Edit tour

Linux Analysis Report
sst.elf

Overview

General Information

Sample name:	sst.elf
Analysis ID:	1589002
MD5:	6a55ead8eb2698f87fb09573d104d89f
SHA1:	7a5041c2e7c9e97ecdf6db087077be557e8ef057
SHA256:	68da537f746785385928f5d3d12168366d875eec37ceb7ee279b73171c952854
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589002
Start date and time:	2025-01-11 08:14:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	sst.elf
Detection:	MAL
Classification:	mal80.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: 89.33.192.138:65447

Runtime Messages

Command:	/tmp/sst.elf
PID:	6226
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

sst.elf (PID: 6226, Parent: 6147, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/sst.elf

sst.elf New Fork (PID: 6228, Parent: 6226)

sst.elf New Fork (PID: 6230, Parent: 6228)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
sst.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: sst.elf

Avira: detected

Found malware configuration

Source: sst.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "89.33.192.138:65447"}

Multi AV Scanner detection for submitted file

Source: sst.elf	Virustotal: Detection: 57%			Perma Link
Source: sst.elf	ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/sst.elf (PID: 6226)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.23:47624 -> 89.33.192.138:65447

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: classification engine

Classification label: mal80.spre.troj.linELF@0/0@0/0

Source: sst.elf	ELF static info symbol of initial sample: libc/string/mips/memcpy.S
Source: sst.elf	ELF static info symbol of initial sample: libc/string/mips/memset.S
Source: sst.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crt1.S
Source: sst.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crti.S
Source: sst.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crtn.S

Source: /tmp/sst.elf (PID: 6226)

Queries kernel information via 'uname':

Jump to behavior

Source: sst.elf, 6226.1.000055986f543000.000055986f5ca000.rw-.sdmp, sst.elf, 6228.1.000055986f543000.000055986f5ca000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: sst.elf, 6226.1.00007ffcc458b000.00007ffcc45ac000.rw-.sdmp, sst.elf, 6228.1.00007ffcc458b000.00007ffcc45ac000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/sst.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sst.elf
Source: sst.elf, 6226.1.000055986f543000.000055986f5ca000.rw-.sdmp, sst.elf, 6228.1.000055986f543000.000055986f5ca000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: sst.elf, 6226.1.00007ffcc458b000.00007ffcc45ac000.rw-.sdmp, sst.elf, 6228.1.00007ffcc458b000.00007ffcc45ac000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: sst.elf, type: SAMPLE

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: sst.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "89.33.192.138:65447"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
sst.elf	57%	Virustotal		Browse
sst.elf	63%	ReversingLabs	Linux.Trojan.Gafgyt
sst.elf	100%	Avira	EXP/ELF.Mirai.Z

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
89.33.192.138:65447	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
89.33.192.138	unknown	Romania	9009	M247GB	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
89.33.192.138	sss.elf	Get hash	malicious	Gafgyt	Browse
	ssx.elf	Get hash	malicious	Gafgyt	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse
	ssy.elf	Get hash	malicious	Gafgyt	Browse
	ss.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	sse.elf	Get hash	malicious	Gafgyt	Browse
	ssp.elf	Get hash	malicious	Gafgyt	Browse
	ssl.elf	Get hash	malicious	Gafgyt	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse
	ss.elf	Get hash	malicious	Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	sss.elf	Get hash	malicious	Gafgyt	Browse
	ARMV7L.elf	Get hash	malicious	Unknown	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse
	ssy.elf	Get hash	malicious	Gafgyt	Browse
	I686.elf	Get hash	malicious	Unknown	Browse
	ARMV5L.elf	Get hash	malicious	Unknown	Browse
	ss.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	SPARC.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	ARMV4L.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	sss.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ARMV7L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ssb.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	ssy.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	I686.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ARMV5L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ss.elf	Get hash	malicious	Mirai, Gafgyt	Browse	91.189.91.42
	SPARC.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ARMV4L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
M247GB	sss.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssx.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssb.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssy.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ss.elf	Get hash	malicious	Mirai, Gafgyt	Browse	89.33.192.138
	sse.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssp.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssl.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssb.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ss.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
INIT7CH	sss.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	ARMV7L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ssb.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	ssy.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	I686.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ARMV5L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ss.elf	Get hash	malicious	Mirai, Gafgyt	Browse	109.202.202.202
	SPARC.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ARMV4L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.252155179849712
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	sst.elf
File size:	113'364 bytes
MD5:	6a55ead8eb2698f87fb09573d104d89f
SHA1:	7a5041c2e7c9e97ecdf6db087077be557e8ef057
SHA256:	68da537f746785385928f5d3d12168366d875eec37ceb7ee279b73171c952854
SHA512:	aed7ca2d6fd7b8b1833708d24c95bf342511663ba0d93d7d6a890eae824c3ecde47f25cbc7943332020f8a4a6938571ac51e6f24c42245d63eea7eb45330fb15
SSDEEP:	1536:/LeTEl+xRnSMOEr9ZTun5ATI3fMgHfCRDFqUmkiSFxfC7xbXe:/ISZEr9f6fMJjqUmkiSFxfKxbXe
TLSH:	5DB3C617AB618FB7C85FCE330AAA450120CDE55612E96B2FB2B4D92CE74B94F08D3D54
File Content Preview:	.ELF......................@.4...tn......4. ...(........p......@...@...........................@...@..=...=...............@...@E..@E......l..........Q.td..................................................E....<...'!......'.......................<...'!... ..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002a0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	93812
Section Header Size:	40
Number of Section Headers:	21
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000b4	0xb4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000cc	0xcc	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400160	0x160	0x11bc0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x411d20	0x11d20	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x411d80	0x11d80	0x2040	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x413dc0	0x13dc0	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x454000	0x14000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x454008	0x14008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x454010	0x14010	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x454014	0x14014	0x60	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x454080	0x14080	0x440	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x4544c0	0x144c0	0x458	0x4	0x10000003	WAp	0	0	16
.sbss	NOBITS	0x454918	0x14918	0x18	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x454930	0x14918	0x63a4	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x14918	0xa9e	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xa9e	0x153b6	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x153b8	0x1a20	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x16dd8	0x9a	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x171bc	0x29d0	0x10	0x0		20	284	4
.strtab	STRTAB	0x0	0x19b8c	0x1f48	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xb4	0x4000b4	0x4000b4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x13dc4	0x13dc4	5.2390	0x5	R E	0x10000	.reginfo .init .text .fini .rodata .eh_frame
LOAD	0x14000	0x454000	0x454000	0x918	0x6cd4	3.9378	0x6	RW	0x10000	.ctors .dtors .jcr .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000cc	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400160	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x411d20	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x411d80	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x413dc0	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x454000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x454008	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x454010	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x454014	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x454080	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x4544c0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x454918	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x454930	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0xa9e	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
C.111.5048	.symtab	0x454014	96	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x454968	16384	OBJECT	<unknown>	DEFAULT	14
SendHTTPHex	.symtab	0x40475c	680	FUNC	<unknown>	DEFAULT	3
SendSTDHEX	.symtab	0x4038ac	556	FUNC	<unknown>	DEFAULT	3
SendUDP	.symtab	0x4028e8	1712	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x4544c0	0	OBJECT	<unknown>	DEFAULT	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x454004	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x454000	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x4540e0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x412620	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_tolower	.symtab	0x4544b0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x413ac0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x4540f0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x412920	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x45400c	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x454008	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x413dc0	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x413dc0	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x4540e0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_b_data	.symtab	0x412620	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_tolower	.symtab	0x4544b0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_tolower_data	.symtab	0x413ac0	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_toupper	.symtab	0x4540f0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper_data	.symtab	0x412920	768	OBJECT	<unknown>	HIDDEN	5
__GI___ctype_b	.symtab	0x4540e4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_tolower	.symtab	0x4544b4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x4540f4	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x407bf0	24	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x411600	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x409a50	68	FUNC	<unknown>	HIDDEN	3
__GI___h_errno_location	.symtab	0x40c700	24	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x4074c0	136	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl64	.symtab	0x407550	104	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x4078c0	124	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x40bcf0	196	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x40be4c	140	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x409aa0	392	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x4075c0	80	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x40ee80	428	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x40b6a0	28	FUNC	<unknown>	HIDDEN	3
__GI_atol	.symtab	0x40b6a0	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x40f060	112	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x407670	88	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x4076d0	84	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x40a410	84	FUNC	<unknown>	HIDDEN	3
__GI_errno	.symtab	0x45abd0	4	OBJECT	<unknown>	HIDDEN	14
__GI_exit	.symtab	0x40b930	236	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x40f130	512	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x4074c0	136	FUNC	<unknown>	HIDDEN	3
__GI_fcntl64	.symtab	0x407550	104	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x40fcc0	628	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x411600	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x40fa50	216	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x40ff40	268	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x40f330	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x407730	84	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x4092c0	128	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x40f350	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x40f3a0	388	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x409340	280	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x411600	388	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x40c390	88	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x40c3f0	88	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x40c450	84	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname	.symtab	0x409f30	116	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname_r	.symtab	0x409fb0	1108	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x407790	84	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x40a470	84	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x40c4b0	84	FUNC	<unknown>	HIDDEN	3
__GI_h_errno	.symtab	0x45abd4	4	OBJECT	<unknown>	HIDDEN	14
__GI_inet_addr	.symtab	0x409ee0	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x40df00	280	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x409ebc	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x409e00	188	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x410860	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x4103b0	700	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x40b550	328	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x4077f0	104	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x409c90	60	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x407860	88	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x411510	164	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x40d790	264	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x409460	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove	.symtab	0x40d8a0	816	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x40dbd0	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x40dc20	272	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x4095a0	144	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x40c510	84	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x4078c0	124	FUNC	<unknown>	HIDDEN	3
__GI_poll	.symtab	0x40f0d0	84	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x4114c0	76	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x40af20	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x40b32c	176	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x410050	200	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x407960	84	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x40a550	84	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x40c570	144	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x4079c0	120	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x40a5b0	84	FUNC	<unknown>	HIDDEN	3
__GI_sendto	.symtab	0x40a610	128	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x407a40	84	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x40a690	120	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x40b1f0	316	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x40c240	232	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x40a770	252	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40c600	148	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x40ba20	564	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x40a710	84	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x407c10	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x40b3dc	372	FUNC	<unknown>	HIDDEN	3
__GI_strcasecmp	.symtab	0x411790	108	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x409630	256	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x409730	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x409730	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x409760	36	FUNC	<unknown>	HIDDEN	3
__GI_strdup	.symtab	0x410230	144	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x409790	184	FUNC	<unknown>	HIDDEN	3
__GI_strncat	.symtab	0x410120	180	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x40dd30	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x409850	256	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x40dec0	64	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x4101e0	76	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x409950	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x409c70	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x40ddf0	204	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x40b6c0	28	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x409cd0	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x407aa0	84	FUNC	<unknown>	HIDDEN	3
__GI_tolower	.symtab	0x4115c0	60	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x407bb0	60	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x407c60	260	FUNC	<unknown>	HIDDEN	3
__GI_wait4	.symtab	0x40c6a0	88	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x407b00	28	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x40c720	112	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x40c7d0	228	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x40c790	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x407b20	84	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x454010	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x454010	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x45abbc	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x454430	24	OBJECT	<unknown>	DEFAULT	11
__bsd_signal	.symtab	0x40a770	252	FUNC	<unknown>	HIDDEN	3
__bss_start	.symtab	0x454918	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40bdc4	136	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x4540e4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_tolower	.symtab	0x4544b4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x4540f4	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x45ac10	4	OBJECT	<unknown>	HIDDEN	14
__data_start	.symtab	0x4540a0	0	OBJECT	<unknown>	DEFAULT	11
__decode_answer	.symtab	0x410ec0	340	FUNC	<unknown>	HIDDEN	3
__decode_dotted	.symtab	0x411920	340	FUNC	<unknown>	HIDDEN	3
__decode_header	.symtab	0x410cd0	228	FUNC	<unknown>	HIDDEN	3
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x40e020	2568	FUNC	<unknown>	HIDDEN	3
__do_global_ctors_aux	.symtab	0x411cb0	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400160	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x454080	0	OBJECT	<unknown>	HIDDEN	11
__encode_dotted	.symtab	0x411800	280	FUNC	<unknown>	HIDDEN	3
__encode_header	.symtab	0x410bc0	272	FUNC	<unknown>	HIDDEN	3
__encode_question	.symtab	0x410dc0	172	FUNC	<unknown>	HIDDEN	3
__environ	.symtab	0x45abb4	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x407bf0	24	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x45aba0	4	OBJECT	<unknown>	HIDDEN	14
__fgetc_unlocked	.symtab	0x411600	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x454000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x454000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x40ee10	104	FUNC	<unknown>	HIDDEN	3
__glibc_strerror_r	.symtab	0x409a50	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x40c700	24	FUNC	<unknown>	DEFAULT	3
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x40ac80	188	FUNC	<unknown>	DEFAULT	3
__heap_free	.symtab	0x40ad88	364	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area	.symtab	0x40ad40	44	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area_after	.symtab	0x40ad6c	28	FUNC	<unknown>	DEFAULT	3
__init_array_end	.symtab	0x454000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x454000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x411a80	72	FUNC	<unknown>	HIDDEN	3
__length_question	.symtab	0x410e70	72	FUNC	<unknown>	HIDDEN	3
__libc_close	.symtab	0x4076d0	84	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x40a410	84	FUNC	<unknown>	DEFAULT	3
__libc_creat	.symtab	0x40793c	28	FUNC	<unknown>	DEFAULT	3
__libc_fcntl	.symtab	0x4074c0	136	FUNC	<unknown>	DEFAULT	3
__libc_fcntl64	.symtab	0x407550	104	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x407730	84	FUNC	<unknown>	DEFAULT	3
__libc_getpid	.symtab	0x407790	84	FUNC	<unknown>	DEFAULT	3
__libc_lseek64	.symtab	0x411510	164	FUNC	<unknown>	DEFAULT	3
__libc_nanosleep	.symtab	0x40c510	84	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x4078c0	124	FUNC	<unknown>	DEFAULT	3
__libc_poll	.symtab	0x40f0d0	84	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x407960	84	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x40a550	84	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x4079c0	120	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x40a5b0	84	FUNC	<unknown>	DEFAULT	3
__libc_sendto	.symtab	0x40a610	128	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x40c240	232	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x45abb0	4	OBJECT	<unknown>	DEFAULT	14
__libc_waitpid	.symtab	0x407b00	28	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x407b20	84	FUNC	<unknown>	DEFAULT	3
__malloc_heap	.symtab	0x454360	4	OBJECT	<unknown>	DEFAULT	11
__malloc_heap_lock	.symtab	0x45ab80	24	OBJECT	<unknown>	DEFAULT	14
__malloc_sbrk_lock	.symtab	0x45aca0	24	OBJECT	<unknown>	DEFAULT	14
__nameserver	.symtab	0x45acc8	12	OBJECT	<unknown>	HIDDEN	14
__nameservers	.symtab	0x454920	4	OBJECT	<unknown>	HIDDEN	13
__open_etc_hosts	.symtab	0x411020	108	FUNC	<unknown>	HIDDEN	3
__open_nameservers	.symtab	0x40ea30	984	FUNC	<unknown>	HIDDEN	3
__pagesize	.symtab	0x45abb8	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x454000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x454000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x40bdb4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x40bdb4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x40bdb4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x40bdb4	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x40bdb4	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_void	.symtab	0x40bdbc	8	FUNC	<unknown>	DEFAULT	3
__raise	.symtab	0x4114c0	76	FUNC	<unknown>	HIDDEN	3
__read_etc_hosts_r	.symtab	0x41108c	1076	FUNC	<unknown>	HIDDEN	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x454470	24	OBJECT	<unknown>	DEFAULT	11
__rtld_fini	.symtab	0x45abc0	4	OBJECT	<unknown>	HIDDEN	14
__searchdomain	.symtab	0x45acb8	16	OBJECT	<unknown>	HIDDEN	14
__searchdomains	.symtab	0x454924	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x40a898	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x40a8c4	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x40a870	40	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002a0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x45414c	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x411ad0	140	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x40c8c0	280	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x40f530	320	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x40c9e0	472	FUNC	<unknown>	HIDDEN	3
__stdio_init_mutex	.symtab	0x407e28	32	FUNC	<unknown>	HIDDEN	3
__stdio_mutex_initializer.3833	.symtab	0x412c20	24	OBJECT	<unknown>	DEFAULT	5
__stdio_rfill	.symtab	0x411b60	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x40f9e0	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x411bc0	228	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x40cbc0	308	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x407f70	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x454150	4	OBJECT	<unknown>	DEFAULT	11
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x40c330	84	FUNC	<unknown>	HIDDEN	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x40bcf0	196	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x40be4c	140	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x40bed8	864	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x454450	4	OBJECT	<unknown>	HIDDEN	11
__xpg_strerror_r	.symtab	0x409aa0	392	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x407fe0	128	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x40f030	44	FUNC	<unknown>	DEFAULT	3
_dl_phdr	.symtab	0x454928	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x45492c	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x454918	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x45acd4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x45abd0	4	OBJECT	<unknown>	DEFAULT	14
_exit	.symtab	0x4075c0	80	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x454918	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x454080	0	NOTYPE	<unknown>	DEFAULT	11
_fini	.symtab	0x411d20	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x458978	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x408060	228	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x40cf40	2120	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400160	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x45c4b0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_h_errno	.symtab	0x45abd4	4	OBJECT	<unknown>	DEFAULT	14
_init	.symtab	0x4000cc	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x40cd00	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x4088f0	220	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x408ccc	1512	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x4089d0	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x408a40	544	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x408c60	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x40bdbc	8	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x40bdbc	8	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x45ac20	128	OBJECT	<unknown>	HIDDEN	14
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40f670	880	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x407d70	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x454154	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x454100	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_dec_use	.symtab	0x40fb30	400	FUNC	<unknown>	DEFAULT	3
_stdio_openlist_del_count	.symtab	0x458974	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x454118	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_use_count	.symtab	0x458970	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x454158	240	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x407e48	284	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x454130	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x40b6e0	592	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40cd90	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x412d90	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40cde0	340	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x408144	1960	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40ee80	428	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x407610	84	FUNC	<unknown>	DEFAULT	3
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x40b6a0	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x40b6a0	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x409c30	32	FUNC	<unknown>	DEFAULT	3
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x45ac00	4	OBJECT	<unknown>	DEFAULT	14
been_there_done_that.2792	.symtab	0x45abc4	4	OBJECT	<unknown>	DEFAULT	14
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x40f060	112	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x40a770	252	FUNC	<unknown>	DEFAULT	3
buf.2613	.symtab	0x45a990	16	OBJECT	<unknown>	DEFAULT	14
buf.4833	.symtab	0x45a9a0	460	OBJECT	<unknown>	DEFAULT	14
bzero	.symtab	0x409c50	28	FUNC	<unknown>	DEFAULT	3
bzero.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c	.symtab	0x4540b4	4	OBJECT	<unknown>	DEFAULT	11
chdir	.symtab	0x407670	88	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x4076d0	84	FUNC	<unknown>	DEFAULT	3
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x4540c0	4	OBJECT	<unknown>	DEFAULT	11
completed.2296	.symtab	0x454930	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x40a410	84	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x401edc	828	FUNC	<unknown>	DEFAULT	3
creat	.symtab	0x40793c	28	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x402490	460	FUNC	<unknown>	DEFAULT	3
currentServer	.symtab	0x4540b0	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x4540a0	0	OBJECT	<unknown>	DEFAULT	11
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x45abb4	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x45abd0	4	OBJECT	<unknown>	DEFAULT	14
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x412d00	126	OBJECT	<unknown>	DEFAULT	5
exit	.symtab	0x40b930	236	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x4139a8	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x40f130	512	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x4074c0	136	FUNC	<unknown>	DEFAULT	3
fcntl64	.symtab	0x407550	104	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x4006c0	292	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x40fcc0	628	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x411600	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40fa50	216	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40ff40	268	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x413990	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x40f330	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x407730	84	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x4092c0	128	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40021c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x40aaf0	396	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40f350	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x40f350	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40f3a0	388	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x402f98	2324	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked	.symtab	0x409340	280	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x404cac	56	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x4019c4	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x4007e4	896	FUNC	<unknown>	DEFAULT	3
getPortz	.symtab	0x404ce4	380	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x400614	172	FUNC	<unknown>	DEFAULT	3
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x411600	388	FUNC	<unknown>	DEFAULT	3
getegid	.symtab	0x40c390	88	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40c3f0	88	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40c450	84	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x409f30	116	FUNC	<unknown>	DEFAULT	3
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x409fb0	1108	FUNC	<unknown>	DEFAULT	3
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x407790	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x40a470	84	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x40a4d0	120	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40c4b0	84	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x454954	4	OBJECT	<unknown>	DEFAULT	14
h.4832	.symtab	0x45ab6c	20	OBJECT	<unknown>	DEFAULT	14
h_errno	.symtab	0x45abd4	4	OBJECT	<unknown>	DEFAULT	14
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hlt	.symtab	0x4002fc	0	NOTYPE	<unknown>	DEFAULT	3
htonl	.symtab	0x409dc0	40	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x409de8	24	FUNC	<unknown>	DEFAULT	3
i.4126	.symtab	0x4540b8	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x409630	256	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x409ee0	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x40df00	280	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x409ebc	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x409e00	188	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x410860	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x41066c	500	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x4103b0	700	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x4102c0	240	FUNC	<unknown>	DEFAULT	3
initConnection	.symtab	0x406694	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400310	300	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x454250	264	OBJECT	<unknown>	DEFAULT	11
initstate	.symtab	0x40b074	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x40b550	328	FUNC	<unknown>	DEFAULT	3
ioctl	.symtab	0x4077f0	104	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x409c90	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x407b80	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x407860	88	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x402218	632	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x411510	164	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x454960	6	OBJECT	<unknown>	DEFAULT	14
main	.symtab	0x4068e4	3024	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x454950	4	OBJECT	<unknown>	DEFAULT	14
makeIPPacket	.symtab	0x4027c0	296	FUNC	<unknown>	DEFAULT	3
makeRandomStr	.symtab	0x401a64	268	FUNC	<unknown>	DEFAULT	3
makevsepacket	.symtab	0x403c94	332	FUNC	<unknown>	DEFAULT	3
malloc	.symtab	0x40a900	492	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x40d790	264	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x409460	308	FUNC	<unknown>	DEFAULT	3
memmove	.symtab	0x40d8a0	816	FUNC	<unknown>	DEFAULT	3
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x40dbd0	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x40dc20	272	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x4095a0	144	FUNC	<unknown>	DEFAULT	3
mylock	.symtab	0x454370	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x45abe0	24	OBJECT	<unknown>	DEFAULT	14
mylock	.symtab	0x454490	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x40c510	84	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1065	.symtab	0x45a980	4	OBJECT	<unknown>	DEFAULT	14
ntohl	.symtab	0x409d80	40	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x409da8	24	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x454958	8	OBJECT	<unknown>	DEFAULT	14
object.2349	.symtab	0x454934	24	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x4078c0	124	FUNC	<unknown>	DEFAULT	3
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x454918	4	OBJECT	<unknown>	DEFAULT	13
p.2294	.symtab	0x454090	0	OBJECT	<unknown>	DEFAULT	11
pids	.symtab	0x45491c	4	OBJECT	<unknown>	DEFAULT	13
poll	.symtab	0x40f0d0	84	FUNC	<unknown>	DEFAULT	3
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4045	.symtab	0x412c50	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x4012bc	1456	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x400d30	184	FUNC	<unknown>	DEFAULT	3
printi	.symtab	0x401024	664	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x400de8	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x404e60	6196	FUNC	<unknown>	DEFAULT	3
qual_chars.4050	.symtab	0x412c70	20	OBJECT	<unknown>	DEFAULT	5
raise	.symtab	0x4114c0	76	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40af00	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40043c	472	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x40af20	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x413910	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x40b32c	176	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x454388	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x410050	200	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x407960	84	FUNC	<unknown>	DEFAULT	3
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x40a550	84	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x401b70	876	FUNC	<unknown>	DEFAULT	3
sbrk	.symtab	0x40c570	144	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x4079c0	120	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x40a5b0	84	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHTTPtwo	.symtab	0x404a04	680	FUNC	<unknown>	DEFAULT	3
sendto	.symtab	0x40a610	128	FUNC	<unknown>	DEFAULT	3
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x407a40	84	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x40a690	120	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40afc4	176	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x40b1f0	316	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x40c240	232	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x40a770	252	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40c600	148	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40ba20	564	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x40a710	84	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x403ad8	444	FUNC	<unknown>	DEFAULT	3
sockprintf	.symtab	0x40186c	344	FUNC	<unknown>	DEFAULT	3
spec_and_mask.4049	.symtab	0x412c84	16	OBJECT	<unknown>	DEFAULT	5
spec_base.4044	.symtab	0x412c5c	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.4046	.symtab	0x412cb0	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.4045	.symtab	0x412cc8	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.4048	.symtab	0x412c94	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.4047	.symtab	0x412ca4	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x407c10	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40b144	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x40b144	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x40b3dc	372	FUNC	<unknown>	DEFAULT	3
static_id	.symtab	0x454460	2	OBJECT	<unknown>	DEFAULT	11
static_ns	.symtab	0x45abf8	4	OBJECT	<unknown>	DEFAULT	14
stderr	.symtab	0x454148	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x454140	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x454144	4	OBJECT	<unknown>	DEFAULT	11
strcasecmp	.symtab	0x411790	108	FUNC	<unknown>	DEFAULT	3
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x409630	256	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x409730	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x409730	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x409760	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x410230	144	FUNC	<unknown>	DEFAULT	3
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x409aa0	392	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x409790	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x410120	180	FUNC	<unknown>	DEFAULT	3
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40dd30	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x409850	256	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40dec0	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x4101e0	76	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x409950	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x409c70	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40ddf0	204	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40b6c0	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x409cd0	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x40265c	356	FUNC	<unknown>	DEFAULT	3
time	.symtab	0x407aa0	84	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x4115c0	60	FUNC	<unknown>	DEFAULT	3
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x407bb0	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400b64	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x412cd0	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x412ce8	12	OBJECT	<unknown>	DEFAULT	5
unknown.1088	.symtab	0x412d80	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x454410	28	OBJECT	<unknown>	DEFAULT	11
useragents	.symtab	0x4540c4	28	OBJECT	<unknown>	DEFAULT	11
usleep	.symtab	0x40bc60	144	FUNC	<unknown>	DEFAULT	3
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x403de0	2428	FUNC	<unknown>	DEFAULT	3
vsnprintf	.symtab	0x407c60	260	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x40c6a0	88	FUNC	<unknown>	DEFAULT	3
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x407b00	28	FUNC	<unknown>	DEFAULT	3
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x40c720	112	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40c7d0	228	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40c790	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x407b20	84	FUNC	<unknown>	DEFAULT	3
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3043	.symtab	0x413a74	17	OBJECT	<unknown>	DEFAULT	5

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 08:15:27.942244053 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 08:15:29.326100111 CET	47624	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:29.424983978 CET	65447	47624	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:29.425091028 CET	47624	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:29.426691055 CET	47624	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:29.431447029 CET	65447	47624	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:33.317608118 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 08:15:33.342758894 CET	65447	47624	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:33.343156099 CET	47624	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:33.343691111 CET	47626	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:33.347970963 CET	65447	47624	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:33.348582029 CET	65447	47626	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:33.348649025 CET	47626	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:33.348690033 CET	47626	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:33.353502989 CET	65447	47626	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:34.341478109 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 08:15:46.783581018 CET	65447	47626	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:46.783927917 CET	47626	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:46.786479950 CET	47628	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:46.788693905 CET	65447	47626	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:46.791307926 CET	65447	47628	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:46.791408062 CET	47628	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:46.791460991 CET	47628	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:46.796226978 CET	65447	47628	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:48.231616974 CET	65447	47628	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:48.231935978 CET	47628	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:48.232372999 CET	47630	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:48.236768961 CET	65447	47628	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:48.237201929 CET	65447	47630	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:48.237318993 CET	47630	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:48.237418890 CET	47630	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:48.242253065 CET	65447	47630	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:48.675487995 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 08:15:52.156428099 CET	65447	47630	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:52.156676054 CET	47630	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:52.157206059 CET	47632	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:52.161462069 CET	65447	47630	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:52.162190914 CET	65447	47632	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:52.162283897 CET	47632	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:52.162436962 CET	47632	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:52.167186975 CET	65447	47632	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:53.627371073 CET	65447	47632	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:53.627559900 CET	47632	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:53.628099918 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:53.632462025 CET	65447	47632	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:53.632889032 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:53.632939100 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:53.632982969 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:53.637768030 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:57.544161081 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:57.544351101 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:57.544780016 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:57.549554110 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:57.550137997 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:57.550204039 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:57.550307989 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:57.555995941 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:58.914060116 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 08:15:58.982687950 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:58.982903004 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:58.983791113 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:58.987787008 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:58.988804102 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 08:15:58.988879919 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:58.988981009 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:15:58.993815899 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:05.057225943 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 08:16:05.914756060 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:05.915138006 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:05.915585995 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:05.920039892 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:05.920417070 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:05.920480967 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:05.920519114 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:05.925290108 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:07.360038996 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:07.360445976 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:07.361371994 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:07.365206003 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:07.366126060 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:07.366203070 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:07.366312981 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:07.371023893 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:20.824174881 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:20.824490070 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:20.825483084 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:20.829261065 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:20.830260992 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:20.830329895 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:20.830424070 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:20.835180044 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:22.282088995 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:22.282526016 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:22.283212900 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:22.287489891 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:22.288034916 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:22.288119078 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:22.288219929 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:22.292984962 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:23.768635988 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:23.769076109 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:23.769807100 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:23.773902893 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:23.774673939 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:23.774796963 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:23.774898052 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:23.779611111 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:29.633384943 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 08:16:42.700237036 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:42.700663090 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:42.701549053 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:42.705693007 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:42.706458092 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:42.706558943 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:42.706595898 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:42.711491108 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:46.628573895 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:46.628887892 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:46.629920006 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:46.633861065 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:46.635813951 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:46.635919094 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:46.636013985 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:46.640839100 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:50.107042074 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 08:16:53.576275110 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:53.576683998 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:53.577683926 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:53.581562042 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:53.582567930 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:53.582639933 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:53.582782984 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:53.587609053 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:55.034316063 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:55.034718990 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:55.035418987 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:55.039455891 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:55.040218115 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:55.040334940 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:55.040352106 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:55.045072079 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:56.484174013 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:56.484458923 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:56.485462904 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:56.489438057 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:56.490364075 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 08:16:56.490438938 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:56.490528107 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:16:56.495434999 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:00.406035900 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:00.406275988 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:00.406702042 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:00.411051989 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:00.411480904 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:00.411595106 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:00.411595106 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:00.416373968 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:01.861509085 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:01.861716032 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:01.862632036 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:01.867386103 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:01.867398977 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:01.867484093 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:01.867521048 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:01.872313976 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:15.290421963 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:15.290688992 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:15.291524887 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:15.295706034 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:15.296451092 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:15.296525002 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:15.296576023 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:15.301414013 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:16.753870010 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:16.754029989 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:16.754829884 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:16.759004116 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:16.759746075 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:16.759830952 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:16.759928942 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:16.764717102 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:18.204287052 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:18.204685926 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:18.205643892 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:18.209575891 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:18.210695028 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:18.210782051 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:18.210846901 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:18.215621948 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:19.660042048 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:19.660224915 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:19.660891056 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:19.665246010 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:19.665740967 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:19.665803909 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:19.665846109 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:19.670677900 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:26.578568935 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:26.578814030 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:26.579586029 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:26.583667994 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:26.584512949 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:26.584635973 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:26.584762096 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:26.589543104 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:28.099569082 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:28.099920988 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:28.100999117 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:28.104824066 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:28.105848074 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:28.105936050 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:28.106046915 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:28.110832930 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:32.037272930 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:32.037553072 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:32.038563013 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:32.042525053 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:32.044006109 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:32.044111013 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:32.044225931 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:32.050918102 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:45.462570906 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:45.462749958 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:45.463447094 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:45.467637062 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:45.468435049 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:45.468482971 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:45.468537092 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:45.473305941 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:49.360219955 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:49.360496998 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:49.361566067 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:49.365380049 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:49.366517067 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:49.366605997 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:49.366734982 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:49.371608973 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:50.818712950 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:50.819119930 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:50.820137024 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:50.824038982 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:50.825050116 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:50.825115919 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:50.825247049 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:50.830051899 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:57.738085985 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:57.738490105 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:57.739433050 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:57.743386030 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:57.744272947 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:57.744364023 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:57.744471073 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:57.749234915 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:59.203979015 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:59.204277992 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:59.205387115 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:59.209235907 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:59.210387945 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 08:17:59.210484982 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:59.210527897 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:17:59.215424061 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:12.654691935 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:12.654851913 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:12.655222893 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:12.659691095 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:12.660188913 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:12.660248995 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:12.660305977 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:12.665088892 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:14.094650030 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:14.094938993 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:14.095506907 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:14.099782944 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:14.100353956 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:14.100395918 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:14.100452900 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:14.105262995 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:15.555231094 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:15.555566072 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:15.557445049 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:15.563242912 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:15.564618111 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:15.564691067 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:15.564737082 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:15.570935011 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:31.500339985 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:31.500592947 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:31.501194000 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:31.505408049 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:31.506038904 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:31.506139040 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:31.506208897 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:31.510994911 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:32.955293894 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:32.955734968 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:32.956675053 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:32.960773945 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:32.961532116 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:32.961652040 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:32.961755037 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:32.966572046 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:36.895818949 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:36.895998955 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:36.896884918 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:36.901170969 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:36.901957989 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:36.902031898 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:36.902080059 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:36.906889915 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:38.345556974 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:38.345933914 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:38.346491098 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:38.350776911 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:38.351345062 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:38.351404905 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:38.351505041 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:38.356360912 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:45.269136906 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:45.269572020 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:45.270375013 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:45.274343014 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:45.275103092 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:45.275166035 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:45.275280952 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:45.280019999 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:58.699148893 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:58.699394941 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:58.700025082 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:58.705444098 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:58.705598116 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 08:18:58.705636024 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:58.705701113 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:18:58.711172104 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 08:19:00.144290924 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 08:19:00.144450903 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:19:00.145401001 CET	47706	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:19:00.152482986 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 08:19:00.152518988 CET	65447	47706	89.33.192.138	192.168.2.23
Jan 11, 2025 08:19:00.152575970 CET	47706	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:19:00.152638912 CET	47706	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 08:19:00.157614946 CET	65447	47706	89.33.192.138	192.168.2.23

System Behavior

Analysis Process: sst.elf PID: 6226, Parent PID: 6147

General

Start time (UTC):	07:15:28
Start date (UTC):	11/01/2025
Path:	/tmp/sst.elf
Arguments:	/tmp/sst.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: sst.elf PID: 6228, Parent PID: 6226

General

Start time (UTC):	07:15:28
Start date (UTC):	11/01/2025
Path:	/tmp/sst.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: sst.elf PID: 6230, Parent PID: 6228

General

Start time (UTC):	07:15:28
Start date (UTC):	11/01/2025
Path:	/tmp/sst.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report sst.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: sst.elf PID: 6226, Parent PID: 6147

General

Chronological Activities

Analysis Process: sst.elf PID: 6228, Parent PID: 6226

General

Chronological Activities

Analysis Process: sst.elf PID: 6230, Parent PID: 6228

General

Chronological Activities

Linux Analysis Report
sst.elf