45.599062+010028484481A Network Trojan was detected192.168.2.1337528154.213.187.1413387TCP
            2024-12-09T11:20:47.865690+010028484481A Network Trojan was detected192.168.2.1337530154.213.187.1413387TCP
            2024-12-09T11:20:50.144400+010028484481A Network Trojan was detected192.168.2.1337532154.213.187.1413387TCP
            2024-12-09T11:20:52.415706+010028484481A Network Trojan was detected192.168.2.1337534154.213.187.1413387TCP
            2024-12-09T11:20:54.696551+010028484481A Network Trojan was detected192.168.2.1337536154.213.187.1413387TCP
            2024-12-09T11:20:56.943384+010028484481A Network Trojan was detected192.168.2.1337538154.213.187.1413387TCP
            2024-12-09T11:20:59.213574+010028484481A Network Trojan was detected192.168.2.1337540154.213.187.1413387TCP
            2024-12-09T11:21:01.468220+010028484481A Network Trojan was detected192.168.2.1337542154.213.187.1413387TCP
            2024-12-09T11:21:03.744442+010028484481A Network Trojan was detected192.168.2.1337544154.213.187.1413387TCP
            2024-12-09T11:21:05.990692+010028484481A Network Trojan was detected192.168.2.1337546154.213.187.1413387TCP
            2024-12-09T11:21:08.240545+010028484481A Network Trojan was detected192.168.2.1337548154.213.187.1413387TCP
            2024-12-09T11:21:10.491707+010028484481A Network Trojan was detected192.168.2.1337550154.213.187.1413387TCP
            2024-12-09T11:21:12.760689+010028484481A Network Trojan was detected192.168.2.1337552154.213.187.1413387TCP
            2024-12-09T11:21:15.021299+010028484481A Network Trojan was detected192.168.2.1337554154.213.187.1413387TCP
            2024-12-09T11:21:17.335525+010028484481A Network Trojan was detected192.168.2.1337556154.213.187.1413387TCP
            2024-12-09T11:21:19.584530+010028484481A Network Trojan was detected192.168.2.1337558154.213.187.1413387TCP
            2024-12-09T11:21:21.834403+010028484481A Network Trojan was detected192.168.2.1337560154.213.187.1413387TCP
            2024-12-09T11:21:24.085995+010028484481A Network Trojan was detected192.168.2.1337562154.213.187.1413387TCP
            2024-12-09T11:21:26.335594+010028484481A Network Trojan was detected192.168.2.1337564154.213.187.1413387TCP
            2024-12-09T11:21:28.585173+010028484481A Network Trojan was detected192.168.2.1337566154.213.187.1413387TCP

            Joe Sandbox Signatures

            Click to jump to signature section

            Show All Signature Results

            AV Detection

            barindex
            Antivirus / Scanner detection for submitted sample
            Source: pXdN91.armv4l.elfAvira: detected
            Found malware configuration
            Source: pXdN91.armv4l.elfMalware Configuration Extractor: Gafgyt {"C2 url": "154.213.187.14:13387"}
            Multi AV Scanner detection for submitted file
            Source: pXdN91.armv4l.elfReversingLabs: Detection: 57%

            Spreading

            barindex
            Opens /proc/net/* files useful for finding connected devices and routers
            Source: /tmp/pXdN91.armv4l.elf (PID: 5429)Opens: /proc/net/routeJump to behavior

            Networking

            barindex
            Suricata IDS alerts for network traffic
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37400 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37470 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37424 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37450 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37426 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37422 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37524 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37508 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37526 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37406 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37530 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37430 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37404 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37394 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37442 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37398 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37448 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37552 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37494 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37438 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37410 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37440 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37518 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37414 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37444 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37500 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37396 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37566 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37540 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37502 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37522 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37446 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37562 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37436 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37420 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37460 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37546 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37408 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37454 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37434 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37428 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37418 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37506 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37516 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37458 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37528 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37412 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37510 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37402 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37486 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37468 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37456 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37416 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37490 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37482 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37464 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37532 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37498 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37512 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37452 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37550 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37462 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37534 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37480 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37542 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37466 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37554 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37476 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37548 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37472 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37492 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37474 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37558 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37432 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37496 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37536 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37478 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37556 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37564 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37520 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37488 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37484 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37544 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37504 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37514 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37560 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2846407 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Activity : 192.168.2.13:37538 -> 154.213.187.14:13387
            Source: global trafficTCP traffic: 192.168.2.13:37394 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37426 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37450 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37448 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37494 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37398 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37438 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37518 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37552 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37414 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37424 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37530 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37566 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37400 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37422 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37524 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37396 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37540 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37444 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37508 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37502 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37526 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37406 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37446 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37404 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37522 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37394 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37408 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37460 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37434 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37546 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37440 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37500 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37412 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37470 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37562 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37442 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37430 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37486 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37420 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37402 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37454 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37428 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37418 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37458 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37516 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37528 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37464 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37456 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37510 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37416 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37436 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37512 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37506 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37490 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37462 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37410 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37468 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37532 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37498 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37554 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37482 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37480 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37550 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37534 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37452 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37474 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37466 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37548 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37496 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37558 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37492 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37542 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37472 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37536 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37564 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37488 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37476 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37520 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37478 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37484 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37544 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37504 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37514 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37556 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37432 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37560 -> 154.213.187.14:13387
            Source: Network trafficSuricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:37538 -> 154.213.187.14:13387
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: unknownTCP traffic detected without corresponding DNS query: 154.213.187.14
            Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

            System Summary

            barindex
            Malicious sample detected (through community Yara rule)
            Source: pXdN91.armv4l.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: pXdN91.armv4l.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5429, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5429, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5433, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5433, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: pXdN91.armv4l.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: pXdN91.armv4l.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5429, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5429, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5433, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: Process Memory Space: pXdN91.armv4l.elf PID: 5433, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: classification engineClassification label: mal100.spre.troj.linELF@0/0@2/0
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/_memcpy.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/bcopy.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/bzero.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/memcpy.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/memmove.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/memset.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/strcmp.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/string/arm/strlen.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
            Source: pXdN91.armv4l.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S
            Source: /tmp/pXdN91.armv4l.elf (PID: 5429)Queries kernel information via 'uname': Jump to behavior
            Source: pXdN91.armv4l.elf, 5429.1.00005588e9af4000.00005588e9c22000.rw-.sdmp, pXdN91.armv4l.elf, 5433.1.00005588e9af4000.00005588e9c22000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
            Source: pXdN91.armv4l.elf, 5429.1.00007fffe77c8000.00007fffe77e9000.rw-.sdmp, pXdN91.armv4l.elf, 5433.1.00007fffe77c8000.00007fffe77e9000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/pXdN91.armv4l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/pXdN91.armv4l.elf
            Source: pXdN91.armv4l.elf, 5429.1.00005588e9af4000.00005588e9c22000.rw-.sdmp, pXdN91.armv4l.elf, 5433.1.00005588e9af4000.00005588e9c22000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
            Source: pXdN91.armv4l.elf, 5429.1.00007fffe77c8000.00007fffe77e9000.rw-.sdmp, pXdN91.armv4l.elf, 5433.1.00007fffe77c8000.00007fffe77e9000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

            Stealing of Sensitive Information

            barindex
            Yara detected Gafgyt
            Source: Yara matchFile source: pXdN91.armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Yara detected Mirai
            Source: Yara matchFile source: pXdN91.armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: pXdN91.armv4l.elf PID: 5429, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: pXdN91.armv4l.elf PID: 5433, type: MEMORYSTR
            Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01
            Source: Initial sampleUser agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Linux; Android 5.0.2; HTCONE Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
            Source: Initial sampleUser agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Mobile/14F89
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36

            Remote Access Functionality

            barindex
            Detected Mirai
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Source: TrafficSuricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Activity
            Yara detected Gafgyt
            Source: Yara matchFile source: pXdN91.armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Yara detected Mirai
            Source: Yara matchFile source: pXdN91.armv4l.elf, type: SAMPLE
            Source: Yara matchFile source: 5433.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5429.1.00007efd44017000.00007efd4402d000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: pXdN91.armv4l.elf PID: 5429, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: pXdN91.armv4l.elf PID: 5433, type: MEMORYSTR

            Mitre Att&ck Matrix

            ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
            Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume AccessOS Credential Dumping11
            Security Software Discovery            		Remote ServicesData from Local System1
            Data Obfuscation            		Exfiltration Over Other Network MediumAbuse Accessibility Features
            CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
            Remote System Discovery            		Remote Desktop ProtocolData from Removable Media1
            Non-Standard Port            		Exfiltration Over BluetoothNetwork Denial of Service
            Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
            Non-Application Layer Protocol            		Automated ExfiltrationData Encrypted for Impact
            Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
            Application Layer Protocol            		Traffic DuplicationData Destruction

            Malware Configuration

            Threatname: Gafgyt

            {"C2 url": "154.213.187.14:13387"}

            Behavior Graph

            Hide Legend

            Legend:

            • Process
            • Signature
            • Created File
            • DNS/IP Info
            • Is Dropped
            • Number of created Files
            • Is malicious
            • Internet

            Antivirus, Machine Learning and Genetic Malware Detection

            Initial Sample

            SourceDetectionScannerLabelLink
            pXdN91.armv4l.elf58%ReversingLabsLinux.Trojan.Gafgyt
            pXdN91.armv4l.elf100%AviraLINUX/Gafgyt.opnd

            Dropped Files

            ⊘No Antivirus matches

            Domains

            ⊘No Antivirus matches

            URLs

            ⊘No Antivirus matches

            Domains and IPs

            Contacted Domains

            NameIPActiveMaliciousAntivirus DetectionReputation
            daisy.ubuntu.com
            		162.213.35.25
            		truefalse
              		high

              Contacted URLs

              NameMaliciousAntivirus DetectionReputation
              154.213.187.14:13387true
                		unknown

                World Map of Contacted IPs

                • No. of IPs < 25%
                • 25% < No. of IPs < 50%
                • 50% < No. of IPs < 75%
                • 75% < No. of IPs

                Public IPs

                IPDomainCountryFlagASNASN NameMalicious
                154.213.187.14
                		unknownSeychelles
                		22769DDOSING-BGP-NETWORKUStrue

                Joe Sandbox View / Context

                IPs

                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                154.213.187.14pXdN91.mipsel.elfGet hashmaliciousMirai, GafgytBrowse
                  pXdN91.armv5l.elfGet hashmaliciousMirai, GafgytBrowse
                    pXdN91.mips.elfGet hashmaliciousMirai, GafgytBrowse
                      pXdN91.x68.elfGet hashmaliciousMirai, GafgytBrowse
                        pXdN91.sh4.elfGet hashmaliciousMirai, GafgytBrowse
                          pXdN91.mipsel.elfGet hashmaliciousMirai, GafgytBrowse
                            pXdN91.armv4l.elfGet hashmaliciousMirai, GafgytBrowse
                              pXdN91.armv5l.elfGet hashmaliciousMirai, GafgytBrowse
                                pXdN91.armv4l.elfGet hashmaliciousMirai, GafgytBrowse
                                  pXdN91.armv5l.elfGet hashmaliciousMirai, GafgytBrowse

                                    Domains

                                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                    daisy.ubuntu.compXdN91.mipsel.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 162.213.35.24
                                    Owari.sh4.elfGet hashmaliciousUnknownBrowse
                                    • 162.213.35.25
                                    Owari.arm7.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.24
                                    Owari.arm5.elfGet hashmaliciousUnknownBrowse
                                    • 162.213.35.25
                                    Owari.m68k.elfGet hashmaliciousUnknownBrowse
                                    • 162.213.35.25
                                    Owari.arm6.elfGet hashmaliciousUnknownBrowse
                                    • 162.213.35.25
                                    Aqua.arm7.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.24
                                    boatnet.mips.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.25
                                    boatnet.arm6.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.25
                                    boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                    • 162.213.35.24

                                    ASNs

                                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                    DDOSING-BGP-NETWORKUSpXdN91.mipsel.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    pXdN91.armv5l.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    pXdN91.mips.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    pXdN91.x68.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    pXdN91.sh4.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    pXdN91.mipsel.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    pXdN91.armv4l.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    pXdN91.armv5l.elfGet hashmaliciousMirai, GafgytBrowse
                                    • 154.213.187.14
                                    ub8ehJSePAfc9FYqZIT6.arm6.elfGet hashmaliciousUnknownBrowse
                                    • 154.213.187.149
                                    ub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
                                    • 154.213.187.149

                                    JA3 Fingerprints

                                    ⊘No context

                                    Dropped Files

                                    ⊘No context

                                    Created / dropped Files

                                    ⊘No created / dropped files found

                                    Static File Info

                                    General

                                    File type:ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
                                    Entropy (8bit):6.033016652157149
                                    TrID:
                                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                    File name:pXdN91.armv4l.elf
                                    File size:129'070 bytes
                                    MD5:afed65ad40cc73b376ce08e54bb2ae28
                                    SHA1:dbf9dbf836a59dcf37993fbe21878d1c86a8c171
                                    SHA256:aa0183c87fad630a9813924dfb76170324745d8e44b2a555e68bb1c8f9aa7e30
                                    SHA512:38fc3b0717d937c68465eef426612738c2f6200f2dd0365d663044917647a6011b84395cae3f369d6845b51c13da441f4598a6cc06578155e548ed93be680f9f
                                    SSDEEP:3072:dtvlnh9XovMV2HF7a6Hz0X7oW7vp/V4/FjMmfQK7oXdC8:Z8vq4a6IX7fzp/wMmfQK7udC8
                                    TLSH:0FC30705F5508667C2D327B6F79E879D373616E493E733015A38AFB42BC27882E3A521
                                    File Content Preview:.ELF...a..........(.........4...........4. ...(.....................T[..T[...............`...`...`.......i..........Q.td..................................-...L."....F..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

                                    Static ELF Info

                                    ELF header

                                    Class:ELF32
                                    Data:2's complement, little endian
                                    Version:1 (current)
                                    Machine:ARM
                                    Version Number:0x1
                                    Type:EXEC (Executable file)
                                    OS/ABI:ARM - ABI
                                    ABI Version:0
                                    Entry Point Address:0x8190
                                    Flags:0x202
                                    ELF Header Size:52
                                    Program Header Offset:52
                                    Program Header Size:32
                                    Number of Program Headers:3
                                    Section Header Offset:98708
                                    Section Header Size:40
                                    Number of Section Headers:20
                                    Header String Table Index:17

                                    Sections

                                    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                    NULL0x00x00x00x00x0000
                                    .initPROGBITS0x80940x940x180x00x6AX004
                                    .textPROGBITS0x80b00xb00x11c1c0x00x6AX0016
                                    .finiPROGBITS0x19ccc0x11ccc0x140x00x6AX004
                                    .rodataPROGBITS0x19ce00x11ce00x3e740x00x2A004
                                    .eh_framePROGBITS0x260000x160000x40x00x3WA004
                                    .ctorsPROGBITS0x260040x160040x80x00x3WA004
                                    .dtorsPROGBITS0x2600c0x1600c0x80x00x3WA004
                                    .jcrPROGBITS0x260140x160140x40x00x3WA004
                                    .dataPROGBITS0x260180x160180x2ec0x00x3WA004
                                    .bssNOBITS0x263040x163040x66b40x00x3WA004
                                    .commentPROGBITS0x00x163040xc640x00x0001
                                    .debug_arangesPROGBITS0x00x16f680x1200x00x0008
                                    .debug_infoPROGBITS0x00x170880x6080x00x0001
                                    .debug_abbrevPROGBITS0x00x176900xb40x00x0001
                                    .debug_linePROGBITS0x00x177440x9050x00x0001
                                    .debug_framePROGBITS0x00x1804c0xa00x00x0004
                                    .shstrtabSTRTAB0x00x180ec0xa80x00x0001
                                    .symtabSYMTAB0x00x184b40x4b800x100x0196684
                                    .strtabSTRTAB0x00x1d0340x27fa0x00x0001

                                    Program Segments

                                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                    LOAD0x00x80000x80000x15b540x15b546.19680x5R E0x8000.init .text .fini .rodata
                                    LOAD0x160000x260000x260000x3040x69b83.75560x6RW 0x8000.eh_frame .ctors .dtors .jcr .data .bss
                                    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                                    Symbols

                                    NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                    .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    .symtab0x80940SECTION<unknown>DEFAULT1
                                    .symtab0x80b00SECTION<unknown>DEFAULT2
                                    .symtab0x19ccc0SECTION<unknown>DEFAULT3
                                    .symtab0x19ce00SECTION<unknown>DEFAULT4
                                    .symtab0x260000SECTION<unknown>DEFAULT5
                                    .symtab0x260040SECTION<unknown>DEFAULT6
                                    .symtab0x2600c0SECTION<unknown>DEFAULT7
                                    .symtab0x260140SECTION<unknown>DEFAULT8
                                    .symtab0x260180SECTION<unknown>DEFAULT9
                                    .symtab0x263040SECTION<unknown>DEFAULT10
                                    .symtab0x00SECTION<unknown>DEFAULT11
                                    .symtab0x00SECTION<unknown>DEFAULT12
                                    .symtab0x00SECTION<unknown>DEFAULT13
                                    .symtab0x00SECTION<unknown>DEFAULT14
                                    .symtab0x00SECTION<unknown>DEFAULT15
                                    .symtab0x00SECTION<unknown>DEFAULT16
                                    .symtab0x00SECTION<unknown>DEFAULT17
                                    .symtab0x00SECTION<unknown>DEFAULT18
                                    .symtab0x00SECTION<unknown>DEFAULT19
                                    $a.symtab0x80940NOTYPE<unknown>DEFAULT1
                                    $a.symtab0x19ccc0NOTYPE<unknown>DEFAULT3
                                    $a.symtab0x80b00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x81280NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x19cd80NOTYPE<unknown>DEFAULT3
                                    $a.symtab0x81880NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x80a00NOTYPE<unknown>DEFAULT1
                                    $a.symtab0x19c900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x19cc40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x80a40NOTYPE<unknown>DEFAULT1
                                    $a.symtab0x80a80NOTYPE<unknown>DEFAULT1
                                    $a.symtab0x19cdc0NOTYPE<unknown>DEFAULT3
                                    $a.symtab0x81900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x81cc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x82a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x83d80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x84380NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x87d00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x90c80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x95500NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x99740NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x9e400NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xa0600NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xa2e40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xa9d40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xaba80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xb3300NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xb4ec0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xc1a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xc3540NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xc4e80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xc6bc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xc6d80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xd72c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xe0e00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xe26c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xeaf00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xec000NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xeccc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xedb00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xedb40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xedfc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xee040NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xee600NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xee680NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xee700NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xee9c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xeea40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xeed00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xef000NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xef2c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xef580NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xef840NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xefac0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xefd80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf0a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf0cc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf0f80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf1480NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf1700NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf19c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf1b40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf1e80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf2bc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf3780NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf4140NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf4a80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf5780NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf5840NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf5c00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf5f40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf6a80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf7240NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf7340NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf7ec0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf8180NOTYPE<unknown>DEFAULT2
                                    $a.symtab0xf8dc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1000c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x100a40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x100dc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x102780NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x102c40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x108040NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x108380NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x108f00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x109900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x109f00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10a000NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10a200NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10a300NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10a400NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10b380NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10c100NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10c380NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10c5c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10d480NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10d5c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10d680NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10e500NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10e700NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10ee80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10f500NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x10fe00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x110040NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1100c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1105c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x110880NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x110b40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x110e40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x111100NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1113c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x111700NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x111a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x111cc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x112700NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x112dc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x11b980NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x11ca40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x120f80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x121200NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x122200NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x122240NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x122a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1232c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x123c40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x124400NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x125080NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x125940NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x126740NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1273c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x127480NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x127500NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x128e80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1297c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x12a240NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x12b3c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x12f100NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x130fc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x131480NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x131ec0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x132240NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x132700NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x135100NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x135700NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x135e40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x135ec0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x136180NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x136300NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x136380NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x136640NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x136900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x136980NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x136a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x137380NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x137880NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x137e00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x137e80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x13e9c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x13ec80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x13ef40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x13f200NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x13f500NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x140240NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x140300NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x143b80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x144080NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x144280NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x144d40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x146440NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x146500NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x147080NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x149f40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x14b2c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x14c300NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x14ca00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x14ce00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x14e340NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x155d40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x156900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1572c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1586c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x15a3c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x15b6c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x15c000NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x160900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x160a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x161940NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x162080NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x162480NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x162f80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x163d40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1641c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x164600NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x164780NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x165600NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x165a00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x166900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x169280NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x169400NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x16ca80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x16ccc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x16d040NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x16d340NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x16e940NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x16ea00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x16fd80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x170340NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x170f40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x171200NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x171dc0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1720c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x172c40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x175900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1793c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x17a300NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x181b00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x181f00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x182300NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x1863c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x186b80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x187000NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x189f40NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18a200NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18a900NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18ae00NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18b440NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18b740NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18c5c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18d100NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18d6c0NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18d780NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18f580NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x18f840NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x190000NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x190a80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x191e80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x195e80NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x19b140NOTYPE<unknown>DEFAULT2
                                    $a.symtab0x19c3c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x260040NOTYPE<unknown>DEFAULT6
                                    $d.symtab0x2600c0NOTYPE<unknown>DEFAULT7
                                    $d.symtab0x81180NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x81740NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x260200NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x19cc00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x260240NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x81c00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x260280NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x82980NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x83cc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x84340NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x87bc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x90c40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x954c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x996c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x9e3c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1ac940NOTYPE<unknown>DEFAULT4
                                    $d.symtab0xa05c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xa2e00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xa9d00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xab9c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xb3040NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xb4e80NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xc1940NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xc3440NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xc4e00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xc6b00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xc6d40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xd6dc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xe0940NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xe2600NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xeac80NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf1b00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf1e40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x260a40NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x260ac0NOTYPE<unknown>DEFAULT9
                                    $d.symtab0xf2ac0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf3740NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf4100NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1cab40NOTYPE<unknown>DEFAULT4
                                    $d.symtab0xf5680NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf5800NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf5bc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf7200NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf7300NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xf7dc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x260b40NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x1cacc0NOTYPE<unknown>DEFAULT4
                                    $d.symtab0xf8cc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0xfff00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x102740NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x102b80NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x107d40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x261f00NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x10c080NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x10d400NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x10d640NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x10e480NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x10ee40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x10fdc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x110540NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1126c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x11b780NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x261f40NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x11c900NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x120d80NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1211c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x122100NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x2620c0NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x122880NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x123140NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x123ac0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x124280NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x262240NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x125040NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x125900NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x126680NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x127380NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1d6f80NOTYPE<unknown>DEFAULT4
                                    $d.symtab0x128e40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x129600NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x262d00NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x12a200NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x12b1c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x12b4c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x130dc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x131440NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x131dc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x132200NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x132640NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x134d40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x262e80NOTYPE<unknown>DEFAULT9
                                    $d.symtab0x135dc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1362c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x137dc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x140140NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x2c5480NOTYPE<unknown>DEFAULT10
                                    $d.symtab0x1402c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x143b40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x146280NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x149c40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x155b00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1d7880NOTYPE<unknown>DEFAULT4
                                    $d.symtab0x156800NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1571c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x158440NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x15a1c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x15b680NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1618c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x162f00NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x163cc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x165580NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1668c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x16c900NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x16cc40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x16d000NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x16fc80NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x175880NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x179340NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x181780NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x181ec0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x1822c0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x185f80NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x186a40NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x18d740NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x18f500NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x18ffc0NOTYPE<unknown>DEFAULT2
                                    $d.symtab0x262f80NOTYPE<unknown>DEFAULT9
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    /home/landley/work/ab7/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    C.1.3452.symtab0x1cab424OBJECT<unknown>DEFAULT4
                                    C.105.5525.symtab0x1aec812OBJECT<unknown>DEFAULT4
                                    C.130.5713.symtab0x1bd101128OBJECT<unknown>DEFAULT4
                                    C.190.6158.symtab0x1c20812OBJECT<unknown>DEFAULT4
                                    C.76.5261.symtab0x1ac9464OBJECT<unknown>DEFAULT4
                                    Laligned.symtab0x109b80NOTYPE<unknown>DEFAULT2
                                    Llastword.symtab0x109d40NOTYPE<unknown>DEFAULT2
                                    Nulled.symtab0x2c57880OBJECT<unknown>DEFAULT10
                                    Q.symtab0x2633816384OBJECT<unknown>DEFAULT10
                                    Randhex.symtab0xb330444FUNC<unknown>DEFAULT2
                                    SendHTTP.symtab0xc384356FUNC<unknown>DEFAULT2
                                    SendHttpRand.symtab0xc4e8468FUNC<unknown>DEFAULT2
                                    SendHttpRand2.symtab0xa9d4468FUNC<unknown>DEFAULT2
                                    SendSTDHEX.symtab0x9e40544FUNC<unknown>DEFAULT2
                                    _Exit.symtab0xf14840FUNC<unknown>DEFAULT2
                                    _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __CTOR_END__.symtab0x260080OBJECT<unknown>DEFAULT6
                                    __CTOR_LIST__.symtab0x260040OBJECT<unknown>DEFAULT6
                                    __C_ctype_b.symtab0x260a44OBJECT<unknown>DEFAULT9
                                    __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __C_ctype_b_data.symtab0x1c4b4768OBJECT<unknown>DEFAULT4
                                    __C_ctype_tolower.symtab0x262f84OBJECT<unknown>DEFAULT9
                                    __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __C_ctype_tolower_data.symtab0x1d854768OBJECT<unknown>DEFAULT4
                                    __C_ctype_toupper.symtab0x260ac4OBJECT<unknown>DEFAULT9
                                    __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __C_ctype_toupper_data.symtab0x1c7b4768OBJECT<unknown>DEFAULT4
                                    __DTOR_END__.symtab0x260100OBJECT<unknown>DEFAULT7
                                    __DTOR_LIST__.symtab0x2600c0OBJECT<unknown>DEFAULT7
                                    __EH_FRAME_BEGIN__.symtab0x260000OBJECT<unknown>DEFAULT5
                                    __FRAME_END__.symtab0x260000OBJECT<unknown>DEFAULT5
                                    __GI___C_ctype_b.symtab0x260a44OBJECT<unknown>HIDDEN9
                                    __GI___C_ctype_tolower.symtab0x262f84OBJECT<unknown>HIDDEN9
                                    __GI___C_ctype_toupper.symtab0x260ac4OBJECT<unknown>HIDDEN9
                                    __GI___ctype_b.symtab0x260a84OBJECT<unknown>HIDDEN9
                                    __GI___ctype_tolower.symtab0x262fc4OBJECT<unknown>HIDDEN9
                                    __GI___ctype_toupper.symtab0x260b04OBJECT<unknown>HIDDEN9
                                    __GI___errno_location.symtab0xf57812FUNC<unknown>HIDDEN2
                                    __GI___fcntl_nocancel.symtab0xf03c100FUNC<unknown>HIDDEN2
                                    __GI___fgetc_unlocked.symtab0x15a3c304FUNC<unknown>HIDDEN2
                                    __GI___glibc_strerror_r.symtab0x10d4820FUNC<unknown>HIDDEN2
                                    __GI___h_errno_location.symtab0x1402412FUNC<unknown>HIDDEN2
                                    __GI___libc_fcntl.symtab0xefd8100FUNC<unknown>HIDDEN2
                                    __GI___sigaddset.symtab0x1129436FUNC<unknown>HIDDEN2
                                    __GI___sigdelset.symtab0x112b836FUNC<unknown>HIDDEN2
                                    __GI___sigismember.symtab0x1127036FUNC<unknown>HIDDEN2
                                    __GI___uClibc_fini.symtab0x13180108FUNC<unknown>HIDDEN2
                                    __GI___uClibc_init.symtab0x1322476FUNC<unknown>HIDDEN2
                                    __GI___xpg_strerror_r.symtab0x10d68232FUNC<unknown>HIDDEN2
                                    __GI__exit.symtab0xf14840FUNC<unknown>HIDDEN2
                                    __GI_abort.symtab0x12120256FUNC<unknown>HIDDEN2
                                    __GI_atoi.symtab0x1273c12FUNC<unknown>HIDDEN2
                                    __GI_brk.symtab0x16ccc56FUNC<unknown>HIDDEN2
                                    __GI_chdir.symtab0xef0044FUNC<unknown>HIDDEN2
                                    __GI_clock_getres.symtab0x1363844FUNC<unknown>HIDDEN2
                                    __GI_close.symtab0xf17044FUNC<unknown>HIDDEN2
                                    __GI_closedir.symtab0xf1e8212FUNC<unknown>HIDDEN2
                                    __GI_config_close.symtab0x1435448FUNC<unknown>HIDDEN2
                                    __GI_config_open.symtab0x1438452FUNC<unknown>HIDDEN2
                                    __GI_config_read.symtab0x14030804FUNC<unknown>HIDDEN2
                                    __GI_connect.symtab0x1105c44FUNC<unknown>HIDDEN2
                                    __GI_errno.symtab0x2c5484OBJECT<unknown>HIDDEN10
                                    __GI_exit.symtab0x128e8148FUNC<unknown>HIDDEN2
                                    __GI_fclose.symtab0x144d4368FUNC<unknown>HIDDEN2
                                    __GI_fcntl.symtab0xefd8100FUNC<unknown>HIDDEN2
                                    __GI_fflush_unlocked.symtab0x1586c464FUNC<unknown>HIDDEN2
                                    __GI_fgetc.symtab0x155d4188FUNC<unknown>HIDDEN2
                                    __GI_fgetc_unlocked.symtab0x15a3c304FUNC<unknown>HIDDEN2
                                    __GI_fgets.symtab0x15690156FUNC<unknown>HIDDEN2
                                    __GI_fgets_unlocked.symtab0x15b6c148FUNC<unknown>HIDDEN2
                                    __GI_fopen.symtab0x1464412FUNC<unknown>HIDDEN2
                                    __GI_fork.symtab0xee7044FUNC<unknown>HIDDEN2
                                    __GI_fputs_unlocked.symtab0x1080452FUNC<unknown>HIDDEN2
                                    __GI_fseek.symtab0x16e9412FUNC<unknown>HIDDEN2
                                    __GI_fseeko64.symtab0x16ea0312FUNC<unknown>HIDDEN2
                                    __GI_fstat.symtab0x1373880FUNC<unknown>HIDDEN2
                                    __GI_fwrite_unlocked.symtab0x10838172FUNC<unknown>HIDDEN2
                                    __GI_getc_unlocked.symtab0x15a3c304FUNC<unknown>HIDDEN2
                                    __GI_getdtablesize.symtab0xef8440FUNC<unknown>HIDDEN2
                                    __GI_getegid.symtab0x136908FUNC<unknown>HIDDEN2
                                    __GI_geteuid.symtab0x136988FUNC<unknown>HIDDEN2
                                    __GI_getgid.symtab0x137e08FUNC<unknown>HIDDEN2
                                    __GI_gethostbyname.symtab0x110048FUNC<unknown>HIDDEN2
                                    __GI_gethostbyname2.symtab0x1100c80FUNC<unknown>HIDDEN2
                                    __GI_gethostbyname2_r.symtab0x16690664FUNC<unknown>HIDDEN2
                                    __GI_gethostbyname_r.symtab0x18700756FUNC<unknown>HIDDEN2
                                    __GI_gethostname.symtab0x18a20112FUNC<unknown>HIDDEN2
                                    __GI_getpagesize.symtab0x1361824FUNC<unknown>HIDDEN2
                                    __GI_getpid.symtab0xee608FUNC<unknown>HIDDEN2
                                    __GI_getrlimit.symtab0x1366444FUNC<unknown>HIDDEN2
                                    __GI_getsockname.symtab0x1108844FUNC<unknown>HIDDEN2
                                    __GI_getuid.symtab0x136308FUNC<unknown>HIDDEN2
                                    __GI_h_errno.symtab0x2c54c4OBJECT<unknown>HIDDEN10
                                    __GI_htonl.symtab0x10efc32FUNC<unknown>HIDDEN2
                                    __GI_htons.symtab0x10ee820FUNC<unknown>HIDDEN2
                                    __GI_inet_addr.symtab0x10fe036FUNC<unknown>HIDDEN2
                                    __GI_inet_aton.symtab0x165a0240FUNC<unknown>HIDDEN2
                                    __GI_inet_ntoa.symtab0x10fd412FUNC<unknown>HIDDEN2
                                    __GI_inet_ntoa_r.symtab0x10f50132FUNC<unknown>HIDDEN2
                                    __GI_inet_ntop.symtab0x176d0620FUNC<unknown>HIDDEN2
                                    __GI_inet_pton.symtab0x17390512FUNC<unknown>HIDDEN2
                                    __GI_initstate_r.symtab0x12674200FUNC<unknown>HIDDEN2
                                    __GI_ioctl.symtab0xf0f880FUNC<unknown>HIDDEN2
                                    __GI_isatty.symtab0x10e5032FUNC<unknown>HIDDEN2
                                    __GI_isspace.symtab0xf19c24FUNC<unknown>HIDDEN2
                                    __GI_kill.symtab0xefac44FUNC<unknown>HIDDEN2
                                    __GI_lseek64.symtab0x18ae0100FUNC<unknown>HIDDEN2
                                    __GI_memchr.symtab0x160a0244FUNC<unknown>HIDDEN2
                                    __GI_memcpy.symtab0x10a204FUNC<unknown>HIDDEN2
                                    __GI_memmove.symtab0x160904FUNC<unknown>HIDDEN2
                                    __GI_mempcpy.symtab0x1646024FUNC<unknown>HIDDEN2
                                    __GI_memrchr.symtab0x162f8220FUNC<unknown>HIDDEN2
                                    __GI_memset.symtab0x108f0156FUNC<unknown>HIDDEN2
                                    __GI_mmap.symtab0x1351096FUNC<unknown>HIDDEN2
                                    __GI_mremap.symtab0x16d0448FUNC<unknown>HIDDEN2
                                    __GI_munmap.symtab0x13e9c44FUNC<unknown>HIDDEN2
                                    __GI_nanosleep.symtab0x13ec844FUNC<unknown>HIDDEN2
                                    __GI_ntohl.symtab0x10f3032FUNC<unknown>HIDDEN2
                                    __GI_ntohs.symtab0x10f1c20FUNC<unknown>HIDDEN2
                                    __GI_open.symtab0xee0492FUNC<unknown>HIDDEN2
                                    __GI_opendir.symtab0xf378156FUNC<unknown>HIDDEN2
                                    __GI_poll.symtab0x189f444FUNC<unknown>HIDDEN2
                                    __GI_printf.symtab0xf58460FUNC<unknown>HIDDEN2
                                    __GI_raise.symtab0x1692824FUNC<unknown>HIDDEN2
                                    __GI_random.symtab0x12224124FUNC<unknown>HIDDEN2
                                    __GI_random_r.symtab0x12508140FUNC<unknown>HIDDEN2
                                    __GI_rawmemchr.symtab0x16248176FUNC<unknown>HIDDEN2
                                    __GI_read.symtab0xef5844FUNC<unknown>HIDDEN2
                                    __GI_readdir.symtab0xf4a8208FUNC<unknown>HIDDEN2
                                    __GI_readdir64.symtab0x13f50212FUNC<unknown>HIDDEN2
                                    __GI_readlink.symtab0xef2c44FUNC<unknown>HIDDEN2
                                    __GI_recv.symtab0x110e444FUNC<unknown>HIDDEN2
                                    __GI_sbrk.symtab0x1378888FUNC<unknown>HIDDEN2
                                    __GI_select.symtab0xeed048FUNC<unknown>HIDDEN2
                                    __GI_send.symtab0x1111044FUNC<unknown>HIDDEN2
                                    __GI_sendto.symtab0x1113c52FUNC<unknown>HIDDEN2
                                    __GI_setsid.symtab0xf0cc44FUNC<unknown>HIDDEN2
                                    __GI_setsockopt.symtab0x1117048FUNC<unknown>HIDDEN2
                                    __GI_setstate_r.symtab0x12440200FUNC<unknown>HIDDEN2
                                    __GI_sigaction.symtab0x13570116FUNC<unknown>HIDDEN2
                                    __GI_signal.symtab0x111cc164FUNC<unknown>HIDDEN2
                                    __GI_sigprocmask.symtab0x13f2048FUNC<unknown>HIDDEN2
                                    __GI_sleep.symtab0x1297c168FUNC<unknown>HIDDEN2
                                    __GI_socket.symtab0x111a044FUNC<unknown>HIDDEN2
                                    __GI_sprintf.symtab0xf5c052FUNC<unknown>HIDDEN2
                                    __GI_srandom_r.symtab0x12594224FUNC<unknown>HIDDEN2
                                    __GI_stat.symtab0x18a9080FUNC<unknown>HIDDEN2
                                    __GI_strcasecmp.symtab0x18f84124FUNC<unknown>HIDDEN2
                                    __GI_strcat.symtab0x10c1040FUNC<unknown>HIDDEN2
                                    __GI_strchr.symtab0x10c5c236FUNC<unknown>HIDDEN2
                                    __GI_strchrnul.symtab0x16478232FUNC<unknown>HIDDEN2
                                    __GI_strcmp.symtab0x10a0028FUNC<unknown>HIDDEN2
                                    __GI_strcoll.symtab0x10a0028FUNC<unknown>HIDDEN2
                                    __GI_strcpy.symtab0x10c3836FUNC<unknown>HIDDEN2
                                    __GI_strcspn.symtab0x1620864FUNC<unknown>HIDDEN2
                                    __GI_strdup.symtab0x18b4448FUNC<unknown>HIDDEN2
                                    __GI_strlen.symtab0x1099096FUNC<unknown>HIDDEN2
                                    __GI_strncpy.symtab0x1720c184FUNC<unknown>HIDDEN2
                                    __GI_strnlen.symtab0x10b38216FUNC<unknown>HIDDEN2
                                    __GI_strpbrk.symtab0x1656064FUNC<unknown>HIDDEN2
                                    __GI_strrchr.symtab0x1641c68FUNC<unknown>HIDDEN2
                                    __GI_strspn.symtab0x163d472FUNC<unknown>HIDDEN2
                                    __GI_strstr.symtab0x10a40248FUNC<unknown>HIDDEN2
                                    __GI_strtok.symtab0x10d5c12FUNC<unknown>HIDDEN2
                                    __GI_strtok_r.symtab0x16194116FUNC<unknown>HIDDEN2
                                    __GI_strtol.symtab0x127488FUNC<unknown>HIDDEN2
                                    __GI_sysconf.symtab0x12b3c1472FUNC<unknown>HIDDEN2
                                    __GI_tcgetattr.symtab0x10e70120FUNC<unknown>HIDDEN2
                                    __GI_time.symtab0xee688FUNC<unknown>HIDDEN2
                                    __GI_toupper.symtab0xf1b452FUNC<unknown>HIDDEN2
                                    __GI_uname.symtab0x18f5844FUNC<unknown>HIDDEN2
                                    __GI_vfprintf.symtab0xf818196FUNC<unknown>HIDDEN2
                                    __GI_vsnprintf.symtab0xf5f4180FUNC<unknown>HIDDEN2
                                    __GI_wait4.symtab0x135ec44FUNC<unknown>HIDDEN2
                                    __GI_waitpid.symtab0xee9c8FUNC<unknown>HIDDEN2
                                    __GI_wcrtomb.symtab0x143b880FUNC<unknown>HIDDEN2
                                    __GI_wcsnrtombs.symtab0x14428172FUNC<unknown>HIDDEN2
                                    __GI_wcsrtombs.symtab0x1440832FUNC<unknown>HIDDEN2
                                    __GI_write.symtab0xf0a044FUNC<unknown>HIDDEN2
                                    __JCR_END__.symtab0x260140OBJECT<unknown>DEFAULT8
                                    __JCR_LIST__.symtab0x260140OBJECT<unknown>DEFAULT8
                                    __adddf3.symtab0x191f4736FUNC<unknown>HIDDEN2
                                    __aeabi_cdcmpeq.symtab0x19bc420FUNC<unknown>HIDDEN2
                                    __aeabi_cdcmple.symtab0x19bc420FUNC<unknown>HIDDEN2
                                    __aeabi_cdrcmple.symtab0x19ba848FUNC<unknown>HIDDEN2
                                    __aeabi_d2uiz.symtab0x19c3c84FUNC<unknown>HIDDEN2
                                    __aeabi_dadd.symtab0x191f4736FUNC<unknown>HIDDEN2
                                    __aeabi_dcmpeq.symtab0x19bd820FUNC<unknown>HIDDEN2
                                    __aeabi_dcmpge.symtab0x19c1420FUNC<unknown>HIDDEN2
                                    __aeabi_dcmpgt.symtab0x19c2820FUNC<unknown>HIDDEN2
                                    __aeabi_dcmple.symtab0x19c0020FUNC<unknown>HIDDEN2
                                    __aeabi_dcmplt.symtab0x19bec20FUNC<unknown>HIDDEN2
                                    __aeabi_ddiv.symtab0x19910516FUNC<unknown>HIDDEN2
                                    __aeabi_dmul.symtab0x195e8808FUNC<unknown>HIDDEN2
                                    __aeabi_drsub.symtab0x191e80FUNC<unknown>HIDDEN2
                                    __aeabi_dsub.symtab0x191f0740FUNC<unknown>HIDDEN2
                                    __aeabi_f2d.symtab0x1952864FUNC<unknown>HIDDEN2
                                    __aeabi_i2d.symtab0x194fc44FUNC<unknown>HIDDEN2
                                    __aeabi_idiv.symtab0x190a80FUNC<unknown>HIDDEN2
                                    __aeabi_idiv0.symtab0xedb04FUNC<unknown>HIDDEN2
                                    __aeabi_idivmod.symtab0x191d024FUNC<unknown>HIDDEN2
                                    __aeabi_l2d.symtab0x1957c108FUNC<unknown>HIDDEN2
                                    __aeabi_ldiv0.symtab0xedb04FUNC<unknown>HIDDEN2
                                    __aeabi_ui2d.symtab0x194d440FUNC<unknown>HIDDEN2
                                    __aeabi_uidiv.symtab0xeaf00FUNC<unknown>HIDDEN2
                                    __aeabi_uidivmod.symtab0xebe824FUNC<unknown>HIDDEN2
                                    __aeabi_ul2d.symtab0x19568128FUNC<unknown>HIDDEN2
                                    __app_fini.symtab0x2c5404OBJECT<unknown>HIDDEN10
                                    __atexit_lock.symtab0x262d024OBJECT<unknown>DEFAULT9
                                    __bss_end__.symtab0x2c9b80NOTYPE<unknown>DEFAULTSHN_ABS
                                    __bss_start.symtab0x263040NOTYPE<unknown>DEFAULTSHN_ABS
                                    __bss_start__.symtab0x263040NOTYPE<unknown>DEFAULTSHN_ABS
                                    __check_one_fd.symtab0x131ec56FUNC<unknown>DEFAULT2
                                    __close_nameservers.symtab0x1863c124FUNC<unknown>HIDDEN2
                                    __cmpdf2.symtab0x19b24132FUNC<unknown>HIDDEN2
                                    __ctype_b.symtab0x260a84OBJECT<unknown>DEFAULT9
                                    __ctype_tolower.symtab0x262fc4OBJECT<unknown>DEFAULT9
                                    __ctype_toupper.symtab0x260b04OBJECT<unknown>DEFAULT9
                                    __curbrk.symtab0x2c5504OBJECT<unknown>HIDDEN10
                                    __data_start.symtab0x260180NOTYPE<unknown>DEFAULT9
                                    __decode_dotted.symtab0x1793c244FUNC<unknown>HIDDEN2
                                    __decode_header.symtab0x18c5c180FUNC<unknown>HIDDEN2
                                    __default_rt_sa_restorer.symtab0x135e80FUNC<unknown>DEFAULT2
                                    __default_sa_restorer.symtab0x135e40FUNC<unknown>DEFAULT2
                                    __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    __div0.symtab0xedb04FUNC<unknown>HIDDEN2
                                    __divdf3.symtab0x19910516FUNC<unknown>HIDDEN2
                                    __divsi3.symtab0x190a8296FUNC<unknown>HIDDEN2
                                    __dns_lookup.symtab0x17a301920FUNC<unknown>HIDDEN2
                                    __do_global_ctors_aux.symtab0x19c900FUNC<unknown>DEFAULT2
                                    __do_global_dtors_aux.symtab0x80b00FUNC<unknown>DEFAULT2
                                    __dso_handle.symtab0x2601c0OBJECT<unknown>HIDDEN9
                                    __encode_dotted.symtab0x19000168FUNC<unknown>HIDDEN2
                                    __encode_header.symtab0x18b74232FUNC<unknown>HIDDEN2
                                    __encode_question.symtab0x18d1092FUNC<unknown>HIDDEN2
                                    __end__.symtab0x2c9b80NOTYPE<unknown>DEFAULTSHN_ABS
                                    __environ.symtab0x2c5384OBJECT<unknown>DEFAULT10
                                    __eqdf2.symtab0x19b24132FUNC<unknown>HIDDEN2
                                    __errno_location.symtab0xf57812FUNC<unknown>DEFAULT2
                                    __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __exit_cleanup.symtab0x2c5304OBJECT<unknown>HIDDEN10
                                    __extendsfdf2.symtab0x1952864FUNC<unknown>HIDDEN2
                                    __fcntl_nocancel.symtab0xf03c100FUNC<unknown>DEFAULT2
                                    __fgetc_unlocked.symtab0x15a3c304FUNC<unknown>DEFAULT2
                                    __fini_array_end.symtab0x260040NOTYPE<unknown>HIDDENSHN_ABS
                                    __fini_array_start.symtab0x260040NOTYPE<unknown>HIDDENSHN_ABS
                                    __fixunsdfsi.symtab0x19c3c84FUNC<unknown>HIDDEN2
                                    __floatdidf.symtab0x1957c108FUNC<unknown>HIDDEN2
                                    __floatsidf.symtab0x194fc44FUNC<unknown>HIDDEN2
                                    __floatundidf.symtab0x19568128FUNC<unknown>HIDDEN2
                                    __floatunsidf.symtab0x194d440FUNC<unknown>HIDDEN2
                                    __gedf2.symtab0x19b14148FUNC<unknown>HIDDEN2
                                    __get_hosts_byname_r.symtab0x186b872FUNC<unknown>HIDDEN2
                                    __getdents.symtab0x136a0152FUNC<unknown>HIDDEN2
                                    __getdents64.symtab0x16d34352FUNC<unknown>HIDDEN2
                                    __getpagesize.symtab0x1361824FUNC<unknown>DEFAULT2
                                    __glibc_strerror_r.symtab0x10d4820FUNC<unknown>DEFAULT2
                                    __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __gtdf2.symtab0x19b14148FUNC<unknown>HIDDEN2
                                    __h_errno_location.symtab0x1402412FUNC<unknown>DEFAULT2
                                    __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __init_array_end.symtab0x260040NOTYPE<unknown>HIDDENSHN_ABS
                                    __init_array_start.symtab0x260040NOTYPE<unknown>HIDDENSHN_ABS
                                    __ledf2.symtab0x19b1c140FUNC<unknown>HIDDEN2
                                    __libc_close.symtab0xf17044FUNC<unknown>DEFAULT2
                                    __libc_connect.symtab0x1105c44FUNC<unknown>DEFAULT2
                                    __libc_fcntl.symtab0xefd8100FUNC<unknown>DEFAULT2
                                    __libc_fork.symtab0xee7044FUNC<unknown>DEFAULT2
                                    __libc_lseek64.symtab0x18ae0100FUNC<unknown>DEFAULT2
                                    __libc_nanosleep.symtab0x13ec844FUNC<unknown>DEFAULT2
                                    __libc_open.symtab0xee0492FUNC<unknown>DEFAULT2
                                    __libc_read.symtab0xef5844FUNC<unknown>DEFAULT2
                                    __libc_recv.symtab0x110e444FUNC<unknown>DEFAULT2
                                    __libc_select.symtab0xeed048FUNC<unknown>DEFAULT2
                                    __libc_send.symtab0x1111044FUNC<unknown>DEFAULT2
                                    __libc_sendto.symtab0x1113c52FUNC<unknown>DEFAULT2
                                    __libc_sigaction.symtab0x13570116FUNC<unknown>DEFAULT2
                                    __libc_stack_end.symtab0x2c5344OBJECT<unknown>DEFAULT10
                                    __libc_waitpid.symtab0xee9c8FUNC<unknown>DEFAULT2
                                    __libc_write.symtab0xf0a044FUNC<unknown>DEFAULT2
                                    __local_nameserver.symtab0x1d83416OBJECT<unknown>HIDDEN4
                                    __ltdf2.symtab0x19b1c140FUNC<unknown>HIDDEN2
                                    __malloc_consolidate.symtab0x11d48424FUNC<unknown>HIDDEN2
                                    __malloc_largebin_index.symtab0x112dc120FUNC<unknown>DEFAULT2
                                    __malloc_lock.symtab0x261f424OBJECT<unknown>DEFAULT9
                                    __malloc_state.symtab0x2c624888OBJECT<unknown>DEFAULT10
                                    __malloc_trim.symtab0x11ca4164FUNC<unknown>DEFAULT2
                                    __modsi3.symtab0xeccc228FUNC<unknown>HIDDEN2
                                    __muldf3.symtab0x195e8808FUNC<unknown>HIDDEN2
                                    __muldi3.symtab0xedb472FUNC<unknown>HIDDEN2
                                    __nameserver.symtab0x2c9ac4OBJECT<unknown>HIDDEN10
                                    __nameservers.symtab0x2c9b04OBJECT<unknown>HIDDEN10
                                    __nedf2.symtab0x19b24132FUNC<unknown>HIDDEN2
                                    __open_etc_hosts.symtab0x18d6c12FUNC<unknown>HIDDEN2
                                    __open_nameservers.symtab0x182301036FUNC<unknown>HIDDEN2
                                    __pagesize.symtab0x2c53c4OBJECT<unknown>DEFAULT10
                                    __preinit_array_end.symtab0x260040NOTYPE<unknown>HIDDENSHN_ABS
                                    __preinit_array_start.symtab0x260040NOTYPE<unknown>HIDDENSHN_ABS
                                    __progname.symtab0x262ec4OBJECT<unknown>DEFAULT9
                                    __progname_full.symtab0x262f04OBJECT<unknown>DEFAULT9
                                    __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    __pthread_mutex_init.symtab0x131508FUNC<unknown>DEFAULT2
                                    __pthread_mutex_lock.symtab0x131488FUNC<unknown>DEFAULT2
                                    __pthread_mutex_trylock.symtab0x131488FUNC<unknown>DEFAULT2
                                    __pthread_mutex_unlock.symtab0x131488FUNC<unknown>DEFAULT2
                                    __pthread_return_0.symtab0x131488FUNC<unknown>DEFAULT2
                                    __read_etc_hosts_r.symtab0x18d78480FUNC<unknown>HIDDEN2
                                    __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                    __res_sync.symtab0x2c9a44OBJECT<unknown>HIDDEN10
                                    __resolv_attempts.symtab0x262f71OBJECT<unknown>HIDDEN9
                                    __resolv_lock.symtab0x2c55824OBJECT<unknown>DEFAULT10
                                    __resolv_timeout.symtab0x262f61OBJECT<unknown>HIDDEN9
                                    __rtld_fini.symtab0x2c5444OBJECT<unknown>HIDDEN10
                                    __searchdomain.symtab0x2c9a84OBJECT<unknown>HIDDEN10
                                    __searchdomains.symtab0x2c9b44OBJECT<unknown>HIDDEN10
                                    __sigaddset.symtab0x1129436FUNC<unknown>DEFAULT2
                                    __sigdelset.symtab0x112b836FUNC<unknown>DEFAULT2
                                    __sigismember.symtab0x1127036FUNC<unknown>DEFAULT2
                                    __stdin.symtab0x260c04OBJECT<unknown>DEFAULT9
                                    __stdio_READ.symtab0x16fd892FUNC<unknown>HIDDEN2
                                    __stdio_WRITE.symtab0x14650184FUNC<unknown>HIDDEN2
                                    __stdio_adjust_position.symtab0x17034192FUNC<unknown>HIDDEN2
                                    __stdio_fwrite.symtab0x149f4312FUNC<unknown>HIDDEN2
                                    __stdio_init_mutex.symtab0xf72416FUNC<unknown>HIDDEN2
                                    __stdio_mutex_initializer.4582.symtab0x1cacc24OBJECT<unknown>DEFAULT4
                                    __stdio_rfill.symtab0x170f444FUNC<unknown>HIDDEN2
                                    __stdio_seek.symtab0x171dc48FUNC<unknown>HIDDEN2
                                    __stdio_trans2r_o.symtab0x17120188FUNC<unknown>HIDDEN2
                                    __stdio_trans2w_o.symtab0x14b2c260FUNC<unknown>HIDDEN2
                                    __stdio_wcommit.symtab0xf7ec44FUNC<unknown>HIDDEN2
                                    __stdout.symtab0x260c44OBJECT<unknown>DEFAULT9
                                    __subdf3.symtab0x191f0740FUNC<unknown>HIDDEN2
                                    __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __syscall_rt_sigaction.symtab0x13ef444FUNC<unknown>DEFAULT2
                                    __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __uClibc_fini.symtab0x13180108FUNC<unknown>DEFAULT2
                                    __uClibc_init.symtab0x1322476FUNC<unknown>DEFAULT2
                                    __uClibc_main.symtab0x13270672FUNC<unknown>DEFAULT2
                                    __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __uclibc_progname.symtab0x262e84OBJECT<unknown>HIDDEN9
                                    __udivsi3.symtab0xeaf0248FUNC<unknown>HIDDEN2
                                    __umodsi3.symtab0xec00204FUNC<unknown>HIDDEN2
                                    __xpg_strerror_r.symtab0x10d68232FUNC<unknown>DEFAULT2
                                    __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    __xstat32_conv.symtab0x13af8728FUNC<unknown>HIDDEN2
                                    __xstat64_conv.symtab0x137e8784FUNC<unknown>HIDDEN2
                                    __xstat_conv.symtab0x13dd0204FUNC<unknown>HIDDEN2
                                    _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _bss_custom_printf_spec.symtab0x2c34010OBJECT<unknown>DEFAULT10
                                    _bss_end__.symtab0x2c9b80NOTYPE<unknown>DEFAULTSHN_ABS
                                    _charpad.symtab0xf8dc80FUNC<unknown>DEFAULT2
                                    _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _custom_printf_arginfo.symtab0x2c5cc40OBJECT<unknown>HIDDEN10
                                    _custom_printf_handler.symtab0x2c5f440OBJECT<unknown>HIDDEN10
                                    _custom_printf_spec.symtab0x261f04OBJECT<unknown>HIDDEN9
                                    _dl_aux_init.symtab0x16ca836FUNC<unknown>DEFAULT2
                                    _dl_phdr.symtab0x2c99c4OBJECT<unknown>DEFAULT10
                                    _dl_phnum.symtab0x2c9a04OBJECT<unknown>DEFAULT10
                                    _edata.symtab0x263040NOTYPE<unknown>DEFAULTSHN_ABS
                                    _end.symtab0x2c9b80NOTYPE<unknown>DEFAULTSHN_ABS
                                    _errno.symtab0x2c5484OBJECT<unknown>DEFAULT10
                                    _exit.symtab0xf14840FUNC<unknown>DEFAULT2
                                    _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _fini.symtab0x19ccc0FUNC<unknown>DEFAULT3
                                    _fixed_buffers.symtab0x2a3408192OBJECT<unknown>DEFAULT10
                                    _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _fp_out_narrow.symtab0xf92c128FUNC<unknown>DEFAULT2
                                    _fpmaxtostr.symtab0x14e341952FUNC<unknown>HIDDEN2
                                    _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _h_errno.symtab0x2c54c4OBJECT<unknown>DEFAULT10
                                    _init.symtab0x80940FUNC<unknown>DEFAULT1
                                    _load_inttype.symtab0x14c30112FUNC<unknown>HIDDEN2
                                    _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _memcpy.symtab0x15c000FUNC<unknown>HIDDEN2
                                    _ppfs_init.symtab0x1000c152FUNC<unknown>HIDDEN2
                                    _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _ppfs_parsespec.symtab0x102c41344FUNC<unknown>HIDDEN2
                                    _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _ppfs_prepargs.symtab0x100a456FUNC<unknown>HIDDEN2
                                    _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _ppfs_setargs.symtab0x100dc412FUNC<unknown>HIDDEN2
                                    _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _promoted_size.symtab0x1027876FUNC<unknown>DEFAULT2
                                    _pthread_cleanup_pop_restore.symtab0x1316032FUNC<unknown>DEFAULT2
                                    _pthread_cleanup_push_defer.symtab0x131588FUNC<unknown>DEFAULT2
                                    _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _sigintr.symtab0x2c61c8OBJECT<unknown>HIDDEN10
                                    _start.symtab0x81900FUNC<unknown>DEFAULT2
                                    _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _stdio_fopen.symtab0x14708748FUNC<unknown>HIDDEN2
                                    _stdio_init.symtab0xf6a8124FUNC<unknown>HIDDEN2
                                    _stdio_openlist.symtab0x260c84OBJECT<unknown>DEFAULT9
                                    _stdio_openlist_add_lock.symtab0x260cc24OBJECT<unknown>DEFAULT9
                                    _stdio_openlist_dec_use.symtab0x1572c320FUNC<unknown>HIDDEN2
                                    _stdio_openlist_del_count.symtab0x2a33c4OBJECT<unknown>DEFAULT10
                                    _stdio_openlist_del_lock.symtab0x260e424OBJECT<unknown>DEFAULT9
                                    _stdio_openlist_use_count.symtab0x2a3384OBJECT<unknown>DEFAULT10
                                    _stdio_streams.symtab0x26100240OBJECT<unknown>DEFAULT9
                                    _stdio_term.symtab0xf734184FUNC<unknown>HIDDEN2
                                    _stdio_user_locking.symtab0x260fc4OBJECT<unknown>DEFAULT9
                                    _stdlib_strto_l.symtab0x12750408FUNC<unknown>HIDDEN2
                                    _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _store_inttype.symtab0x14ca064FUNC<unknown>HIDDEN2
                                    _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _string_syserrmsgs.symtab0x1cb9c2906OBJECT<unknown>HIDDEN4
                                    _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _uintmaxtostr.symtab0x14ce0340FUNC<unknown>HIDDEN2
                                    _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _vfprintf_internal.symtab0xf9ac1632FUNC<unknown>HIDDEN2
                                    _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    abort.symtab0x12120256FUNC<unknown>DEFAULT2
                                    abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    access.symtab0xeea444FUNC<unknown>DEFAULT2
                                    access.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    ahold.symtab0xb4ec1464FUNC<unknown>DEFAULT2
                                    atoi.symtab0x1273c12FUNC<unknown>DEFAULT2
                                    atol.symtab0x1273c12FUNC<unknown>DEFAULT2
                                    atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    bcopy.symtab0x109f016FUNC<unknown>DEFAULT2
                                    been_there_done_that.symtab0x2c52c4OBJECT<unknown>DEFAULT10
                                    bot.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    brk.symtab0x16ccc56FUNC<unknown>DEFAULT2
                                    brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    bsd_signal.symtab0x111cc164FUNC<unknown>DEFAULT2
                                    buf.2921.symtab0x2c35016OBJECT<unknown>DEFAULT10
                                    buf.5390.symtab0x2c360440OBJECT<unknown>DEFAULT10
                                    bzero.symtab0x10a3012FUNC<unknown>DEFAULT2
                                    c.symtab0x2609c4OBJECT<unknown>DEFAULT9
                                    call___do_global_ctors_aux.symtab0x19cc40FUNC<unknown>DEFAULT2
                                    call___do_global_dtors_aux.symtab0x81280FUNC<unknown>DEFAULT2
                                    call_frame_dummy.symtab0x81880FUNC<unknown>DEFAULT2
                                    calloc.symtab0x11b98268FUNC<unknown>DEFAULT2
                                    calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    cck.symtab0x9ce0352FUNC<unknown>DEFAULT2
                                    chdir.symtab0xef0044FUNC<unknown>DEFAULT2
                                    chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    clock_getres.symtab0x1363844FUNC<unknown>DEFAULT2
                                    clock_getres.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    close.symtab0xf17044FUNC<unknown>DEFAULT2
                                    close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    closedir.symtab0xf1e8212FUNC<unknown>DEFAULT2
                                    closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    closenameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    commServer.symtab0x260284OBJECT<unknown>DEFAULT9
                                    completed.4910.symtab0x263041OBJECT<unknown>DEFAULT10
                                    connect.symtab0x1105c44FUNC<unknown>DEFAULT2
                                    connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    connectTimeout.symtab0x9550640FUNC<unknown>DEFAULT2
                                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    csum.symtab0x9a88344FUNC<unknown>DEFAULT2
                                    currentServer.symtab0x260984OBJECT<unknown>DEFAULT9
                                    data_start.symtab0x260240NOTYPE<unknown>DEFAULT9
                                    decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    environ.symtab0x2c5384OBJECT<unknown>DEFAULT10
                                    errno.symtab0x2c5484OBJECT<unknown>DEFAULT10
                                    errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    exit.symtab0x128e8148FUNC<unknown>DEFAULT2
                                    exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    exp10_table.symtab0x1d78872OBJECT<unknown>DEFAULT4
                                    fclose.symtab0x144d4368FUNC<unknown>DEFAULT2
                                    fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fcntl.symtab0xefd8100FUNC<unknown>DEFAULT2
                                    fd_to_DIR.symtab0xf2bc188FUNC<unknown>DEFAULT2
                                    fdgets.symtab0x8438208FUNC<unknown>DEFAULT2
                                    fdopendir.symtab0xf414148FUNC<unknown>DEFAULT2
                                    fflush_unlocked.symtab0x1586c464FUNC<unknown>DEFAULT2
                                    fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fgetc.symtab0x155d4188FUNC<unknown>DEFAULT2
                                    fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fgetc_unlocked.symtab0x15a3c304FUNC<unknown>DEFAULT2
                                    fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fgets.symtab0x15690156FUNC<unknown>DEFAULT2
                                    fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fgets_unlocked.symtab0x15b6c148FUNC<unknown>DEFAULT2
                                    fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fmt.symtab0x1d77420OBJECT<unknown>DEFAULT4
                                    fopen.symtab0x1464412FUNC<unknown>DEFAULT2
                                    fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    force_to_data.symtab0x260180OBJECT<unknown>DEFAULT9
                                    force_to_data.symtab0x263000OBJECT<unknown>DEFAULT9
                                    fork.symtab0xee7044FUNC<unknown>DEFAULT2
                                    fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fputs_unlocked.symtab0x1080452FUNC<unknown>DEFAULT2
                                    fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    frame_dummy.symtab0x81300FUNC<unknown>DEFAULT2
                                    free.symtab0x11ef0520FUNC<unknown>DEFAULT2
                                    free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fseek.symtab0x16e9412FUNC<unknown>DEFAULT2
                                    fseeko.symtab0x16e9412FUNC<unknown>DEFAULT2
                                    fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fseeko64.symtab0x16ea0312FUNC<unknown>DEFAULT2
                                    fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fstat.symtab0x1373880FUNC<unknown>DEFAULT2
                                    fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    fwrite_unlocked.symtab0x10838172FUNC<unknown>DEFAULT2
                                    fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getArch.symtab0xc6bc28FUNC<unknown>DEFAULT2
                                    getHost.symtab0x9190100FUNC<unknown>DEFAULT2
                                    getOurIP.symtab0x8508712FUNC<unknown>DEFAULT2
                                    getRandomIP.symtab0x83d896FUNC<unknown>DEFAULT2
                                    getSoftware.symtab0xdf2c436FUNC<unknown>DEFAULT2
                                    get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getc.symtab0x155d4188FUNC<unknown>DEFAULT2
                                    getc_unlocked.symtab0x15a3c304FUNC<unknown>DEFAULT2
                                    getdents.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getdtablesize.symtab0xef8440FUNC<unknown>DEFAULT2
                                    getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getegid.symtab0x136908FUNC<unknown>DEFAULT2
                                    getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    geteuid.symtab0x136988FUNC<unknown>DEFAULT2
                                    geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getgid.symtab0x137e08FUNC<unknown>DEFAULT2
                                    getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gethostbyname.symtab0x110048FUNC<unknown>DEFAULT2
                                    gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gethostbyname2.symtab0x1100c80FUNC<unknown>DEFAULT2
                                    gethostbyname2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gethostbyname2_r.symtab0x16690664FUNC<unknown>DEFAULT2
                                    gethostbyname2_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gethostbyname_r.symtab0x18700756FUNC<unknown>DEFAULT2
                                    gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gethostname.symtab0x18a20112FUNC<unknown>DEFAULT2
                                    gethostname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getpagesize.symtab0x1361824FUNC<unknown>DEFAULT2
                                    getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getpid.symtab0xee608FUNC<unknown>DEFAULT2
                                    getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getppid.symtab0xedfc8FUNC<unknown>DEFAULT2
                                    getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getrlimit.symtab0x1366444FUNC<unknown>DEFAULT2
                                    getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getsockname.symtab0x1108844FUNC<unknown>DEFAULT2
                                    getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getsockopt.symtab0x110b448FUNC<unknown>DEFAULT2
                                    getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    getuid.symtab0x136308FUNC<unknown>DEFAULT2
                                    getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    gotIP.symtab0x263244OBJECT<unknown>DEFAULT10
                                    h_errno.symtab0x2c54c4OBJECT<unknown>DEFAULT10
                                    hoste.5389.symtab0x2c51820OBJECT<unknown>DEFAULT10
                                    htonl.symtab0x10efc32FUNC<unknown>DEFAULT2
                                    htons.symtab0x10ee820FUNC<unknown>DEFAULT2
                                    i.4575.symtab0x260a04OBJECT<unknown>DEFAULT9
                                    index.symtab0x10c5c236FUNC<unknown>DEFAULT2
                                    inet_addr.symtab0x10fe036FUNC<unknown>DEFAULT2
                                    inet_aton.symtab0x165a0240FUNC<unknown>DEFAULT2
                                    inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    inet_ntoa.symtab0x10fd412FUNC<unknown>DEFAULT2
                                    inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    inet_ntoa_r.symtab0x10f50132FUNC<unknown>DEFAULT2
                                    inet_ntop.symtab0x176d0620FUNC<unknown>DEFAULT2
                                    inet_ntop4.symtab0x17590320FUNC<unknown>DEFAULT2
                                    inet_pton.symtab0x17390512FUNC<unknown>DEFAULT2
                                    inet_pton4.symtab0x172c4204FUNC<unknown>DEFAULT2
                                    initConnection.symtab0xe0e0396FUNC<unknown>DEFAULT2
                                    init_rand.symtab0x81cc212FUNC<unknown>DEFAULT2
                                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    initstate.symtab0x1232c152FUNC<unknown>DEFAULT2
                                    initstate_r.symtab0x12674200FUNC<unknown>DEFAULT2
                                    ioctl.symtab0xf0f880FUNC<unknown>DEFAULT2
                                    ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    isatty.symtab0x10e5032FUNC<unknown>DEFAULT2
                                    isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    isspace.symtab0xf19c24FUNC<unknown>DEFAULT2
                                    isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    kill.symtab0xefac44FUNC<unknown>DEFAULT2
                                    kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    killer.symtab0xc1a0436FUNC<unknown>DEFAULT2
                                    killer_main.symtab0xc35448FUNC<unknown>DEFAULT2
                                    last_id.5447.symtab0x262f42OBJECT<unknown>DEFAULT9
                                    last_ns_num.5446.symtab0x2c5544OBJECT<unknown>DEFAULT10
                                    libc/string/arm/_memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/arm/bcopy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/arm/bzero.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/arm/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/arm/memmove.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/arm/memset.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/arm/strcmp.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/string/arm/strlen.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/arm/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/arm/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/arm/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libc/sysdeps/linux/arm/sigrestorer.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    libgcc2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    listFork.symtab0x97d0420FUNC<unknown>DEFAULT2
                                    llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    lseek64.symtab0x18ae0100FUNC<unknown>DEFAULT2
                                    macAddress.symtab0x263306OBJECT<unknown>DEFAULT10
                                    main.symtab0xe26c2180FUNC<unknown>DEFAULT2
                                    mainCommSock.symtab0x263204OBJECT<unknown>DEFAULT10
                                    makeIPPacket.symtab0x9974276FUNC<unknown>DEFAULT2
                                    makeRandomStr.symtab0x91f4136FUNC<unknown>DEFAULT2
                                    makevsepacket.symtab0xa1ac312FUNC<unknown>DEFAULT2
                                    malloc.symtab0x113542116FUNC<unknown>DEFAULT2
                                    malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    malloc_trim.symtab0x120f840FUNC<unknown>DEFAULT2
                                    memchr.symtab0x160a0244FUNC<unknown>DEFAULT2
                                    memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    memcpy.symtab0x10a204FUNC<unknown>DEFAULT2
                                    memmove.symtab0x160904FUNC<unknown>DEFAULT2
                                    mempcpy.symtab0x1646024FUNC<unknown>DEFAULT2
                                    mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    memrchr.symtab0x162f8220FUNC<unknown>DEFAULT2
                                    memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    memset.symtab0x108f0156FUNC<unknown>DEFAULT2
                                    mmap.symtab0x1351096FUNC<unknown>DEFAULT2
                                    mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    mremap.symtab0x16d0448FUNC<unknown>DEFAULT2
                                    mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                    munmap.symtab0x13e9c44FUNC<unknown>DEFAULT2
                                    munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS

                                    Network Behavior

                                    Suricata IDS Alerts

                                    TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                    2024-12-09T11:17:56.042807+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337394154.213.187.1413387TCP
                                    2024-12-09T11:17:56.162245+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337394154.213.187.1413387TCP
                                    2024-12-09T11:17:58.308574+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337396154.213.187.1413387TCP
                                    2024-12-09T11:17:58.427910+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337396154.213.187.1413387TCP
                                    2024-12-09T11:18:00.591088+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337398154.213.187.1413387TCP
                                    2024-12-09T11:18:00.710796+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337398154.213.187.1413387TCP
                                    2024-12-09T11:18:02.871608+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337400154.213.187.1413387TCP
                                    2024-12-09T11:18:02.991083+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337400154.213.187.1413387TCP
                                    2024-12-09T11:18:07.630216+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337402154.213.187.1413387TCP
                                    2024-12-09T11:18:07.749603+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337402154.213.187.1413387TCP
                                    2024-12-09T11:18:10.019364+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337404154.213.187.1413387TCP
                                    2024-12-09T11:18:10.138919+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337404154.213.187.1413387TCP
                                    2024-12-09T11:18:12.273921+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337406154.213.187.1413387TCP
                                    2024-12-09T11:18:12.393334+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337406154.213.187.1413387TCP
                                    2024-12-09T11:18:14.551695+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337408154.213.187.1413387TCP
                                    2024-12-09T11:18:14.672218+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337408154.213.187.1413387TCP
                                    2024-12-09T11:18:16.824370+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337410154.213.187.1413387TCP
                                    2024-12-09T11:18:16.943945+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337410154.213.187.1413387TCP
                                    2024-12-09T11:18:19.207107+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337412154.213.187.1413387TCP
                                    2024-12-09T11:18:19.326474+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337412154.213.187.1413387TCP
                                    2024-12-09T11:18:21.576400+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337414154.213.187.1413387TCP
                                    2024-12-09T11:18:21.695895+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337414154.213.187.1413387TCP
                                    2024-12-09T11:18:23.862073+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337416154.213.187.1413387TCP
                                    2024-12-09T11:18:23.981449+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337416154.213.187.1413387TCP
                                    2024-12-09T11:18:26.237346+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337418154.213.187.1413387TCP
                                    2024-12-09T11:18:26.356759+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337418154.213.187.1413387TCP
                                    2024-12-09T11:18:28.612390+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337420154.213.187.1413387TCP
                                    2024-12-09T11:18:28.735650+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337420154.213.187.1413387TCP
                                    2024-12-09T11:18:30.887419+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337422154.213.187.1413387TCP
                                    2024-12-09T11:18:31.006948+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337422154.213.187.1413387TCP
                                    2024-12-09T11:18:33.218449+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337424154.213.187.1413387TCP
                                    2024-12-09T11:18:33.337786+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337424154.213.187.1413387TCP
                                    2024-12-09T11:18:35.501554+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337426154.213.187.1413387TCP
                                    2024-12-09T11:18:35.620950+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337426154.213.187.1413387TCP
                                    2024-12-09T11:18:40.269501+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337428154.213.187.1413387TCP
                                    2024-12-09T11:18:40.391930+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337428154.213.187.1413387TCP
                                    2024-12-09T11:18:42.559538+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337430154.213.187.1413387TCP
                                    2024-12-09T11:18:42.678959+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337430154.213.187.1413387TCP
                                    2024-12-09T11:18:56.838260+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337432154.213.187.1413387TCP
                                    2024-12-09T11:18:56.957697+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337432154.213.187.1413387TCP
                                    2024-12-09T11:18:59.106685+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337434154.213.187.1413387TCP
                                    2024-12-09T11:18:59.226256+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337434154.213.187.1413387TCP
                                    2024-12-09T11:19:01.387100+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337436154.213.187.1413387TCP
                                    2024-12-09T11:19:01.507536+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337436154.213.187.1413387TCP
                                    2024-12-09T11:19:03.652878+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337438154.213.187.1413387TCP
                                    2024-12-09T11:19:03.772362+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337438154.213.187.1413387TCP
                                    2024-12-09T11:19:05.918886+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337440154.213.187.1413387TCP
                                    2024-12-09T11:19:06.038499+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337440154.213.187.1413387TCP
                                    2024-12-09T11:19:08.184492+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337442154.213.187.1413387TCP
                                    2024-12-09T11:19:08.303981+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337442154.213.187.1413387TCP
                                    2024-12-09T11:19:10.431299+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337444154.213.187.1413387TCP
                                    2024-12-09T11:19:10.550810+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337444154.213.187.1413387TCP
                                    2024-12-09T11:19:12.700063+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337446154.213.187.1413387TCP
                                    2024-12-09T11:19:12.819806+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337446154.213.187.1413387TCP
                                    2024-12-09T11:19:14.966421+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337448154.213.187.1413387TCP
                                    2024-12-09T11:19:15.085923+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337448154.213.187.1413387TCP
                                    2024-12-09T11:19:17.232187+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337450154.213.187.1413387TCP
                                    2024-12-09T11:19:17.351688+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337450154.213.187.1413387TCP
                                    2024-12-09T11:19:19.486882+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337452154.213.187.1413387TCP
                                    2024-12-09T11:19:19.606305+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337452154.213.187.1413387TCP
                                    2024-12-09T11:19:21.743554+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337454154.213.187.1413387TCP
                                    2024-12-09T11:19:21.862983+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337454154.213.187.1413387TCP
                                    2024-12-09T11:19:24.013138+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337456154.213.187.1413387TCP
                                    2024-12-09T11:19:24.133468+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337456154.213.187.1413387TCP
                                    2024-12-09T11:19:26.274637+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337458154.213.187.1413387TCP
                                    2024-12-09T11:19:26.393975+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337458154.213.187.1413387TCP
                                    2024-12-09T11:19:28.544626+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337460154.213.187.1413387TCP
                                    2024-12-09T11:19:28.664152+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337460154.213.187.1413387TCP
                                    2024-12-09T11:19:30.791165+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337462154.213.187.1413387TCP
                                    2024-12-09T11:19:30.910663+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337462154.213.187.1413387TCP
                                    2024-12-09T11:19:33.041179+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337464154.213.187.1413387TCP
                                    2024-12-09T11:19:33.161361+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337464154.213.187.1413387TCP
                                    2024-12-09T11:19:35.291178+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337466154.213.187.1413387TCP
                                    2024-12-09T11:19:35.410793+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337466154.213.187.1413387TCP
                                    2024-12-09T11:19:37.555130+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337468154.213.187.1413387TCP
                                    2024-12-09T11:19:37.674825+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337468154.213.187.1413387TCP
                                    2024-12-09T11:19:39.826427+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337470154.213.187.1413387TCP
                                    2024-12-09T11:19:39.946037+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337470154.213.187.1413387TCP
                                    2024-12-09T11:19:42.108004+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337472154.213.187.1413387TCP
                                    2024-12-09T11:19:42.227452+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337472154.213.187.1413387TCP
                                    2024-12-09T11:19:44.388661+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337474154.213.187.1413387TCP
                                    2024-12-09T11:19:44.508126+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337474154.213.187.1413387TCP
                                    2024-12-09T11:19:46.635703+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337476154.213.187.1413387TCP
                                    2024-12-09T11:19:46.755685+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337476154.213.187.1413387TCP
                                    2024-12-09T11:19:48.900113+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337478154.213.187.1413387TCP
                                    2024-12-09T11:19:49.019513+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337478154.213.187.1413387TCP
                                    2024-12-09T11:19:51.171535+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337480154.213.187.1413387TCP
                                    2024-12-09T11:19:51.291043+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337480154.213.187.1413387TCP
                                    2024-12-09T11:19:53.416728+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337482154.213.187.1413387TCP
                                    2024-12-09T11:19:53.536168+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337482154.213.187.1413387TCP
                                    2024-12-09T11:19:55.686669+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337484154.213.187.1413387TCP
                                    2024-12-09T11:19:55.806176+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337484154.213.187.1413387TCP
                                    2024-12-09T11:19:57.947789+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337486154.213.187.1413387TCP
                                    2024-12-09T11:19:58.067217+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337486154.213.187.1413387TCP
                                    2024-12-09T11:20:00.218024+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337488154.213.187.1413387TCP
                                    2024-12-09T11:20:00.337549+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337488154.213.187.1413387TCP
                                    2024-12-09T11:20:02.498069+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337490154.213.187.1413387TCP
                                    2024-12-09T11:20:02.617516+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337490154.213.187.1413387TCP
                                    2024-12-09T11:20:04.779104+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337492154.213.187.1413387TCP
                                    2024-12-09T11:20:04.898459+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337492154.213.187.1413387TCP
                                    2024-12-09T11:20:07.026883+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337494154.213.187.1413387TCP
                                    2024-12-09T11:20:07.146686+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337494154.213.187.1413387TCP
                                    2024-12-09T11:20:09.275758+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337496154.213.187.1413387TCP
                                    2024-12-09T11:20:09.395194+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337496154.213.187.1413387TCP
                                    2024-12-09T11:20:11.526494+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337498154.213.187.1413387TCP
                                    2024-12-09T11:20:11.646058+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337498154.213.187.1413387TCP
                                    2024-12-09T11:20:13.791616+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337500154.213.187.1413387TCP
                                    2024-12-09T11:20:13.911204+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337500154.213.187.1413387TCP
                                    2024-12-09T11:20:16.061352+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337502154.213.187.1413387TCP
                                    2024-12-09T11:20:16.180804+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337502154.213.187.1413387TCP
                                    2024-12-09T11:20:18.342462+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337504154.213.187.1413387TCP
                                    2024-12-09T11:20:18.461835+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337504154.213.187.1413387TCP
                                    2024-12-09T11:20:20.607774+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337506154.213.187.1413387TCP
                                    2024-12-09T11:20:20.728896+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337506154.213.187.1413387TCP
                                    2024-12-09T11:20:22.889384+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337508154.213.187.1413387TCP
                                    2024-12-09T11:20:23.008749+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337508154.213.187.1413387TCP
                                    2024-12-09T11:20:25.135234+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337510154.213.187.1413387TCP
                                    2024-12-09T11:20:25.255144+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337510154.213.187.1413387TCP
                                    2024-12-09T11:20:27.404301+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337512154.213.187.1413387TCP
                                    2024-12-09T11:20:27.523615+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337512154.213.187.1413387TCP
                                    2024-12-09T11:20:29.670649+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337514154.213.187.1413387TCP
                                    2024-12-09T11:20:29.790166+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337514154.213.187.1413387TCP
                                    2024-12-09T11:20:31.935621+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337516154.213.187.1413387TCP
                                    2024-12-09T11:20:32.054908+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337516154.213.187.1413387TCP
                                    2024-12-09T11:20:34.218888+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337518154.213.187.1413387TCP
                                    2024-12-09T11:20:34.338784+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337518154.213.187.1413387TCP
                                    2024-12-09T11:20:36.464253+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337520154.213.187.1413387TCP
                                    2024-12-09T11:20:36.583744+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337520154.213.187.1413387TCP
                                    2024-12-09T11:20:38.714210+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337522154.213.187.1413387TCP
                                    2024-12-09T11:20:38.833656+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337522154.213.187.1413387TCP
                                    2024-12-09T11:20:40.964013+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337524154.213.187.1413387TCP
                                    2024-12-09T11:20:41.083969+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337524154.213.187.1413387TCP
                                    2024-12-09T11:20:43.233147+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337526154.213.187.1413387TCP
                                    2024-12-09T11:20:43.352858+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337526154.213.187.1413387TCP
                                    2024-12-09T11:20:45.479701+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337528154.213.187.1413387TCP
                                    2024-12-09T11:20:45.599062+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337528154.213.187.1413387TCP
                                    2024-12-09T11:20:47.746328+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337530154.213.187.1413387TCP
                                    2024-12-09T11:20:47.865690+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337530154.213.187.1413387TCP
                                    2024-12-09T11:20:50.024908+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337532154.213.187.1413387TCP
                                    2024-12-09T11:20:50.144400+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337532154.213.187.1413387TCP
                                    2024-12-09T11:20:52.296219+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337534154.213.187.1413387TCP
                                    2024-12-09T11:20:52.415706+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337534154.213.187.1413387TCP
                                    2024-12-09T11:20:54.577201+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337536154.213.187.1413387TCP
                                    2024-12-09T11:20:54.696551+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337536154.213.187.1413387TCP
                                    2024-12-09T11:20:56.823870+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337538154.213.187.1413387TCP
                                    2024-12-09T11:20:56.943384+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337538154.213.187.1413387TCP
                                    2024-12-09T11:20:59.094131+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337540154.213.187.1413387TCP
                                    2024-12-09T11:20:59.213574+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337540154.213.187.1413387TCP
                                    2024-12-09T11:21:01.348930+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337542154.213.187.1413387TCP
                                    2024-12-09T11:21:01.468220+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337542154.213.187.1413387TCP
                                    2024-12-09T11:21:03.624749+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337544154.213.187.1413387TCP
                                    2024-12-09T11:21:03.744442+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337544154.213.187.1413387TCP
                                    2024-12-09T11:21:05.871136+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337546154.213.187.1413387TCP
                                    2024-12-09T11:21:05.990692+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337546154.213.187.1413387TCP
                                    2024-12-09T11:21:08.120920+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337548154.213.187.1413387TCP
                                    2024-12-09T11:21:08.240545+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337548154.213.187.1413387TCP
                                    2024-12-09T11:21:10.372422+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337550154.213.187.1413387TCP
                                    2024-12-09T11:21:10.491707+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337550154.213.187.1413387TCP
                                    2024-12-09T11:21:12.641311+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337552154.213.187.1413387TCP
                                    2024-12-09T11:21:12.760689+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337552154.213.187.1413387TCP
                                    2024-12-09T11:21:14.901953+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337554154.213.187.1413387TCP
                                    2024-12-09T11:21:15.021299+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337554154.213.187.1413387TCP
                                    2024-12-09T11:21:17.216007+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337556154.213.187.1413387TCP
                                    2024-12-09T11:21:17.335525+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337556154.213.187.1413387TCP
                                    2024-12-09T11:21:19.465214+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337558154.213.187.1413387TCP
                                    2024-12-09T11:21:19.584530+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337558154.213.187.1413387TCP
                                    2024-12-09T11:21:21.715018+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337560154.213.187.1413387TCP
                                    2024-12-09T11:21:21.834403+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337560154.213.187.1413387TCP
                                    2024-12-09T11:21:23.966613+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337562154.213.187.1413387TCP
                                    2024-12-09T11:21:24.085995+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337562154.213.187.1413387TCP
                                    2024-12-09T11:21:26.215874+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337564154.213.187.1413387TCP
                                    2024-12-09T11:21:26.335594+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337564154.213.187.1413387TCP
                                    2024-12-09T11:21:28.465898+01002846407ETPRO MALWARE ELF/Mirai Variant CnC Activity1192.168.2.1337566154.213.187.1413387TCP
                                    2024-12-09T11:21:28.585173+01002848448ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)1192.168.2.1337566154.213.187.1413387TCP

                                    Network Port Distribution

                                    TCP Packets

                                    TimestampSource PortDest PortSource IPDest IP
                                    Dec 9, 2024 11:17:55.921027899 CET3739413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:56.040508032 CET1338737394154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:17:56.040570974 CET3739413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:56.042807102 CET3739413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:56.162168026 CET1338737394154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:17:56.162245035 CET3739413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:56.282412052 CET1338737394154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:17:58.188497066 CET1338737394154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:17:58.188782930 CET3739413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:58.189218998 CET3739613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:58.308197021 CET1338737394154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:17:58.308429956 CET1338737396154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:17:58.308499098 CET3739613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:58.308573961 CET3739613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:58.427839041 CET1338737396154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:17:58.427910089 CET3739613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:17:58.547179937 CET1338737396154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:00.471035004 CET1338737396154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:00.471188068 CET3739613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:00.471666098 CET3739813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:00.590496063 CET1338737396154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:00.590883017 CET1338737398154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:00.591008902 CET3739813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:00.591088057 CET3739813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:00.710572004 CET1338737398154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:00.710796118 CET3739813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:00.830084085 CET1338737398154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:02.750298977 CET1338737398154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:02.750602007 CET3739813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:02.751051903 CET3740013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:02.870829105 CET1338737398154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:02.871452093 CET1338737400154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:02.871531010 CET3740013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:02.871608019 CET3740013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:02.990878105 CET1338737400154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:02.991082907 CET3740013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:03.112489939 CET1338737400154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:07.509876013 CET1338737400154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:07.510231018 CET3740013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:07.510656118 CET3740213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:07.629566908 CET1338737400154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:07.629885912 CET1338737402154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:07.630121946 CET3740213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:07.630215883 CET3740213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:07.749454021 CET1338737402154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:07.749603033 CET3740213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:07.869024038 CET1338737402154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:09.899502039 CET1338737402154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:09.899601936 CET3740213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:09.899928093 CET3740413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:10.018956900 CET1338737402154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:10.019165993 CET1338737404154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:10.019267082 CET3740413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:10.019364119 CET3740413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:10.138829947 CET1338737404154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:10.138919115 CET3740413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:10.258271933 CET1338737404154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:12.153745890 CET1338737404154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:12.154001951 CET3740413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:12.154457092 CET3740613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:12.273348093 CET1338737404154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:12.273693085 CET1338737406154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:12.273842096 CET3740613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:12.273921013 CET3740613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:12.393181086 CET1338737406154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:12.393333912 CET3740613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:12.512610912 CET1338737406154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:14.431507111 CET1338737406154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:14.431699038 CET3740613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:14.432332993 CET3740813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:14.551060915 CET1338737406154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:14.551549911 CET1338737408154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:14.551609039 CET3740813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:14.551695108 CET3740813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:14.672025919 CET1338737408154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:14.672218084 CET3740813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:14.791778088 CET1338737408154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:16.704231977 CET1338737408154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:16.704375029 CET3740813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:16.704849958 CET3741013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:16.823792934 CET1338737408154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:16.824096918 CET1338737410154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:16.824347019 CET3741013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:16.824369907 CET3741013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:16.943732977 CET1338737410154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:16.943944931 CET3741013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:17.063256025 CET1338737410154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:19.086680889 CET1338737410154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:19.086882114 CET3741013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:19.087393999 CET3741213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:19.206907988 CET1338737410154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:19.206917048 CET1338737412154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:19.207003117 CET3741213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:19.207107067 CET3741213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:19.326385021 CET1338737412154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:19.326473951 CET3741213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:19.445743084 CET1338737412154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:21.456393003 CET1338737412154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:21.456515074 CET3741213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:21.456923008 CET3741413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:21.575814962 CET1338737412154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:21.576131105 CET1338737414154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:21.576320887 CET3741413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:21.576400042 CET3741413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:21.695661068 CET1338737414154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:21.695894957 CET3741413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:21.815140963 CET1338737414154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:23.741043091 CET1338737414154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:23.741308928 CET3741413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:23.741966963 CET3741613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:23.860862970 CET1338737414154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:23.861660957 CET1338737416154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:23.861742020 CET3741613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:23.862072945 CET3741613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:23.981285095 CET1338737416154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:23.981448889 CET3741613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:24.100755930 CET1338737416154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:26.116878986 CET1338737416154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:26.117202044 CET3741613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:26.117816925 CET3741813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:26.236572981 CET1338737416154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:26.237031937 CET1338737418154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:26.237128973 CET3741813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:26.237345934 CET3741813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:26.356684923 CET1338737418154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:26.356759071 CET3741813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:26.476044893 CET1338737418154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:28.492311001 CET1338737418154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:28.492553949 CET3741813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:28.492930889 CET3742013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:28.611912966 CET1338737418154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:28.612171888 CET1338737420154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:28.612389088 CET3742013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:28.612390041 CET3742013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:28.735388041 CET1338737420154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:28.735650063 CET3742013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:28.855125904 CET1338737420154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:30.766992092 CET1338737420154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:30.767258883 CET3742013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:30.767293930 CET3742013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:30.767834902 CET3742213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:30.886629105 CET1338737420154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:30.887089014 CET1338737422154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:30.887221098 CET3742213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:30.887418985 CET3742213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:31.006783962 CET1338737422154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:31.006947994 CET3742213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:31.126409054 CET1338737422154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:33.097626925 CET1338737422154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:33.097784042 CET3742213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:33.098269939 CET3742413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:33.217860937 CET1338737422154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:33.218138933 CET1338737424154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:33.218249083 CET3742413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:33.218449116 CET3742413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:33.337697029 CET1338737424154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:33.337785959 CET3742413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:33.457165003 CET1338737424154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:35.381083012 CET1338737424154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:35.381310940 CET3742413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:35.382004976 CET3742613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:35.500632048 CET1338737424154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:35.501256943 CET1338737426154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:35.501353025 CET3742613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:35.501554012 CET3742613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:35.620831013 CET1338737426154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:35.620949984 CET3742613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:35.740387917 CET1338737426154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:40.148864031 CET1338737426154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:40.149044991 CET3742613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:40.149447918 CET3742813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:40.268668890 CET1338737426154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:40.269129992 CET1338737428154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:40.269311905 CET3742813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:40.269500971 CET3742813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:40.391822100 CET1338737428154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:40.391930103 CET3742813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:40.511466980 CET1338737428154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:42.438972950 CET1338737428154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:42.439201117 CET3742813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:42.439781904 CET3743013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:42.558681965 CET1338737428154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:42.559037924 CET1338737430154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:42.559348106 CET3743013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:42.559537888 CET3743013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:42.678819895 CET1338737430154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:42.678958893 CET3743013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:42.801625013 CET1338737430154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:56.717407942 CET1338737430154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:56.717856884 CET3743013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:56.718660116 CET3743213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:56.837459087 CET1338737430154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:56.837941885 CET1338737432154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:56.838016987 CET3743213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:56.838259935 CET3743213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:56.957576036 CET1338737432154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:56.957696915 CET3743213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:57.077100039 CET1338737432154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:58.986181974 CET1338737432154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:58.986505985 CET3743213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:58.987082005 CET3743413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:59.105951071 CET1338737432154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:59.106398106 CET1338737434154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:59.106595993 CET3743413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:59.106684923 CET3743413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:59.225991011 CET1338737434154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:18:59.226255894 CET3743413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:18:59.345729113 CET1338737434154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:01.267141104 CET1338737434154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:01.267353058 CET3743413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:01.267388105 CET3743413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:01.267721891 CET3743613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:01.386779070 CET1338737434154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:01.386894941 CET1338737436154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:01.387099028 CET3743613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:01.387099981 CET3743613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:01.507361889 CET1338737436154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:01.507535934 CET3743613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:01.627032042 CET1338737436154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:03.532835007 CET1338737436154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:03.533097029 CET3743613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:03.533518076 CET3743813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:03.652482986 CET1338737436154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:03.652719021 CET1338737438154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:03.652798891 CET3743813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:03.652878046 CET3743813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:03.772190094 CET1338737438154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:03.772361994 CET3743813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:03.891911030 CET1338737438154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:05.798572063 CET1338737438154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:05.798930883 CET3743813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:05.799413919 CET3744013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:05.918303967 CET1338737438154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:05.918678045 CET1338737440154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:05.918853045 CET3744013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:05.918885946 CET3744013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:06.038307905 CET1338737440154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:06.038499117 CET3744013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:06.157815933 CET1338737440154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:08.064347029 CET1338737440154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:08.064610004 CET3744013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:08.065020084 CET3744213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:08.183900118 CET1338737440154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:08.184331894 CET1338737442154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:08.184438944 CET3744213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:08.184492111 CET3744213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:08.303852081 CET1338737442154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:08.303981066 CET3744213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:08.423362970 CET1338737442154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:10.310913086 CET1338737442154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:10.311110973 CET3744213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:10.311606884 CET3744413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:10.430624008 CET1338737442154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:10.430886984 CET1338737444154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:10.431106091 CET3744413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:10.431298971 CET3744413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:10.550519943 CET1338737444154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:10.550810099 CET3744413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:10.670231104 CET1338737444154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:12.579830885 CET1338737444154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:12.580013990 CET3744413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:12.580468893 CET3744613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:12.699424028 CET1338737444154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:12.699776888 CET1338737446154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:12.699907064 CET3744613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:12.700062990 CET3744613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:12.819673061 CET1338737446154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:12.819806099 CET3744613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:12.939371109 CET1338737446154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:14.845594883 CET1338737446154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:14.845902920 CET3744613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:14.846599102 CET3744813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:14.965554953 CET1338737446154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:14.965914965 CET1338737448154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:14.966135979 CET3744813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:14.966420889 CET3744813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:15.085731030 CET1338737448154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:15.085922956 CET3744813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:15.205326080 CET1338737448154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:17.111555099 CET1338737448154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:17.111993074 CET3744813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:17.112754107 CET3745013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:17.231517076 CET1338737448154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:17.231992006 CET1338737450154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:17.232104063 CET3745013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:17.232187033 CET3745013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:17.351588964 CET1338737450154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:17.351687908 CET3745013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:17.471101046 CET1338737450154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:19.366460085 CET1338737450154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:19.366776943 CET3745013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:19.367244005 CET3745213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:19.486187935 CET1338737450154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:19.486505032 CET1338737452154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:19.486593008 CET3745213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:19.486881971 CET3745213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:19.606163979 CET1338737452154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:19.606304884 CET3745213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:19.725681067 CET1338737452154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:21.623538971 CET1338737452154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:21.623691082 CET3745213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:21.624181032 CET3745413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:21.743061066 CET1338737452154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:21.743407965 CET1338737454154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:21.743474960 CET3745413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:21.743554115 CET3745413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:21.862878084 CET1338737454154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:21.862982988 CET3745413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:21.982345104 CET1338737454154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:23.893047094 CET1338737454154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:23.893233061 CET3745413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:23.893740892 CET3745613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:24.012576103 CET1338737454154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:24.012989044 CET1338737456154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:24.013066053 CET3745613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:24.013138056 CET3745613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:24.133203030 CET1338737456154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:24.133467913 CET3745613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:24.252727985 CET1338737456154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:26.154772043 CET1338737456154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:26.154859066 CET3745613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:26.155203104 CET3745813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:26.274308920 CET1338737456154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:26.274466991 CET1338737458154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:26.274557114 CET3745813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:26.274636984 CET3745813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:26.393902063 CET1338737458154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:26.393975019 CET3745813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:26.513313055 CET1338737458154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:28.423867941 CET1338737458154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:28.424448967 CET3745813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:28.425112009 CET3746013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:28.543914080 CET1338737458154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:28.544373035 CET1338737460154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:28.544521093 CET3746013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:28.544625998 CET3746013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:28.663959026 CET1338737460154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:28.664151907 CET3746013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:28.783593893 CET1338737460154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:30.670927048 CET1338737460154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:30.671188116 CET3746013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:30.671747923 CET3746213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:30.790534973 CET1338737460154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:30.790997028 CET1338737462154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:30.791076899 CET3746213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:30.791165113 CET3746213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:30.910468102 CET1338737462154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:30.910662889 CET3746213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:31.030324936 CET1338737462154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:32.920622110 CET1338737462154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:32.921077967 CET3746213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:32.921681881 CET3746413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:33.040420055 CET1338737462154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:33.040935993 CET1338737464154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:33.041178942 CET3746413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:33.041178942 CET3746413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:33.161125898 CET1338737464154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:33.161360979 CET3746413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:33.281197071 CET1338737464154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:35.170839071 CET1338737464154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:35.171191931 CET3746413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:35.171632051 CET3746613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:35.290735006 CET1338737464154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:35.290942907 CET1338737466154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:35.291177988 CET3746613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:35.291177988 CET3746613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:35.410589933 CET1338737466154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:35.410793066 CET3746613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:35.530750990 CET1338737466154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:37.435051918 CET1338737466154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:37.435215950 CET3746613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:37.435642004 CET3746813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:37.554554939 CET1338737466154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:37.554867983 CET1338737468154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:37.555057049 CET3746813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:37.555130005 CET3746813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:37.674491882 CET1338737468154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:37.674824953 CET3746813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:37.794220924 CET1338737468154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:39.705524921 CET1338737468154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:39.705898046 CET3746813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:39.706623077 CET3747013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:39.825292110 CET1338737468154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:39.825872898 CET1338737470154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:39.826162100 CET3747013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:39.826426983 CET3747013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:39.945820093 CET1338737470154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:39.946037054 CET3747013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:40.065371037 CET1338737470154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:41.987278938 CET1338737470154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:41.987663984 CET3747013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:41.988399029 CET3747213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:42.106967926 CET1338737470154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:42.107705116 CET1338737472154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:42.107803106 CET3747213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:42.108004093 CET3747213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:42.227304935 CET1338737472154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:42.227452040 CET3747213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:42.346751928 CET1338737472154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:44.268038988 CET1338737472154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:44.268393040 CET3747213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:44.269084930 CET3747413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:44.387768030 CET1338737472154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:44.388349056 CET1338737474154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:44.388509989 CET3747413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:44.388660908 CET3747413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:44.507972002 CET1338737474154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:44.508126020 CET3747413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:44.627964973 CET1338737474154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:46.514944077 CET1338737474154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:46.515280008 CET3747413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:46.515925884 CET3747613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:46.634596109 CET1338737474154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:46.635263920 CET1338737476154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:46.635484934 CET3747613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:46.635703087 CET3747613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:46.755558014 CET1338737476154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:46.755685091 CET3747613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:46.874995947 CET1338737476154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:48.780119896 CET1338737476154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:48.780344963 CET3747613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:48.780610085 CET3747813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:48.899849892 CET1338737476154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:48.899969101 CET1338737478154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:48.900052071 CET3747813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:48.900113106 CET3747813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:49.019432068 CET1338737478154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:49.019512892 CET3747813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:49.138968945 CET1338737478154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:51.049496889 CET1338737478154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:51.049729109 CET3747813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:51.050436020 CET3748013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:51.171190023 CET1338737478154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:51.171205044 CET1338737480154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:51.171304941 CET3748013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:51.171535015 CET3748013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:51.290923119 CET1338737480154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:51.291043043 CET3748013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:51.416887999 CET1338737480154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:53.296534061 CET1338737480154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:53.296725035 CET3748013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:53.297306061 CET3748213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:53.416070938 CET1338737480154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:53.416501045 CET1338737482154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:53.416641951 CET3748213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:53.416728020 CET3748213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:53.536063910 CET1338737482154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:53.536168098 CET3748213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:53.656311035 CET1338737482154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:55.565640926 CET1338737482154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:55.565982103 CET3748213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:55.566464901 CET3748413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:55.685739040 CET1338737482154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:55.686255932 CET1338737484154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:55.686551094 CET3748413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:55.686669111 CET3748413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:55.805994034 CET1338737484154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:55.806175947 CET3748413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:55.925868034 CET1338737484154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:57.827429056 CET1338737484154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:57.827677965 CET3748413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:57.828139067 CET3748613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:57.947134972 CET1338737484154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:57.947431087 CET1338737486154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:57.947608948 CET3748613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:57.947788954 CET3748613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:58.067039967 CET1338737486154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:19:58.067217112 CET3748613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:19:58.186698914 CET1338737486154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:00.096338987 CET1338737486154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:00.096738100 CET3748613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:00.097524881 CET3748813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:00.217345953 CET1338737486154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:00.217705011 CET1338737488154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:00.217926979 CET3748813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:00.218024015 CET3748813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:00.337366104 CET1338737488154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:00.337548971 CET3748813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:00.457084894 CET1338737488154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:02.377806902 CET1338737488154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:02.378096104 CET3748813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:02.378674984 CET3749013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:02.497433901 CET1338737488154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:02.497901917 CET1338737490154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:02.498013973 CET3749013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:02.498069048 CET3749013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:02.617398024 CET1338737490154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:02.617516041 CET3749013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:02.736843109 CET1338737490154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:04.659187078 CET1338737490154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:04.659378052 CET3749013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:04.659699917 CET3749213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:04.778691053 CET1338737490154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:04.778937101 CET1338737492154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:04.779025078 CET3749213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:04.779103994 CET3749213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:04.898387909 CET1338737492154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:04.898458958 CET3749213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:05.017801046 CET1338737492154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:06.906310081 CET1338737492154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:06.906481028 CET3749213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:06.906920910 CET3749413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:07.026591063 CET1338737492154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:07.026681900 CET1338737494154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:07.026796103 CET3749413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:07.026882887 CET3749413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:07.146609068 CET1338737494154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:07.146686077 CET3749413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:07.265954971 CET1338737494154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:09.155386925 CET1338737494154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:09.155756950 CET3749413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:09.156213999 CET3749613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:09.275278091 CET1338737494154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:09.275522947 CET1338737496154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:09.275574923 CET3749613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:09.275758028 CET3749613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:09.395081997 CET1338737496154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:09.395194054 CET3749613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:09.514484882 CET1338737496154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:11.405795097 CET1338737496154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:11.406071901 CET3749613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:11.406913996 CET3749813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:11.525366068 CET1338737496154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:11.526233912 CET1338737498154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:11.526412964 CET3749813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:11.526494026 CET3749813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:11.645725012 CET1338737498154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:11.646058083 CET3749813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:11.765336990 CET1338737498154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:13.671509027 CET1338737498154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:13.671673059 CET3749813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:13.672167063 CET3750013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:13.791055918 CET1338737498154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:13.791444063 CET1338737500154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:13.791562080 CET3750013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:13.791615963 CET3750013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:13.911086082 CET1338737500154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:13.911204100 CET3750013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:14.030586004 CET1338737500154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:15.940638065 CET1338737500154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:15.941168070 CET3750013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:15.941761971 CET3750213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:16.060522079 CET1338737500154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:16.061002970 CET1338737502154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:16.061166048 CET3750213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:16.061352015 CET3750213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:16.180640936 CET1338737502154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:16.180804014 CET3750213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:16.301091909 CET1338737502154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:18.221935987 CET1338737502154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:18.222198963 CET3750213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:18.222913027 CET3750413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:18.341527939 CET1338737502154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:18.342165947 CET1338737504154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:18.342262030 CET3750413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:18.342462063 CET3750413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:18.461738110 CET1338737504154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:18.461834908 CET3750413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:18.581145048 CET1338737504154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:20.487248898 CET1338737504154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:20.487755060 CET3750413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:20.488364935 CET3750613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:20.607182026 CET1338737504154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:20.607619047 CET1338737506154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:20.607697010 CET3750613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:20.607774019 CET3750613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:20.728791952 CET1338737506154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:20.728895903 CET3750613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:20.848270893 CET1338737506154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:22.768781900 CET1338737506154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:22.769012928 CET3750613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:22.769711018 CET3750813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:22.888319969 CET1338737506154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:22.888946056 CET1338737508154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:22.889254093 CET3750813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:22.889384031 CET3750813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:23.008610010 CET1338737508154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:23.008749008 CET3750813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:23.128232002 CET1338737508154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:25.015208006 CET1338737508154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:25.015362978 CET3750813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:25.015763044 CET3751013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:25.134840965 CET1338737508154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:25.135087013 CET1338737510154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:25.135153055 CET3751013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:25.135234118 CET3751013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:25.255070925 CET1338737510154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:25.255143881 CET3751013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:25.374430895 CET1338737510154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:27.284497976 CET1338737510154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:27.284626007 CET3751013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:27.284926891 CET3751213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:27.404032946 CET1338737510154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:27.404165983 CET1338737512154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:27.404231071 CET3751213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:27.404300928 CET3751213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:27.523550034 CET1338737512154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:27.523614883 CET3751213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:27.642982960 CET1338737512154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:29.550368071 CET1338737512154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:29.550509930 CET3751213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:29.551059961 CET3751413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:29.669846058 CET1338737512154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:29.670325994 CET1338737514154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:29.670614958 CET3751413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:29.670649052 CET3751413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:29.789961100 CET1338737514154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:29.790165901 CET3751413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:29.909423113 CET1338737514154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:31.815649986 CET1338737514154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:31.815814972 CET3751413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:31.816304922 CET3751613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:31.935201883 CET1338737514154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:31.935493946 CET1338737516154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:31.935553074 CET3751613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:31.935621023 CET3751613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:32.054857016 CET1338737516154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:32.054908037 CET3751613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:32.174321890 CET1338737516154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:34.098364115 CET1338737516154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:34.098596096 CET3751613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:34.098958015 CET3751813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:34.218344927 CET1338737516154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:34.218700886 CET1338737518154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:34.218811989 CET3751813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:34.218888044 CET3751813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:34.338563919 CET1338737518154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:34.338783979 CET3751813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:34.458096981 CET1338737518154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:36.344109058 CET1338737518154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:36.344432116 CET3751813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:36.344811916 CET3752013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:36.463752031 CET1338737518154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:36.464087963 CET1338737520154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:36.464205027 CET3752013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:36.464252949 CET3752013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:36.583460093 CET1338737520154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:36.583744049 CET3752013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:36.703020096 CET1338737520154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:38.593482971 CET1338737520154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:38.594033957 CET3752013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:38.594566107 CET3752213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:38.713309050 CET1338737520154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:38.713926077 CET1338737522154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:38.714210033 CET3752213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:38.714210033 CET3752213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:38.833559036 CET1338737522154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:38.833656073 CET3752213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:38.952881098 CET1338737522154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:40.844060898 CET1338737522154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:40.844225883 CET3752213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:40.844609976 CET3752413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:40.963510990 CET1338737522154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:40.963828087 CET1338737524154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:40.963962078 CET3752413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:40.964013100 CET3752413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:41.083863974 CET1338737524154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:41.083969116 CET3752413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:41.204257965 CET1338737524154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:43.113171101 CET1338737524154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:43.113269091 CET3752413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:43.113765001 CET3752613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:43.232764006 CET1338737524154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:43.233000040 CET1338737526154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:43.233059883 CET3752613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:43.233146906 CET3752613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:43.352777958 CET1338737526154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:43.352858067 CET3752613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:43.472342014 CET1338737526154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:45.359460115 CET1338737526154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:45.359704018 CET3752613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:45.360265970 CET3752813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:45.478938103 CET1338737526154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:45.479486942 CET1338737528154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:45.479537010 CET3752813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:45.479701042 CET3752813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:45.598918915 CET1338737528154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:45.599061966 CET3752813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:45.718306065 CET1338737528154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:47.626308918 CET1338737528154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:47.626473904 CET3752813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:47.626904964 CET3753013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:47.745939016 CET1338737528154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:47.746193886 CET1338737530154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:47.746294975 CET3753013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:47.746328115 CET3753013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:47.865561008 CET1338737530154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:47.865689993 CET3753013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:47.984976053 CET1338737530154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:49.904603958 CET1338737530154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:49.904910088 CET3753013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:49.905371904 CET3753213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:50.024090052 CET1338737530154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:50.024621964 CET1338737532154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:50.024837017 CET3753213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:50.024908066 CET3753213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:50.144120932 CET1338737532154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:50.144399881 CET3753213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:50.263653994 CET1338737532154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:52.175834894 CET1338737532154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:52.176131010 CET3753213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:52.176718950 CET3753413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:52.295470953 CET1338737532154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:52.295973063 CET1338737534154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:52.296164036 CET3753413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:52.296219110 CET3753413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:52.415513992 CET1338737534154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:52.415705919 CET3753413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:52.535154104 CET1338737534154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:54.456743956 CET1338737534154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:54.457117081 CET3753413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:54.457669020 CET3753613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:54.576380014 CET1338737534154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:54.576960087 CET1338737536154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:54.577156067 CET3753613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:54.577200890 CET3753613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:54.696500063 CET1338737536154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:54.696551085 CET3753613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:54.816008091 CET1338737536154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:56.703201056 CET1338737536154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:56.703376055 CET3753613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:56.704176903 CET3753813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:56.822659016 CET1338737536154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:56.823410988 CET1338737538154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:56.823775053 CET3753813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:56.823869944 CET3753813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:56.943041086 CET1338737538154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:56.943383932 CET3753813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:57.062642097 CET1338737538154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:58.973665953 CET1338737538154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:58.973989964 CET3753813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:58.974606037 CET3754013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:59.093358994 CET1338737538154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:59.093825102 CET1338737540154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:59.094101906 CET3754013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:59.094130993 CET3754013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:59.213387012 CET1338737540154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:20:59.213573933 CET3754013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:20:59.332853079 CET1338737540154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:01.228513956 CET1338737540154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:01.228729010 CET3754013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:01.229326010 CET3754213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:01.348026037 CET1338737540154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:01.348582029 CET1338737542154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:01.348814964 CET3754213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:01.348929882 CET3754213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:01.468080997 CET1338737542154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:01.468219995 CET3754213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:01.587405920 CET1338737542154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:03.504381895 CET1338737542154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:03.504515886 CET3754213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:03.505114079 CET3754413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:03.623717070 CET1338737542154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:03.624449968 CET1338737544154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:03.624545097 CET3754413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:03.624748945 CET3754413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:03.744263887 CET1338737544154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:03.744441986 CET3754413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:03.863620996 CET1338737544154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:05.750452995 CET1338737544154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:05.750813007 CET3754413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:05.751534939 CET3754613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:05.870089054 CET1338737544154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:05.870733976 CET1338737546154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:05.870944023 CET3754613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:05.871135950 CET3754613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:05.990514040 CET1338737546154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:05.990691900 CET3754613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:06.109971046 CET1338737546154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:08.000478983 CET1338737546154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:08.000761986 CET3754613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:08.001281023 CET3754813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:08.120126009 CET1338737546154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:08.120743036 CET1338737548154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:08.120827913 CET3754813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:08.120919943 CET3754813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:08.240362883 CET1338737548154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:08.240545034 CET3754813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:08.359749079 CET1338737548154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:10.250504971 CET1338737548154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:10.250677109 CET3754813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:10.251144886 CET3755013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:10.371931076 CET1338737548154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:10.372253895 CET1338737550154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:10.372355938 CET3755013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:10.372421980 CET3755013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:10.491612911 CET1338737550154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:10.491707087 CET3755013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:10.611411095 CET1338737550154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:12.519958019 CET1338737550154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:12.520214081 CET3755013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:12.521039009 CET3755213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:12.639985085 CET1338737550154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:12.640868902 CET1338737552154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:12.641071081 CET3755213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:12.641310930 CET3755213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:12.760557890 CET1338737552154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:12.760689020 CET3755213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:12.880748034 CET1338737552154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:14.781820059 CET1338737552154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:14.782093048 CET3755213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:14.782532930 CET3755413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:14.901478052 CET1338737552154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:14.901738882 CET1338737554154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:14.901849985 CET3755413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:14.901952982 CET3755413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:15.021167994 CET1338737554154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:15.021298885 CET3755413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:15.140866995 CET1338737554154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:17.095980883 CET1338737554154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:17.096112013 CET3755413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:17.096563101 CET3755613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:17.215468884 CET1338737554154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:17.215814114 CET1338737556154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:17.215933084 CET3755613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:17.216006994 CET3755613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:17.335422039 CET1338737556154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:17.335525036 CET3755613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:17.454746962 CET1338737556154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:19.344810009 CET1338737556154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:19.345036030 CET3755613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:19.345550060 CET3755813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:19.464509010 CET1338737556154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:19.465023041 CET1338737558154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:19.465126038 CET3755813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:19.465214014 CET3755813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:19.584419012 CET1338737558154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:19.584530115 CET3755813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:19.703775883 CET1338737558154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:21.594492912 CET1338737558154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:21.594774008 CET3755813387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:21.595402956 CET3756013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:21.714051008 CET1338737558154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:21.714670897 CET1338737560154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:21.714777946 CET3756013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:21.715018034 CET3756013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:21.834244013 CET1338737560154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:21.834403038 CET3756013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:21.953665018 CET1338737560154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:23.844872952 CET1338737560154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:23.845254898 CET3756013387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:23.846946001 CET3756213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:23.964839935 CET1338737560154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:23.966243982 CET1338737562154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:23.966391087 CET3756213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:23.966613054 CET3756213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:24.085867882 CET1338737562154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:24.085994959 CET3756213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:24.205255985 CET1338737562154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:26.095006943 CET1338737562154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:26.095249891 CET3756213387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:26.096060991 CET3756413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:26.214751959 CET1338737562154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:26.215389967 CET1338737564154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:26.215647936 CET3756413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:26.215873957 CET3756413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:26.335527897 CET1338737564154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:26.335593939 CET3756413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:26.454870939 CET1338737564154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:28.345812082 CET1338737564154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:28.345959902 CET3756413387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:28.346496105 CET3756613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:28.465215921 CET1338737564154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:28.465701103 CET1338737566154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:28.465820074 CET3756613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:28.465898037 CET3756613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:28.585097075 CET1338737566154.213.187.14192.168.2.13
                                    Dec 9, 2024 11:21:28.585172892 CET3756613387192.168.2.13154.213.187.14
                                    Dec 9, 2024 11:21:28.704540968 CET1338737566154.213.187.14192.168.2.13

                                    UDP Packets

                                    TimestampSource PortDest PortSource IPDest IP
                                    Dec 9, 2024 11:20:42.111589909 CET4859853192.168.2.138.8.8.8
                                    Dec 9, 2024 11:20:42.111637115 CET4862753192.168.2.138.8.8.8
                                    Dec 9, 2024 11:20:42.233983040 CET53485988.8.8.8192.168.2.13
                                    Dec 9, 2024 11:20:42.234057903 CET53486278.8.8.8192.168.2.13

                                    DNS Queries

                                    TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                    Dec 9, 2024 11:20:42.111589909 CET192.168.2.138.8.8.80x53Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                                    Dec 9, 2024 11:20:42.111637115 CET192.168.2.138.8.8.80xa18Standard query (0)daisy.ubuntu.com28IN (0x0001)false

                                    DNS Answers

                                    TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                    Dec 9, 2024 11:20:42.233983040 CET8.8.8.8192.168.2.130x53No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false
                                    Dec 9, 2024 11:20:42.233983040 CET8.8.8.8192.168.2.130x53No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false

                                    System Behavior

                                    General

                                    Start time (UTC):10:17:54
                                    Start date (UTC):09/12/2024
                                    Path:/tmp/pXdN91.armv4l.elf
                                    Arguments:/tmp/pXdN91.armv4l.elf
                                    File size:4956856 bytes
                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                    Chronological Activities


                                    General

                                    Start time (UTC):10:17:54
                                    Start date (UTC):09/12/2024
                                    Path:/tmp/pXdN91.armv4l.elf
                                    Arguments:-
                                    File size:4956856 bytes
                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                    Chronological Activities


                                    General

                                    Start time (UTC):10:17:54
                                    Start date (UTC):09/12/2024
                                    Path:/tmp/pXdN91.armv4l.elf
                                    Arguments:-
                                    File size:4956856 bytes
                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                    Chronological Activities


                                    General

                                    Start time (UTC):10:17:54
                                    Start date (UTC):09/12/2024
                                    Path:/tmp/pXdN91.armv4l.elf
                                    Arguments:-
                                    File size:4956856 bytes
                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                    Chronological Activities