Edit tour

Linux Analysis Report
ssx.elf

Overview

General Information

Sample name:	ssx.elf
Analysis ID:	1586478
MD5:	fc5b952068bd272465e7dcbecfb0d980
SHA1:	91586c12bef3cdbfbb15737fe4ef172fc5cf8ad3
SHA256:	57ed3e2d1fb1101332d382c002e68103ef54e34b9fcf50eabaac93a42b55b0d1
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586478
Start date and time:	2025-01-09 08:21:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ssx.elf
Detection:	MAL
Classification:	mal80.spre.troj.linELF@0/1@0/0

Warnings

VT rate limit hit for: 89.33.192.138:6581

Runtime Messages

Command:	/tmp/ssx.elf
PID:	6238
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

ssx.elf (PID: 6238, Parent: 6163, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/ssx.elf

ssx.elf New Fork (PID: 6240, Parent: 6238)

ssx.elf New Fork (PID: 6242, Parent: 6240)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ssx.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ssx.elf

Avira: detected

Found malware configuration

Source: ssx.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "89.33.192.138:6581"}

Multi AV Scanner detection for submitted file

Source: ssx.elf	Virustotal: Detection: 60%			Perma Link
Source: ssx.elf	ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/ssx.elf (PID: 6238)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.23:47284 -> 89.33.192.138:6581

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: classification engine

Classification label: mal80.spre.troj.linELF@0/1@0/0

Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/brk.S
Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crt1.S
Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crti.S
Source: ssx.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crtn.S

Source: /tmp/ssx.elf (PID: 6238)

Queries kernel information via 'uname':

Jump to behavior

Source: ssx.elf, 6238.1.00007fffd24e2000.00007fffd2503000.rw-.sdmp, ssx.elf, 6240.1.00007fffd24e2000.00007fffd2503000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-ppc/tmp/ssx.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ssx.elf
Source: ssx.elf, 6238.1.00007fffd24e2000.00007fffd2503000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.eDuhAU\
Source: ssx.elf, 6238.1.000055c51d455000.000055c51d505000.rw-.sdmp, ssx.elf, 6240.1.000055c51d455000.000055c51d505000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: ssx.elf, 6238.1.000055c51d455000.000055c51d505000.rw-.sdmp, ssx.elf, 6240.1.000055c51d455000.000055c51d505000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: ssx.elf, 6238.1.00007fffd24e2000.00007fffd2503000.rw-.sdmp, ssx.elf, 6240.1.00007fffd24e2000.00007fffd2503000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: ssx.elf, 6238.1.00007fffd24e2000.00007fffd2503000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.eDuhAU

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: ssx.elf, type: SAMPLE

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: ssx.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "89.33.192.138:6581"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ssx.elf	60%	Virustotal		Browse
ssx.elf	66%	ReversingLabs	Linux.Trojan.Gafgyt
ssx.elf	100%	Avira	EXP/ELF.Mirai.Z

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
89.33.192.138:6581	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
89.33.192.138:6581	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
89.33.192.138	unknown	Romania	9009	M247GB	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
89.33.192.138	ssp.elf	Get hash	malicious	Gafgyt	Browse
	ssc.elf	Get hash	malicious	Gafgyt	Browse
	sst.elf	Get hash	malicious	Gafgyt	Browse
	ssy.elf	Get hash	malicious	Gafgyt	Browse
	ssd.elf	Get hash	malicious	Gafgyt	Browse
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	sst.elf	Get hash	malicious	Gafgyt	Browse
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse
	x.elf	Get hash	malicious	Xmrig	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	army7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mippytippy.elf	Get hash	malicious	Gafgyt, Mirai	Browse
91.189.91.42	sst.elf	Get hash	malicious	Gafgyt	Browse
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse
	x.elf	Get hash	malicious	Xmrig	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	army7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mippytippy.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	sst.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.125.190.26
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x.elf	Get hash	malicious	Xmrig	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	army7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
CANONICAL-ASGB	sst.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.125.190.26
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x.elf	Get hash	malicious	Xmrig	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	army7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
M247GB	ssp.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssc.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	sst.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssy.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssd.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
	3XtEci4Mmo.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	185.177.239.66
	miori.m68k.elf	Get hash	malicious	Unknown	Browse	217.138.193.6
	Draft HBL# TTPE6948502 SO#4174 - LCL SHIPPING ADVICE (KHH-HKG)-FOB .scr.exe	Get hash	malicious	PureLog Stealer, XWorm	Browse	104.250.180.178
	Hilix.m68k.elf	Get hash	malicious	Mirai	Browse	45.13.30.97
INIT7CH	sst.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	x.elf	Get hash	malicious	Xmrig	Browse	109.202.202.202
	2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	12.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	12.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	army7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	mippytippy.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.eDuhAU (deleted)

Download File

Process:	/tmp/ssx.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.064926907940083
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ssx.elf
File size:	110'975 bytes
MD5:	fc5b952068bd272465e7dcbecfb0d980
SHA1:	91586c12bef3cdbfbb15737fe4ef172fc5cf8ad3
SHA256:	57ed3e2d1fb1101332d382c002e68103ef54e34b9fcf50eabaac93a42b55b0d1
SHA512:	553bf343eb1e69753d7736bacb5c57425fc37ab2ed49051e7bbcfcf6556418039eb6335f0263e928c509503170b2dc6d746f546347722bb0119d0b390370d144
SSDEEP:	1536:7Q9XeuDqPdFjknM7atnYdS2hXr3cSyw/uJhZvLMy09gc77xyTGIZs23:7eO7Fw9yS6XDi/vLH09gc77xyiIZs23
TLSH:	F2B33B43A70C0F43C49B6AF02DF727F083A9FDA116A76281A109FFC557B2AB16512F95
File Content Preview:	.ELF...........................4..W......4. ...(......................1...1...............1...1...1....@..i.........dt.Q.............................!..\|......$H...H......$8!. \|...N.. .!..\|.......?.........7...../...@..\?.....1,.+../...A..$8...})....1,N..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x100001f0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	87960
Section Header Size:	40
Number of Section Headers:	26
Header String Table Index:	23

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10000094	0x94	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000b8	0xb8	0x102ec	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x100103a4	0x103a4	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x100103c8	0x103c8	0x2d44	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x1001310c	0x1310c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x10023110	0x13110	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x10023118	0x13118	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x10023120	0x13120	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10023128	0x13128	0x5e0	0x0	0x3	WA	0	0	8
.sdata	PROGBITS	0x10023708	0x13708	0x48	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x10023750	0x13750	0x80	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x100237d0	0x13750	0x62f0	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x13750	0xcba	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x1440a	0x20	0x0	0x0		0	0	1
.debug_pubnames	PROGBITS	0x0	0x1442a	0x1f	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x14449	0x5cd	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x14a16	0x14c	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x14b62	0xf8	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x14c5c	0x34	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x14c90	0x164	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x14df4	0x7ab	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1559f	0x110	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x156af	0xe9	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x15ba8	0x30e0	0x10	0x0		25	300	4
.strtab	STRTAB	0x0	0x18c88	0x24f7	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x13110	0x13110	6.1785	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x13110	0x10023110	0x10023110	0x640	0x69b0	4.0954	0x6	RW	0x10000	.ctors .dtors .jcr .data .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x10000094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100000b8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x100103a4	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x100103c8	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1001310c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x10023110	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x10023118	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x10023120	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x10023128	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x10023708	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x10023750	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x100237d0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
C.110.5211	.symtab	0x1001087c	96	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x100237ec	16384	OBJECT	<unknown>	DEFAULT	12
SendHTTPHex	.symtab	0x10003578	456	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x10002b5c	368	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x100020fc	1124	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_	.symtab	0x1002b708	0	NOTYPE	<unknown>	DEFAULT	10
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x10023114	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x10023110	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x10023714	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x100117a0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x10023748	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x10012dc0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x1002371c	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x10011aa0	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x1002311c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x10023118	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x1001310c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x1001310c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x10023714	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_b_data	.symtab	0x100117a0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x10023748	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_tolower_data	.symtab	0x10012dc0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x1002371c	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_toupper_data	.symtab	0x10011aa0	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x10023718	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_tolower	.symtab	0x1002374c	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_toupper	.symtab	0x10023720	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x100068e4	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1000d384	312	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x10008b80	48	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x1000b550	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x10006124	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x100061a8	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x100063f8	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x1000a948	148	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1000aa48	128	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x10008bb0	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1000620c	60	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1000e474	336	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1000a0c0	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x1000a0c0	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1000e8fc	52	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x10006290	72	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x1000ad7c	72	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x100062d8	72	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x10006670	164	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x10009390	52	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x1002379c	4	OBJECT	<unknown>	HIDDEN	11
__GI_exit	.symtab	0x1000a514	132	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x100068f0	332	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x10006124	132	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x100061a8	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x100082f0	432	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1000d384	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1000813c	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x100084a0	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x10006a3c	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x10006320	72	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x10008564	92	FUNC	<unknown>	HIDDEN	2
__GI_fscanf	.symtab	0x100080bc	128	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1000eb40	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1000ec90	284	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1000adc4	116	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x100085c0	184	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1000d384	312	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1000b020	56	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1000b058	72	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1000b0a0	72	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1000b0e8	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x10008ff8	84	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x1000904c	836	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1000b130	28	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x10006368	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x1000b14c	72	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x100093c4	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1000b194	72	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x100237a0	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x10008fc4	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1000d928	192	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x10008f90	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x10008f14	124	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1000f6d0	676	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1000f364	524	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10009fd8	232	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x1000603c	232	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x10008cd8	44	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x100063b0	72	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1000b1dc	128	FUNC	<unknown>	HIDDEN	2
__GI_mbrtowc	.symtab	0x1000e9c0	164	FUNC	<unknown>	HIDDEN	2
__GI_mbsnrtowcs	.symtab	0x1000ea64	220	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1000d560	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x10008678	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1000d4bc	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1000d668	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1000d69c	244	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x10008714	144	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1000b25c	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x100063f8	120	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x10006714	272	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1000e978	72	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1001005c	48	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x10009b8c	108	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x10009e64	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1000f060	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x100064c8	72	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x10006824	192	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x10009434	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1000b2a4	112	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x10006510	72	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x1000946c	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x100094a4	64	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x10006558	72	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x100094e4	60	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x10009d70	244	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1000e3b0	196	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x10009554	224	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1000b314	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1000a598	468	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x10006a48	124	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x10009520	52	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x10006ac4	140	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x10009ef4	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x100100e0	80	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x100087a4	256	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x100088a4	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x100088a4	52	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x100088d8	32	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1000f234	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x100088f8	164	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x1000f118	208	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x1000d790	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1000899c	240	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1000d8ec	60	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1000f1e8	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x10008a8c	244	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x10008ccc	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1000d84c	160	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1000a0cc	8	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x1000a294	8	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1000a76c	400	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x10008d04	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr	.symtab	0x10008da0	356	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x100065a0	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x100100c0	32	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x10006650	32	FUNC	<unknown>	HIDDEN	2
__GI_ungetc	.symtab	0x1000eb50	320	FUNC	<unknown>	HIDDEN	2
__GI_vfscanf	.symtab	0x1000c32c	1796	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x10006b50	204	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x1000b38c	72	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x100065e8	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1000b55c	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1000b5c8	204	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1000b5b8	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x100065f0	72	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x10023120	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x10023120	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x10023790	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x100236bc	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x10009554	224	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x10023750	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1000a9e8	96	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x10023718	4	OBJECT	<unknown>	DEFAULT	10
__ctype_tolower	.symtab	0x1002374c	4	OBJECT	<unknown>	DEFAULT	10
__ctype_toupper	.symtab	0x10023720	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x100237bc	4	OBJECT	<unknown>	DEFAULT	11
__data_start	.symtab	0x10023130	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x1000fbcc	272	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x100101fc	244	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1000fa60	196	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__divdi3	.symtab	0x10005bb8	1156	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x1000d9e8	1692	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x10010338	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100000b8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x10023128	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x10010130	204	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1000f974	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1000fb24	124	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x10023788	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x100068e4	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x10023780	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x1000d384	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x10023110	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x10023110	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x1000e358	88	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x1000ae38	144	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1000aec8	344	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1000b130	28	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x10008b80	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x1000b550	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x10009974	160	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x10009a5c	300	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x10009a14	44	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x10009a40	28	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x10023110	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x10023110	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_scan_cookie	.symtab	0x1000ca38	88	FUNC	<unknown>	HIDDEN	2
__length_dotted	.symtab	0x100102f0	72	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x1000fba0	44	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x100062d8	72	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x10009390	52	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x10006470	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x10006124	132	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x100061a8	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x10006320	72	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x10006368	72	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1000b1dc	128	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x1000b25c	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x100063f8	120	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x1000e978	72	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x100064c8	72	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x10009434	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x10006510	72	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x1000946c	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x100094a4	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1000e3b0	196	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x10023784	4	OBJECT	<unknown>	DEFAULT	11
__libc_waitpid	.symtab	0x100065e8	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x100065f0	72	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x10023740	4	OBJECT	<unknown>	DEFAULT	10
__malloc_heap_lock	.symtab	0x100299dc	24	OBJECT	<unknown>	DEFAULT	12
__malloc_sbrk_lock	.symtab	0x10029a8c	24	OBJECT	<unknown>	DEFAULT	12
__nameserver	.symtab	0x10029ab4	12	OBJECT	<unknown>	HIDDEN	12
__nameservers	.symtab	0x100237a8	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x1000fcdc	100	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1000e084	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x1002378c	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x10023110	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x10023110	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__psfs_do_numeric	.symtab	0x1000ce38	1356	FUNC	<unknown>	HIDDEN	2
__psfs_do_numeric.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__psfs_parse_spec	.symtab	0x1000cb84	692	FUNC	<unknown>	HIDDEN	2
__psfs_parse_spec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x1000a9dc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x1000a9dc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x1000a9dc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x1000a9dc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x1000a9dc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x1000a9e4	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x1001005c	48	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x1000fd40	796	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x100236d8	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x10023794	4	OBJECT	<unknown>	HIDDEN	11
__scan_cookie.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__scan_getc	.symtab	0x1000ca90	168	FUNC	<unknown>	HIDDEN	2
__scan_ungetc	.symtab	0x1000cb38	76	FUNC	<unknown>	HIDDEN	2
__searchdomain	.symtab	0x10029aa4	16	OBJECT	<unknown>	HIDDEN	12
__searchdomains	.symtab	0x100237ac	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x1000965c	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x10009684	40	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x10009634	40	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x1000ad34	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x10023730	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x1000edac	116	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1000b694	224	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1000ee20	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1000b774	364	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x10006f4c	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3862	.symtab	0x10011da0	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x1000ef1c	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1000f008	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1000ef64	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1000b8e0	248	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1000701c	80	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x10023734	4	OBJECT	<unknown>	DEFAULT	10
__strtofpmax	.symtab	0x1000e5c4	796	FUNC	<unknown>	HIDDEN	2
__strtofpmax.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_error	.symtab	0x1001008c	52	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1000e930	72	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x1000a948	148	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1000aa48	128	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1000aac8	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x10023744	4	OBJECT	<unknown>	HIDDEN	10
__xpg_strerror_r	.symtab	0x10008bb0	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat64_conv	.symtab	0x1000b3d4	204	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x1000b4a0	176	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x1000706c	96	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1000e8e0	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x100237b4	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x100237b8	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x10023750	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x10029ac0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x1002379c	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x1000620c	60	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x100103a4	16	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x100277ec	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x100070cc	160	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1000bb8c	1732	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x100237a0	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x10000094	16	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1000b9d8	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x100077dc	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x10007ba4	1304	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x10007898	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x100078f4	624	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x10007b64	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1000a9e4	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1000a9e4	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x10029a0c	128	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x100001f0	72	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x10006c1c	700	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x10006ed8	116	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x10023738	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x100233e0	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x100081d0	288	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x10023778	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x100233f8	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x10023774	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x10023410	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x10006f5c	192	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x1002373c	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x1000a0d4	436	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdlib_strto_ll	.symtab	0x1000a29c	632	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_ll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1000ba58	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x10011e70	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1000ba94	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x1000716c	1648	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1000e474	336	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x10006248	72	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
advanced_kill_process	.symtab	0x100057e8	96	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x1000a0c0	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x1000a0c0	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoll	.symtab	0x1000a288	12	FUNC	<unknown>	DEFAULT	2
atoll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x10008cbc	16	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x100237b0	4	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.2829	.symtab	0x10023798	4	OBJECT	<unknown>	DEFAULT	11
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1000e8fc	52	FUNC	<unknown>	DEFAULT	2
bsd_signal	.symtab	0x10009554	224	FUNC	<unknown>	DEFAULT	2
buf.2641	.symtab	0x100297ec	16	OBJECT	<unknown>	DEFAULT	12
buf.4865	.symtab	0x100297fc	460	OBJECT	<unknown>	DEFAULT	12
c	.symtab	0x10023150	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x10010388	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1000014c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x100001d4	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x10009804	112	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
change_process_name_based_on_port	.symtab	0x10005910	228	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x10006290	72	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
check_and_kill_processes	.symtab	0x100059f4	404	FUNC	<unknown>	DEFAULT	2
clock_getres	.symtab	0x1000ad7c	72	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x100062d8	72	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x10006670	164	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x10023708	4	OBJECT	<unknown>	DEFAULT	10
completed.3069	.symtab	0x100237d0	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x10009390	52	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x10001968	656	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x10006470	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x10001dc0	320	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x1002370c	4	OBJECT	<unknown>	DEFAULT	10
data_start	.symtab	0x10023130	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decpt_str	.symtab	0x10012ce0	2	OBJECT	<unknown>	DEFAULT	4
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x10023788	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x1002379c	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1000a514	132	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x10012c98	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x100068f0	332	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x10006124	132	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x100061a8	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x100004e8	232	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x100082f0	432	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1000d384	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1000813c	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x100084a0	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x10012c80	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x10006a3c	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x10006320	72	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x10008564	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10000168	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x10009874	256	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fscanf	.symtab	0x100080bc	128	FUNC	<unknown>	DEFAULT	2
fscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1000eb40	16	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1000eb40	16	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1000ec90	284	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1000adc4	116	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x10002560	1532	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x100085c0	184	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x10003908	40	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x10001538	124	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x100005d0	664	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x10003930	256	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x10000478	112	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_process_name	.symtab	0x10005554	300	FUNC	<unknown>	DEFAULT	2
get_process_start_time	.symtab	0x10005324	560	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1000d384	312	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1000b020	56	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x1000b058	72	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1000b0a0	72	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1000b0e8	72	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x10008ff8	84	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x1000904c	836	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x1000b130	28	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x10006368	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x1000b14c	72	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x100093c4	52	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x100093f8	60	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x1000b194	72	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x10023754	4	OBJECT	<unknown>	DEFAULT	11
h.4864	.symtab	0x100299c8	20	OBJECT	<unknown>	DEFAULT	12
h_errno	.symtab	0x100237a0	4	OBJECT	<unknown>	DEFAULT	11
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x10008f0c	4	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x10008f10	4	FUNC	<unknown>	DEFAULT	2
i.4229	.symtab	0x10023154	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x100087a4	256	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x10008fc4	52	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1000d928	192	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x10008f90	52	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x10008f14	124	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x1000f6d0	676	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1000f570	352	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x1000f364	524	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1000f284	224	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x100048f8	416	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x10000238	232	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x10023500	264	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x10009c7c	136	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10009fd8	232	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x1000603c	232	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
is_digit	.symtab	0x1000529c	136	FUNC	<unknown>	DEFAULT	2
is_port_open	.symtab	0x10005848	200	FUNC	<unknown>	DEFAULT	2
is_whitelisted	.symtab	0x10005680	264	FUNC	<unknown>	DEFAULT	2
isatty	.symtab	0x10008cd8	44	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x10006638	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x100063b0	72	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill_process	.symtab	0x10005788	96	FUNC	<unknown>	DEFAULT	2
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_main	.symtab	0x10005b88	48	FUNC	<unknown>	DEFAULT	2
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/brk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x10001bf8	456	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1000b1dc	128	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x10023760	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x10004a98	2052	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x10023750	4	OBJECT	<unknown>	DEFAULT	11
makeIPPacket	.symtab	0x10002010	236	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x100015b4	188	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x10002e14	264	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x100096ac	344	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbrtowc	.symtab	0x1000e9c0	164	FUNC	<unknown>	DEFAULT	2
mbrtowc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbsnrtowcs	.symtab	0x1000ea64	220	FUNC	<unknown>	DEFAULT	2
mbsnrtowcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbstate.2575	.symtab	0x100237c0	8	OBJECT	<unknown>	DEFAULT	11
mbstate.2575	.symtab	0x100237c8	8	OBJECT	<unknown>	DEFAULT	11
memchr	.symtab	0x1000d560	264	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x10008678	156	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x1000d4bc	164	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x1000d668	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1000d69c	244	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x10008714	144	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x10023608	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x100299f4	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x100236f0	24	OBJECT	<unknown>	DEFAULT	9
nan_inf_str.2143	.symtab	0x10012da8	21	OBJECT	<unknown>	DEFAULT	4
nan_inf_str.4245	.symtab	0x10012d44	11	OBJECT	<unknown>	DEFAULT	4
nanosleep	.symtab	0x1000b25c	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1106	.symtab	0x1002377c	4	OBJECT	<unknown>	DEFAULT	11
nil_string	.symtab	0x10012d3c	6	OBJECT	<unknown>	DEFAULT	4
ntohl	.symtab	0x10008f04	4	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x10008f08	4	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x10023758	8	OBJECT	<unknown>	DEFAULT	11
object.3150	.symtab	0x100237d4	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x100063f8	120	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x10006714	272	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x10023768	4	OBJECT	<unknown>	DEFAULT	11
p.3067	.symtab	0x1002312c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x1002376c	4	OBJECT	<unknown>	DEFAULT	11
poll	.symtab	0x1000e978	72	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x10006480	72	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4074	.symtab	0x10011dc8	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x10000de8	1564	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x100009c4	128	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x10000be8	512	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x10000a44	420	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x10003a30	3784	FUNC	<unknown>	DEFAULT	2
qual_chars	.symtab	0x10012ce8	18	OBJECT	<unknown>	DEFAULT	4
qual_chars.4079	.symtab	0x10011ddc	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1001005c	48	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x10009b88	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x10000320	344	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x10009b8c	108	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x100129cc	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x10009e64	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x1002363c	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x1000f060	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x100064c8	72	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir	.symtab	0x10006824	192	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x10009434	56	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x10001670	760	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x1000b2a4	112	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sc_getc	.symtab	0x1000ca30	8	FUNC	<unknown>	DEFAULT	2
scan_getwc	.symtab	0x1000c250	220	FUNC	<unknown>	DEFAULT	2
select	.symtab	0x10006510	72	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x1000946c	56	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHTTPtwo	.symtab	0x10003740	456	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x100094a4	64	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x10006558	72	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x100094e4	60	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x10009bf8	132	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x10009d70	244	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x1000e3b0	196	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x10009554	224	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1000b314	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x1000a598	468	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
snprintf	.symtab	0x10006a48	124	FUNC	<unknown>	DEFAULT	2
snprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x10009520	52	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x10002ccc	328	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x10001404	308	FUNC	<unknown>	DEFAULT	2
spec_allowed	.symtab	0x10012d1c	16	OBJECT	<unknown>	DEFAULT	4
spec_and_mask.4078	.symtab	0x10011df0	16	OBJECT	<unknown>	DEFAULT	4
spec_base	.symtab	0x10012d2c	15	OBJECT	<unknown>	DEFAULT	4
spec_base.4073	.symtab	0x10011dd4	7	OBJECT	<unknown>	DEFAULT	4
spec_chars	.symtab	0x10012cfc	23	OBJECT	<unknown>	DEFAULT	4
spec_chars.4075	.symtab	0x10011e1c	21	OBJECT	<unknown>	DEFAULT	4
spec_flags	.symtab	0x10012ce4	4	OBJECT	<unknown>	DEFAULT	4
spec_flags.4074	.symtab	0x10011e34	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4077	.symtab	0x10011e00	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges	.symtab	0x10012d14	8	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4076	.symtab	0x10011e10	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x10006ac4	140	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10009d04	108	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10009d04	108	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x10009ef4	228	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x100236d4	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x100237a4	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x1002372c	4	OBJECT	<unknown>	DEFAULT	10
stdin	.symtab	0x10023724	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x10023728	4	OBJECT	<unknown>	DEFAULT	10
strcasecmp	.symtab	0x100100e0	80	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x100087a4	256	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x100088a4	52	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x100088a4	52	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x100088d8	32	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x1000f234	80	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x10008bb0	268	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x100088f8	164	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x1000f118	208	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x1000d790	188	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x1000899c	240	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x1000d8ec	60	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x1000f1e8	76	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x10008a8c	244	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x1000a294	8	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x10008ccc	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x1000d84c	160	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1000a0cc	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x1000a294	8	FUNC	<unknown>	DEFAULT	2
strtoll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoq	.symtab	0x1000a294	8	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x1000a76c	400	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x10008d04	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x10001f00	272	FUNC	<unknown>	DEFAULT	2
tcsetattr	.symtab	0x10008da0	356	FUNC	<unknown>	DEFAULT	2
tcsetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x100065a0	72	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x100100c0	32	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x10006650	32	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x10000868	348	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x10011e3c	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x10011e54	12	OBJECT	<unknown>	DEFAULT	4
ungetc	.symtab	0x1000eb50	320	FUNC	<unknown>	DEFAULT	2
ungetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1128	.symtab	0x10011e60	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x10023620	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x10023134	28	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x1000a8fc	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vfscanf	.symtab	0x1000c32c	1796	FUNC	<unknown>	DEFAULT	2
vfscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x10002f1c	1628	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x10006b50	204	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x1000b38c	72	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x100065e8	8	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x1000b55c	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1000b5c8	204	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1000b5b8	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
whitelist_pid_count	.symtab	0x10023770	4	OBJECT	<unknown>	DEFAULT	11
whitelist_size	.symtab	0x10023710	4	OBJECT	<unknown>	DEFAULT	10
whitelisted_pids	.symtab	0x100277ec	0	OBJECT	<unknown>	DEFAULT	12
whitelisted_processes	.symtab	0x10023158	648	OBJECT	<unknown>	DEFAULT	9
write	.symtab	0x100065f0	72	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3080	.symtab	0x100130d4	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 08:22:26.389223099 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:26.395102024 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:26.395158052 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:26.396264076 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:26.401894093 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:27.641853094 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 08:22:30.327066898 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:30.327492952 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:30.327981949 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:30.332452059 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:30.332880974 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:30.332932949 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:30.332974911 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:30.337790012 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:33.017177105 CET	42836	443	192.168.2.23	91.189.91.43
Jan 9, 2025 08:22:34.267340899 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:34.267498970 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:34.268042088 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:34.272289038 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:34.272840023 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:34.272885084 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:34.272937059 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:34.277726889 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:34.552860975 CET	42516	80	192.168.2.23	109.202.202.202
Jan 9, 2025 08:22:47.607045889 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 08:22:55.638870001 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:55.639094114 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:55.639754057 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:55.643975019 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:55.644547939 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:55.644627094 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:55.644678116 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:55.649533987 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:59.565144062 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:59.565431118 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:59.565476894 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:59.566281080 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:59.570312023 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:59.571114063 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:59.571211100 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:59.571243048 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:22:59.576078892 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:22:59.893347025 CET	42836	443	192.168.2.23	91.189.91.43
Jan 9, 2025 08:23:03.988833904 CET	42516	80	192.168.2.23	109.202.202.202
Jan 9, 2025 08:23:12.995213985 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:12.995455980 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:12.996069908 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:13.000412941 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:13.000925064 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:13.000998020 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:13.001034975 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:13.006243944 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:28.561469078 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 08:23:31.902035952 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:31.902318954 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:31.903088093 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:31.907069921 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:31.907872915 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:31.907949924 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:31.908041954 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:31.913269043 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:35.852089882 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:35.852510929 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:35.853286028 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:35.857256889 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:35.858103037 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:35.858172894 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:35.858268023 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:35.862971067 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:54.794918060 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:54.795202017 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:54.795757055 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:54.800136089 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:54.800558090 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:23:54.800616980 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:54.800684929 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:23:54.805439949 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:10.719047070 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:10.719590902 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:10.719639063 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:10.720563889 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:10.724379063 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:10.725339890 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:10.725452900 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:10.725519896 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:10.731487036 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:29.643069983 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:29.643435955 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:29.643944979 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:29.648226023 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:29.648725033 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:29.648778915 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:29.648847103 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:29.653610945 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:31.081655979 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:31.081866980 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:31.082461119 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:31.086704969 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:31.087228060 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:31.087286949 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:31.087336063 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:31.092144966 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:32.519740105 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:32.520147085 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:32.520939112 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:32.525027990 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:32.525739908 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:32.525851011 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:32.525943995 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:32.530750036 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:45.954248905 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:45.954651117 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:45.955487967 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:45.959456921 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:45.960247040 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:45.960319042 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:45.960443020 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:45.965207100 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:47.414150000 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:47.414506912 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:47.415357113 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:47.419370890 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:47.420213938 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:47.420272112 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:47.420341969 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:47.425064087 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:48.881757021 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:48.881899118 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:48.882438898 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:48.886787891 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:48.887233019 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:48.887278080 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:48.887317896 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:48.892137051 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:50.349005938 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:50.349246025 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:50.349775076 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:50.354077101 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:50.354526043 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:50.354592085 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:50.354686975 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:50.359430075 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:51.803175926 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:51.803339005 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:51.803896904 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:51.808144093 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:51.808689117 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:51.808731079 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:51.808772087 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:51.813584089 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:53.257900000 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:53.258052111 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:53.258698940 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:53.262892008 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:53.263556957 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:53.263602972 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:53.263643026 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:53.268484116 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:54.710702896 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:54.710864067 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:54.711467028 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:54.715725899 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:54.716285944 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:54.716329098 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:54.716382980 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:54.721235037 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:56.162190914 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:56.162482023 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:56.163336039 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:56.167264938 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:56.168168068 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:56.168245077 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:56.168339968 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:56.173137903 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:57.629775047 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:57.629962921 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:57.630564928 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:57.635483027 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:57.635968924 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:57.636018991 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:57.636074066 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:57.641494989 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:59.066992044 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:59.067430019 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:59.068291903 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:59.072248936 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:59.073067904 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:24:59.073184967 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:59.073261976 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:24:59.078006029 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:00.523803949 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:00.524075985 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:00.524712086 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:00.528892040 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:00.529556036 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:00.529650927 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:00.529711008 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:00.534493923 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:01.992741108 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:01.992981911 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:01.993715048 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:01.997807980 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:01.998481035 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:01.998614073 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:01.998614073 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:02.003462076 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:03.444125891 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:03.444407940 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:03.445163965 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:03.449364901 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:03.449974060 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:03.450027943 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:03.450135946 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:03.454917908 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:04.898447990 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:04.898797989 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:04.899590015 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:04.903613091 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:04.904354095 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:04.904459953 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:04.904531956 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:04.909282923 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:06.351241112 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:06.351404905 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:06.351979017 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:06.356187105 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:06.356820107 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:06.356869936 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:06.356966019 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:06.361780882 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:07.805936098 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:07.806245089 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:07.806953907 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:07.811137915 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:07.811749935 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:07.811804056 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:07.811898947 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:07.816636086 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:09.274801016 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:09.275082111 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:09.275805950 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:09.279860020 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:09.280572891 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:09.280653954 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:09.280740023 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:09.285576105 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:10.723851919 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:10.724031925 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:10.724539995 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:10.728835106 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:10.729392052 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:10.729441881 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:10.729484081 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:10.734255075 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:14.649306059 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:14.649970055 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:14.650648117 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:14.654798031 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:14.655560970 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:14.655616045 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:14.655708075 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:14.660465002 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:16.119720936 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:16.120093107 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:16.120682001 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:16.124914885 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:16.125478983 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:16.125552893 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:16.125580072 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:16.130347967 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:23.036479950 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:23.036942959 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:23.037787914 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:23.041889906 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:23.042608976 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:23.042699099 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:23.042819977 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:23.047559977 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:36.468765020 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:36.468909979 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:36.469477892 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:36.473813057 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:36.474311113 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:36.474371910 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:36.474414110 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:36.479152918 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:40.432854891 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:40.433163881 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:40.433764935 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:40.437975883 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:40.438621044 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:40.438672066 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:40.438728094 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:40.443507910 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:41.882309914 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:41.882679939 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:41.883460999 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:41.887607098 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:41.888380051 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:41.888459921 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:41.888526917 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:41.893379927 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:51.291548967 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:51.291908979 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:51.292587042 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:51.296778917 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:51.297370911 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:51.297430992 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:51.297550917 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:51.302278042 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:52.740226030 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:52.740523100 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:52.741167068 CET	47360	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:52.745318890 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:52.745943069 CET	6581	47360	89.33.192.138	192.168.2.23
Jan 9, 2025 08:25:52.746022940 CET	47360	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:52.746109009 CET	47360	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:25:52.750840902 CET	6581	47360	89.33.192.138	192.168.2.23

System Behavior

Analysis Process: ssx.elf PID: 6238, Parent PID: 6163

General

Start time (UTC):	07:22:25
Start date (UTC):	09/01/2025
Path:	/tmp/ssx.elf
Arguments:	/tmp/ssx.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: ssx.elf PID: 6240, Parent PID: 6238

General

Start time (UTC):	07:22:25
Start date (UTC):	09/01/2025
Path:	/tmp/ssx.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: ssx.elf PID: 6242, Parent PID: 6240

General

Start time (UTC):	07:22:25
Start date (UTC):	09/01/2025
Path:	/tmp/ssx.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ssx.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.eDuhAU (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: ssx.elf PID: 6238, Parent PID: 6163

General

Chronological Activities

Analysis Process: ssx.elf PID: 6240, Parent PID: 6238

General

Chronological Activities

Analysis Process: ssx.elf PID: 6242, Parent PID: 6240

General

Chronological Activities

Linux Analysis Report
ssx.elf