auroraint.arm

ARM architecture from ELF header bytes 0x0–0x2f0

0x07f454c46010101610000000000000000.ELF...a........
0x1002002800010000009081000034000000..(.........4...
0x20b8d10000020200003400200003002800........4. ...(.
⋯45 more rows

ARM OABI direct kill(2) syscall 0x9ac8–0x9b88

⋯3 more rows
0x9af81040bde80cd08de20ef0a0e110402de9.@...........@-.
0x9b08250090ef010a70e30040a0e10300009a%.....p..@......
0x9b182e0100eb003064e2003080e50040e0e3.....0d..0...@..
⋯7 more rows

ARM OABI direct bind(2) SVC instruction 0xa0f4–0xa384

⋯3 more rows
0xa1240040e0e30400a0e11080bde810402de9.@...........@-.
0xa1341a0190ef010a70e30040a0e10300009a......p..@......
0xa144a3ffffeb003064e2003080e50040e0e3.....0d..0...@..
0xa1540400a0e11080bde810402de91b0190ef.........@-.....
0xa164010a70e30040a0e10300009a98ffffeb..p..@..........
0xa174003064e2003080e50040e0e30400a0e1.0d..0...@......
0xa1841080bde810402de91e0190ef010a70e3[email protected].
0xa1940040a0e10300009a8dffffeb003064e2[email protected].
0xa1a4003080e50040e0e30400a0e11080bde8.0...@..........
0xa1b410402de908409de5270190ef010a70e3.@-..@..'.....p.
0xa1c40040a0e10300009a81ffffeb003064e2[email protected].
0xa1d4003080e50040e0e30400a0e11080bde8.0...@..........
0xa1e410402de91c0190ef010a70e30040a0e1[email protected]..@..
0xa1f40300009a76ffffeb003064e2003080e5....v....0d..0..
0xa2040040e0e30400a0e11080bde810402de9.@...........@-.
0xa214230190ef010a70e30040a0e10300009a#.....p..@......
0xa2246bffffeb003064e2003080e50040e0e3k....0d..0...@..
0xa2340400a0e11080bde830402de90c408de2........0@-..@..
0xa244300094e8240190ef010a70e30040a0e10...$.....p..@..
0xa2540300009a5effffeb003064e2003080e5....^....0d..0..
0xa2640040e0e30400a0e13080bde810402de9[email protected]....@-.
0xa274210190ef010a70e30040a0e10300009a!.....p..@......
0xa28453ffffeb003064e2003080e50040e0e3S....0d..0...@..
0xa2940400a0e11080bde830402de90c408de2........0@-..@..
0xa2a4300094e8220190ef010a70e30040a0e10...".....p..@..
0xa2b40300009a46ffffeb003064e2003080e5....F....0d..0..
0xa2c40040e0e30400a0e13080bde810402de9[email protected]....@-.
0xa2d408409de5260190ef010a70e30040a0e1.@..&.....p..@..
0xa2e40300009a3affffeb003064e2003080e5....:....0d..0..
0xa2f40040e0e30400a0e11080bde810402de9.@...........@-.
0xa304190190ef010a70e30040a0e10300009a......p..@......
0xa3142fffffeb003064e2003080e50040e0e3/....0d..0...@..
⋯7 more rows

BusyBox invoked with bot marker name 0xc20c–0xc4fc

⋯7 more rows
0xc27cf0df2de904b04ce289cfffebf0af1be9..-...L.........
0xc28c504f5354202f63646e2d6367692f0000POST /cdn-cgi/..
0xc29c20485454502f312e310d0a557365722d HTTP/1.1..User-
0xc2ac4167656e743a20000d0a486f73743a20Agent: ...Host: 
⋯4 more rows
0xc2fc00000000504f53540000000027000000....POST....'...
0xc30c3d0000002f70726f632f6e65742f7463=.../proc/net/tc
0xc31c700000002f6465762f7761746368646fp.../dev/watchdo
0xc32c670000002f6465762f6d6973632f7761g.../dev/misc/wa
0xc33c746368646f6700000a00000000000001tchdog..........
0xc34c0000000010f200001c07010038060100............8...
0xc35cd407010064060100c010010024140100....d.......$...
0xc36cb0ea0000f8f100002f2e007664004872......../..vd.Hr
0xc37c006c6500657000007200000061626364.le.ep..r...abcd
0xc38c65666768696a6b6c6d6e6f7071727374efghijklmnopqrst
0xc39c75767730313233343536373800000000uvw012345678....
0xc3ac1b160c131a110c1315160c1a12220000............."..
0xc3bc224700005047524d50560c414a434c45"G..PGRMPV.AJCLE
0xc3cc474f470c414d4f220000000099c70000GOG.AMO"........
0xc3dc4e4b5156474c4b4c450256574c122200NKQVGLKLE.VWL.".
0xc3ec4a56565251180d0d5b4d5756570c4047JVVRQ...[MWVW.@G
0xc3fc0d46735516551b75457a417322000000.FsU.U.uEzAs"...
0xc40c0d52504d410d22000d475a4722000000.RPMA."..GZG"...
0xc41c020a46474e475647460b22000d444622..FGNGVGF."..DF"
0xc42c000000000c434c4b4f4722000d515643.....CLKOG"..QVC
0xc43c56575122000000007067726d70760207VWQ"....pgrmpv..
0xc44c51180751220000006a767672646e6d6dQ..Q"...jvvrdnmm
0xc45c662200006e6d6e6c6d6576646d220000f"..nmnlmevdm"..
0xc46c7e5a171a7e5a16667e5a16677e5a1667~Z..~Z.f~Z.g~Z.g
0xc47c7e5a16117e5a17127e5a16147e5a1010~Z..~Z..~Z..~Z..
0xc48c22000000584d4e4e4350462200000000"...XMNNCPF"....
0xc49c6567766e6d61636e6b722200514a474eegvnmacnkr".QJGN
0xc4ac4e220000474c43404e472200515b5156N"..GLC@NG".Q[QV
0xc4bc474f2200514a22000d404b4c0d405751GO".QJ"..@KL.@WQ
0xc4cc5b404d5a026f6b70636b22006f6b7063[@MZ.okpck".okpc
0xc4dc6b18024352524e4756024c4d5602444dk..CRRNGV.LMV.DM
0xc4ec574c4622000000004c414d5050474156WLF"....LAMPPGAV
0xc4fc220000000d404b4c0d4057515b404d5a"....@KL.@WQ[@MZ

XOR-decoded macOS Safari User-Agent 0xc68f–0xc97f

⋯3 more rows
0xc6bf5447501802414e4d5746444e4350470fTGP..ANMWFDNCPG.
0xc6cf4c454b4c5a220000006f4d584b4e4e43LEKLZ"...oMXKNNC
0xc6df0d170c12020a754b4c464d5551026c76......uKLFMUQ.lv
0xc6ef0213120c121902756d7514160b026352.......umu....cR
0xc6ff524e47754740694b560d1711150c1114RNGuG@iKV.......
0xc70f020a696a766f6e0e024e4b4947026547..ijvon..NKIG.eG
0xc71f41494d0b02614a504d4f470d17130c12AIM..aJPMOG.....
0xc72f0c101512160c1312110271434443504b..........qCDCPK
0xc73f0d1711150c111422006f4d584b4e4e43.......".oMXKNNC
0xc74f0d170c12020a754b4c464d5551026c76......uKLFMUQ.lv
0xc75f0213120c121902756d7514160b026352.......umu....cR
0xc76f524e47754740694b560d1711150c1114RNGuG@iKV.......
0xc77f020a696a766f6e0e024e4b4947026547..ijvon..NKIG.eG
0xc78f41494d0b02614a504d4f470d17100c12AIM..aJPMOG.....
0xc79f0c101516110c1313140271434443504b..........qCDCPK
0xc7af0d1711150c111422006f4d584b4e4e43.......".oMXKNNC
0xc7bf0d170c12020a754b4c464d5551026c76......uKLFMUQ.lv
0xc7cf02140c131902756d7514160b02635252......umu....cRR
0xc7df4e47754740694b560d1711150c111402NGuG@iKV........
0xc7ef0a696a766f6e0e024e4b494702654741.ijvon..NKIG.eGA
0xc7ff494d0b02614a504d4f470d17130c120cIM..aJPMOG......
0xc80f101512160c1312110271434443504b0d.........qCDCPK.
0xc81f1711150c11142200006f4d584b4e4e43......"..oMXKNNC
0xc82f0d170c12020a754b4c464d5551026c76......uKLFMUQ.lv
0xc83f02140c131902756d7514160b02635252......umu....cRR
0xc84f4e47754740694b560d1711150c111402NGuG@iKV........
0xc85f0a696a766f6e0e024e4b494702654741.ijvon..NKIG.eGA
0xc86f494d0b02614a504d4f470d17100c120cIM..aJPMOG......
0xc87f101516110c1313140271434443504b0d.........qCDCPK.
0xc88f1711150c11142200006f4d584b4e4e43......"..oMXKNNC
0xc89f0d170c12020a6f43414b4c564d514a19......oCAKLVMQJ.
0xc8af026b4c56474e026f4341026d71027a02.kLVGN.oCA.mq.z.
0xc8bf13127d13137d140b026352524e477547..}..}...cRRNGuG
0xc8cf40694b560d1412130c150c15020a696a@iKV..........ij
0xc8df766f6e0e024e4b494702654741494d0bvon..NKIG.eGAIM.
0xc8ef02744750514b4d4c0d1b0c130c100271.tGPQKML.......q
0xc8ff434443504b0d1412130c150c15220000CDCPK........"..
0xc90f002f6465762f6e756c6c000000000000./dev/null......
⋯7 more rows

Evidence