Edit tour

Linux Analysis Report
ssl.elf

Overview

General Information

Sample name:	ssl.elf
Analysis ID:	1586482
MD5:	65b0ebd1f849ae72a155277bb316b66c
SHA1:	bca4296a185c8199ddce515883ed356aeae11868
SHA256:	c3e8029395ad37cb61ad5fbafedca515ab5d3b7955d2eebd943fd2d5e02604a5
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586482
Start date and time:	2025-01-09 08:26:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ssl.elf
Detection:	MAL
Classification:	mal80.spre.troj.linELF@0/1@0/0

Runtime Messages

Command:	/tmp/ssl.elf
PID:	6253
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6230, Parent: 4336)

rm (PID: 6230, Parent: 4336, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.dIAGoX9e3o /tmp/tmp.6tX9iXagt8 /tmp/tmp.slSqcR6sDa

dash New Fork (PID: 6231, Parent: 4336)

rm (PID: 6231, Parent: 4336, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.dIAGoX9e3o /tmp/tmp.6tX9iXagt8 /tmp/tmp.slSqcR6sDa

ssl.elf (PID: 6253, Parent: 6156, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/ssl.elf

ssl.elf New Fork (PID: 6255, Parent: 6253)

ssl.elf New Fork (PID: 6257, Parent: 6255)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ssl.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ssl.elf

Avira: detected

Found malware configuration

Source: ssl.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "89.33.192.138:6581"}

Multi AV Scanner detection for submitted file

Source: ssl.elf	Virustotal: Detection: 61%			Perma Link
Source: ssl.elf	ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/ssl.elf (PID: 6253)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.23:47284 -> 89.33.192.138:6581

Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33606
Source: unknown	Network traffic detected: HTTP traffic on port 33606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: classification engine

Classification label: mal80.spre.troj.linELF@0/1@0/0

Source: ssl.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/m68k/crt1.S
Source: ssl.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/m68k/crti.S
Source: ssl.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/m68k/crtn.S

Source: /usr/bin/dash (PID: 6230)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.dIAGoX9e3o /tmp/tmp.6tX9iXagt8 /tmp/tmp.slSqcR6sDa			Jump to behavior
Source: /usr/bin/dash (PID: 6231)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.dIAGoX9e3o /tmp/tmp.6tX9iXagt8 /tmp/tmp.slSqcR6sDa			Jump to behavior

Source: /tmp/ssl.elf (PID: 6253)

Queries kernel information via 'uname':

Jump to behavior

Source: ssl.elf, 6253.1.00007ffe2528d000.00007ffe252ae000.rw-.sdmp, ssl.elf, 6255.1.00007ffe2528d000.00007ffe252ae000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/ssl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ssl.elf
Source: ssl.elf, 6253.1.00005568c8f52000.00005568c8fb6000.rw-.sdmp, ssl.elf, 6255.1.00005568c8f52000.00005568c8fb6000.rw-.sdmp	Binary or memory string: hU!/etc/qemu-binfmt/m68k
Source: ssl.elf, 6253.1.00007ffe2528d000.00007ffe252ae000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.fBopz0
Source: ssl.elf, 6253.1.00007ffe2528d000.00007ffe252ae000.rw-.sdmp, ssl.elf, 6255.1.00007ffe2528d000.00007ffe252ae000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: ssl.elf, 6253.1.00005568c8f52000.00005568c8fb6000.rw-.sdmp, ssl.elf, 6255.1.00005568c8f52000.00005568c8fb6000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k
Source: ssl.elf, 6253.1.00007ffe2528d000.00007ffe252ae000.rw-.sdmp	Binary or memory string: hU/tmp/qemu-open.fBopz0\

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: ssl.elf, type: SAMPLE

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: ssl.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "89.33.192.138:6581"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ssl.elf	62%	Virustotal		Browse
ssl.elf	66%	ReversingLabs	Linux.Trojan.Gafgyt
ssl.elf	100%	Avira	EXP/ELF.Mirai.Z

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
89.33.192.138:6581	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.171.230.55	unknown	United States	16509	AMAZON-02US	false
89.33.192.138	unknown	Romania	9009	M247GB	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
54.171.230.55	2.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	fenty.arm4.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse
	mips64.elf	Get hash	malicious	Unknown	Browse
	la.bot.arc.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	sh4.elf	Get hash	malicious	Mirai	Browse
	sparc.elf	Get hash	malicious	Unknown	Browse
89.33.192.138	sss.elf	Get hash	malicious	Gafgyt	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse
	ssx.elf	Get hash	malicious	Gafgyt	Browse
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	ssp.elf	Get hash	malicious	Gafgyt	Browse
	ssc.elf	Get hash	malicious	Gafgyt	Browse
	sst.elf	Get hash	malicious	Gafgyt	Browse
	ssy.elf	Get hash	malicious	Gafgyt	Browse
	ssd.elf	Get hash	malicious	Gafgyt	Browse
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	ssx.elf	Get hash	malicious	Gafgyt	Browse
	sst.elf	Get hash	malicious	Gafgyt	Browse
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse
	x.elf	Get hash	malicious	Xmrig	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	12.elf	Get hash	malicious	Unknown	Browse
	army7.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	ssx.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	sst.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.125.190.26
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x.elf	Get hash	malicious	Xmrig	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	12.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
M247GB	sss.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssb.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssx.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssg.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
	ssp.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssc.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	sst.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssy.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssd.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssh.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
AMAZON-02US	ssd.elf	Get hash	malicious	Gafgyt	Browse	34.243.160.129
	http://join.grass-io.cc	Get hash	malicious	Unknown	Browse	76.223.55.101
	2.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	mips.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	12.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	https://rinderynitvye.blogspot.com/	Get hash	malicious	CAPTCHA Scam ClickFix, Phisher	Browse	18.245.31.129
	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	52.51.195.94
	http://indyhumane.org	Get hash	malicious	Unknown	Browse	52.208.198.158
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#bWF5cmFAYnVpbGRpbmdiYWNrdG9nZXRoZXIub3Jn	Get hash	malicious	HTMLPhisher	Browse	34.248.248.118
	5.elf	Get hash	malicious	Unknown	Browse	52.39.198.34
INIT7CH	ssx.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	sst.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	Fantazy.x86_64.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	x.elf	Get hash	malicious	Xmrig	Browse	109.202.202.202
	2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	12.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	12.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	army7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.fBopz0 (deleted)

Download File

Process:	/tmp/ssl.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.063673984111342
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ssl.elf
File size:	117'331 bytes
MD5:	65b0ebd1f849ae72a155277bb316b66c
SHA1:	bca4296a185c8199ddce515883ed356aeae11868
SHA256:	c3e8029395ad37cb61ad5fbafedca515ab5d3b7955d2eebd943fd2d5e02604a5
SHA512:	59cdd4b05d6d17e453ada044badf70fa88455c6ebd66b5b8aad96cd3b49e2ce307fbac8288d22c2d994888adec9072bed3be39f15c3916ba5bc32741e29c24a5
SSDEEP:	3072:13uh2d8Q9wpT5sJ9/j/XLy3yrLrM6j/+c77xyxyZsy3:13u4ypTs9LO3yrHMc+c77xyxyZsy3
TLSH:	7DB31993F904EEB6F80ED77608D34725B270FBA24E531662731739A6AA721D43826F41
File Content Preview:	.ELF.......................D...4..n`.....4. ...(......................O...O....... .......O...o...o....4..i....... .dt.Q............................NV..a....da...$TN^NuNV..J9..uDf>"y..o( QJ.g.X.#...o(N."y..o( QJ.f.A.....J.g.Hy..O.N.X.......uDN^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	93792
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	0	0	2
.text	PROGBITS	0x800000a8	0xa8	0x12480	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x80012528	0x12528	0xe	0x0	0x6	AX	0	0	2
.rodata	PROGBITS	0x80012536	0x12536	0x29d4	0x0	0x2	A	0	0	2
.eh_frame	PROGBITS	0x80014f0c	0x14f0c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x80016f10	0x14f10	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x80016f18	0x14f18	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x80016f20	0x14f20	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x80016f24	0x14f24	0x620	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x80017544	0x15544	0x6374	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x15544	0xca8	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x161ec	0x20	0x0	0x0		0	0	1
.debug_pubnames	PROGBITS	0x0	0x1620c	0x1f	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1622b	0x310	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1653b	0x12f	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1666a	0xbe	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x16728	0x40	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x16768	0x136	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1689e	0x486	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x16d24	0x60	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x16d84	0xdc	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x17220	0x3200	0x10	0x0		23	322	4
.strtab	STRTAB	0x0	0x1a420	0x2633	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x14f10	0x14f10	6.0943	0x5	R E	0x2000	.init .text .fini .rodata .eh_frame
LOAD	0x14f10	0x80016f10	0x80016f10	0x634	0x69a8	4.1923	0x6	RW	0x2000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80000094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x800000a8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x80012528	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x80012536	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x80014f0c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x80016f10	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x80016f18	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x80016f20	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x80016f24	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x80017544	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
C.111.5047	.symtab	0x800129d8	96	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x80017576	16384	OBJECT	<unknown>	DEFAULT	10
SendHTTPHex	.symtab	0x8000231c	386	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x80001b98	296	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x800013b0	840	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x80016f14	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x80016f10	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x800171e4	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x800137c4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x8001753c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x80014bc6	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x800171ec	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x80013ac4	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x80016f1c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x80016f18	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x80014f0c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x80014f0c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x800171e4	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x800137c4	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x8001753c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x80014bc6	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x800171ec	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x80013ac4	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x800171e8	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x80017540	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x800171f0	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x80004a28	16	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x8000dfd4	500	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x80007b64	36	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x8000b674	16	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x80003fe4	188	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x800040f8	54	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x800043fa	80	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x8000a738	106	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x8000a854	74	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x80007b88	264	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x80004168	16	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x8000fb4c	390	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x800096d8	28	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x800096d8	28	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x800100fc	64	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x800041fe	16	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x8000ab34	78	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x80004210	60	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x800046dc	198	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x800083bc	48	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x8001d7b0	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x80009d04	124	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x80004a38	416	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x80003fe4	188	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x800040f8	54	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x80006a96	510	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x8000dfd4	500	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x800068d8	134	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x80006c94	226	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x80004bd8	38	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x8000424c	56	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x80006d78	80	FUNC	<unknown>	HIDDEN	2
__GI_fscanf	.symtab	0x800068a8	48	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x80010374	40	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x80010540	346	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x8000abce	54	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x80006dc8	162	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x8000dfd4	500	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x8000af98	52	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x8000afcc	60	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x8000b008	60	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x8000b044	60	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x80007ef4	60	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x80007f30	1164	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x8000b080	42	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x80004284	56	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x8000b0ac	90	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x800083ec	50	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x8000b108	60	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x8001d7b4	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x80007ec4	48	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x8000eccc	362	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x80007ea4	30	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x80007e04	160	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x800115ba	112	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x800110c8	96	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x8000958e	330	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x800042bc	130	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x80007cd4	52	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x80004388	20	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x8000b1a6	108	FUNC	<unknown>	HIDDEN	2
__GI_mbrtowc	.symtab	0x800101f4	160	FUNC	<unknown>	HIDDEN	2
__GI_mbsnrtowcs	.symtab	0x80010294	224	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x8000e1c8	348	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x80007296	240	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x8000e7e4	288	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x8000e904	42	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x8000e930	358	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x80007388	310	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x8000b214	78	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x800043fa	80	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x800047a4	350	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x8001019c	88	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x8001214c	28	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x80008fa8	94	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x800092de	266	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x80010a30	274	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x800044cc	84	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x80004904	292	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x80008464	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x8000b264	106	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x80004520	100	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x8000849c	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x800084d4	70	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x80004584	56	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x8000851c	64	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x80009148	406	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x8000fa64	232	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x80008590	238	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x8000b2d0	160	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x80009d80	558	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x80004c00	52	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x8000855c	50	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x80004c34	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x800093e8	422	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x800121a8	120	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x800074c0	390	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x80007648	110	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x80007648	110	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x800076b8	92	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x80010ce4	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x80007714	268	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x80010b44	310	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x8000ea98	320	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x80007820	350	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x8000ec74	86	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x80010c7c	104	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x80007980	484	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x80007cb0	36	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x8000ebd8	154	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x800096f4	34	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x80009968	34	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x80009fb0	1782	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x80007d08	182	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x800045bc	62	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x80012168	64	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x8000469c	64	FUNC	<unknown>	HIDDEN	2
__GI_ungetc	.symtab	0x8001039c	420	FUNC	<unknown>	HIDDEN	2
__GI_vfscanf	.symtab	0x8000cb02	2086	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x80004c68	198	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x8000b3ca	30	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x800045fc	34	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x8000b684	100	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x8000b710	206	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x8000b6e8	38	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x80004620	84	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x80016f20	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x80016f20	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x8001d7a4	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x800174ec	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x80008590	238	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x80017544	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x8000a810	68	FUNC	<unknown>	DEFAULT	2
__check_suid	.symtab	0x8000a7b4	92	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x800171e8	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x80017540	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x800171f0	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x8001d7d8	4	OBJECT	<unknown>	DEFAULT	10
__data_start	.symtab	0x80016f2c	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x80011afc	460	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x8001232c	340	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x8001181c	480	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__divdi3	.symtab	0x80003eb8	300	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x8000ee38	2224	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x800124f4	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x800000a8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x80016f24	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x80012220	268	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x8001162c	494	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x800119fc	198	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x8001d79c	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x80004a28	16	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x8001d794	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x8000dfd4	500	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x80016f10	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x80016f10	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__free_to_heap	.symtab	0x80008aa8	342	FUNC	<unknown>	DEFAULT	2
__get_hosts_byname_r	.symtab	0x8000fa30	50	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x8000ac04	278	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x8000ad74	548	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x8000b080	42	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x80007b64	36	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x8000b674	16	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_add_free_area	.symtab	0x80008dc2	66	FUNC	<unknown>	DEFAULT	2
__heap_alloc	.symtab	0x80008cba	150	FUNC	<unknown>	DEFAULT	2
__heap_delete	.symtab	0x80008a50	88	FUNC	<unknown>	DEFAULT	2
__heap_delete	.symtab	0x80008c20	88	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x80008e04	404	FUNC	<unknown>	DEFAULT	2
__heap_free_area_alloc	.symtab	0x80008c78	66	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x80008d50	70	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x80008d96	44	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x80016f10	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x80016f10	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_scan_cookie	.symtab	0x8000d344	148	FUNC	<unknown>	HIDDEN	2
__length_dotted	.symtab	0x80012480	114	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x80011ac4	56	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x80004210	60	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x800083bc	48	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x8000444a	30	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x80003fe4	188	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x800040f8	54	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x8000424c	56	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x80004284	56	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x8000b1a6	108	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x8000b214	78	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x800043fa	80	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x8001019c	88	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x800044cc	84	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x80008464	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x80004520	100	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x8000849c	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x800084d4	70	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x8000fa64	232	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x8001d798	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x800045fc	34	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x80004620	84	FUNC	<unknown>	DEFAULT	2
__malloc_from_heap	.symtab	0x8000875c	466	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x80017330	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x8001d77c	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x8001d874	24	OBJECT	<unknown>	DEFAULT	10
__nameserver	.symtab	0x8001d89c	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x8001d8a8	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x80011cc8	72	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x8000f6e8	840	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x8001d7a0	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x80016f10	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x80016f10	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__psfs_do_numeric	.symtab	0x8000d8bc	1814	FUNC	<unknown>	HIDDEN	2
__psfs_do_numeric.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__psfs_parse_spec	.symtab	0x8000d510	940	FUNC	<unknown>	HIDDEN	2
__psfs_parse_spec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x8000a7a2	10	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x8000a7a2	10	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x8000a7a2	10	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x8000a7a2	10	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x8000a7a2	10	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x8000a7ac	8	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x8001214c	28	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x80011d10	1084	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x8001750c	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x8001d7a8	4	OBJECT	<unknown>	HIDDEN	10
__scan_cookie.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__scan_getc	.symtab	0x8000d3d8	208	FUNC	<unknown>	HIDDEN	2
__scan_ungetc	.symtab	0x8000d4a8	104	FUNC	<unknown>	HIDDEN	2
__searchdomain	.symtab	0x8001d88c	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x8001d8ac	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x800086d0	68	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x80008714	72	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x80008680	80	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x8000aae8	74	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x80017200	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x8001069c	138	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x8000b7e0	314	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x80010728	352	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x8000b91c	518	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x80005158	32	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3828	.symtab	0x80013dc4	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x80010888	90	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x800109c8	102	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x800108e4	226	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x8000bb24	414	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x80005270	116	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x80017204	4	OBJECT	<unknown>	DEFAULT	9
__strtofpmax	.symtab	0x8000fcd4	1018	FUNC	<unknown>	HIDDEN	2
__strtofpmax.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_chdir	.symtab	0x800041c0	62	FUNC	<unknown>	DEFAULT	2
__syscall_exit	.symtab	0x80004130	56	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64	.symtab	0x800040a0	88	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fstat	.symtab	0x8000ab84	74	FUNC	<unknown>	DEFAULT	2
__syscall_getdents64	.symtab	0x8000ad1c	88	FUNC	<unknown>	DEFAULT	2
__syscall_kill	.symtab	0x80004340	72	FUNC	<unknown>	DEFAULT	2
__syscall_llseek	.symtab	0x8000b144	98	FUNC	<unknown>	DEFAULT	2
__syscall_open	.symtab	0x8000439c	94	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x8001013c	94	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_wait4	.symtab	0x8000b370	90	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x8000a738	106	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x8000a854	74	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x8000a89e	584	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x80017504	4	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x80007b88	264	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat64_conv	.symtab	0x8000b3e8	336	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x8000b538	316	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x800052e4	74	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x800100d0	44	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x8001d8b0	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x8001d8b4	4	OBJECT	<unknown>	DEFAULT	10
_do_one_spec	.symtab	0x800053d6	2118	FUNC	<unknown>	DEFAULT	2
_edata	.symtab	0x80017544	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x8001d8b8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x8001d7b0	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x80004168	16	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x80012528	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x8001b588	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x8000532e	168	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x8000bfcc	2502	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x8001d7b4	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x80000094	0	FUNC	<unknown>	DEFAULT	1
_is_equal_or_bigger_arg	.symtab	0x80006210	102	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x8000bcc4	238	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x80005db0	208	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x80006276	1584	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x80005e80	108	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x80005eec	718	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x800061bc	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x8000a7ac	8	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x8000a7ac	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x8001d7f4	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x80000144	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x80004d30	960	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x800050f0	104	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x80017208	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x8001720c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x80006960	310	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x8001b584	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x80017224	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x8001b580	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x80017240	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x80005178	248	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x8001723c	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x80009718	562	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdlib_strto_ll	.symtab	0x8000998c	888	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_ll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x8000bdb4	96	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x80013e88	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x8000be14	438	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x80005c1c	404	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wordcopy_bwd_aligned	.symtab	0x8000e324	638	FUNC	<unknown>	DEFAULT	2
_wordcopy_bwd_dest_aligned	.symtab	0x8000e5a2	578	FUNC	<unknown>	DEFAULT	2
_wordcopy_fwd_aligned	.symtab	0x80006e6c	566	FUNC	<unknown>	DEFAULT	2
_wordcopy_fwd_dest_aligned	.symtab	0x800070a2	500	FUNC	<unknown>	DEFAULT	2
abort	.symtab	0x8000fb4c	390	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x80004178	72	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
advanced_kill_process	.symtab	0x80003bf0	52	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x800096d8	28	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x800096d8	28	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoll	.symtab	0x8000994c	28	FUNC	<unknown>	DEFAULT	2
atoll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x80007c90	30	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x8001d7d4	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2790	.symtab	0x8001d7ac	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x800100fc	64	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x80008590	238	FUNC	<unknown>	DEFAULT	2
buf.2603	.symtab	0x8001d58c	16	OBJECT	<unknown>	DEFAULT	10
buf.4831	.symtab	0x8001d59c	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x80016f54	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x8001251e	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x800000f6	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8000013c	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x800089d8	118	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
change_process_name_based_on_port	.symtab	0x80003cba	154	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x800041fe	16	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
check_and_kill_processes	.symtab	0x80003d54	340	FUNC	<unknown>	DEFAULT	2
clock_getres	.symtab	0x8000ab34	78	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x80004210	60	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x800046dc	198	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x80016f30	4	OBJECT	<unknown>	DEFAULT	9
completed.2170	.symtab	0x80017544	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x800083bc	48	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x80000ea8	462	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x8000444a	30	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x80001182	228	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x80016f50	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x80016f2c	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decpt_str	.symtab	0x80014ade	2	OBJECT	<unknown>	DEFAULT	4
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x8001d79c	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x8001d7b0	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x80009d04	124	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x80014a72	108	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x80004a38	416	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x80003fe4	188	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x800040f8	54	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8000034c	118	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x80006a96	510	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x8000dfd4	500	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x800068d8	134	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x80006c94	226	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x80014a5e	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x80004bd8	38	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x8000424c	56	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x80006d78	80	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x800000fe	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x80008bfe	32	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fscanf	.symtab	0x800068a8	48	FUNC	<unknown>	DEFAULT	2
fscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x80010374	40	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x80010374	40	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x80010540	346	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x8000abce	54	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x800016f8	1184	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x80006dc8	162	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x80002620	16	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x80000c24	56	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x800003c2	516	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x80002630	150	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x80000314	56	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_process_name	.symtab	0x80003a64	212	FUNC	<unknown>	DEFAULT	2
get_process_start_time	.symtab	0x8000389c	456	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x8000dfd4	500	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x8000af98	52	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x8000afcc	60	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x8000b008	60	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x8000b044	60	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x80007ef4	60	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x80007f30	1164	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x8000b080	42	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x80004284	56	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x8000b0ac	90	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x800083ec	50	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x80008420	66	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x8000b108	60	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x80017564	4	OBJECT	<unknown>	DEFAULT	10
h.4830	.symtab	0x8001d768	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x8001d7b4	4	OBJECT	<unknown>	DEFAULT	10
have_current_got	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
have_current_got	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
have_current_got	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x80007de2	12	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x80007dee	22	FUNC	<unknown>	DEFAULT	2
i.4118	.symtab	0x80016f58	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x800074c0	390	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x80007ec4	48	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x8000eccc	362	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x80007ea4	30	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x80007e04	160	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x800115ba	112	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x80011128	464	FUNC	<unknown>	DEFAULT	2
inet_ntop6	.symtab	0x800112f8	706	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x800110c8	96	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x80010d34	282	FUNC	<unknown>	DEFAULT	2
inet_pton6	.symtab	0x80010e4e	634	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x800031ee	328	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x8000016c	144	FUNC	<unknown>	DEFAULT	2
initial_fa	.symtab	0x80017334	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x8000907a	118	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x8000958e	330	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x800042bc	130	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
is_digit	.symtab	0x8000385c	64	FUNC	<unknown>	DEFAULT	2
is_port_open	.symtab	0x80003c24	150	FUNC	<unknown>	DEFAULT	2
is_whitelisted	.symtab	0x80003b38	132	FUNC	<unknown>	DEFAULT	2
isatty	.symtab	0x80007cd4	52	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x80004674	40	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x80004388	20	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill_process	.symtab	0x80003bbc	52	FUNC	<unknown>	DEFAULT	2
kill_scan_cookie	.symtab	0x8000ca9c	102	FUNC	<unknown>	DEFAULT	2
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_main	.symtab	0x80003ea8	14	FUNC	<unknown>	DEFAULT	2
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/m68k/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/m68k/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/m68k/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x80001076	268	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x8000b1a6	108	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x80017570	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x80003336	1318	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x80017560	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x8000132c	132	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x80000c5c	118	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x80001db0	148	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x8000892e	168	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbrtowc	.symtab	0x800101f4	160	FUNC	<unknown>	DEFAULT	2
mbrtowc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbsnrtowcs	.symtab	0x80010294	224	FUNC	<unknown>	DEFAULT	2
mbsnrtowcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mbstate.2536	.symtab	0x8001d7dc	8	OBJECT	<unknown>	DEFAULT	10
mbstate.2536	.symtab	0x8001d7e4	8	OBJECT	<unknown>	DEFAULT	10
memchr	.symtab	0x8000e1c8	348	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x80007296	240	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x8000e7e4	288	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x8000e904	42	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x8000e930	358	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x80007388	310	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x80017438	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x8001d7b8	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x80017524	24	OBJECT	<unknown>	DEFAULT	9
nan_inf_str.2104	.symtab	0x80014bb0	21	OBJECT	<unknown>	DEFAULT	4
nan_inf_str.4211	.symtab	0x80014b3b	11	OBJECT	<unknown>	DEFAULT	4
nanosleep	.symtab	0x8000b214	78	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1067	.symtab	0x8001d588	4	OBJECT	<unknown>	DEFAULT	10
nil_string	.symtab	0x80014b35	6	OBJECT	<unknown>	DEFAULT	4
ntohl	.symtab	0x80007dc0	12	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x80007dcc	22	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x80017568	8	OBJECT	<unknown>	DEFAULT	10
object.2251	.symtab	0x80017546	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x800043fa	80	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x800047a4	350	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x8001d7ec	4	OBJECT	<unknown>	DEFAULT	10
p.2168	.symtab	0x80016f28	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x8001d7f0	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x8001019c	88	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x80004468	98	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4042	.symtab	0x80013de9	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x800008c6	688	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x80000674	68	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8000078e	312	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x800006b8	214	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x800026c6	2856	FUNC	<unknown>	DEFAULT	2
qual_chars	.symtab	0x80014ae4	18	OBJECT	<unknown>	DEFAULT	4
qual_chars.4045	.symtab	0x80013dfc	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x8001214c	28	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x80008f98	14	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x800001fc	280	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x80008fa8	94	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x800149e2	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x800092de	266	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x8001746c	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x80010a30	274	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x800044cc	84	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir	.symtab	0x80004904	292	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x80008464	56	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x80000cd2	470	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x8000b264	106	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sc_getc	.symtab	0x8000d328	26	FUNC	<unknown>	DEFAULT	2
scan_getwc	.symtab	0x8000c994	264	FUNC	<unknown>	DEFAULT	2
select	.symtab	0x80004520	100	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x8000849c	56	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHTTPtwo	.symtab	0x8000249e	386	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x800084d4	70	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x80004584	56	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x8000851c	64	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x80009006	116	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x80009148	406	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x8000fa64	232	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x80008590	238	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x8000b2d0	160	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x80009d80	558	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
snprintf	.symtab	0x80004c00	52	FUNC	<unknown>	DEFAULT	2
snprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x8000855c	50	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x80001cc0	240	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x80000b76	174	FUNC	<unknown>	DEFAULT	2
spec_allowed	.symtab	0x80014b16	16	OBJECT	<unknown>	DEFAULT	4
spec_and_mask.4044	.symtab	0x80013e10	16	OBJECT	<unknown>	DEFAULT	4
spec_base	.symtab	0x80014b26	15	OBJECT	<unknown>	DEFAULT	4
spec_base.4041	.symtab	0x80013df5	7	OBJECT	<unknown>	DEFAULT	4
spec_chars	.symtab	0x80014af6	23	OBJECT	<unknown>	DEFAULT	4
spec_chars.4041	.symtab	0x80013e39	21	OBJECT	<unknown>	DEFAULT	4
spec_flags	.symtab	0x80014ae0	4	OBJECT	<unknown>	DEFAULT	4
spec_flags.4040	.symtab	0x80013e4e	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4043	.symtab	0x80013e20	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges	.symtab	0x80014b0d	8	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4042	.symtab	0x80013e30	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x80004c34	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x800090f0	88	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x800090f0	88	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x800093e8	422	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x80017508	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x8001d7d0	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x800171fc	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x800171f4	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x800171f8	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x800121a8	120	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x800074c0	390	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x80007648	110	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x80007648	110	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x800076b8	92	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x80010ce4	80	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x80007b88	264	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x80007714	268	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x80010b44	310	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x8000ea98	320	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x80007820	350	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x8000ec74	86	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x80010c7c	104	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x80007980	484	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x80009968	34	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x80007cb0	36	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x8000ebd8	154	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x800096f4	34	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x80009968	34	FUNC	<unknown>	DEFAULT	2
strtoll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoq	.symtab	0x80009968	34	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x80009fb0	1782	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x80007d08	182	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x80001266	198	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x800045bc	62	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x80012168	64	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x8000469c	64	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x800005c6	174	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x80013e56	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x80013e6e	12	OBJECT	<unknown>	DEFAULT	4
ungetc	.symtab	0x8001039c	420	FUNC	<unknown>	DEFAULT	2
ungetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1089	.symtab	0x80013e7a	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x80017450	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x80016f34	28	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x8000a6a8	142	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vfscanf	.symtab	0x8000cb02	2086	FUNC	<unknown>	DEFAULT	2
vfscanf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x80001e44	1240	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x80004c68	198	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x8000b3ca	30	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x800045fc	34	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x8000b684	100	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x8000b710	206	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x8000b6e8	38	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
whitelist_pid_count	.symtab	0x8001b57a	4	OBJECT	<unknown>	DEFAULT	10
whitelist_size	.symtab	0x80013788	4	OBJECT	<unknown>	DEFAULT	4
whitelisted_pids	.symtab	0x8001b578	0	OBJECT	<unknown>	DEFAULT	10
whitelisted_processes	.symtab	0x80016f5c	648	OBJECT	<unknown>	DEFAULT	9
write	.symtab	0x80004620	84	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3095	.symtab	0x80014eda	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 08:27:17.547192097 CET	443	33606	54.171.230.55	192.168.2.23
Jan 9, 2025 08:27:17.547338963 CET	33606	443	192.168.2.23	54.171.230.55
Jan 9, 2025 08:27:17.552194118 CET	443	33606	54.171.230.55	192.168.2.23
Jan 9, 2025 08:27:18.240118980 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:18.245152950 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:18.245261908 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:18.247612000 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:18.252546072 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:18.998805046 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 08:27:22.165580034 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:22.165925026 CET	47284	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:22.166424990 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:22.170717001 CET	6581	47284	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:22.171215057 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:22.171271086 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:22.171334982 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:22.176104069 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:24.629925966 CET	42836	443	192.168.2.23	91.189.91.43
Jan 9, 2025 08:27:26.165707111 CET	42516	80	192.168.2.23	109.202.202.202
Jan 9, 2025 08:27:29.087301970 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:29.087507010 CET	47286	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:29.088061094 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:29.092361927 CET	6581	47286	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:29.092916965 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:29.092982054 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:29.093033075 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:29.097773075 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:30.561256886 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:30.561573029 CET	47288	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:30.562108040 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:30.567378998 CET	6581	47288	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:30.567863941 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:30.567955017 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:30.568007946 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:30.573748112 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:39.219978094 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 08:27:39.964082956 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:39.964335918 CET	47290	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:39.964940071 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:39.969099045 CET	6581	47290	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:39.969821930 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:39.969906092 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:39.969947100 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:39.974761009 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:41.397087097 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:41.397356033 CET	47292	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:41.397964001 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:41.402205944 CET	6581	47292	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:41.402769089 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:41.402837038 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:41.402980089 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:41.407742023 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:51.506175995 CET	42836	443	192.168.2.23	91.189.91.43
Jan 9, 2025 08:27:55.601605892 CET	42516	80	192.168.2.23	109.202.202.202
Jan 9, 2025 08:27:57.301640034 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:57.301815987 CET	47294	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:57.302615881 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:57.306662083 CET	6581	47294	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:57.307434082 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:27:57.307486057 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:57.307585001 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:27:57.312309980 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:04.232440948 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:04.232706070 CET	47296	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:04.233443975 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:04.239168882 CET	6581	47296	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:04.239799023 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:04.239855051 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:04.239963055 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:04.244822025 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:05.699682951 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:05.699862957 CET	47298	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:05.700397968 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:05.704758883 CET	6581	47298	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:05.705333948 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:05.705393076 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:05.705488920 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:05.710311890 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:07.152695894 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:07.152863979 CET	47300	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:07.153469086 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:07.157710075 CET	6581	47300	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:07.158257008 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:07.158327103 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:07.158366919 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:07.163269997 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:11.071654081 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:11.071858883 CET	47302	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:11.072381020 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:11.076739073 CET	6581	47302	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:11.077229023 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:11.077286005 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:11.077389002 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:11.082195044 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:12.508552074 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:12.508831978 CET	47304	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:12.509346962 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:12.513684988 CET	6581	47304	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:12.514156103 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:12.514214039 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:12.514261961 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:12.519042969 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:13.964723110 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:13.964982033 CET	47306	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:13.965720892 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:13.969814062 CET	6581	47306	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:13.970665932 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:13.970755100 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:13.970849991 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:13.975718021 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:15.414613008 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:15.414911985 CET	47308	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:15.415448904 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:15.419708014 CET	6581	47308	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:15.420228004 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:15.420312881 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:15.420346022 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:15.425192118 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:19.356806040 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:19.357088089 CET	47310	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:19.357578039 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:19.361968040 CET	6581	47310	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:19.362381935 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:19.362440109 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:19.362481117 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:19.367331028 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:20.174207926 CET	43928	443	192.168.2.23	91.189.91.42
Jan 9, 2025 08:28:32.819780111 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:32.820080996 CET	47312	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:32.820802927 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:32.825110912 CET	6581	47312	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:32.825747013 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:32.825835943 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:32.825865984 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:32.830703020 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:46.253628969 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:46.254308939 CET	47314	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:46.255357981 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:46.259164095 CET	6581	47314	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:46.260160923 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:46.260256052 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:46.260292053 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:46.265088081 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:47.717629910 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:47.717787981 CET	47316	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:47.718255997 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:47.722616911 CET	6581	47316	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:47.723023891 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:47.723078012 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:47.723145962 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:47.727886915 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:49.166811943 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:49.167120934 CET	47318	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:49.167761087 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:49.171962976 CET	6581	47318	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:49.172646999 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:49.172713995 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:49.172837973 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:49.177670002 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:56.107110023 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:56.107347012 CET	47320	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:56.108045101 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:56.112221003 CET	6581	47320	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:56.112931967 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:28:56.112987995 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:56.113032103 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:28:56.117847919 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:09.586158037 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:09.586554050 CET	47322	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:09.587286949 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:09.594260931 CET	6581	47322	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:09.594778061 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:09.594873905 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:09.595078945 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:09.600886106 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:25.523001909 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:25.523260117 CET	47324	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:25.523833036 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:25.528095007 CET	6581	47324	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:25.528650999 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:25.528732061 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:25.528788090 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:25.533842087 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:26.982280016 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:26.982552052 CET	47326	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:26.983197927 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:26.987337112 CET	6581	47326	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:26.988023996 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:26.988104105 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:26.988138914 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:26.992933035 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:28.431814909 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:28.432171106 CET	47328	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:28.432959080 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:28.436997890 CET	6581	47328	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:28.437804937 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:28.437890053 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:28.437979937 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:28.442751884 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:29.888834000 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:29.889158964 CET	47330	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:29.889689922 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:29.894021988 CET	6581	47330	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:29.894568920 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:29.894624949 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:29.894665956 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:29.899576902 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:31.359318972 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:31.359519958 CET	47332	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:31.360048056 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:31.364356995 CET	6581	47332	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:31.364887953 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:31.364948034 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:31.365025997 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:31.369829893 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:32.807933092 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:32.808304071 CET	47334	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:32.808967113 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:32.813222885 CET	6581	47334	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:32.813777924 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:32.813867092 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:32.813936949 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:32.818752050 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:34.262897968 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:34.263227940 CET	47336	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:34.263778925 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:34.268068075 CET	6581	47336	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:34.268665075 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:34.268738031 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:34.268788099 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:34.273515940 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:35.713627100 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:35.713908911 CET	47338	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:35.714533091 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:35.718822002 CET	6581	47338	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:35.719356060 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:35.719423056 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:35.719515085 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:35.724262953 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:37.172162056 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:37.172408104 CET	47340	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:37.172967911 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:37.177261114 CET	6581	47340	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:37.177778006 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:37.177831888 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:37.177920103 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:37.182715893 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:38.619208097 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:38.619533062 CET	47342	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:38.620284081 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:38.624978065 CET	6581	47342	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:38.626111984 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:38.626203060 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:38.626250029 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:38.647082090 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:40.091988087 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:40.092207909 CET	47344	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:40.092756987 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:40.097058058 CET	6581	47344	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:40.097507000 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:40.097588062 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:40.097628117 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:40.102415085 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:41.578041077 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:41.578303099 CET	47346	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:41.579099894 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:41.583147049 CET	6581	47346	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:41.583972931 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:41.584050894 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:41.584139109 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:41.588957071 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:43.027944088 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:43.028564930 CET	47348	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:43.029367924 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:43.033441067 CET	6581	47348	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:43.034171104 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:43.034281015 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:43.034364939 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:43.039212942 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:44.478147030 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:44.478456974 CET	47350	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:44.479255915 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:44.489414930 CET	6581	47350	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:44.490483999 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:44.490557909 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:44.490612030 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:44.501158953 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:45.951330900 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:45.951585054 CET	47352	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:45.952204943 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:45.957912922 CET	6581	47352	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:45.958426952 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:45.958496094 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:45.958548069 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:45.963289976 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:47.421979904 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:47.422183037 CET	47354	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:47.422709942 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:47.427038908 CET	6581	47354	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:47.427583933 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:47.427638054 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:47.427692890 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:47.432439089 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:48.870325089 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:48.870527983 CET	47356	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:48.871090889 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:48.875322104 CET	6581	47356	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:48.875902891 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:48.875963926 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:48.876022100 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:48.880767107 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:50.326770067 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:50.327080011 CET	47358	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:50.327611923 CET	47360	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:50.331948996 CET	6581	47358	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:50.332433939 CET	6581	47360	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:50.332494974 CET	47360	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:50.332545996 CET	47360	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:50.337331057 CET	6581	47360	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:51.793371916 CET	6581	47360	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:51.793741941 CET	47360	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:51.794325113 CET	47362	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:51.798588991 CET	6581	47360	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:51.799110889 CET	6581	47362	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:51.799168110 CET	47362	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:51.799220085 CET	47362	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:51.803996086 CET	6581	47362	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:53.278003931 CET	6581	47362	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:53.278425932 CET	47362	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:53.279059887 CET	47364	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:53.283231020 CET	6581	47362	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:53.283905029 CET	6581	47364	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:53.283987999 CET	47364	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:53.284081936 CET	47364	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:53.288836956 CET	6581	47364	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:54.765233040 CET	6581	47364	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:54.765753031 CET	47364	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:54.766421080 CET	47366	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:54.770704031 CET	6581	47364	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:54.771254063 CET	6581	47366	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:54.771320105 CET	47366	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:54.771405935 CET	47366	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:54.776144028 CET	6581	47366	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:56.214262962 CET	6581	47366	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:56.214699030 CET	47366	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:56.215414047 CET	47368	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:56.219540119 CET	6581	47366	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:56.220225096 CET	6581	47368	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:56.220280886 CET	47368	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:56.220334053 CET	47368	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:56.225116014 CET	6581	47368	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:57.651433945 CET	6581	47368	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:57.651866913 CET	47368	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:57.652759075 CET	47370	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:57.656670094 CET	6581	47368	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:57.657582998 CET	6581	47370	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:57.657648087 CET	47370	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:57.657746077 CET	47370	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:57.662506104 CET	6581	47370	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:59.106163025 CET	6581	47370	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:59.106369972 CET	47370	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:59.106892109 CET	47372	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:59.111162901 CET	6581	47370	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:59.111707926 CET	6581	47372	89.33.192.138	192.168.2.23
Jan 9, 2025 08:29:59.111763000 CET	47372	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:59.111816883 CET	47372	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:29:59.116976976 CET	6581	47372	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:00.574629068 CET	6581	47372	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:00.574848890 CET	47372	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:00.575508118 CET	47374	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:00.579694033 CET	6581	47372	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:00.580286980 CET	6581	47374	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:00.580334902 CET	47374	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:00.580409050 CET	47374	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:00.585171938 CET	6581	47374	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:02.026429892 CET	6581	47374	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:02.026596069 CET	47374	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:02.027156115 CET	47376	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:02.031478882 CET	6581	47374	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:02.032085896 CET	6581	47376	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:02.032130957 CET	47376	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:02.032172918 CET	47376	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:02.036921024 CET	6581	47376	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:03.463994980 CET	6581	47376	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:03.464117050 CET	47376	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:03.464946985 CET	47378	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:03.468996048 CET	6581	47376	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:03.469866037 CET	6581	47378	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:03.469922066 CET	47378	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:03.469965935 CET	47378	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:03.474711895 CET	6581	47378	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:04.910919905 CET	6581	47378	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:04.911257029 CET	47378	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:04.911761999 CET	47380	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:04.916172981 CET	6581	47378	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:04.916647911 CET	6581	47380	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:04.916739941 CET	47380	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:04.916739941 CET	47380	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:04.921616077 CET	6581	47380	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:06.374347925 CET	6581	47380	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:06.374519110 CET	47380	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:06.375185013 CET	47382	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:06.384985924 CET	6581	47380	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:06.386101007 CET	6581	47382	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:06.386178017 CET	47382	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:06.386239052 CET	47382	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:06.397079945 CET	6581	47382	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:07.823359013 CET	6581	47382	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:07.823596954 CET	47382	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:07.824172020 CET	47384	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:07.828376055 CET	6581	47382	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:07.829024076 CET	6581	47384	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:07.829068899 CET	47384	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:07.829128981 CET	47384	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:07.833960056 CET	6581	47384	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:09.278107882 CET	6581	47384	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:09.278455019 CET	47384	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:09.279016972 CET	47386	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:09.283334970 CET	6581	47384	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:09.283852100 CET	6581	47386	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:09.283898115 CET	47386	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:09.283972025 CET	47386	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:09.288830042 CET	6581	47386	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:10.741883039 CET	6581	47386	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:10.742029905 CET	47386	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:10.742702007 CET	47388	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:10.746860981 CET	6581	47386	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:10.747495890 CET	6581	47388	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:10.747564077 CET	47388	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:10.747631073 CET	47388	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:10.752365112 CET	6581	47388	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:12.199387074 CET	6581	47388	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:12.199551105 CET	47388	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:12.200119972 CET	47390	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:12.204432011 CET	6581	47388	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:12.204982042 CET	6581	47390	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:12.205043077 CET	47390	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:12.205156088 CET	47390	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:12.209948063 CET	6581	47390	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:13.653137922 CET	6581	47390	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:13.653409958 CET	47390	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:13.654297113 CET	47392	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:13.658242941 CET	6581	47390	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:13.659209967 CET	6581	47392	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:13.659288883 CET	47392	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:13.659390926 CET	47392	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:13.664264917 CET	6581	47392	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:15.120060921 CET	6581	47392	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:15.120368958 CET	47392	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:15.120920897 CET	47394	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:15.125224113 CET	6581	47392	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:15.125802994 CET	6581	47394	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:15.125880003 CET	47394	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:15.125966072 CET	47394	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:15.130820036 CET	6581	47394	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:16.577718019 CET	6581	47394	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:16.577980042 CET	47394	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:16.578764915 CET	47396	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:16.582868099 CET	6581	47394	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:16.583581924 CET	6581	47396	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:16.583673000 CET	47396	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:16.583771944 CET	47396	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:16.588551044 CET	6581	47396	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:18.046237946 CET	6581	47396	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:18.046621084 CET	47396	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:18.047441006 CET	47398	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:18.051493883 CET	6581	47396	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:18.052249908 CET	6581	47398	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:18.052330971 CET	47398	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:18.052440882 CET	47398	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:18.057163954 CET	6581	47398	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:19.499222040 CET	6581	47398	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:19.499589920 CET	47398	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:19.500197887 CET	47400	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:19.504445076 CET	6581	47398	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:19.504981995 CET	6581	47400	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:19.505034924 CET	47400	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:19.505141973 CET	47400	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:19.509862900 CET	6581	47400	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:20.950918913 CET	6581	47400	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:20.951124907 CET	47400	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:20.951705933 CET	47402	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:20.955955029 CET	6581	47400	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:20.956522942 CET	6581	47402	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:20.956572056 CET	47402	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:20.956691027 CET	47402	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:20.961456060 CET	6581	47402	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:22.405504942 CET	6581	47402	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:22.405754089 CET	47402	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:22.406285048 CET	47404	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:22.411329031 CET	6581	47402	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:22.411935091 CET	6581	47404	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:22.411993980 CET	47404	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:22.412043095 CET	47404	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:22.416846991 CET	6581	47404	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:23.887979031 CET	6581	47404	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:23.888232946 CET	47404	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:23.888739109 CET	47406	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:23.893033028 CET	6581	47404	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:23.893477917 CET	6581	47406	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:23.893562078 CET	47406	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:23.893644094 CET	47406	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:23.898417950 CET	6581	47406	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:25.339298010 CET	6581	47406	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:25.339534044 CET	47406	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:25.340013027 CET	47408	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:25.344347000 CET	6581	47406	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:25.344822884 CET	6581	47408	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:25.344909906 CET	47408	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:25.345048904 CET	47408	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:25.349795103 CET	6581	47408	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:26.776313066 CET	6581	47408	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:26.776489019 CET	47408	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:26.777278900 CET	47410	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:26.781282902 CET	6581	47408	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:26.782116890 CET	6581	47410	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:26.782164097 CET	47410	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:26.782210112 CET	47410	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:26.786936045 CET	6581	47410	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:28.247410059 CET	6581	47410	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:28.247601986 CET	47410	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:28.248320103 CET	47412	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:28.252434969 CET	6581	47410	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:28.253134012 CET	6581	47412	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:28.253180027 CET	47412	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:28.253227949 CET	47412	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:28.257972002 CET	6581	47412	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:29.717664003 CET	6581	47412	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:29.717828989 CET	47412	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:29.718367100 CET	47414	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:29.722718000 CET	6581	47412	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:29.723375082 CET	6581	47414	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:29.723424911 CET	47414	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:29.723464966 CET	47414	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:29.728296995 CET	6581	47414	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:31.172550917 CET	6581	47414	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:31.172694921 CET	47414	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:31.173532963 CET	47416	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:31.177535057 CET	6581	47414	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:31.178368092 CET	6581	47416	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:31.178437948 CET	47416	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:31.178478956 CET	47416	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:31.183214903 CET	6581	47416	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:32.625340939 CET	6581	47416	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:32.625539064 CET	47416	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:32.626111984 CET	47418	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:32.630398035 CET	6581	47416	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:32.630917072 CET	6581	47418	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:32.630975008 CET	47418	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:32.631042957 CET	47418	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:32.635824919 CET	6581	47418	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:34.074656010 CET	6581	47418	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:34.074911118 CET	47418	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:34.075622082 CET	47420	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:34.079710960 CET	6581	47418	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:34.080394030 CET	6581	47420	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:34.080459118 CET	47420	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:34.080573082 CET	47420	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:34.085284948 CET	6581	47420	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:35.512425900 CET	6581	47420	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:35.512692928 CET	47420	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:35.513434887 CET	47422	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:35.517600060 CET	6581	47420	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:35.518362999 CET	6581	47422	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:35.518436909 CET	47422	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:35.518552065 CET	47422	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:35.523324966 CET	6581	47422	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:36.970052004 CET	6581	47422	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:36.970406055 CET	47422	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:36.971194029 CET	47424	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:36.975235939 CET	6581	47422	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:36.976023912 CET	6581	47424	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:36.976106882 CET	47424	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:36.976207972 CET	47424	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:36.980952024 CET	6581	47424	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:38.420399904 CET	6581	47424	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:38.420789957 CET	47424	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:38.421374083 CET	47426	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:38.425582886 CET	6581	47424	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:38.426188946 CET	6581	47426	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:38.426275015 CET	47426	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:38.426356077 CET	47426	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:38.431119919 CET	6581	47426	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:39.875593901 CET	6581	47426	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:39.875837088 CET	47426	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:39.876507044 CET	47428	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:39.880640984 CET	6581	47426	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:39.881315947 CET	6581	47428	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:39.881376028 CET	47428	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:39.881438017 CET	47428	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:39.886219025 CET	6581	47428	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:41.327017069 CET	6581	47428	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:41.327244043 CET	47428	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:41.328196049 CET	47430	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:41.332077026 CET	6581	47428	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:41.333010912 CET	6581	47430	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:41.333113909 CET	47430	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:41.333348036 CET	47430	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:41.338193893 CET	6581	47430	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:42.793946028 CET	6581	47430	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:42.794183016 CET	47430	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:42.794783115 CET	47432	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:42.799061060 CET	6581	47430	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:42.799603939 CET	6581	47432	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:42.799700975 CET	47432	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:42.799808979 CET	47432	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:42.804630995 CET	6581	47432	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:44.250508070 CET	6581	47432	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:44.250791073 CET	47432	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:44.251559019 CET	47434	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:44.255642891 CET	6581	47432	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:44.256373882 CET	6581	47434	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:44.256448030 CET	47434	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:44.256566048 CET	47434	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:44.261316061 CET	6581	47434	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:45.704920053 CET	6581	47434	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:45.705226898 CET	47434	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:45.705816984 CET	47436	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:45.710072041 CET	6581	47434	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:45.710623026 CET	6581	47436	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:45.710709095 CET	47436	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:45.710751057 CET	47436	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:45.716610909 CET	6581	47436	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:47.153299093 CET	6581	47436	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:47.153485060 CET	47436	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:47.153970003 CET	47438	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:47.158313990 CET	6581	47436	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:47.158767939 CET	6581	47438	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:47.158813953 CET	47438	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:47.158879995 CET	47438	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:47.163645029 CET	6581	47438	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:48.611637115 CET	6581	47438	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:48.611871004 CET	47438	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:48.612411022 CET	47440	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:48.616786003 CET	6581	47438	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:48.617238045 CET	6581	47440	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:48.617315054 CET	47440	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:48.617347002 CET	47440	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:48.622116089 CET	6581	47440	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:50.061353922 CET	6581	47440	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:50.061661959 CET	47440	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:50.062458038 CET	47442	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:50.066529036 CET	6581	47440	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:50.067328930 CET	6581	47442	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:50.067401886 CET	47442	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:50.067522049 CET	47442	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:50.072308064 CET	6581	47442	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:51.516673088 CET	6581	47442	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:51.516832113 CET	47442	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:51.517266035 CET	47444	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:51.521667957 CET	6581	47442	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:51.522053003 CET	6581	47444	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:51.522109985 CET	47444	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:51.522172928 CET	47444	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:51.526974916 CET	6581	47444	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:52.967915058 CET	6581	47444	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:52.968069077 CET	47444	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:52.968511105 CET	47446	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:52.972877026 CET	6581	47444	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:52.973278999 CET	6581	47446	89.33.192.138	192.168.2.23
Jan 9, 2025 08:30:52.973334074 CET	47446	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:52.973412037 CET	47446	6581	192.168.2.23	89.33.192.138
Jan 9, 2025 08:30:52.978173018 CET	6581	47446	89.33.192.138	192.168.2.23

System Behavior

Analysis Process: dash PID: 6230, Parent PID: 4336

General

Start time (UTC):	07:27:16
Start date (UTC):	09/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6230, Parent PID: 4336

General

Start time (UTC):	07:27:16
Start date (UTC):	09/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.dIAGoX9e3o /tmp/tmp.6tX9iXagt8 /tmp/tmp.slSqcR6sDa
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6231, Parent PID: 4336

General

Start time (UTC):	07:27:16
Start date (UTC):	09/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6231, Parent PID: 4336

General

Start time (UTC):	07:27:16
Start date (UTC):	09/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.dIAGoX9e3o /tmp/tmp.6tX9iXagt8 /tmp/tmp.slSqcR6sDa
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: ssl.elf PID: 6253, Parent PID: 6156

General

Start time (UTC):	07:27:16
Start date (UTC):	09/01/2025
Path:	/tmp/ssl.elf
Arguments:	/tmp/ssl.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: ssl.elf PID: 6255, Parent PID: 6253

General

Start time (UTC):	07:27:17
Start date (UTC):	09/01/2025
Path:	/tmp/ssl.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: ssl.elf PID: 6257, Parent PID: 6255

General

Start time (UTC):	07:27:17
Start date (UTC):	09/01/2025
Path:	/tmp/ssl.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ssl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.fBopz0 (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: dash PID: 6230, Parent PID: 4336

General

Chronological Activities

Analysis Process: rm PID: 6230, Parent PID: 4336

General

Chronological Activities

Analysis Process: dash PID: 6231, Parent PID: 4336

General

Chronological Activities

Analysis Process: rm PID: 6231, Parent PID: 4336

General

Chronological Activities

Analysis Process: ssl.elf PID: 6253, Parent PID: 6156

General

Chronological Activities

Analysis Process: ssl.elf PID: 6255, Parent PID: 6253

General

Chronological Activities

Linux Analysis Report
ssl.elf