Edit tour

Linux Analysis Report
m-6.8-k.ISIS.elf

Overview

General Information

Sample name:	m-6.8-k.ISIS.elf
Analysis ID:	1555356
MD5:	aa5281a4f008652bd5488dcea862e933
SHA1:	5786bb24333eb832f81295abc2dab1486e412a40
SHA256:	57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1555356
Start date and time:	2024-11-13 19:22:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	m-6.8-k.ISIS.elf
Detection:	MAL
Classification:	mal84.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: m-6.8-k.ISIS.elf

Runtime Messages

Command:	/tmp/m-6.8-k.ISIS.elf
PID:	6225
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

m-6.8-k.ISIS.elf (PID: 6225, Parent: 6140, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/m-6.8-k.ISIS.elf

m-6.8-k.ISIS.elf New Fork (PID: 6227, Parent: 6225)

m-6.8-k.ISIS.elf New Fork (PID: 6229, Parent: 6227)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
m-6.8-k.ISIS.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-13T19:22:48.434189+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42020	185.78.76.132	839	TCP
2024-11-13T19:22:49.391298+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42022	185.78.76.132	839	TCP
2024-11-13T19:22:50.350837+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42024	185.78.76.132	839	TCP
2024-11-13T19:22:51.268933+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42026	185.78.76.132	839	TCP
2024-11-13T19:22:52.161829+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42028	185.78.76.132	839	TCP
2024-11-13T19:22:53.048796+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42030	185.78.76.132	839	TCP
2024-11-13T19:22:53.919441+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42032	185.78.76.132	839	TCP
2024-11-13T19:22:55.024450+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42034	185.78.76.132	839	TCP
2024-11-13T19:22:55.959910+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42036	185.78.76.132	839	TCP
2024-11-13T19:22:57.002040+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42038	185.78.76.132	839	TCP
2024-11-13T19:22:58.016128+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42040	185.78.76.132	839	TCP
2024-11-13T19:22:58.972938+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42042	185.78.76.132	839	TCP
2024-11-13T19:22:59.864674+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42044	185.78.76.132	839	TCP
2024-11-13T19:23:00.895040+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42046	185.78.76.132	839	TCP
2024-11-13T19:23:01.953612+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42048	185.78.76.132	839	TCP
2024-11-13T19:23:02.886810+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42050	185.78.76.132	839	TCP
2024-11-13T19:23:03.807116+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42052	185.78.76.132	839	TCP
2024-11-13T19:23:04.848156+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42054	185.78.76.132	839	TCP
2024-11-13T19:23:05.750281+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42056	185.78.76.132	839	TCP
2024-11-13T19:23:06.641192+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42058	185.78.76.132	839	TCP
2024-11-13T19:23:07.659574+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42060	185.78.76.132	839	TCP
2024-11-13T19:23:08.534614+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42062	185.78.76.132	839	TCP
2024-11-13T19:23:09.504869+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42064	185.78.76.132	839	TCP
2024-11-13T19:23:10.360756+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42066	185.78.76.132	839	TCP
2024-11-13T19:23:11.278709+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42068	185.78.76.132	839	TCP
2024-11-13T19:23:12.197042+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42070	185.78.76.132	839	TCP
2024-11-13T19:23:13.089754+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42072	185.78.76.132	839	TCP
2024-11-13T19:23:14.004210+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42074	185.78.76.132	839	TCP
2024-11-13T19:23:15.056595+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42076	185.78.76.132	839	TCP
2024-11-13T19:23:15.922645+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42078	185.78.76.132	839	TCP
2024-11-13T19:23:17.004772+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42080	185.78.76.132	839	TCP
2024-11-13T19:23:17.957782+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42082	185.78.76.132	839	TCP
2024-11-13T19:23:18.845563+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42084	185.78.76.132	839	TCP
2024-11-13T19:23:19.770701+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42086	185.78.76.132	839	TCP
2024-11-13T19:23:20.708611+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42088	185.78.76.132	839	TCP
2024-11-13T19:23:21.660499+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42090	185.78.76.132	839	TCP
2024-11-13T19:23:22.562752+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42092	185.78.76.132	839	TCP
2024-11-13T19:23:23.460752+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42094	185.78.76.132	839	TCP
2024-11-13T19:23:24.377797+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42096	185.78.76.132	839	TCP
2024-11-13T19:23:25.252245+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42098	185.78.76.132	839	TCP
2024-11-13T19:23:27.296699+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42100	185.78.76.132	839	TCP
2024-11-13T19:23:28.204897+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42102	185.78.76.132	839	TCP
2024-11-13T19:23:29.102069+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42104	185.78.76.132	839	TCP
2024-11-13T19:23:29.981019+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42106	185.78.76.132	839	TCP
2024-11-13T19:23:31.017812+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42108	185.78.76.132	839	TCP
2024-11-13T19:23:31.964314+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42110	185.78.76.132	839	TCP
2024-11-13T19:23:32.914398+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42112	185.78.76.132	839	TCP
2024-11-13T19:23:34.013937+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42114	185.78.76.132	839	TCP
2024-11-13T19:23:34.887473+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42116	185.78.76.132	839	TCP
2024-11-13T19:23:35.890930+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42118	185.78.76.132	839	TCP
2024-11-13T19:23:36.937909+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42120	185.78.76.132	839	TCP
2024-11-13T19:23:37.800225+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42122	185.78.76.132	839	TCP
2024-11-13T19:23:39.661410+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42124	185.78.76.132	839	TCP
2024-11-13T19:23:40.540682+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42126	185.78.76.132	839	TCP
2024-11-13T19:23:41.405824+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42128	185.78.76.132	839	TCP
2024-11-13T19:23:42.283963+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42130	185.78.76.132	839	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: m-6.8-k.ISIS.elf

Avira: detected

Found malware configuration

Source: m-6.8-k.ISIS.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.78.76.132:839"}

Multi AV Scanner detection for submitted file

Source: m-6.8-k.ISIS.elf

ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/m-6.8-k.ISIS.elf (PID: 6225)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42042 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42026 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42066 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42084 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42090 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42080 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42074 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42094 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42040 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42028 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42112 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42032 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42098 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42046 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42116 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42034 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42114 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42044 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42118 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42054 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42038 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42052 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42060 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42020 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42072 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42078 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42024 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42104 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42036 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42124 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42126 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42108 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42096 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42062 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42086 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42100 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42076 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42088 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42048 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42122 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42106 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42082 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42102 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42050 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42058 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42092 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42128 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42120 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42064 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42130 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42070 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42110 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42030 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42022 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42056 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42068 -> 185.78.76.132:839

Source: global traffic

TCP traffic: 192.168.2.23:42020 -> 185.78.76.132:839

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: m-6.8-k.ISIS.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: classification engine

Classification label: mal84.spre.troj.linELF@0/0@0/0

Source: /tmp/m-6.8-k.ISIS.elf (PID: 6225)

Queries kernel information via 'uname':

Jump to behavior

Source: m-6.8-k.ISIS.elf, 6225.1.0000555e1111b000.0000555e11249000.rw-.sdmp, m-6.8-k.ISIS.elf, 6227.1.0000555e1111b000.0000555e11249000.rw-.sdmp	Binary or memory string: ^U!/etc/qemu-binfmt/arm
Source: m-6.8-k.ISIS.elf, 6225.1.0000555e1111b000.0000555e11249000.rw-.sdmp, m-6.8-k.ISIS.elf, 6227.1.0000555e1111b000.0000555e11249000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: m-6.8-k.ISIS.elf, 6225.1.00007fff76c38000.00007fff76c59000.rw-.sdmp, m-6.8-k.ISIS.elf, 6227.1.00007fff76c38000.00007fff76c59000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: m-6.8-k.ISIS.elf, 6225.1.00007fff76c38000.00007fff76c59000.rw-.sdmp, m-6.8-k.ISIS.elf, 6227.1.00007fff76c38000.00007fff76c59000.rw-.sdmp	Binary or memory string: pXx86_64/usr/bin/qemu-arm/tmp/m-6.8-k.ISIS.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/m-6.8-k.ISIS.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: m-6.8-k.ISIS.elf, type: SAMPLE

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: m-6.8-k.ISIS.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.78.76.132:839"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
m-6.8-k.ISIS.elf	66%	ReversingLabs	Linux.Trojan.Gafgyt
m-6.8-k.ISIS.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.78.76.132:839	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.78.76.132	unknown	Poland	262287	MaxihostLTDABR	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.78.76.132	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	s-h.4-.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-6.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	x-3.2-.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	s-h.4-.ISIS.elf	Get hash	malicious	Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	Mozi.m.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.i686.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.sh4.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	Mozi.m.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse
	dlr.m68k.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.i686.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	Mozi.m.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dlr.m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	Mozi.m.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dlr.m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
INIT7CH	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	Mozi.m.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	dlr.m68k.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ub8ehJSePAfc9FYqZIT6.i686.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
MaxihostLTDABR	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	s-h.4-.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-6.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	x-3.2-.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	s-h.4-.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.9600708678163095
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	m-6.8-k.ISIS.elf
File size:	164'970 bytes
MD5:	aa5281a4f008652bd5488dcea862e933
SHA1:	5786bb24333eb832f81295abc2dab1486e412a40
SHA256:	57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541
SHA512:	4081a4b1772687141d4caa6340b85808b1f76b46cbc6e1c1d027dd0b5f480eb737bf33cbc3c5e941b71ba2ea3adae9861422f40789a1b35ac9cd73d19d9d9ce4
SSDEEP:	3072:Nd+3IoaOqhjsfDl02A6UCSMHnBQIM/9mVympwfFRQfVE:H+4oaOqhj2DzUCxHnBvM/9mVympwfFau
TLSH:	6EF33B04EA808757C5E227B9F68B424D33239B64A3DB33155938EFF43FC2B995E26121
File Content Preview:	.ELF..............(.........4...........4. ...(........pd...d...d... ... ...............................................................(t..........................................Q.td..................................-...L..................G.F.G.F.G.F.G.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81d0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	129960
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x166d0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1e7c0	0x167c0	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1e7d0	0x167d0	0x237c	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x20b4c	0x18b4c	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x20b64	0x18b64	0x120	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x29000	0x19000	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x29004	0x19004	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x29004	0x19004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x29008	0x19008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2900c	0x1900c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x29010	0x19010	0xb0	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x290c0	0x190c0	0x240	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x29300	0x19300	0x7128	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x19300	0xc1c	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x19f20	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x1a060	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1a273	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1c2b6	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1c998	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1d810	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1dac8	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1e392	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1f521	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1fa79	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1fa8f	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x20030	0x56e0	0x10	0x0		28	774	4
.strtab	STRTAB	0x0	0x25710	0x2d5a	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x18b64	0x20b64	0x20b64	0x120	0x120	4.5699	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x18c84	0x18c84	6.0883	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x19000	0x29000	0x29000	0x300	0x7428	4.0266	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x19004	0x29004	0x29004	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1e7c0	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1e7d0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x20b4c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x20b64	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x29000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x29004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x29004	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x29008	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2900c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x29010	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x290c0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x29300	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1e7c0	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1e7cc	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x812c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x820c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x848c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x881c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x95ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9a08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa84c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb1a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb814	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb9e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbbac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcf2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf73c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1006c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10304	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1033c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1041c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1051c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1055c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1058c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10608	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10660	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10680	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10784	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11034	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11bd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ccc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ce4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11df0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12020	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12094	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x120d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x121d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12218	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12288	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1235c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1358c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13644	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x137a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13838	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13dcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1453c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1458c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14958	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ff4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1504c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1573c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1586c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15874	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15880	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15890	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15908	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1591c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ae4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15efc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1638c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16404	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16db0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17070	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x170a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1729c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1834c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18aa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x193b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19850	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19aa4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ab0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19b40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19b98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a148	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a224	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a2ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a31c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a58c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a9d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b624	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bea8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bfac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c020	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c084	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c184	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c324	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c384	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c3b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c5cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c638	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c828	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d0e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d274	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d2c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d30c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d318	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d35c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d57c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d6cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d6e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d7b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d86c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d88c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d9d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1df18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1df20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1df28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1df30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e030	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e78c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29008	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x81bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29004	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x290c4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x8200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290c8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x82dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x841c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8488	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9124	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9310	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x95e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9a00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ec84	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa9a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb19c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb810	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb9d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbb9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xce54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcf14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdeec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf588	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf730	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xff28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x100fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x101e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10258	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1029c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x102d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10338	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1040c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10450	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10494	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10514	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10558	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10600	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10628	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10658	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290f4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1f45c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x290fc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1f75c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1067c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1077c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fa84	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x111e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1122c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11778	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29104	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1fa8c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11898	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ad8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11bc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fb10	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11e18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11f20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11fcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12018	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1208c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x120d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1215c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12210	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12280	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x122cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12354	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1239c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x123e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ea4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29108	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1334c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x133a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29120	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x13570	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13628	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1378c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29138	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x291d0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x13834	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13904	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x139f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13ae8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2067c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x13cf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13dac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x291e4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x13ef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14588	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14930	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14bcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ed0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ff0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x152f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15344	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x156f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x291fc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x157b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x157e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15860	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x158dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1593c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x159d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15adc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15b6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ba4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20710	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x15fd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16384	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x167e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16e20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16f78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2920c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x29208	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1706c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17a70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20770	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17f84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18470	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ea0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18f94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1925c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19750	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x197d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19adc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x292f0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x19b8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19c04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19c48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19f04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a0ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a220	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a2e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a3bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a4c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a874	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a9d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ac5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b530	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x292f4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1b5c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b61c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ba38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x292f6	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2082c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1bb00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1be90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bf68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bfa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c018	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c080	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c0c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c130	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c3ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c5bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c630	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x292f8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2084c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1d560	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1df08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$t	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
C.108.5655	.symtab	0x1ec84	8	OBJECT	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x206ec	12	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x20710	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x206f8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x1fa5c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x2074c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x20728	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x20740	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x20734	12	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0x119b8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x119d4	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x29338	16384	OBJECT	<unknown>	DEFAULT	14
SendHTTPHex	.symtab	0xb814	460	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0xa84c	344	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x9d30	1116	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x101f8	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x29010	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1d314	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1d318	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1dfc8	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1d30c	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1d350	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1dfec	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1e78c	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1d344	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1df5c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1df80	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1dfa4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1d274	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1d88c	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1d2c0	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x290f4	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1f45c	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x292f8	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x2084c	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x290fc	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1f75c	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x29000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x29000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x290f4	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_tolower	.symtab	0x292f8	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_toupper	.symtab	0x290fc	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x14e60	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x14e44	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x290f8	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_tolower	.symtab	0x292fc	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_toupper	.symtab	0x29100	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x10660	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x1006c	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1834c	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x11ccc	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x14e60	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x10104	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x14ef0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x15010	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x14f80	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x14ef0	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x14ed4	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x15010	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x14ff4	24	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x14a54	392	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x124d0	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x124f4	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x124ac	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x15228	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x152f8	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x14f80	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x14f64	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x11ce4	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x101f8	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x133a8	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x13af4	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x19b40	88	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x102a0	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x14e60	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x15ba8	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x16310	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x16344	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x15fe8	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x12020	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x13d08	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x164c0	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x10104	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x17fa0	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x17a90	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1834c	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x17bd4	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x18478	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x167f0	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1458c	972	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x117a8	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x19f0c	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x19f30	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x19ba4	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x117e0	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1834c	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x102d8	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x158e0	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x158f4	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x15908	20	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x11f50	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0x11f6c	112	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x18f9c	724	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x1bb64	836	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x1bee8	132	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1591c	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x14bdc	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x10304	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x12094	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x15944	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x15984	20	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0x11e30	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x11e20	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x11f28	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x18ea4	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x11f0c	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x11e80	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1a9d4	668	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1a65c	552	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x13910	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x1033c	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x18e04	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x10608	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x1041c	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1c0c4	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x189b0	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x118c0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1c140	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1a3fc	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x18aa0	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x118d0	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1573c	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x19c08	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x15998	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x15a18	96	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x11e60	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x11e50	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x14ef0	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x15d88	196	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1bfac	116	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x14c24	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x134e8	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x137a8	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1a420	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x15010	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x15efc	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x12164	112	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x15a78	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x10498	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x12218	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x122d4	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x1051c	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x1235c	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x13a08	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x157e4	136	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x123e8	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x15ae4	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x14d14	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x123a4	68	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x10680	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x13838	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x1c020	100	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1c5cc	108	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x119f0	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x18b80	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x11970	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x11970	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x11ae0	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x18c6c	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1c150	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x11990	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x1a4d0	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x11b04	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x18dc4	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x18cb0	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x18d00	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x11bd0	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x11df0	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x18d4c	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x13b14	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x13f18	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x18e28	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1055c	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x10630	48	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x1c084	64	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x106b4	208	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x15b70	56	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x1058c	124	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1638c	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x16404	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x163e0	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x14f80	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2900c	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x2900c	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1dfc8	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1df5c	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1df80	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1dfa4	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x1c834	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1d190	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1d190	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1d174	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1d220	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1c834	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1d1a8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1d1f0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1d208	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1d1d8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1d1c0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1ced4	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1cc44	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1c828	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1c830	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1cb90	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1cb68	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1c6e4	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1c810	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1cbe4	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x15890	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x1cb44	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xff44	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x10040	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1cbd0	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1df28	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1df20	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1df18	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2da80	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x291e4	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x30428	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x29300	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x29300	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x152a4	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x14e60	100	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x1ba80	152	FUNC	<unknown>	HIDDEN	2
__close_nocancel	.symtab	0x14e44	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1d0f0	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x290f8	4	OBJECT	<unknown>	DEFAULT	13
__ctype_tolower	.symtab	0x292fc	4	OBJECT	<unknown>	DEFAULT	13
__ctype_toupper	.symtab	0x29100	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2ffe4	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x290c0	0	NOTYPE	<unknown>	DEFAULT	13
__decode_dotted	.symtab	0x1ac70	248	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1c270	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x15884	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x15878	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x10058	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1ced4	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1c6e4	300	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x1ad68	2064	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x812c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x29008	0	OBJECT	<unknown>	DEFAULT	10
__dso_handle	.symtab	0x290c0	0	OBJECT	<unknown>	HIDDEN	13
__encode_dotted	.symtab	0x1c638	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1c184	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1c324	96	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x30428	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2da78	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x1d0f0	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x10660	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x20c84	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x20b64	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2d528	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x1cb90	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x1006c	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1834c	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2900c	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x29008	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x1d220	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1cbe4	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1cb68	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1cbd0	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1cb44	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x1458c	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x303e0	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x303e4	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x2d52c	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x29004	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x1d0e0	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x1bb18	76	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x19dc4	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1591c	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x14bdc	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x11ccc	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1d6cc	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1d7b4	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1df4c	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1d748	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1d86c	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1df54	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1e030	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1e744	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1d9d0	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x1d0e0	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x29008	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x29004	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x1d0e8	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x14e60	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x12020	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x15080	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x15108	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x10104	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1458c	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x303e8	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x15a18	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x14ef0	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x15010	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x12164	112	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x10498	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x12218	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x122d4	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x19874	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x157e4	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2da74	4	OBJECT	<unknown>	DEFAULT	14
__libc_waitpid	.symtab	0x1058c	124	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x14f80	100	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x149f0	100	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x14958	152	FUNC	<unknown>	HIDDEN	2
__local_nameserver	.symtab	0x2082c	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x1d0e8	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x12f78	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x12518	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x29108	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x30068	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x12ec8	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1cc44	656	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x3041c	4	OBJECT	<unknown>	HIDDEN	14
__nameservers	.symtab	0x30420	4	OBJECT	<unknown>	HIDDEN	14
__nedf2	.symtab	0x1d0f0	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x14ef0	100	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x1c384	48	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1b624	1116	FUNC	<unknown>	HIDDEN	2
__open_nocancel	.symtab	0x14ed4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x2da7c	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x29004	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x29004	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x29200	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x29204	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x19aa4	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x151ec	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x151e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x151e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x151e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x151e4	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x15010	100	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x1c3b4	536	FUNC	<unknown>	HIDDEN	2
__read_nocancel	.symtab	0x14ff4	24	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x14a54	392	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x30414	4	OBJECT	<unknown>	HIDDEN	14
__resolv_attempts	.symtab	0x292f7	1	OBJECT	<unknown>	HIDDEN	13
__resolv_lock	.symtab	0x2ffec	24	OBJECT	<unknown>	DEFAULT	14
__resolv_timeout	.symtab	0x292f6	1	OBJECT	<unknown>	HIDDEN	13
__restore_core_regs	.symtab	0x1df30	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x2da84	4	OBJECT	<unknown>	HIDDEN	14
__searchdomain	.symtab	0x30418	4	OBJECT	<unknown>	HIDDEN	14
__searchdomains	.symtab	0x30424	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x124d0	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x124f4	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x124ac	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1bea8	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x19b98	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x29218	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1a0f0	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1a148	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1a224	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x16c70	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1a2ec	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1a3c0	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1a31c	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x16f94	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x17070	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2921c	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x1c830	788	FUNC	<unknown>	HIDDEN	2
__sys_connect	.symtab	0x11fdc	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x12120	68	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x121d4	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x12288	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x157b8	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x159d8	64	FUNC	<unknown>	DEFAULT	2
__syscall_poll	.symtab	0x1bf6c	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x158a0	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x10454	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x19850	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x15228	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x152f8	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x15350	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x291fc	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0xff44	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x14f80	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x14f64	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x11ce4	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x19d18	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x19c4c	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2d338	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x30428	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x811d	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8121	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8129	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x810d	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x8111	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x8115	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x8119	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8125	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x10784	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x30010	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x30038	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x29104	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x19ab0	56	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x292f0	4	OBJECT	<unknown>	DEFAULT	13
_dl_nothread_init_static_tls	.symtab	0x19ae8	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x3040c	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x30410	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x30400	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x303fc	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x30404	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x303f4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x197e8	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x303f0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x30408	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x303f8	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x303ec	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x29300	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x30428	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x101f8	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1e7c0	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2daa8	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x107d8	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1729c	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x170a0	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x18520	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x10f50	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x11238	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x10ff0	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x11034	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x111e4	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x151fc	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x151f4	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1586c	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x30060	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x81d0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x16810	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x16db0	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x29220	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x2da88	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x17cf0	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2daa4	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x2da94	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x2daa0	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x29224	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x16e30	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x29208	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0x13b30	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x17114	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1fb20	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x17140	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x1085c	1780	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x133a8	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x10260	64	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x13af4	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x13af4	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x118a0	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2d524	4	OBJECT	<unknown>	DEFAULT	14

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-13T19:22:48.434189+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42020	185.78.76.132	839	TCP
2024-11-13T19:22:49.391298+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42022	185.78.76.132	839	TCP
2024-11-13T19:22:50.350837+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42024	185.78.76.132	839	TCP
2024-11-13T19:22:51.268933+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42026	185.78.76.132	839	TCP
2024-11-13T19:22:52.161829+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42028	185.78.76.132	839	TCP
2024-11-13T19:22:53.048796+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42030	185.78.76.132	839	TCP
2024-11-13T19:22:53.919441+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42032	185.78.76.132	839	TCP
2024-11-13T19:22:55.024450+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42034	185.78.76.132	839	TCP
2024-11-13T19:22:55.959910+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42036	185.78.76.132	839	TCP
2024-11-13T19:22:57.002040+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42038	185.78.76.132	839	TCP
2024-11-13T19:22:58.016128+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42040	185.78.76.132	839	TCP
2024-11-13T19:22:58.972938+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42042	185.78.76.132	839	TCP
2024-11-13T19:22:59.864674+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42044	185.78.76.132	839	TCP
2024-11-13T19:23:00.895040+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42046	185.78.76.132	839	TCP
2024-11-13T19:23:01.953612+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42048	185.78.76.132	839	TCP
2024-11-13T19:23:02.886810+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42050	185.78.76.132	839	TCP
2024-11-13T19:23:03.807116+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42052	185.78.76.132	839	TCP
2024-11-13T19:23:04.848156+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42054	185.78.76.132	839	TCP
2024-11-13T19:23:05.750281+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42056	185.78.76.132	839	TCP
2024-11-13T19:23:06.641192+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42058	185.78.76.132	839	TCP
2024-11-13T19:23:07.659574+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42060	185.78.76.132	839	TCP
2024-11-13T19:23:08.534614+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42062	185.78.76.132	839	TCP
2024-11-13T19:23:09.504869+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42064	185.78.76.132	839	TCP
2024-11-13T19:23:10.360756+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42066	185.78.76.132	839	TCP
2024-11-13T19:23:11.278709+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42068	185.78.76.132	839	TCP
2024-11-13T19:23:12.197042+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42070	185.78.76.132	839	TCP
2024-11-13T19:23:13.089754+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42072	185.78.76.132	839	TCP
2024-11-13T19:23:14.004210+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42074	185.78.76.132	839	TCP
2024-11-13T19:23:15.056595+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42076	185.78.76.132	839	TCP
2024-11-13T19:23:15.922645+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42078	185.78.76.132	839	TCP
2024-11-13T19:23:17.004772+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42080	185.78.76.132	839	TCP
2024-11-13T19:23:17.957782+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42082	185.78.76.132	839	TCP
2024-11-13T19:23:18.845563+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42084	185.78.76.132	839	TCP
2024-11-13T19:23:19.770701+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42086	185.78.76.132	839	TCP
2024-11-13T19:23:20.708611+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42088	185.78.76.132	839	TCP
2024-11-13T19:23:21.660499+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42090	185.78.76.132	839	TCP
2024-11-13T19:23:22.562752+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42092	185.78.76.132	839	TCP
2024-11-13T19:23:23.460752+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42094	185.78.76.132	839	TCP
2024-11-13T19:23:24.377797+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42096	185.78.76.132	839	TCP
2024-11-13T19:23:25.252245+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42098	185.78.76.132	839	TCP
2024-11-13T19:23:27.296699+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42100	185.78.76.132	839	TCP
2024-11-13T19:23:28.204897+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42102	185.78.76.132	839	TCP
2024-11-13T19:23:29.102069+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42104	185.78.76.132	839	TCP
2024-11-13T19:23:29.981019+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42106	185.78.76.132	839	TCP
2024-11-13T19:23:31.017812+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42108	185.78.76.132	839	TCP
2024-11-13T19:23:31.964314+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42110	185.78.76.132	839	TCP
2024-11-13T19:23:32.914398+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42112	185.78.76.132	839	TCP
2024-11-13T19:23:34.013937+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42114	185.78.76.132	839	TCP
2024-11-13T19:23:34.887473+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42116	185.78.76.132	839	TCP
2024-11-13T19:23:35.890930+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42118	185.78.76.132	839	TCP
2024-11-13T19:23:36.937909+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42120	185.78.76.132	839	TCP
2024-11-13T19:23:37.800225+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42122	185.78.76.132	839	TCP
2024-11-13T19:23:39.661410+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42124	185.78.76.132	839	TCP
2024-11-13T19:23:40.540682+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42126	185.78.76.132	839	TCP
2024-11-13T19:23:41.405824+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42128	185.78.76.132	839	TCP
2024-11-13T19:23:42.283963+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42130	185.78.76.132	839	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 13, 2024 19:22:48.408710957 CET	42020	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:48.432251930 CET	839	42020	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:48.432318926 CET	42020	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:48.434189081 CET	42020	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:48.456557035 CET	839	42020	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:49.223038912 CET	839	42020	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:49.223249912 CET	42020	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:49.384838104 CET	839	42020	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:49.385193110 CET	42020	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:49.385900021 CET	42022	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:49.390846014 CET	839	42020	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:49.391052961 CET	839	42022	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:49.391298056 CET	42022	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:49.391298056 CET	42022	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:49.396987915 CET	839	42022	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:50.167567015 CET	839	42022	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:50.167812109 CET	42022	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:50.345355034 CET	839	42022	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:50.345597982 CET	42022	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:50.345978975 CET	42024	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:50.350513935 CET	839	42022	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:50.350739002 CET	839	42024	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:50.350785017 CET	42024	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:50.350836992 CET	42024	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:50.357153893 CET	839	42024	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:51.113416910 CET	839	42024	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:51.113523960 CET	42024	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:51.262989998 CET	839	42024	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:51.263142109 CET	42024	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:51.263578892 CET	42026	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:51.268821001 CET	839	42024	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:51.268836021 CET	839	42026	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:51.268893003 CET	42026	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:51.268933058 CET	42026	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:51.273737907 CET	839	42026	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:51.726479053 CET	42836	443	192.168.2.23	91.189.91.43
Nov 13, 2024 19:22:52.022927046 CET	839	42026	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:52.023057938 CET	42026	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:52.155193090 CET	839	42026	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:52.155567884 CET	42026	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:52.156040907 CET	42028	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:52.160423994 CET	839	42026	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:52.161740065 CET	839	42028	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:52.161828995 CET	42028	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:52.161828995 CET	42028	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:52.169260025 CET	839	42028	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:52.910994053 CET	839	42028	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:52.911117077 CET	42028	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.006302118 CET	42516	80	192.168.2.23	109.202.202.202
Nov 13, 2024 19:22:53.043051958 CET	839	42028	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.043277025 CET	42028	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.043782949 CET	42030	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.048120022 CET	839	42028	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.048681974 CET	839	42030	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.048727036 CET	42030	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.048795938 CET	42030	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.053661108 CET	839	42030	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.785116911 CET	839	42030	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.785597086 CET	42030	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.913109064 CET	839	42030	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.913254976 CET	42030	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.913783073 CET	42032	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.919307947 CET	839	42030	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.919326067 CET	839	42032	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:53.919410944 CET	42032	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.919440985 CET	42032	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:53.924237013 CET	839	42032	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:54.818526030 CET	839	42032	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:54.818679094 CET	42032	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.018511057 CET	839	42032	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.018831015 CET	42032	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.019464016 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.023638964 CET	839	42032	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.024350882 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.024403095 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.024450064 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.029313087 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.792958021 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.793174982 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.954015017 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.954276085 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.954900026 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.959059954 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.959712029 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:55.959779024 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.959909916 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:55.965398073 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:56.821104050 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:56.821480989 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:56.996367931 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:56.996742010 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:56.997051954 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:57.001565933 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:57.001912117 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:57.002003908 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:57.002039909 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:57.006820917 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:57.835856915 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:57.836221933 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.008107901 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.008379936 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.011014938 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.013159990 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.015994072 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.016091108 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.016128063 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.020992994 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.799209118 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.799391985 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.966809034 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.967171907 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.967823029 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.972656012 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.972735882 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:58.972827911 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.972938061 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:58.977736950 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:59.726294041 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:59.726640940 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:59.858731031 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:59.859071016 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:59.859556913 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:59.863972902 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:59.864557028 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:22:59.864624977 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:59.864674091 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:22:59.869648933 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:00.740581989 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:00.740742922 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:00.883713961 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:00.889240980 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:00.890005112 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:00.894351006 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:00.894917965 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:00.895001888 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:00.895040035 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:00.900211096 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:01.754497051 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:01.754689932 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:01.947087049 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:01.947484970 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:01.948268890 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:01.953022003 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:01.953423023 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:01.953515053 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:01.953612089 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:01.958895922 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:02.744829893 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:02.745093107 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:02.878823042 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:02.879116058 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:02.880858898 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:02.884306908 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:02.886617899 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:02.886702061 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:02.886810064 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:02.892569065 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:03.664987087 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:03.665167093 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:03.801021099 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:03.801249027 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:03.802074909 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:03.806731939 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:03.806922913 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:03.806987047 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:03.807116032 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:03.812455893 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:04.681153059 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:04.681274891 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:04.842313051 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:04.842410088 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:04.843030930 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:04.847590923 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:04.848067045 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:04.848109007 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:04.848155975 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:04.853246927 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:05.605731964 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:05.606112003 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:05.744062901 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:05.744299889 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:05.745112896 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:05.749620914 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:05.750106096 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:05.750171900 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:05.750281096 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:05.755394936 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:06.505127907 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:06.505505085 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:06.634222984 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:06.634640932 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:06.635528088 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:06.639497042 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:06.641002893 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:06.641077042 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:06.641191959 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:06.648309946 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:07.452588081 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:07.452847004 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:07.596332073 CET	43928	443	192.168.2.23	91.189.91.42
Nov 13, 2024 19:23:07.652643919 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:07.652977943 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:07.653875113 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:07.657915115 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:07.659384966 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:07.659461021 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:07.659574032 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:07.664540052 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:08.396406889 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:08.396740913 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:08.526803017 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:08.527084112 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:08.528047085 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:08.532269955 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:08.534425020 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:08.534507036 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:08.534614086 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:08.541758060 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:09.311794043 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:09.312107086 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:09.498913050 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:09.499073982 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:09.499828100 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:09.503998995 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:09.504718065 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:09.504825115 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:09.504868984 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:09.509707928 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:10.227884054 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:10.228219986 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:10.354753971 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:10.355122089 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:10.355815887 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:10.360249043 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:10.360621929 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:10.360718012 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:10.360755920 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:10.365892887 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:11.135983944 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:11.136307955 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:11.272047997 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:11.272350073 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:11.273164988 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:11.277667999 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:11.278513908 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:11.278629065 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:11.278708935 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:11.284128904 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:12.042678118 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:12.042864084 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:12.189317942 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:12.189616919 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:12.190634012 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:12.195281029 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:12.196830034 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:12.196928978 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:12.197041988 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:12.202915907 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:12.948883057 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:12.949204922 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:13.081938028 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:13.082303047 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:13.083403111 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:13.087438107 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:13.089487076 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:13.089589119 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:13.089754105 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:13.094753027 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:13.845271111 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:13.845511913 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:13.997186899 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:13.997692108 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:13.998678923 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:14.003298044 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:14.004008055 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:14.004116058 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:14.004209995 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:14.010039091 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:14.854621887 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:14.854931116 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.050281048 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.050750971 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.051546097 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.055836916 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.056417942 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.056497097 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.056595087 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.061748981 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.788003922 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.788232088 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.914495945 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.914886951 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.915793896 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.922418118 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.922436953 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:15.922547102 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.922645092 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:15.928157091 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:16.823111057 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:16.823523045 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:16.997813940 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:16.998342037 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:16.999489069 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.003539085 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:17.004563093 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:17.004663944 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.004771948 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.009593964 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:17.803697109 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:17.804137945 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.834919930 CET	42836	443	192.168.2.23	91.189.91.43
Nov 13, 2024 19:23:17.951381922 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:17.951714993 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.952611923 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.956945896 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:17.957545996 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:17.957642078 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.957782030 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:17.962924957 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:18.703516960 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:18.703880072 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:18.839178085 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:18.839471102 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:18.840265989 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:18.844633102 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:18.845185041 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:18.845392942 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:18.845562935 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:18.850377083 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:19.613301039 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:19.613491058 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:19.764550924 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:19.764816046 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:19.765600920 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:19.770061970 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:19.770543098 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:19.770661116 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:19.770700932 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:19.775614023 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:20.539968014 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:20.540083885 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:20.702132940 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:20.702348948 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:20.703342915 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:20.707235098 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:20.708400011 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:20.708486080 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:20.708611012 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:20.713531017 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:21.494636059 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:21.494852066 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:21.653240919 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:21.653525114 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:21.655313015 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:21.658989906 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:21.660279989 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:21.660367012 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:21.660499096 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:21.665524960 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:22.422867060 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:22.423063993 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:22.555459976 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:22.555677891 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:22.557163954 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:22.560883045 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:22.562247992 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:22.562339067 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:22.562752008 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:22.567596912 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:23.325655937 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:23.325862885 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:23.451097965 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:23.451423883 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:23.455558062 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:23.456533909 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:23.460544109 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:23.460623980 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:23.460752010 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:23.465554953 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:23.978025913 CET	42516	80	192.168.2.23	109.202.202.202
Nov 13, 2024 19:23:24.228404999 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:24.228789091 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:24.371155024 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:24.371409893 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:24.371925116 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:24.377074003 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:24.377635956 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:24.377796888 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:24.377796888 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:24.382972002 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:25.117078066 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:25.117379904 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:25.245696068 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:25.246112108 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:25.247034073 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:25.251651049 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:25.252043009 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:25.252146959 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:25.252244949 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:25.257371902 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:27.123171091 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:27.123418093 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:27.289218903 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:27.289489031 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:27.290507078 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:27.295038939 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:27.296514034 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:27.296576977 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:27.296699047 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:27.302432060 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:28.061759949 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:28.061971903 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:28.196538925 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:28.196887016 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:28.197941065 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:28.204668999 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:28.204704046 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:28.204798937 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:28.204896927 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:28.217128038 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:28.963519096 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:28.963855982 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.095556974 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.095690012 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.096287012 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.100836039 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.101857901 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.101931095 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.102068901 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.108381987 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.844218969 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.844326019 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.971678019 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.971879959 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.973081112 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.977282047 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.980834007 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:29.980896950 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.981019020 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:29.986516953 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:30.815090895 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:30.815340042 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.010763884 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.011279106 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.012173891 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.017399073 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.017608881 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.017683983 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.017812014 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.023823023 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.809161901 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.809495926 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.956072092 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.956548929 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.957539082 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.964023113 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.964067936 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:31.964175940 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.964313984 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:31.969563961 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:32.754462004 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:32.754983902 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:32.907170057 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:32.907444954 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:32.908159971 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:32.912640095 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:32.914208889 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:32.914289951 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:32.914397955 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:32.921513081 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:33.821878910 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:33.822170973 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.005774975 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.006094933 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.006782055 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.012303114 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.013758898 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.013828993 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.013936996 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.019092083 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.753005981 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.753123999 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.880552053 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.880691051 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.881396055 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.885970116 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.887271881 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:34.887350082 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.887473106 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:34.893188000 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:35.719229937 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:35.719521999 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:35.884645939 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:35.885006905 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:35.885818958 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:35.890208960 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:35.890698910 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:35.890803099 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:35.890929937 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:35.896271944 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:36.749584913 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:36.749913931 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:36.931407928 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:36.931638002 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:36.932848930 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:36.936944962 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:36.937781096 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:36.937834978 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:36.937908888 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:36.942800999 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:37.666116953 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:37.666296005 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:37.793462038 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:37.793756008 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:37.794586897 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:37.798712969 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:37.800004005 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:37.800120115 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:37.800225019 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:37.805771112 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:38.525904894 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:38.526310921 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:38.654242039 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:38.654607058 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:38.655474901 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:38.659625053 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:38.660420895 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:38.660489082 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:39.655889034 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:39.661111116 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:39.661242962 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:39.661410093 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:39.666366100 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:40.403934956 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:40.404325008 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:40.534581900 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:40.534821033 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:40.535573959 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:40.539844990 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:40.540496111 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:40.540566921 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:40.540682077 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:40.545516968 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:41.271267891 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:41.271506071 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:41.399105072 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:41.399559975 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:41.400705099 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:41.404609919 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:41.405643940 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:41.405713081 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:41.405823946 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:41.410711050 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:42.150639057 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:42.150754929 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:42.277734995 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:42.277894020 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:42.278846025 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:42.283205986 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:42.283776045 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:42.283829927 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:42.283962965 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:23:42.288841009 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:23:48.550661087 CET	43928	443	192.168.2.23	91.189.91.42
Nov 13, 2024 19:24:42.140619040 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:24:42.141170025 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:24:42.279340029 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:24:42.279500961 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:25:42.136508942 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:25:42.137351036 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:25:42.263557911 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:25:42.264137030 CET	42130	839	192.168.2.23	185.78.76.132

System Behavior

Analysis Process: m-6.8-k.ISIS.elf PID: 6225, Parent PID: 6140

General

Start time (UTC):	18:22:47
Start date (UTC):	13/11/2024
Path:	/tmp/m-6.8-k.ISIS.elf
Arguments:	/tmp/m-6.8-k.ISIS.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: m-6.8-k.ISIS.elf PID: 6227, Parent PID: 6225

General

Start time (UTC):	18:22:47
Start date (UTC):	13/11/2024
Path:	/tmp/m-6.8-k.ISIS.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: m-6.8-k.ISIS.elf PID: 6229, Parent PID: 6227

General

Start time (UTC):	18:22:47
Start date (UTC):	13/11/2024
Path:	/tmp/m-6.8-k.ISIS.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report m-6.8-k.ISIS.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: m-6.8-k.ISIS.elf PID: 6225, Parent PID: 6140

General

Chronological Activities

Analysis Process: m-6.8-k.ISIS.elf PID: 6227, Parent PID: 6225

General

Chronological Activities

Analysis Process: m-6.8-k.ISIS.elf PID: 6229, Parent PID: 6227

General

Chronological Activities

Linux Analysis Report
m-6.8-k.ISIS.elf