Edit tour

Linux Analysis Report
loki.arm7.elf

Overview

General Information

Sample name:	loki.arm7.elf
Analysis ID:	1594495
MD5:	490bc8bf3f15d6f599b8359d4080a426
SHA1:	8f3ffd5a2e811b8f8d09fb016d9375aa8fa9b2ab
SHA256:	f6281d7a4d7a3a7c01c2ee67434940e6628aa4155e56783ebca6ba9988ae69d6
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	60
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Yara detected Mirai

Contains symbols with names commonly found in malware

Detected TCP or UDP traffic on non-standard ports

Sample and/or dropped files contains symbols with suspicious names

Sample listens on a socket

Suricata IDS alerts with low severity for network traffic

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1594495
Start date and time:	2025-01-19 03:22:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	loki.arm7.elf
Detection:	MAL
Classification:	mal60.troj.linELF@0/0@1/0

Runtime Messages

Command:	/tmp/loki.arm7.elf
PID:	6241
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	suka
Standard Error:

Process Tree

system is lnxubuntu20

loki.arm7.elf (PID: 6241, Parent: 6165, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/loki.arm7.elf

loki.arm7.elf New Fork (PID: 6243, Parent: 6241)

loki.arm7.elf New Fork (PID: 6245, Parent: 6241)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
loki.arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Suricata Signatures

ET COMPROMISED Known Compromised or Hostile Host Traffic group 18

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-19T03:22:56.419696+0100	2500034	2	Misc Attack	83.222.191.90	13566	192.168.2.23	42710	TCP

Joe Sandbox Signatures

• AV Detection
• Networking
• System Summary
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: loki.arm7.elf

Virustotal: Detection: 24%

Perma Link

Source: global traffic	TCP traffic: 192.168.2.23:49700 -> 83.222.125.153:13566
Source: global traffic	TCP traffic: 192.168.2.23:59612 -> 83.222.26.84:13566
Source: global traffic	TCP traffic: 192.168.2.23:49474 -> 83.222.105.119:13566
Source: global traffic	TCP traffic: 192.168.2.23:53484 -> 83.222.252.143:13566
Source: global traffic	TCP traffic: 192.168.2.23:47970 -> 83.222.180.22:13566
Source: global traffic	TCP traffic: 192.168.2.23:34446 -> 83.222.39.173:13566
Source: global traffic	TCP traffic: 192.168.2.23:51486 -> 83.222.71.84:13566
Source: global traffic	TCP traffic: 192.168.2.23:51514 -> 83.222.206.115:13566
Source: global traffic	TCP traffic: 192.168.2.23:33770 -> 83.222.224.146:13566
Source: global traffic	TCP traffic: 192.168.2.23:59874 -> 83.222.1.253:13566
Source: global traffic	TCP traffic: 192.168.2.23:38860 -> 83.222.244.193:13566
Source: global traffic	TCP traffic: 192.168.2.23:35396 -> 83.222.241.251:13566
Source: global traffic	TCP traffic: 192.168.2.23:45238 -> 83.222.144.77:13566
Source: global traffic	TCP traffic: 192.168.2.23:46102 -> 83.222.142.112:13566
Source: global traffic	TCP traffic: 192.168.2.23:43432 -> 83.222.38.100:13566
Source: global traffic	TCP traffic: 192.168.2.23:33624 -> 83.222.4.163:13566
Source: global traffic	TCP traffic: 192.168.2.23:43028 -> 83.222.254.30:13566
Source: global traffic	TCP traffic: 192.168.2.23:41838 -> 83.222.247.103:13566
Source: global traffic	TCP traffic: 192.168.2.23:46904 -> 83.222.149.243:13566
Source: global traffic	TCP traffic: 192.168.2.23:37244 -> 83.222.246.74:13566
Source: global traffic	TCP traffic: 192.168.2.23:52470 -> 83.222.9.29:13566
Source: global traffic	TCP traffic: 192.168.2.23:49330 -> 83.222.247.80:13566
Source: global traffic	TCP traffic: 192.168.2.23:50934 -> 83.222.113.198:13566
Source: global traffic	TCP traffic: 192.168.2.23:44604 -> 83.222.196.82:13566
Source: global traffic	TCP traffic: 192.168.2.23:60506 -> 83.222.88.197:13566
Source: global traffic	TCP traffic: 192.168.2.23:40548 -> 83.222.79.77:13566
Source: global traffic	TCP traffic: 192.168.2.23:41166 -> 83.222.135.64:13566
Source: global traffic	TCP traffic: 192.168.2.23:58960 -> 83.222.72.23:13566
Source: global traffic	TCP traffic: 192.168.2.23:56552 -> 83.222.142.214:13566
Source: global traffic	TCP traffic: 192.168.2.23:37940 -> 83.222.135.180:13566
Source: global traffic	TCP traffic: 192.168.2.23:36484 -> 83.222.59.139:13566
Source: global traffic	TCP traffic: 192.168.2.23:50610 -> 83.222.87.57:13566
Source: global traffic	TCP traffic: 192.168.2.23:58510 -> 83.222.170.78:13566
Source: global traffic	TCP traffic: 192.168.2.23:54392 -> 83.222.160.63:13566
Source: global traffic	TCP traffic: 192.168.2.23:60216 -> 83.222.66.150:13566
Source: global traffic	TCP traffic: 192.168.2.23:50124 -> 83.222.137.75:13566
Source: global traffic	TCP traffic: 192.168.2.23:60306 -> 83.222.179.129:13566
Source: global traffic	TCP traffic: 192.168.2.23:43498 -> 83.222.156.37:13566
Source: global traffic	TCP traffic: 192.168.2.23:49956 -> 83.222.71.96:13566
Source: global traffic	TCP traffic: 192.168.2.23:47956 -> 83.222.119.159:13566
Source: global traffic	TCP traffic: 192.168.2.23:56728 -> 83.222.37.198:13566
Source: global traffic	TCP traffic: 192.168.2.23:40850 -> 83.222.236.172:13566
Source: global traffic	TCP traffic: 192.168.2.23:40426 -> 83.222.6.53:13566
Source: global traffic	TCP traffic: 192.168.2.23:40236 -> 83.222.196.148:13566
Source: global traffic	TCP traffic: 192.168.2.23:59486 -> 83.222.11.75:13566
Source: global traffic	TCP traffic: 192.168.2.23:37708 -> 83.222.72.70:13566
Source: global traffic	TCP traffic: 192.168.2.23:39868 -> 83.222.215.159:13566
Source: global traffic	TCP traffic: 192.168.2.23:48606 -> 83.222.127.129:13566
Source: global traffic	TCP traffic: 192.168.2.23:37114 -> 83.222.238.31:13566
Source: global traffic	TCP traffic: 192.168.2.23:36836 -> 83.222.192.48:13566
Source: global traffic	TCP traffic: 192.168.2.23:53700 -> 83.222.181.74:13566
Source: global traffic	TCP traffic: 192.168.2.23:52138 -> 83.222.123.105:13566
Source: global traffic	TCP traffic: 192.168.2.23:38732 -> 83.222.203.23:13566
Source: global traffic	TCP traffic: 192.168.2.23:37906 -> 83.222.142.18:13566
Source: global traffic	TCP traffic: 192.168.2.23:48206 -> 83.222.119.5:13566
Source: global traffic	TCP traffic: 192.168.2.23:60804 -> 83.222.177.157:13566
Source: global traffic	TCP traffic: 192.168.2.23:54328 -> 83.222.203.158:13566
Source: global traffic	TCP traffic: 192.168.2.23:56134 -> 83.222.73.209:13566
Source: global traffic	TCP traffic: 192.168.2.23:46300 -> 83.222.211.13:13566
Source: global traffic	TCP traffic: 192.168.2.23:42326 -> 83.222.102.222:13566
Source: global traffic	TCP traffic: 192.168.2.23:49628 -> 83.222.89.174:13566
Source: global traffic	TCP traffic: 192.168.2.23:47470 -> 83.222.37.48:13566
Source: global traffic	TCP traffic: 192.168.2.23:33512 -> 83.222.78.164:13566
Source: global traffic	TCP traffic: 192.168.2.23:60562 -> 83.222.177.60:13566
Source: global traffic	TCP traffic: 192.168.2.23:34896 -> 83.222.196.113:13566
Source: global traffic	TCP traffic: 192.168.2.23:55978 -> 83.222.108.121:13566
Source: global traffic	TCP traffic: 192.168.2.23:52096 -> 83.222.187.231:13566
Source: global traffic	TCP traffic: 192.168.2.23:46990 -> 83.222.226.134:13566
Source: global traffic	TCP traffic: 192.168.2.23:60248 -> 83.222.255.112:13566
Source: global traffic	TCP traffic: 192.168.2.23:37584 -> 83.222.152.118:13566
Source: global traffic	TCP traffic: 192.168.2.23:55952 -> 83.222.117.74:13566
Source: global traffic	TCP traffic: 192.168.2.23:57792 -> 83.222.19.64:13566
Source: global traffic	TCP traffic: 192.168.2.23:33398 -> 83.222.232.93:13566
Source: global traffic	TCP traffic: 192.168.2.23:33974 -> 83.222.18.187:13566
Source: global traffic	TCP traffic: 192.168.2.23:54186 -> 83.222.106.120:13566
Source: global traffic	TCP traffic: 192.168.2.23:59018 -> 83.222.153.195:13566
Source: global traffic	TCP traffic: 192.168.2.23:57924 -> 83.222.38.190:13566
Source: global traffic	TCP traffic: 192.168.2.23:58366 -> 83.222.243.116:13566
Source: global traffic	TCP traffic: 192.168.2.23:36970 -> 83.222.99.164:13566
Source: global traffic	TCP traffic: 192.168.2.23:42580 -> 83.222.176.39:13566
Source: global traffic	TCP traffic: 192.168.2.23:45358 -> 83.222.22.28:13566
Source: global traffic	TCP traffic: 192.168.2.23:48726 -> 83.222.160.209:13566
Source: global traffic	TCP traffic: 192.168.2.23:42710 -> 83.222.191.90:13566

Source: /tmp/loki.arm7.elf (PID: 6241)

Socket: 127.0.0.1:14435

Jump to behavior

Source: Network traffic

Suricata IDS: 2500034 - Severity 2 - ET COMPROMISED Known Compromised or Hostile Host Traffic group 18 : 83.222.191.90:13566 -> 192.168.2.23:42710

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.125.153
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.125.153
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.26.84
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.26.84
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.26.84
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.26.84
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.105.119
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.105.119
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.252.143
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.180.22
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.39.173
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.252.143
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.180.22
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.39.173
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.39.173
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.39.173
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.71.84
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.206.115
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.224.146
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.71.84
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.206.115
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.224.146
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.224.146
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.1.253
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.244.193
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.241.251
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.224.146
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.1.253
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.144.77
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.244.193
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.142.112
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.241.251
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.38.100
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.144.77
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.4.163
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.142.112
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.254.30
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.38.100
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.247.103
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.4.163
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.149.243
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.254.30
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.246.74
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.247.103
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.149.243
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.9.29
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.246.74
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.247.80
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.113.198
Source: unknown	TCP traffic detected without corresponding DNS query: 83.222.9.29

Source: global traffic

DNS traffic detected: DNS query: secure-network-rebirthltd.ru

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_gre.c
Source: ELF static info symbol of initial sample	Name: attack_gre_eth
Source: ELF static info symbol of initial sample	Name: attack_gre_ip
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_kill_all
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse

Source: loki.arm7.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: classification engine

Classification label: mal60.troj.linELF@0/0@1/0

Source: /tmp/loki.arm7.elf (PID: 6241)

Queries kernel information via 'uname':

Jump to behavior

Source: loki.arm7.elf, 6241.1.00005616cd977000.00005616cdacd000.rw-.sdmp, loki.arm7.elf, 6243.1.00005616cd977000.00005616cdaa5000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: loki.arm7.elf, 6241.1.00005616cd977000.00005616cdacd000.rw-.sdmp, loki.arm7.elf, 6243.1.00005616cd977000.00005616cdaa5000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: loki.arm7.elf, 6241.1.00007fffaa4d8000.00007fffaa4f9000.rw-.sdmp, loki.arm7.elf, 6243.1.00007fffaa4d8000.00007fffaa4f9000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: loki.arm7.elf, 6241.1.00007fffaa4d8000.00007fffaa4f9000.rw-.sdmp, loki.arm7.elf, 6243.1.00007fffaa4d8000.00007fffaa4f9000.rw-.sdmp	Binary or memory string: `_'x86_64/usr/bin/qemu-arm/tmp/loki.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/loki.arm7.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match

File source: loki.arm7.elf, type: SAMPLE

Remote Access Functionality

Yara detected Mirai

Source: Yara match

File source: loki.arm7.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
loki.arm7.elf	24%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
secure-network-rebirthltd.ru	83.222.191.90	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
83.222.196.113	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.99.164	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.59.139	unknown	Luxembourg	8632	LOL-ASluLU	false
83.222.18.187	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.71.96	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.144.77	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.11.75	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.238.31	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.73.209	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.232.93	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.37.198	unknown	Luxembourg	8632	LOL-ASluLU	false
83.222.72.23	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.243.116	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.142.18	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.72.70	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.224.146	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.119.159	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.4.163	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.88.197	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false
83.222.142.112	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.106.120	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.125.153	unknown	Russian Federation	47328	TRI-ASTrueRecordsIncES	false
83.222.135.180	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.196.82	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.38.190	unknown	Luxembourg	8632	LOL-ASluLU	false
83.222.203.23	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.179.129	unknown	Bulgaria	12615	GCN-ASGCNAD-SofiaBulgariaBG	false
83.222.149.243	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.19.64	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.135.64	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.113.198	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.79.77	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.177.60	unknown	Bulgaria	12615	GCN-ASGCNAD-SofiaBulgariaBG	false
83.222.102.222	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.170.78	unknown	Bulgaria	49040	KIG-UNISAT-TVBG	false
83.222.192.48	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.187.231	unknown	Bulgaria	43561	NET1-ASBG	false
83.222.206.115	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.6.53	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.22.28	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.66.150	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.119.5	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.180.22	unknown	Bulgaria	205872	EXTRANET-ASBG	false
83.222.203.158	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.108.121	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.37.48	unknown	Luxembourg	8632	LOL-ASluLU	false
83.222.78.164	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.89.174	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.160.63	unknown	Bulgaria	49040	KIG-UNISAT-TVBG	false
83.222.181.74	unknown	Bulgaria	12615	GCN-ASGCNAD-SofiaBulgariaBG	false
83.222.255.112	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.1.253	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.38.100	unknown	Luxembourg	8632	LOL-ASluLU	false
83.222.226.134	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.160.209	unknown	Bulgaria	49040	KIG-UNISAT-TVBG	false
83.222.87.57	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.156.37	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.246.74	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.137.75	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.247.80	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.211.13	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.39.173	unknown	Luxembourg	8632	LOL-ASluLU	false
83.222.176.39	unknown	Bulgaria	12615	GCN-ASGCNAD-SofiaBulgariaBG	false
83.222.254.30	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.142.214	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.196.148	unknown	Russian Federation	6854	SYNTERRA-ASRU	false
83.222.123.105	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.244.193	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.191.90	secure-network-rebirthltd.ru	Bulgaria	43561	NET1-ASBG	false
83.222.105.119	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
83.222.71.84	unknown	Russian Federation	16285	ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	false
83.222.236.172	unknown	United Kingdom	13768	COGECO-PEER1CA	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
83.222.177.157	unknown	Bulgaria	12615	GCN-ASGCNAD-SofiaBulgariaBG	false
83.222.127.129	unknown	Russian Federation	47328	TRI-ASTrueRecordsIncES	false
83.222.152.118	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.26.84	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.9.29	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
83.222.215.159	unknown	Russian Federation	25159	SONICDUO-ASRU	false
83.222.153.195	unknown	Switzerland	31736	SENSELAN-ASsenseLANGmbHCH	false
83.222.241.251	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.252.143	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.247.103	unknown	United Kingdom	13768	COGECO-PEER1CA	false
83.222.117.74	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
83.222.142.18	Kloki.arm7.elf	Get hash	malicious	Mirai	Browse
91.189.91.43	na.elf	Get hash	malicious	Prometei	Browse
	loki.arc.elf	Get hash	malicious	Unknown	Browse
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse
	Kloki.arm7.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse
	arm.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm6.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
91.189.91.42	na.elf	Get hash	malicious	Prometei	Browse
	loki.arc.elf	Get hash	malicious	Unknown	Browse
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse
	Kloki.arm7.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse
	arm.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm6.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
secure-network-rebirthltd.ru	Kloki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	Kloki.ppc.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	loki.mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	loki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	loki.sh4.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	loki.m68k.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	loki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	Kloki.x86.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse	83.222.191.90
	Kloki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.191.90

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SYNTERRA-ASRU	Kloki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.194.13
	Kloki.ppc.elf	Get hash	malicious	Unknown	Browse	83.222.195.110
	loki.mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.206.80
	loki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.211.104
	loki.sh4.elf	Get hash	malicious	Unknown	Browse	83.222.195.237
	loki.m68k.elf	Get hash	malicious	Unknown	Browse	83.222.211.69
	loki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.196.65
	Kloki.x86.elf	Get hash	malicious	Unknown	Browse	83.222.207.214
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse	83.222.200.226
	Kloki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.205.255
MNOGOBYTE-ASMoscowRussiaRU	Kloki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.109.209
	Kloki.ppc.elf	Get hash	malicious	Unknown	Browse	83.222.102.176
	loki.mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.115.205
	loki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.114.114
	loki.sh4.elf	Get hash	malicious	Unknown	Browse	83.222.101.124
	loki.m68k.elf	Get hash	malicious	Unknown	Browse	83.222.98.5
	loki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.118.190
	Kloki.x86.elf	Get hash	malicious	Unknown	Browse	83.222.115.165
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse	83.222.105.229
	Kloki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.112.215
MASTERHOST-ASMoscowRussiaRU	Kloki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.15.96
	Kloki.ppc.elf	Get hash	malicious	Unknown	Browse	83.222.17.204
	loki.mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.5.145
	loki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.19.56
	loki.sh4.elf	Get hash	malicious	Unknown	Browse	83.222.12.139
	loki.m68k.elf	Get hash	malicious	Unknown	Browse	83.222.14.120
	loki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.3.110
	Kloki.x86.elf	Get hash	malicious	Unknown	Browse	83.222.21.69
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse	83.222.31.12
	Kloki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.18.54
ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRU	Kloki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.93.147
	Kloki.ppc.elf	Get hash	malicious	Unknown	Browse	83.222.66.145
	loki.mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.94.118
	loki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.95.129
	loki.sh4.elf	Get hash	malicious	Unknown	Browse	83.222.70.140
	loki.m68k.elf	Get hash	malicious	Unknown	Browse	83.222.71.222
	loki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.93.121
	Kloki.x86.elf	Get hash	malicious	Unknown	Browse	83.222.82.115
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse	83.222.77.162
	Kloki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.84.27
LOL-ASluLU	Kloki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.39.107
	Kloki.ppc.elf	Get hash	malicious	Unknown	Browse	83.222.59.20
	loki.mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.55.216
	loki.i486.elf	Get hash	malicious	Unknown	Browse	83.222.48.106
	loki.sh4.elf	Get hash	malicious	Unknown	Browse	83.222.55.60
	loki.m68k.elf	Get hash	malicious	Unknown	Browse	83.222.36.39
	loki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.53.146
	Kloki.x86.elf	Get hash	malicious	Unknown	Browse	83.222.34.13
	Kloki.arm5.elf	Get hash	malicious	Unknown	Browse	83.222.43.208
	Kloki.spc.elf	Get hash	malicious	Unknown	Browse	83.222.55.219

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.924160157558145
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	loki.arm7.elf
File size:	124'040 bytes
MD5:	490bc8bf3f15d6f599b8359d4080a426
SHA1:	8f3ffd5a2e811b8f8d09fb016d9375aa8fa9b2ab
SHA256:	f6281d7a4d7a3a7c01c2ee67434940e6628aa4155e56783ebca6ba9988ae69d6
SHA512:	1bc4afe797dad4240c38c758767a812ff810fd17e5b4fa5c665837eff2853120adbc2f0d6fcba0c2da68517d4bd7fd760be3a642dfdd88bf096d84930bdf5779
SSDEEP:	3072:YpSRKiYI1Li/5isNjHwwloT9bnqeoM/98Z6W:YpSEiYI1L25isNjHBlwbnqhM/9Q1
TLSH:	56C32B46EB408E13C4D51776BAEF42453323AB5493EB730699186FB43F86BAF0E63506
File Content Preview:	.ELF..............(.........4....v......4. ...(........p............................................(...(...............(...(...(........A..............,...,...,...................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	95952
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x10dec	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x18edc	0x10edc	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x18eec	0x10eec	0x60c	0x0	0x2	A	0	0	4
.ARM.extab	PROGBITS	0x194f8	0x114f8	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x19510	0x11510	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x21628	0x11628	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2162c	0x1162c	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2162c	0x1162c	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x21630	0x11630	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x21634	0x11634	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x21638	0x11638	0xa8	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x216e0	0x116e0	0x228	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x21908	0x11908	0x3ef8	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x11908	0x9dc	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x122e8	0xc0	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x123a8	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x125bb	0x1d23	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x142de	0x692	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x14970	0x9c7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x15338	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x155f0	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x15eba	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x17049	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x175a1	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x175b7	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x17b58	0x46a0	0x10	0x0		28	655	4
.strtab	STRTAB	0x0	0x1c1f8	0x2290	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x11510	0x19510	0x19510	0x118	0x118	4.3710	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x11628	0x11628	6.0170	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x11628	0x21628	0x21628	0x2e0	0x41d8	4.0893	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x1162c	0x2162c	0x2162c	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x18edc	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x18eec	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x194f8	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x19510	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x21628	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2162c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2162c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x21630	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x21634	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x21638	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x216e0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x21908	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x18edc	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x18ee8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x86ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x871c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8af8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x918c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x97a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9a48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa1fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa8f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xafa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb2fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbb80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbdac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc04c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc964	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc9e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd3f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd48c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd57c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd5cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdedc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdfe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeb38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf79c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf80c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf854	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfad0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfc0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfdcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10024	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10068	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10274	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10484	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10548	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1078c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x107b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x107f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10800	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x108a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10de8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ffc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1104c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11060	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12040	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12660	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x127bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1287c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13090	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ddc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13efc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14048	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1467c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x146f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14724	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1498c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14aa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14bac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ef0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15294	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ac4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15eb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16168	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x166e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ba0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16efc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ff4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1706c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x170d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17334	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1736c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1741c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17778	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1779c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x177dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1784c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17de8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ed0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1863c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18644	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1864c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18708	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1874c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ea8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21630	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2162c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8420	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8ac0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x97a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa1f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa8f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaf9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbb60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18f08	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x18f2c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xc534	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc95c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd3e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd550	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x216e0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x21700	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xdd1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x190e3	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xe134	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe25c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe9bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2170c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x21710	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x21714	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xeac0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeb28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeb94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xec24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xed58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf788	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xfdc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfeb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xffdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10064	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x100a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x100dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10120	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x101a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x101e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10270	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10398	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1047c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1053c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19128	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x106cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10778	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x107b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x107e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ad8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10bd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ca0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10d10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10d5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ee0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10fb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ff4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11048	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21718	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x11c64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12518	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12634	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21730	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x126e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x127a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12860	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12904	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21748	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x217e0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x129ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19140	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12e70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x217f4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1306c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13688	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13a58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13c44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13d70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13d80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13e10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13ea0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1411c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x141d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14230	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14284	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14630	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2180c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x146f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14720	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x147a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1481c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14880	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x148e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14988	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ae4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ba8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14edc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1528c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x155b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ab4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21824	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x21820	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1614c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16638	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16c88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ef8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16fec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x170c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17300	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17360	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17410	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x176a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17774	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17848	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x17c7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18624	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x21818	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x191c8	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x191b0	12	OBJECT	<unknown>	DEFAULT	4
C.14.4255	.symtab	0x18f2c	44	OBJECT	<unknown>	DEFAULT	4
C.15.4256	.symtab	0x18f08	36	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x19128	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x191bc	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x194ec	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x194c8	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x194e0	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x194d4	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x25438	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x108c8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x108e4	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x14820	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x21638	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x17a30	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x17a34	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x186e4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x17a28	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x17a6c	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x18708	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x18ea8	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x17a60	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x18678	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1869c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x186c0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x17990	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x17fa8	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x179dc	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x21818	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x191c8	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x21628	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x21628	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x21818	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x13da0	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x13d84	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2181c	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x10794	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0xfd34	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x16514	300	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x13da0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xfdcc	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x13e30	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x13f50	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x13ec0	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x13e30	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x13e14	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x13f50	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x13f34	24	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x11148	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x1116c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x11124	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x14168	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x14238	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x13ec0	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x13ea4	24	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x14820	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x12520	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x10a28	116	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x12c6c	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x10a9c	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x173c4	88	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xfec0	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x13da0	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x102a4	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x15218	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1524c	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x14ef0	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x10b24	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x12e80	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x15294	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xfdcc	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x16168	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x15c58	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x16514	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x15d9c	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x16640	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x155c4	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x136b4	972	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x14888	100	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x16514	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1498c	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x149b8	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x149cc	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x149e0	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x149f4	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x13b18	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x14a1c	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x10b98	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x14a54	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x14a94	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x109bc	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x16efc	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x12a88	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xff0c	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x16e5c	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xffec	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x10c24	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x14aa8	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x177dc	112	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x107f0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x16b70	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x17778	36	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x10800	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1467c	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x14ae8	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x14b2c	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x14bac	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x13e30	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x10484	196	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x13b60	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x12660	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x12920	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x13f50	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x105f8	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x14e04	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x10068	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x10ca8	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x10d60	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x14c0c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x10124	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x10e2c	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x10ee8	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x101a8	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x10f70	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x12b80	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x14724	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x10ffc	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x1104c	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x11060	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x101e8	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x13c50	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x10fb8	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x129b0	216	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x16ba0	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x16c90	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x16b80	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x16b80	28	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x16d7c	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x108a0	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x10900	188	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x16dc0	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x16e10	76	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x12c8c	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x13090	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x16e80	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x10274	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x14c78	20	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x13ec0	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x21634	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x21634	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x186e4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x18678	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1869c	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x186c0	36	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1784c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x17978	24	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x147d0	8	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xfc0c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0xfd08	24	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x18644	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1863c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x18634	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x22ec8	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x217f4	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x25800	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x21908	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x21908	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x141e4	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x13da0	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x13d84	24	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x2181c	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2542c	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x216e0	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x147c4	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x147b8	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xfd20	20	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1784c	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x21630	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x25800	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x22ec0	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x10794	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x19628	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x19510	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x22970	4	OBJECT	<unknown>	HIDDEN	14
__fcntl_nocancel	.symtab	0xfd34	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x16514	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x21634	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x21630	0	NOTYPE	<unknown>	HIDDEN	10
__fork	.symtab	0x136b4	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x257cc	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x257d0	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x22974	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x2162c	0	OBJECT	<unknown>	DEFAULT	9
__getdents	.symtab	0x148ec	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x17428	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x149f4	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x13b18	72	FUNC	<unknown>	DEFAULT	2
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x17de8	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x17ed0	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x18668	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x17e64	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x17f88	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x18670	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1874c	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x18e60	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x180ec	1352	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x21630	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x2162c	0	NOTYPE	<unknown>	HIDDEN	9
__libc_accept	.symtab	0x10a28	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x13da0	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x10b24	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x13fc0	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x14048	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0xfdcc	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x136b4	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x257d4	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x14bac	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x13e30	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x13f50	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x10ca8	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x10d60	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x10124	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x10e2c	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x10ee8	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x170f8	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x14724	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x22ebc	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x13ec0	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x13a80	152	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x120f0	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x11190	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x21718	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x25454	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x12040	176	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x13e30	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x13e14	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x22ec4	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x2162c	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x2162c	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x21810	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x21814	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x17328	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1412c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x14124	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x14124	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x14124	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x14124	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x13f50	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x13f34	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1864c	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x22ecc	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x11148	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x1116c	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x11124	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1779c	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1741c	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x21830	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x17570	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x175c8	220	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x176a4	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x176d4	164	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x15c28	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x21834	4	OBJECT	<unknown>	DEFAULT	13
__sys_accept	.symtab	0x109e4	68	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x10ae0	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x10c64	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x10d18	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x10de8	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x10e9c	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x146f8	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x14b6c	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x147e0	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x100e0	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x170d4	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x14168	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x14238	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x14290	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2180c	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0xfc0c	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x13ec0	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x13ea4	24	FUNC	<unknown>	DEFAULT	2
__xstat32_conv	.symtab	0x14d58	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x14c8c	204	FUNC	<unknown>	HIDDEN	2
_bss_end__	.symtab	0x25800	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x17334	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1736c	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x257f8	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x257fc	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x257ec	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x257e8	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x257f0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x257e0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1706c	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x257dc	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x257f4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x257e4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x257d8	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x21908	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x25800	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x14820	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x18edc	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x22ef0	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_memcpy	.symtab	0x166e0	0	FUNC	<unknown>	HIDDEN	2
_pthread_cleanup_pop_restore	.symtab	0x1413c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x14134	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x147ac	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x2544c	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x8194	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x155e4	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x15a44	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x21838	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x22ed0	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x15eb8	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x22eec	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x22edc	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x22ee8	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x2183c	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x15ac4	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x21820	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0x12ca8	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x12520	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x10a28	116	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x12c6c	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x12c6c	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x86ac	112	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x8640	108	FUNC	<unknown>	DEFAULT	2
attack_gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_gre_eth	.symtab	0x8af8	1684	FUNC	<unknown>	DEFAULT	2
attack_gre_ip	.symtab	0x918c	1564	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x871c	988	FUNC	<unknown>	DEFAULT	2
attack_kill_all	.symtab	0x82cc	344	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x2192c	32	OBJECT	<unknown>	DEFAULT	14
attack_parse	.symtab	0x8424	540	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x81d0	252	FUNC	<unknown>	DEFAULT	2
attack_std	.symtab	0x97a8	672	FUNC	<unknown>	DEFAULT	2
attack_std.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0xa1fc	1784	FUNC	<unknown>	DEFAULT	2
attack_tcp_bypass	.symtab	0xafa0	860	FUNC	<unknown>	DEFAULT	2
attack_tcp_stomp	.symtab	0x9a48	1972	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0xa8f4	1708	FUNC	<unknown>	DEFAULT	2
attack_tcp_wra	.symtab	0xb2fc	2180	FUNC	<unknown>	DEFAULT	2
attack_udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_udp_bypass	.symtab	0xbb80	556	FUNC	<unknown>	DEFAULT	2
attack_udp_generic	.symtab	0xc04c	1260	FUNC	<unknown>	DEFAULT	2
attack_udp_plain	.symtab	0xbdac	672	FUNC	<unknown>	DEFAULT	2
attack_udp_vse	.symtab	0xc538	1068	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2296c	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x10a9c	68	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x173c4	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x11060	196	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x11b40	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chacha20.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chacha20_quarterround	.symtab	0xc964	132	FUNC	<unknown>	DEFAULT	2
chacha20_table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chacha20_xor	.symtab	0xc9e8	2572	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xfec0	56	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0xd57c	80	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0xd5cc	164	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x107b4	52	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x13da0	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x102a4	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5105	.symtab	0x21908	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x10b24	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
enc	.symtab	0x2194c	4	OBJECT	<unknown>	DEFAULT	14
ensure_single_instance	.symtab	0xdfe0	352	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x22ec0	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x12e80	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fclose	.symtab	0x15294	816	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xfdcc	244	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x2170c	4	OBJECT	<unknown>	DEFAULT	13
fd_serv	.symtab	0x21710	4	OBJECT	<unknown>	DEFAULT	13
fd_to_DIR	.symtab	0x103b4	208	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x10548	176	FUNC	<unknown>	DEFAULT	2
fds	.symtab	0x190e3	2	OBJECT	<unknown>	DEFAULT	4
fflush_unlocked	.symtab	0x16168	940	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x15c58	324	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x16514	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x15d9c	284	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x16640	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x155c4	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x136b4	972	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x22978	1348	OBJECT	<unknown>	DEFAULT	14
frame_dummy	.symtab	0x8134	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x122a4	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x14888	100	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_eit_entry	.symtab	0x17a78	544	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x15c58	324	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x16514	300	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1498c	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x149b8	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x149cc	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x149e0	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x149f4	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x13b18	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0xfef8	20	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x14a1c	56	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x10b98	68	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x10bdc	72	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0x14a54	64	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x14a94	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	8
index	.symtab	0x16ba0	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x109bc	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x16efc	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x16ff4	120	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x127bc	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x12a88	248	FUNC	<unknown>	DEFAULT	2
inode_index	.symtab	0x25434	4	OBJECT	<unknown>	DEFAULT	14
inode_list	.symtab	0x21950	4	OBJECT	<unknown>	DEFAULT	14
ioctl	.symtab	0xff0c	224	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x16e5c	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
key	.symtab	0x216e0	32	OBJECT	<unknown>	DEFAULT	13
kill	.symtab	0xffec	56	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0xd670	1772	FUNC	<unknown>	DEFAULT	2
killer_kill_by_port	.symtab	0xf298	1284	FUNC	<unknown>	DEFAULT	2
kutil.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kutil_memsearch	.symtab	0xde5c	128	FUNC	<unknown>	DEFAULT	2
kutil_read	.symtab	0xdf04	100	FUNC	<unknown>	DEFAULT	2
kutil_strcat	.symtab	0xdd84	64	FUNC	<unknown>	DEFAULT	2
kutil_strcmp	.symtab	0xddc4	76	FUNC	<unknown>	DEFAULT	2
kutil_strcpy	.symtab	0xdd5c	40	FUNC	<unknown>	DEFAULT	2
kutil_strdup	.symtab	0xdf68	120	FUNC	<unknown>	DEFAULT	2
kutil_strlen	.symtab	0xdedc	40	FUNC	<unknown>	DEFAULT	2
kutil_strncmp	.symtab	0xde10	76	FUNC	<unknown>	DEFAULT	2
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc_multiple_threads.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x10c24	64	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
local_bind.5812	.symtab	0x21714	1	OBJECT	<unknown>	DEFAULT	13
locker.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek	.symtab	0x14aa8	64	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x177dc	112	FUNC	<unknown>	DEFAULT	2
main	.symtab	0xe260	1940	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x11208	2360	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x124e0	64	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x107f0	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x16b70	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x17778	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x10800	156	FUNC	<unknown>	DEFAULT	2
methods	.symtab	0x21928	4	OBJECT	<unknown>	DEFAULT	14
methods_len	.symtab	0x21924	1	OBJECT	<unknown>	DEFAULT	14
mmap	.symtab	0x1467c	124	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x14ae8	68	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x14b2c	64	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x21730	24	OBJECT	<unknown>	DEFAULT	13
mylock	.symtab	0x21748	24	OBJECT	<unknown>	DEFAULT	13
nanosleep	.symtab	0x14bac	96	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nonce	.symtab	0x21700	12	OBJECT	<unknown>	DEFAULT	13
nprocessors_onln	.symtab	0x12f44	332	FUNC	<unknown>	DEFAULT	2
object.5113	.symtab	0x2190c	24	OBJECT	<unknown>	DEFAULT	14
obs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
open	.symtab	0x13e30	100	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x10484	196	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pending_connection	.symtab	0x22958	1	OBJECT	<unknown>	DEFAULT	14
ping	.symtab	0xe140	288	FUNC	<unknown>	DEFAULT	2
pr-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x10024	68	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x21814	4	OBJECT	<unknown>	DEFAULT	13
program_invocation_short_name	.symtab	0x21810	4	OBJECT	<unknown>	DEFAULT	13
raise	.symtab	0x13b60	240	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x12648	24	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_init	.symtab	0xeb38	108	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0xeac8	112	FUNC	<unknown>	DEFAULT	2
rand_next_range	.symtab	0xeba4	144	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0xec34	308	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x12660	164	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x19140	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x12920	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x21760	128	OBJECT	<unknown>	DEFAULT	13
read	.symtab	0x13f50	100	FUNC	<unknown>	DEFAULT	2
readdir	.symtab	0x105f8	232	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x14e04	236	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x10068	64	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
real_init	.symtab	0xe9f4	212	FUNC	<unknown>	DEFAULT	2
realloc	.symtab	0x11c80	960	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realpath_index	.symtab	0x25430	4	OBJECT	<unknown>	DEFAULT	14

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-19T03:22:56.419696+0100	2500034	ET COMPROMISED Known Compromised or Hostile Host Traffic group 18	2	83.222.191.90	13566	192.168.2.23	42710	TCP

Network Port Distribution

Total Packets: 195
• 13566 undefined
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 19, 2025 03:22:56.156085968 CET	49700	13566	192.168.2.23	83.222.125.153
Jan 19, 2025 03:22:56.161279917 CET	13566	49700	83.222.125.153	192.168.2.23
Jan 19, 2025 03:22:56.161487103 CET	49700	13566	192.168.2.23	83.222.125.153
Jan 19, 2025 03:22:56.177819014 CET	59612	13566	192.168.2.23	83.222.26.84
Jan 19, 2025 03:22:56.183135986 CET	13566	59612	83.222.26.84	192.168.2.23
Jan 19, 2025 03:22:56.183233023 CET	59612	13566	192.168.2.23	83.222.26.84
Jan 19, 2025 03:22:56.192944050 CET	59612	13566	192.168.2.23	83.222.26.84
Jan 19, 2025 03:22:56.198043108 CET	13566	59612	83.222.26.84	192.168.2.23
Jan 19, 2025 03:22:56.198122978 CET	59612	13566	192.168.2.23	83.222.26.84
Jan 19, 2025 03:22:56.207207918 CET	49474	13566	192.168.2.23	83.222.105.119
Jan 19, 2025 03:22:56.212398052 CET	13566	49474	83.222.105.119	192.168.2.23
Jan 19, 2025 03:22:56.212460995 CET	49474	13566	192.168.2.23	83.222.105.119
Jan 19, 2025 03:22:56.215064049 CET	53484	13566	192.168.2.23	83.222.252.143
Jan 19, 2025 03:22:56.217313051 CET	47970	13566	192.168.2.23	83.222.180.22
Jan 19, 2025 03:22:56.218625069 CET	34446	13566	192.168.2.23	83.222.39.173
Jan 19, 2025 03:22:56.220158100 CET	13566	53484	83.222.252.143	192.168.2.23
Jan 19, 2025 03:22:56.220211029 CET	53484	13566	192.168.2.23	83.222.252.143
Jan 19, 2025 03:22:56.222187042 CET	13566	47970	83.222.180.22	192.168.2.23
Jan 19, 2025 03:22:56.222271919 CET	47970	13566	192.168.2.23	83.222.180.22
Jan 19, 2025 03:22:56.223469019 CET	13566	34446	83.222.39.173	192.168.2.23
Jan 19, 2025 03:22:56.223521948 CET	34446	13566	192.168.2.23	83.222.39.173
Jan 19, 2025 03:22:56.225256920 CET	34446	13566	192.168.2.23	83.222.39.173
Jan 19, 2025 03:22:56.230247974 CET	13566	34446	83.222.39.173	192.168.2.23
Jan 19, 2025 03:22:56.230299950 CET	34446	13566	192.168.2.23	83.222.39.173
Jan 19, 2025 03:22:56.231760979 CET	51486	13566	192.168.2.23	83.222.71.84
Jan 19, 2025 03:22:56.234425068 CET	51514	13566	192.168.2.23	83.222.206.115
Jan 19, 2025 03:22:56.235815048 CET	33770	13566	192.168.2.23	83.222.224.146
Jan 19, 2025 03:22:56.236608028 CET	13566	51486	83.222.71.84	192.168.2.23
Jan 19, 2025 03:22:56.236649990 CET	51486	13566	192.168.2.23	83.222.71.84
Jan 19, 2025 03:22:56.239474058 CET	13566	51514	83.222.206.115	192.168.2.23
Jan 19, 2025 03:22:56.239655972 CET	51514	13566	192.168.2.23	83.222.206.115
Jan 19, 2025 03:22:56.240756989 CET	13566	33770	83.222.224.146	192.168.2.23
Jan 19, 2025 03:22:56.240963936 CET	33770	13566	192.168.2.23	83.222.224.146
Jan 19, 2025 03:22:56.247159004 CET	33770	13566	192.168.2.23	83.222.224.146
Jan 19, 2025 03:22:56.248102903 CET	59874	13566	192.168.2.23	83.222.1.253
Jan 19, 2025 03:22:56.250116110 CET	38860	13566	192.168.2.23	83.222.244.193
Jan 19, 2025 03:22:56.251904011 CET	35396	13566	192.168.2.23	83.222.241.251
Jan 19, 2025 03:22:56.252118111 CET	13566	33770	83.222.224.146	192.168.2.23
Jan 19, 2025 03:22:56.252300024 CET	33770	13566	192.168.2.23	83.222.224.146
Jan 19, 2025 03:22:56.253251076 CET	13566	59874	83.222.1.253	192.168.2.23
Jan 19, 2025 03:22:56.253479958 CET	59874	13566	192.168.2.23	83.222.1.253
Jan 19, 2025 03:22:56.253863096 CET	45238	13566	192.168.2.23	83.222.144.77
Jan 19, 2025 03:22:56.254987955 CET	13566	38860	83.222.244.193	192.168.2.23
Jan 19, 2025 03:22:56.255160093 CET	38860	13566	192.168.2.23	83.222.244.193
Jan 19, 2025 03:22:56.255831957 CET	46102	13566	192.168.2.23	83.222.142.112
Jan 19, 2025 03:22:56.256933928 CET	13566	35396	83.222.241.251	192.168.2.23
Jan 19, 2025 03:22:56.256974936 CET	35396	13566	192.168.2.23	83.222.241.251
Jan 19, 2025 03:22:56.258327961 CET	43432	13566	192.168.2.23	83.222.38.100
Jan 19, 2025 03:22:56.258840084 CET	13566	45238	83.222.144.77	192.168.2.23
Jan 19, 2025 03:22:56.258882046 CET	45238	13566	192.168.2.23	83.222.144.77
Jan 19, 2025 03:22:56.260617018 CET	13566	46102	83.222.142.112	192.168.2.23
Jan 19, 2025 03:22:56.260641098 CET	33624	13566	192.168.2.23	83.222.4.163
Jan 19, 2025 03:22:56.260663986 CET	46102	13566	192.168.2.23	83.222.142.112
Jan 19, 2025 03:22:56.262423038 CET	43028	13566	192.168.2.23	83.222.254.30
Jan 19, 2025 03:22:56.263115883 CET	13566	43432	83.222.38.100	192.168.2.23
Jan 19, 2025 03:22:56.263150930 CET	43432	13566	192.168.2.23	83.222.38.100
Jan 19, 2025 03:22:56.264883995 CET	41838	13566	192.168.2.23	83.222.247.103
Jan 19, 2025 03:22:56.265552998 CET	13566	33624	83.222.4.163	192.168.2.23
Jan 19, 2025 03:22:56.265707016 CET	33624	13566	192.168.2.23	83.222.4.163
Jan 19, 2025 03:22:56.266859055 CET	46904	13566	192.168.2.23	83.222.149.243
Jan 19, 2025 03:22:56.267410040 CET	13566	43028	83.222.254.30	192.168.2.23
Jan 19, 2025 03:22:56.267458916 CET	43028	13566	192.168.2.23	83.222.254.30
Jan 19, 2025 03:22:56.269541025 CET	37244	13566	192.168.2.23	83.222.246.74
Jan 19, 2025 03:22:56.269989967 CET	13566	41838	83.222.247.103	192.168.2.23
Jan 19, 2025 03:22:56.270205021 CET	41838	13566	192.168.2.23	83.222.247.103
Jan 19, 2025 03:22:56.271647930 CET	13566	46904	83.222.149.243	192.168.2.23
Jan 19, 2025 03:22:56.271704912 CET	46904	13566	192.168.2.23	83.222.149.243
Jan 19, 2025 03:22:56.272247076 CET	52470	13566	192.168.2.23	83.222.9.29
Jan 19, 2025 03:22:56.274689913 CET	13566	37244	83.222.246.74	192.168.2.23
Jan 19, 2025 03:22:56.274749041 CET	37244	13566	192.168.2.23	83.222.246.74
Jan 19, 2025 03:22:56.275289059 CET	49330	13566	192.168.2.23	83.222.247.80
Jan 19, 2025 03:22:56.276439905 CET	50934	13566	192.168.2.23	83.222.113.198
Jan 19, 2025 03:22:56.277319908 CET	13566	52470	83.222.9.29	192.168.2.23
Jan 19, 2025 03:22:56.277489901 CET	52470	13566	192.168.2.23	83.222.9.29
Jan 19, 2025 03:22:56.277844906 CET	44604	13566	192.168.2.23	83.222.196.82
Jan 19, 2025 03:22:56.280113935 CET	13566	49330	83.222.247.80	192.168.2.23
Jan 19, 2025 03:22:56.280172110 CET	49330	13566	192.168.2.23	83.222.247.80
Jan 19, 2025 03:22:56.281188965 CET	60506	13566	192.168.2.23	83.222.88.197
Jan 19, 2025 03:22:56.281486988 CET	13566	50934	83.222.113.198	192.168.2.23
Jan 19, 2025 03:22:56.281536102 CET	50934	13566	192.168.2.23	83.222.113.198
Jan 19, 2025 03:22:56.282697916 CET	40548	13566	192.168.2.23	83.222.79.77
Jan 19, 2025 03:22:56.282876968 CET	13566	44604	83.222.196.82	192.168.2.23
Jan 19, 2025 03:22:56.283027887 CET	44604	13566	192.168.2.23	83.222.196.82
Jan 19, 2025 03:22:56.284249067 CET	41166	13566	192.168.2.23	83.222.135.64
Jan 19, 2025 03:22:56.286046982 CET	13566	60506	83.222.88.197	192.168.2.23
Jan 19, 2025 03:22:56.286248922 CET	60506	13566	192.168.2.23	83.222.88.197
Jan 19, 2025 03:22:56.287813902 CET	13566	40548	83.222.79.77	192.168.2.23
Jan 19, 2025 03:22:56.287921906 CET	40548	13566	192.168.2.23	83.222.79.77
Jan 19, 2025 03:22:56.288969994 CET	13566	41166	83.222.135.64	192.168.2.23
Jan 19, 2025 03:22:56.289011002 CET	41166	13566	192.168.2.23	83.222.135.64
Jan 19, 2025 03:22:56.290170908 CET	41166	13566	192.168.2.23	83.222.135.64
Jan 19, 2025 03:22:56.295253992 CET	13566	41166	83.222.135.64	192.168.2.23
Jan 19, 2025 03:22:56.295298100 CET	41166	13566	192.168.2.23	83.222.135.64
Jan 19, 2025 03:22:56.298120022 CET	58960	13566	192.168.2.23	83.222.72.23
Jan 19, 2025 03:22:56.299184084 CET	56552	13566	192.168.2.23	83.222.142.214
Jan 19, 2025 03:22:56.303400040 CET	13566	58960	83.222.72.23	192.168.2.23
Jan 19, 2025 03:22:56.303448915 CET	58960	13566	192.168.2.23	83.222.72.23
Jan 19, 2025 03:22:56.304281950 CET	13566	56552	83.222.142.214	192.168.2.23
Jan 19, 2025 03:22:56.304337978 CET	56552	13566	192.168.2.23	83.222.142.214
Jan 19, 2025 03:22:56.312699080 CET	56552	13566	192.168.2.23	83.222.142.214
Jan 19, 2025 03:22:56.313312054 CET	37940	13566	192.168.2.23	83.222.135.180
Jan 19, 2025 03:22:56.317715883 CET	13566	56552	83.222.142.214	192.168.2.23
Jan 19, 2025 03:22:56.317787886 CET	56552	13566	192.168.2.23	83.222.142.214
Jan 19, 2025 03:22:56.318547010 CET	13566	37940	83.222.135.180	192.168.2.23
Jan 19, 2025 03:22:56.318624973 CET	37940	13566	192.168.2.23	83.222.135.180
Jan 19, 2025 03:22:56.324023008 CET	36484	13566	192.168.2.23	83.222.59.139
Jan 19, 2025 03:22:56.329135895 CET	13566	36484	83.222.59.139	192.168.2.23
Jan 19, 2025 03:22:56.329200983 CET	36484	13566	192.168.2.23	83.222.59.139
Jan 19, 2025 03:22:56.329631090 CET	50610	13566	192.168.2.23	83.222.87.57
Jan 19, 2025 03:22:56.331408024 CET	58510	13566	192.168.2.23	83.222.170.78
Jan 19, 2025 03:22:56.334322929 CET	54392	13566	192.168.2.23	83.222.160.63
Jan 19, 2025 03:22:56.334702969 CET	13566	50610	83.222.87.57	192.168.2.23
Jan 19, 2025 03:22:56.334772110 CET	50610	13566	192.168.2.23	83.222.87.57
Jan 19, 2025 03:22:56.335932970 CET	60216	13566	192.168.2.23	83.222.66.150
Jan 19, 2025 03:22:56.336308002 CET	13566	58510	83.222.170.78	192.168.2.23
Jan 19, 2025 03:22:56.336348057 CET	58510	13566	192.168.2.23	83.222.170.78
Jan 19, 2025 03:22:56.336735964 CET	50124	13566	192.168.2.23	83.222.137.75
Jan 19, 2025 03:22:56.337472916 CET	60306	13566	192.168.2.23	83.222.179.129
Jan 19, 2025 03:22:56.338176966 CET	43498	13566	192.168.2.23	83.222.156.37
Jan 19, 2025 03:22:56.339371920 CET	13566	54392	83.222.160.63	192.168.2.23
Jan 19, 2025 03:22:56.339420080 CET	54392	13566	192.168.2.23	83.222.160.63
Jan 19, 2025 03:22:56.340856075 CET	13566	60216	83.222.66.150	192.168.2.23
Jan 19, 2025 03:22:56.341029882 CET	60216	13566	192.168.2.23	83.222.66.150
Jan 19, 2025 03:22:56.341700077 CET	13566	50124	83.222.137.75	192.168.2.23
Jan 19, 2025 03:22:56.341772079 CET	50124	13566	192.168.2.23	83.222.137.75
Jan 19, 2025 03:22:56.342283964 CET	13566	60306	83.222.179.129	192.168.2.23
Jan 19, 2025 03:22:56.342432976 CET	60306	13566	192.168.2.23	83.222.179.129
Jan 19, 2025 03:22:56.344177008 CET	13566	43498	83.222.156.37	192.168.2.23
Jan 19, 2025 03:22:56.344361067 CET	43498	13566	192.168.2.23	83.222.156.37
Jan 19, 2025 03:22:56.349011898 CET	43498	13566	192.168.2.23	83.222.156.37
Jan 19, 2025 03:22:56.349749088 CET	49956	13566	192.168.2.23	83.222.71.96
Jan 19, 2025 03:22:56.351506948 CET	47956	13566	192.168.2.23	83.222.119.159
Jan 19, 2025 03:22:56.352483988 CET	56728	13566	192.168.2.23	83.222.37.198
Jan 19, 2025 03:22:56.353063107 CET	40850	13566	192.168.2.23	83.222.236.172
Jan 19, 2025 03:22:56.354084969 CET	40426	13566	192.168.2.23	83.222.6.53
Jan 19, 2025 03:22:56.354146957 CET	13566	43498	83.222.156.37	192.168.2.23
Jan 19, 2025 03:22:56.354346991 CET	43498	13566	192.168.2.23	83.222.156.37
Jan 19, 2025 03:22:56.354640007 CET	13566	49956	83.222.71.96	192.168.2.23
Jan 19, 2025 03:22:56.354857922 CET	49956	13566	192.168.2.23	83.222.71.96
Jan 19, 2025 03:22:56.356350899 CET	13566	47956	83.222.119.159	192.168.2.23
Jan 19, 2025 03:22:56.356427908 CET	47956	13566	192.168.2.23	83.222.119.159
Jan 19, 2025 03:22:56.357362032 CET	13566	56728	83.222.37.198	192.168.2.23
Jan 19, 2025 03:22:56.357579947 CET	56728	13566	192.168.2.23	83.222.37.198
Jan 19, 2025 03:22:56.358998060 CET	13566	40850	83.222.236.172	192.168.2.23
Jan 19, 2025 03:22:56.359039068 CET	40850	13566	192.168.2.23	83.222.236.172
Jan 19, 2025 03:22:56.359707117 CET	13566	40426	83.222.6.53	192.168.2.23
Jan 19, 2025 03:22:56.359785080 CET	40426	13566	192.168.2.23	83.222.6.53
Jan 19, 2025 03:22:56.365070105 CET	40426	13566	192.168.2.23	83.222.6.53
Jan 19, 2025 03:22:56.365329027 CET	40236	13566	192.168.2.23	83.222.196.148
Jan 19, 2025 03:22:56.366385937 CET	59486	13566	192.168.2.23	83.222.11.75
Jan 19, 2025 03:22:56.367423058 CET	37708	13566	192.168.2.23	83.222.72.70
Jan 19, 2025 03:22:56.368319988 CET	39868	13566	192.168.2.23	83.222.215.159
Jan 19, 2025 03:22:56.369210005 CET	48606	13566	192.168.2.23	83.222.127.129
Jan 19, 2025 03:22:56.370265961 CET	13566	40236	83.222.196.148	192.168.2.23
Jan 19, 2025 03:22:56.370326042 CET	40236	13566	192.168.2.23	83.222.196.148
Jan 19, 2025 03:22:56.370332003 CET	13566	40426	83.222.6.53	192.168.2.23
Jan 19, 2025 03:22:56.370341063 CET	37114	13566	192.168.2.23	83.222.238.31
Jan 19, 2025 03:22:56.370501041 CET	40426	13566	192.168.2.23	83.222.6.53
Jan 19, 2025 03:22:56.371125937 CET	36836	13566	192.168.2.23	83.222.192.48
Jan 19, 2025 03:22:56.371248960 CET	13566	59486	83.222.11.75	192.168.2.23
Jan 19, 2025 03:22:56.371340036 CET	59486	13566	192.168.2.23	83.222.11.75
Jan 19, 2025 03:22:56.372209072 CET	53700	13566	192.168.2.23	83.222.181.74
Jan 19, 2025 03:22:56.372232914 CET	13566	37708	83.222.72.70	192.168.2.23
Jan 19, 2025 03:22:56.372279882 CET	37708	13566	192.168.2.23	83.222.72.70
Jan 19, 2025 03:22:56.373097897 CET	13566	39868	83.222.215.159	192.168.2.23
Jan 19, 2025 03:22:56.373106003 CET	52138	13566	192.168.2.23	83.222.123.105
Jan 19, 2025 03:22:56.373140097 CET	39868	13566	192.168.2.23	83.222.215.159
Jan 19, 2025 03:22:56.373994112 CET	38732	13566	192.168.2.23	83.222.203.23
Jan 19, 2025 03:22:56.374002934 CET	13566	48606	83.222.127.129	192.168.2.23
Jan 19, 2025 03:22:56.374043941 CET	48606	13566	192.168.2.23	83.222.127.129
Jan 19, 2025 03:22:56.375205994 CET	13566	37114	83.222.238.31	192.168.2.23
Jan 19, 2025 03:22:56.375267029 CET	37906	13566	192.168.2.23	83.222.142.18
Jan 19, 2025 03:22:56.375411034 CET	37114	13566	192.168.2.23	83.222.238.31
Jan 19, 2025 03:22:56.376121998 CET	13566	36836	83.222.192.48	192.168.2.23
Jan 19, 2025 03:22:56.376285076 CET	36836	13566	192.168.2.23	83.222.192.48
Jan 19, 2025 03:22:56.376468897 CET	48206	13566	192.168.2.23	83.222.119.5
Jan 19, 2025 03:22:56.377134085 CET	13566	53700	83.222.181.74	192.168.2.23
Jan 19, 2025 03:22:56.377181053 CET	53700	13566	192.168.2.23	83.222.181.74
Jan 19, 2025 03:22:56.377496958 CET	60804	13566	192.168.2.23	83.222.177.157
Jan 19, 2025 03:22:56.377926111 CET	13566	52138	83.222.123.105	192.168.2.23
Jan 19, 2025 03:22:56.377969980 CET	52138	13566	192.168.2.23	83.222.123.105
Jan 19, 2025 03:22:56.378464937 CET	54328	13566	192.168.2.23	83.222.203.158
Jan 19, 2025 03:22:56.378789902 CET	13566	38732	83.222.203.23	192.168.2.23
Jan 19, 2025 03:22:56.378834963 CET	38732	13566	192.168.2.23	83.222.203.23
Jan 19, 2025 03:22:56.379573107 CET	56134	13566	192.168.2.23	83.222.73.209
Jan 19, 2025 03:22:56.380156994 CET	13566	37906	83.222.142.18	192.168.2.23
Jan 19, 2025 03:22:56.380187035 CET	37906	13566	192.168.2.23	83.222.142.18
Jan 19, 2025 03:22:56.380459070 CET	46300	13566	192.168.2.23	83.222.211.13
Jan 19, 2025 03:22:56.381256104 CET	13566	48206	83.222.119.5	192.168.2.23
Jan 19, 2025 03:22:56.381304026 CET	48206	13566	192.168.2.23	83.222.119.5
Jan 19, 2025 03:22:56.381639957 CET	42326	13566	192.168.2.23	83.222.102.222
Jan 19, 2025 03:22:56.382402897 CET	13566	60804	83.222.177.157	192.168.2.23
Jan 19, 2025 03:22:56.382623911 CET	60804	13566	192.168.2.23	83.222.177.157
Jan 19, 2025 03:22:56.382751942 CET	49628	13566	192.168.2.23	83.222.89.174
Jan 19, 2025 03:22:56.383306980 CET	13566	54328	83.222.203.158	192.168.2.23
Jan 19, 2025 03:22:56.383358955 CET	54328	13566	192.168.2.23	83.222.203.158
Jan 19, 2025 03:22:56.383677959 CET	47470	13566	192.168.2.23	83.222.37.48
Jan 19, 2025 03:22:56.384404898 CET	13566	56134	83.222.73.209	192.168.2.23
Jan 19, 2025 03:22:56.384458065 CET	56134	13566	192.168.2.23	83.222.73.209
Jan 19, 2025 03:22:56.384844065 CET	33512	13566	192.168.2.23	83.222.78.164
Jan 19, 2025 03:22:56.385257006 CET	13566	46300	83.222.211.13	192.168.2.23
Jan 19, 2025 03:22:56.385307074 CET	46300	13566	192.168.2.23	83.222.211.13
Jan 19, 2025 03:22:56.385993004 CET	60562	13566	192.168.2.23	83.222.177.60
Jan 19, 2025 03:22:56.386527061 CET	13566	42326	83.222.102.222	192.168.2.23
Jan 19, 2025 03:22:56.386714935 CET	42326	13566	192.168.2.23	83.222.102.222
Jan 19, 2025 03:22:56.387573957 CET	13566	49628	83.222.89.174	192.168.2.23
Jan 19, 2025 03:22:56.387615919 CET	49628	13566	192.168.2.23	83.222.89.174
Jan 19, 2025 03:22:56.387798071 CET	34896	13566	192.168.2.23	83.222.196.113
Jan 19, 2025 03:22:56.388436079 CET	55978	13566	192.168.2.23	83.222.108.121
Jan 19, 2025 03:22:56.388494968 CET	13566	47470	83.222.37.48	192.168.2.23
Jan 19, 2025 03:22:56.388544083 CET	47470	13566	192.168.2.23	83.222.37.48
Jan 19, 2025 03:22:56.389667988 CET	13566	33512	83.222.78.164	192.168.2.23
Jan 19, 2025 03:22:56.389667034 CET	52096	13566	192.168.2.23	83.222.187.231
Jan 19, 2025 03:22:56.389712095 CET	33512	13566	192.168.2.23	83.222.78.164
Jan 19, 2025 03:22:56.390820026 CET	13566	60562	83.222.177.60	192.168.2.23
Jan 19, 2025 03:22:56.390868902 CET	60562	13566	192.168.2.23	83.222.177.60
Jan 19, 2025 03:22:56.391346931 CET	46990	13566	192.168.2.23	83.222.226.134
Jan 19, 2025 03:22:56.392616034 CET	13566	34896	83.222.196.113	192.168.2.23
Jan 19, 2025 03:22:56.392776012 CET	34896	13566	192.168.2.23	83.222.196.113
Jan 19, 2025 03:22:56.393040895 CET	60248	13566	192.168.2.23	83.222.255.112
Jan 19, 2025 03:22:56.393250942 CET	13566	55978	83.222.108.121	192.168.2.23
Jan 19, 2025 03:22:56.393297911 CET	55978	13566	192.168.2.23	83.222.108.121
Jan 19, 2025 03:22:56.394314051 CET	37584	13566	192.168.2.23	83.222.152.118
Jan 19, 2025 03:22:56.394593000 CET	13566	52096	83.222.187.231	192.168.2.23
Jan 19, 2025 03:22:56.394783974 CET	52096	13566	192.168.2.23	83.222.187.231
Jan 19, 2025 03:22:56.395028114 CET	55952	13566	192.168.2.23	83.222.117.74
Jan 19, 2025 03:22:56.395705938 CET	57792	13566	192.168.2.23	83.222.19.64
Jan 19, 2025 03:22:56.396143913 CET	13566	46990	83.222.226.134	192.168.2.23
Jan 19, 2025 03:22:56.396186113 CET	46990	13566	192.168.2.23	83.222.226.134
Jan 19, 2025 03:22:56.396370888 CET	33398	13566	192.168.2.23	83.222.232.93
Jan 19, 2025 03:22:56.397011995 CET	33974	13566	192.168.2.23	83.222.18.187
Jan 19, 2025 03:22:56.397660971 CET	54186	13566	192.168.2.23	83.222.106.120
Jan 19, 2025 03:22:56.397921085 CET	13566	60248	83.222.255.112	192.168.2.23
Jan 19, 2025 03:22:56.398097038 CET	60248	13566	192.168.2.23	83.222.255.112
Jan 19, 2025 03:22:56.398454905 CET	59018	13566	192.168.2.23	83.222.153.195
Jan 19, 2025 03:22:56.399106026 CET	57924	13566	192.168.2.23	83.222.38.190
Jan 19, 2025 03:22:56.399256945 CET	13566	37584	83.222.152.118	192.168.2.23
Jan 19, 2025 03:22:56.399308920 CET	37584	13566	192.168.2.23	83.222.152.118
Jan 19, 2025 03:22:56.399578094 CET	58366	13566	192.168.2.23	83.222.243.116
Jan 19, 2025 03:22:56.399808884 CET	13566	55952	83.222.117.74	192.168.2.23
Jan 19, 2025 03:22:56.399847984 CET	55952	13566	192.168.2.23	83.222.117.74
Jan 19, 2025 03:22:56.400362968 CET	36970	13566	192.168.2.23	83.222.99.164
Jan 19, 2025 03:22:56.400511980 CET	13566	57792	83.222.19.64	192.168.2.23
Jan 19, 2025 03:22:56.400564909 CET	57792	13566	192.168.2.23	83.222.19.64
Jan 19, 2025 03:22:56.400887966 CET	42580	13566	192.168.2.23	83.222.176.39
Jan 19, 2025 03:22:56.401221991 CET	13566	33398	83.222.232.93	192.168.2.23
Jan 19, 2025 03:22:56.401273012 CET	33398	13566	192.168.2.23	83.222.232.93
Jan 19, 2025 03:22:56.401521921 CET	45358	13566	192.168.2.23	83.222.22.28
Jan 19, 2025 03:22:56.401823997 CET	13566	33974	83.222.18.187	192.168.2.23
Jan 19, 2025 03:22:56.401879072 CET	33974	13566	192.168.2.23	83.222.18.187
Jan 19, 2025 03:22:56.402169943 CET	48726	13566	192.168.2.23	83.222.160.209
Jan 19, 2025 03:22:56.402475119 CET	13566	54186	83.222.106.120	192.168.2.23
Jan 19, 2025 03:22:56.402522087 CET	54186	13566	192.168.2.23	83.222.106.120
Jan 19, 2025 03:22:56.403402090 CET	13566	59018	83.222.153.195	192.168.2.23
Jan 19, 2025 03:22:56.403584957 CET	59018	13566	192.168.2.23	83.222.153.195
Jan 19, 2025 03:22:56.403980970 CET	13566	57924	83.222.38.190	192.168.2.23
Jan 19, 2025 03:22:56.404052973 CET	57924	13566	192.168.2.23	83.222.38.190
Jan 19, 2025 03:22:56.404372931 CET	13566	58366	83.222.243.116	192.168.2.23
Jan 19, 2025 03:22:56.404417992 CET	58366	13566	192.168.2.23	83.222.243.116
Jan 19, 2025 03:22:56.405194044 CET	13566	36970	83.222.99.164	192.168.2.23
Jan 19, 2025 03:22:56.405348063 CET	36970	13566	192.168.2.23	83.222.99.164
Jan 19, 2025 03:22:56.405667067 CET	13566	42580	83.222.176.39	192.168.2.23
Jan 19, 2025 03:22:56.405738115 CET	42580	13566	192.168.2.23	83.222.176.39
Jan 19, 2025 03:22:56.406378984 CET	13566	45358	83.222.22.28	192.168.2.23
Jan 19, 2025 03:22:56.406420946 CET	45358	13566	192.168.2.23	83.222.22.28
Jan 19, 2025 03:22:56.406965971 CET	13566	48726	83.222.160.209	192.168.2.23
Jan 19, 2025 03:22:56.407007933 CET	48726	13566	192.168.2.23	83.222.160.209
Jan 19, 2025 03:22:56.414484024 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:22:56.419696093 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:22:56.419787884 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:22:56.420634985 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:22:56.425784111 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:22:56.426012039 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:22:56.431361914 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:22:56.668909073 CET	43928	443	192.168.2.23	91.189.91.42
Jan 19, 2025 03:23:02.044271946 CET	42836	443	192.168.2.23	91.189.91.43
Jan 19, 2025 03:23:02.812249899 CET	42516	80	192.168.2.23	109.202.202.202
Jan 19, 2025 03:23:06.429346085 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:23:06.434427977 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:23:06.631568909 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:23:06.631670952 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:23:06.996442080 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:23:06.996834993 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:23:17.658142090 CET	43928	443	192.168.2.23	91.189.91.42
Jan 19, 2025 03:23:27.896908998 CET	42836	443	192.168.2.23	91.189.91.43
Jan 19, 2025 03:23:34.039947033 CET	42516	80	192.168.2.23	109.202.202.202
Jan 19, 2025 03:23:58.612643957 CET	43928	443	192.168.2.23	91.189.91.42
Jan 19, 2025 03:24:07.049746037 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:24:07.055191040 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:24:07.253104925 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:24:07.253503084 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:24:07.996181965 CET	13566	42710	83.222.191.90	192.168.2.23
Jan 19, 2025 03:24:07.996469975 CET	42710	13566	192.168.2.23	83.222.191.90
Jan 19, 2025 03:24:19.090008974 CET	42836	443	192.168.2.23	91.189.91.43

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 19, 2025 03:22:56.404007912 CET	54282	53	192.168.2.23	8.8.8.8
Jan 19, 2025 03:22:56.413415909 CET	53	54282	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 19, 2025 03:22:56.404007912 CET	192.168.2.23	8.8.8.8	0xb958	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 19, 2025 03:22:56.413415909 CET	8.8.8.8	192.168.2.23	0xb958	No error (0)	secure-network-rebirthltd.ru		83.222.191.90	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: loki.arm7.elf PID: 6241, Parent PID: 6165

General

Start time (UTC):	02:22:55
Start date (UTC):	19/01/2025
Path:	/tmp/loki.arm7.elf
Arguments:	/tmp/loki.arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

File Activities

File Opened

File Read

File Moved

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Listening

Socket Connecting

Chronological Activities

Analysis Process: loki.arm7.elf PID: 6243, Parent PID: 6241

General

Start time (UTC):	02:22:55
Start date (UTC):	19/01/2025
Path:	/tmp/loki.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

File Activities

File Opened

File Read

Process Activities

Prctl Requested

Thread Sleep

Chronological Activities

Analysis Process: loki.arm7.elf PID: 6245, Parent PID: 6241

General

Start time (UTC):	02:22:55
Start date (UTC):	19/01/2025
Path:	/tmp/loki.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report loki.arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: loki.arm7.elf PID: 6241, Parent PID: 6165

General

File Activities

File Opened

File Read

File Moved

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Listening

Socket Connecting

Chronological Activities

Analysis Process: loki.arm7.elf PID: 6243, Parent PID: 6241

General

File Activities

Linux Analysis Report
loki.arm7.elf