Create Interactive Tour

Linux Analysis Report
argon_https.elf

Overview

General Information

Sample name:	argon_https.elf
Analysis ID:	1672179
MD5:	fd3a23d2232e870f59dcdd6286698c0c
SHA1:	2912756f9a171d8ccf14c3a0e0f3920ef266a75f
SHA256:	9e3a68c10add832cae7bc92dc6901a328bd928cbb783d317d2379029514ff767
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	2
Range:	0 - 100

Signatures

Executes the "rm" command used to delete files or directories

Reads system information from the proc file system

Sample and/or dropped files contains symbols with suspicious names

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1672179
Start date and time:	2025-04-23 16:53:41 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	argon_https.elf
Detection:	CLEAN
Classification:	clean2.linELF@0/0@0/0
Cookbook Comments:	Analysis time extended to 480s due to sleep detection in submitted sample

Runtime Messages

Command:	/tmp/argon_https.elf
PID:	6226
Exit Code:	1
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:	node:internal/fs/utils:673 throw new ERR_INVALID_ARG_TYPE(propName, ['string', 'Buffer', 'URL'], path); ^ TypeError [ERR_INVALID_ARG_TYPE]: The "path" argument must be of type string or an instance of Buffer or URL. Received undefined at Object.openSync (node:fs:591:10) at Object.openSync (pkg/prelude/bootstrap.js:793:32) at Object.readFileSync (node:fs:467:35) at Object.readFileSync (pkg/prelude/bootstrap.js:1079:36) at Object.<anonymous> (/snapshot/root/argon_https.js) at Module._compile (pkg/prelude/bootstrap.js:1926:22) at Module._extensions..js (node:internal/modules/cjs/loader:1166:10) at Module.load (node:internal/modules/cjs/loader:988:32) at Module._load (node:internal/modules/cjs/loader:834:12) at Function.runMain (pkg/prelude/bootstrap.js:1979:12) { code: 'ERR_INVALID_ARG_TYPE' } Node.js v18.5.0

Process Tree

system is lnxubuntu20

argon_https.elf (PID: 6226, Parent: 6148, MD5: fd3a23d2232e870f59dcdd6286698c0c) Arguments: /tmp/argon_https.elf

dash New Fork (PID: 6288, Parent: 4331)

rm (PID: 6288, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.h3TUhDakBS /tmp/tmp.AzUTjSAgid /tmp/tmp.JVH5GHe9Ka

dash New Fork (PID: 6289, Parent: 4331)

rm (PID: 6289, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.h3TUhDakBS /tmp/tmp.AzUTjSAgid /tmp/tmp.JVH5GHe9Ka

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• Networking
• System Summary
• Persistence and Installation Behavior
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219

Source: argon_https.elf	String found in binary or memory: http://.css
Source: argon_https.elf	String found in binary or memory: http://.jpg
Source: argon_https.elf	String found in binary or memory: http://code.google.com/p/closure-compiler/wiki/SourceMaps
Source: argon_https.elf	String found in binary or memory: http://html4/loose.dtd
Source: argon_https.elf	String found in binary or memory: http://src.chromium.org/viewvc/blink/trunk/Source/devtools/front_end/SourceMap.js
Source: argon_https.elf	String found in binary or memory: http://www.unicode.org/copyright.html
Source: argon_https.elf	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=745678
Source: argon_https.elf, 6226.1.00003c640d200000.00003c640d240000.rw-.sdmp	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=25916
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#clear
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#console-namespace
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#count
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#count-map
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#countreset
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#table
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://crbug.com/v8/7848
Source: argon_https.elf	String found in binary or memory: https://developer.mozilla.org/en-US/docs/SpiderMonkey/Parser_API
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://encoding.spec.whatwg.org
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://encoding.spec.whatwg.org/#textdecoder
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://encoding.spec.whatwg.org/#textencoder
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://esdiscuss.org/topic/isconstructor#content-11
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://fetch.spec.whatwg.org/#fetch-timing-info
Source: argon_https.elf	String found in binary or memory: https://github.com/WICG/scheduling-apis
Source: argon_https.elf	String found in binary or memory: https://github.com/acornjs/acorn/blob/master/acorn/src/identifier.js#L23
Source: argon_https.elf	String found in binary or memory: https://github.com/acornjs/acorn/issues/575
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://github.com/addaleax/eventemitter-asyncresource
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://github.com/chalk/ansi-regex/blob/HEAD/index.js
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://github.com/chromium/chromium/blob/HEAD/third_party/blink/public/platform/web_crypto_algorith
Source: argon_https.elf	String found in binary or memory: https://github.com/estree/estree/blob/a27003adf4fd7bfad44de9cef372a2eacd527b1c/es5.md#regexpliteral
Source: argon_https.elf, 6226.1.000023124ec80000.000023124ecc0000.rw-.sdmp, argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://github.com/heycam/webidl/pull/946.
Source: argon_https.elf	String found in binary or memory: https://github.com/libuv/libuv/pull/1501.
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/mafintosh/end-of-stream
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/mafintosh/pump
Source: argon_https.elf, 6226.1.000021f71f080000.000021f71f0c0000.rw-.sdmp, argon_https.elf, 6226.1.00000000034ba000.0000000003812000.rw-.sdmp	String found in binary or memory: https://github.com/maskit/hpack
Source: argon_https.elf, 6226.1.000021f71f080000.000021f71f0c0000.rw-.sdmp, argon_https.elf, 6226.1.00000000034ba000.0000000003812000.rw-.sdmp	String found in binary or memory: https://github.com/maskit/hpack/issues
Source: argon_https.elf, 6226.1.000021f71f080000.000021f71f0c0000.rw-.sdmp	String found in binary or memory: https://github.com/maskit/hpack/issuesI
Source: argon_https.elf, 6226.1.000021f71f080000.000021f71f0c0000.rw-.sdmp	String found in binary or memory: https://github.com/maskit/hpacki
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/mysticatea/abort-controller
Source: argon_https.elf, 6226.1.0000208ba0540000.0000208ba0580000.rw-.sdmp, argon_https.elf, 6226.1.0000092b6e280000.0000092b6e2c0000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/blob/1a96d83a223ff9f05f7d942fb84440d323f7b596/lib/internal/bootstrap/
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues
Source: argon_https.elf, 6226.1.00001b138d0c0000.00001b138d100000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/19009
Source: argon_https.elf	String found in binary or memory: https://github.com/nodejs/node/issues/2006
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/35452
Source: argon_https.elf	String found in binary or memory: https://github.com/nodejs/node/issues/35862
Source: argon_https.elf	String found in binary or memory: https://github.com/nodejs/node/issues/39707
Source: argon_https.elf, 6226.1.00001b138d0c0000.00001b138d100000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/39758
Source: argon_https.elf	String found in binary or memory: https://github.com/nodejs/node/pull/12607
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/26334.
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/30380#issuecomment-552948364
Source: argon_https.elf, 6226.1.0000208ba0540000.0000208ba0580000.rw-.sdmp, argon_https.elf, 6226.1.0000092b6e280000.0000092b6e2c0000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33229
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33515.
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33661
Source: argon_https.elf, 6226.1.00001b138d0c0000.00001b138d100000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/34010
Source: argon_https.elf, 6226.1.00003c640d200000.00003c640d240000.rw-.sdmp, argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/34103#issuecomment-652002364
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/34375
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/35949#issuecomment-722496598
Source: argon_https.elf, 6226.1.00003c640d200000.00003c640d240000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/36061#discussion_r533718029
Source: argon_https.elf, 6226.1.000023124ec80000.000023124ecc0000.rw-.sdmp, argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/38248
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/38433#issuecomment-828426932
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/38614)
Source: argon_https.elf	String found in binary or memory: https://github.com/standard-things/esm/issues/821.
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://github.com/tc39/ecma262/issues/1209
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://github.com/tc39/proposal-iterator-helpers/issues/169
Source: argon_https.elf, 6226.1.0000208ba0540000.0000208ba0580000.rw-.sdmp, argon_https.elf, 6226.1.0000092b6e280000.0000092b6e2c0000.rw-.sdmp	String found in binary or memory: https://github.com/vercel/pkg/issues/1589
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://goo.gl/t5IS6M).
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#Replaceable
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#define-the-operations
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-class-string
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-default-iterator-object
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-iterator-prototype-object
Source: argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-interfaces
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterable
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterable-entries
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterators
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-namespaces
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-operations
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-stringifier
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/webappapis.html#windoworworkerglobalscope
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#forgiving-base64
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#forgiving-base64-decode
Source: argon_https.elf	String found in binary or memory: https://jimmy.warting.se/opensource
Source: argon_https.elf	String found in binary or memory: https://nodejs.org/
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://nodejs.org/api/cli.html#cli_unhandled_rejections_mode).
Source: argon_https.elf	String found in binary or memory: https://nodejs.org/api/fs.html
Source: argon_https.elf	String found in binary or memory: https://nodejs.org/api/fs.html#fs_stat_time_values)
Source: argon_https.elf	String found in binary or memory: https://nodejs.org/download/release/v18.5.0/node-v18.5.0-headers.tar.gz
Source: argon_https.elf	String found in binary or memory: https://nodejs.org/download/release/v18.5.0/node-v18.5.0.tar.gz
Source: argon_https.elf	String found in binary or memory: https://nodejs.org/download/release/v18.5.0/node-v18.5.0.tar.gzhttps://nodejs.org/download/release/v
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap12.html
Source: argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	String found in binary or memory: https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap12.html).
Source: argon_https.elf, 6226.1.000023124ec80000.000023124ecc0000.rw-.sdmp, argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://tc39.es/ecma262/#sec-%typedarray%-intrinsic-object
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%typedarray%.of
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#cannot-have-a-username-password-port
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-url
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-url-origin
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-byte-serializer
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-parser
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-serializer
Source: argon_https.elf, 6226.1.00003c640d200000.00003c640d240000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#forbidden-host-code-point
Source: argon_https.elf	String found in binary or memory: https://url.spec.whatwg.org/#special-scheme
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#url
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#url-serializing
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#urlsearchparams
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#urlsearchparams-stringification-behavior
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://w3c.github.io/resource-timing/#dfn-mark-resource-timing
Source: argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	String found in binary or memory: https://w3c.github.io/resource-timing/#dfn-setup-the-resource-timing-entry
Source: argon_https.elf	String found in binary or memory: https://w3c.github.io/webappsec-subresource-integrity/#the-integrity-attribute
Source: argon_https.elf, 6226.1.000023124ec80000.000023124ecc0000.rw-.sdmp, argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-promise.all
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-timeclip
Source: argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/5.1/#sec-15.1.3.4
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Alternative
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Atom
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClass
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClassEscape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtom
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtomNoDash
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassRanges
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlEscape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlLetter
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalDigits
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalEscape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Disjunction
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Hex4Digits
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigit
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigits
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexEscapeSequence
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRanges
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRangesNoDash
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-OctalDigit
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Pattern
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-PatternCharacter
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Quantifier
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-QuantifierPrefix
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-RegExpUnicodeEscapeSequence
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-SyntaxCharacter
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Assertion
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-AtomEscape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-CharacterEscape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassControlLetter
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassEscape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedAtom
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedPatternCharacter
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-IdentityEscape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-InvalidBracedQuantifier
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-LegacyOctalEscapeSequence
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Term
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-atomescape
Source: argon_https.elf	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-term
Source: argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	String found in binary or memory: https://www.unicode.org/Public/UNIDATA/EastAsianWidth.txt

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39250
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39250 -> 443

Source: argon_https.elf	ELF static info symbol of initial sample: CMS_PasswordRecipientInfo_it
Source: argon_https.elf	ELF static info symbol of initial sample: CMS_RecipientInfo_set0_password
Source: argon_https.elf	ELF static info symbol of initial sample: CMS_add0_recipient_password
Source: argon_https.elf	ELF static info symbol of initial sample: CMS_decrypt_set1_password

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: clean2.linELF@0/0@0/0

Source: /usr/bin/dash (PID: 6288)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.h3TUhDakBS /tmp/tmp.AzUTjSAgid /tmp/tmp.JVH5GHe9Ka			Jump to behavior
Source: /usr/bin/dash (PID: 6289)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.h3TUhDakBS /tmp/tmp.AzUTjSAgid /tmp/tmp.JVH5GHe9Ka			Jump to behavior

Source: /tmp/argon_https.elf (PID: 6226)

Reads from proc file: /proc/meminfo

Jump to behavior

Source: /tmp/argon_https.elf (PID: 6226)

Queries kernel information via 'uname':

Jump to behavior

Source: argon_https.elf

Binary or memory string: lgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmcIGfE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
argon_https.elf	0%	ReversingLabs

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/nodejs/node/pull/36061#discussion_r533718029	argon_https.elf, 6226.1.00003c640d200000.00003c640d240000.rw-.sdmp	false	high
https://url.spec.whatwg.org/#concept-url-origin	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRangesNoDash	argon_https.elf	false	high
https://github.com/chromium/chromium/blob/HEAD/third_party/blink/public/platform/web_crypto_algorith	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://w3c.github.io/resource-timing/#dfn-setup-the-resource-timing-entry	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#sec-atomescape	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedPatternCharacter	argon_https.elf	false	high
https://url.spec.whatwg.org/#concept-urlencoded-byte-serializer	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://url.spec.whatwg.org/#special-scheme	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-Atom	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#sec-term	argon_https.elf	false	high
https://heycam.github.io/webidl/#define-the-operations	argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/#sec-timeclip	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-OctalDigit	argon_https.elf	false	high
https://console.spec.whatwg.org/#table	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigit	argon_https.elf	false	high
https://github.com/chalk/ansi-regex/blob/HEAD/index.js	argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	false	high
https://console.spec.whatwg.org/#console-namespace	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://nodejs.org/api/fs.html#fs_stat_time_values)	argon_https.elf	false	high
https://url.spec.whatwg.org/#url-serializing	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-QuantifierPrefix	argon_https.elf	false	high
https://url.spec.whatwg.org/#url	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-HexEscapeSequence	argon_https.elf	false	high
https://encoding.spec.whatwg.org/#textencoder	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://url.spec.whatwg.org/#urlsearchparams-stringification-behavior	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://html.spec.whatwg.org/multipage/webappapis.html#windoworworkerglobalscope	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtomNoDash	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-InvalidBracedQuantifier	argon_https.elf	false	high
https://goo.gl/t5IS6M).	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://github.com/nodejs/node/pull/26334.	argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-PatternCharacter	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtom	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Assertion	argon_https.elf	false	high
https://github.com/nodejs/node/pull/33229	argon_https.elf, 6226.1.0000208ba0540000.0000208ba0580000.rw-.sdmp, argon_https.elf, 6226.1.0000092b6e280000.0000092b6e2c0000.rw-.sdmp	false	high
https://console.spec.whatwg.org/#count-map	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://url.spec.whatwg.org/#concept-urlencoded-serializer	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://github.com/nodejs/node/pull/38248	argon_https.elf, 6226.1.000023124ec80000.000023124ecc0000.rw-.sdmp, argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-CharacterEscape	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-IdentityEscape	argon_https.elf	false	high
https://nodejs.org/api/fs.html	argon_https.elf	false	high
https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap12.html	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://infra.spec.whatwg.org/#forgiving-base64	argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-ClassRanges	argon_https.elf	false	high
https://github.com/maskit/hpacki	argon_https.elf, 6226.1.000021f71f080000.000021f71f0c0000.rw-.sdmp	false	high
https://github.com/nodejs/node/pull/35949#issuecomment-722496598	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-LegacyOctalEscapeSequence	argon_https.elf	false	high
https://github.com/acornjs/acorn/blob/master/acorn/src/identifier.js#L23	argon_https.elf	false	high
https://github.com/mysticatea/abort-controller	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://github.com/maskit/hpack	argon_https.elf, 6226.1.000021f71f080000.000021f71f0c0000.rw-.sdmp, argon_https.elf, 6226.1.00000000034ba000.0000000003812000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRanges	argon_https.elf	false	high
https://github.com/maskit/hpack/issuesI	argon_https.elf, 6226.1.000021f71f080000.000021f71f0c0000.rw-.sdmp	false	high
https://nodejs.org/	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-ControlEscape	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-Hex4Digits	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalEscape	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassControlLetter	argon_https.elf	false	high
https://github.com/vercel/pkg/issues/1589	argon_https.elf, 6226.1.0000208ba0540000.0000208ba0580000.rw-.sdmp, argon_https.elf, 6226.1.0000092b6e280000.0000092b6e2c0000.rw-.sdmp	false	high
https://github.com/nodejs/node/pull/33661	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://encoding.spec.whatwg.org/#textdecoder	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://github.com/heycam/webidl/pull/946.	argon_https.elf, 6226.1.000023124ec80000.000023124ecc0000.rw-.sdmp, argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	false	high
https://github.com/nodejs/node/issues/35452	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClassEscape	argon_https.elf	false	high
https://github.com/WICG/scheduling-apis	argon_https.elf	false	high
https://w3c.github.io/webappsec-subresource-integrity/#the-integrity-attribute	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Term	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/#sec-promise.all	argon_https.elf, 6226.1.000023124ec80000.000023124ecc0000.rw-.sdmp, argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	false	high
https://code.google.com/p/chromium/issues/detail?id=25916	argon_https.elf, 6226.1.00003c640d200000.00003c640d240000.rw-.sdmp	false	high
https://github.com/nodejs/node/issues/35862	argon_https.elf	false	high
https://fetch.spec.whatwg.org/#fetch-timing-info	argon_https.elf, 6226.1.00001f8709380000.00001f87093c0000.rw-.sdmp	false	high
https://github.com/tc39/proposal-iterator-helpers/issues/169	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://github.com/nodejs/node/issues/39707	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-Alternative	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalDigits	argon_https.elf	false	high
https://github.com/nodejs/node/pull/12607	argon_https.elf	false	high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	false	high
https://www.unicode.org/Public/UNIDATA/EastAsianWidth.txt	argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-Pattern	argon_https.elf	false	high
https://infra.spec.whatwg.org/#forgiving-base64-decode	argon_https.elf, 6226.1.00003942f2140000.00003942f2180000.rw-.sdmp	false	high
http://html4/loose.dtd	argon_https.elf	false	high
https://heycam.github.io/webidl/#es-stringifier	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-SyntaxCharacter	argon_https.elf	false	high
https://nodejs.org/download/release/v18.5.0/node-v18.5.0.tar.gz	argon_https.elf	false	high
https://github.com/nodejs/node/issues/39758	argon_https.elf, 6226.1.00001b138d0c0000.00001b138d100000.rw-.sdmp	false	high
http://www.unicode.org/copyright.html	argon_https.elf	false	high
http://code.google.com/p/closure-compiler/wiki/SourceMaps	argon_https.elf	false	high
https://github.com/nodejs/node/blob/1a96d83a223ff9f05f7d942fb84440d323f7b596/lib/internal/bootstrap/	argon_https.elf, 6226.1.0000208ba0540000.0000208ba0580000.rw-.sdmp, argon_https.elf, 6226.1.0000092b6e280000.0000092b6e2c0000.rw-.sdmp	false	high
https://url.spec.whatwg.org/#cannot-have-a-username-password-port	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://url.spec.whatwg.org/#concept-url	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://github.com/nodejs/node/pull/34375	argon_https.elf, 6226.1.0000290e3c540000.0000290e3c580000.rw-.sdmp	false	high
https://nodejs.org/download/release/v18.5.0/node-v18.5.0.tar.gzhttps://nodejs.org/download/release/v	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-Disjunction	argon_https.elf	false	high
https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedAtom	argon_https.elf	false	high
http://.css	argon_https.elf	false	high
https://github.com/nodejs/node/pull/34010	argon_https.elf, 6226.1.00001b138d0c0000.00001b138d100000.rw-.sdmp	false	high
https://heycam.github.io/webidl/#dfn-default-iterator-object	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://heycam.github.io/webidl/#es-iterable-entries	argon_https.elf, 6226.1.000035ff85c00000.000035ff85c40000.rw-.sdmp	false	high
https://heycam.github.io/webidl/#es-interfaces	argon_https.elf, 6226.1.0000246452400000.0000246452440000.rw-.sdmp	false	high
https://github.com/nodejs/node/issues/2006	argon_https.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.249.145.219	unknown	United States	16509	AMAZON-02US	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.249.145.219	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	bot.armv4l.elf	Get hash	malicious	Unknown	Browse
	bot.armv6l.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	bot.powerpc-440fp.elf	Get hash	malicious	Unknown	Browse
	bot.m68k.elf	Get hash	malicious	Unknown	Browse
	bot.i586.elf	Get hash	malicious	Unknown	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	jew.arm.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	bot.armv4l.elf	Get hash	malicious	Unknown	Browse
	bot.armv6l.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
91.189.91.42	jew.arm.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	bot.armv4l.elf	Get hash	malicious	Unknown	Browse
	bot.armv6l.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	jew.arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	bot.armv4l.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	bot.armv6l.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
CANONICAL-ASGB	jew.arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	bot.armv4l.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	bot.armv6l.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
INIT7CH	jew.arm.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	bot.armv4l.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	bot.armv6l.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
AMAZON-02US	http://heartandsoil.co	Get hash	malicious	Unknown	Browse	3.167.212.114
	swift copy.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	Message.eml	Get hash	malicious	Unknown	Browse	13.225.142.9
	https://lean-gander-5e8.notion.site/Magreesource-1de0bcafc256806c850fdb36c2831d0d	Get hash	malicious	Tycoon2FA	Browse	13.226.225.31
	Message.eml	Get hash	malicious	Unknown	Browse	13.225.142.9
	na.elf	Get hash	malicious	Prometei	Browse	34.249.145.219
	https://EWHP8woVj8H6llgl9QoR.nvulb.es/jPN5BnTu/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	18.238.109.106
	na.elf	Get hash	malicious	Prometei	Browse	34.249.145.219
	na.elf	Get hash	malicious	Prometei	Browse	54.171.230.55
	BULK CASE ID 1700571600.msg	Get hash	malicious	Unknown	Browse	100.21.20.131

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e8e9fc449943f935d469333b1101f224a4c0164f, for GNU/Linux 2.6.32, stripped
Entropy (8bit):	6.591693987914638
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	argon_https.elf
File size:	46'359'878 bytes
MD5:	fd3a23d2232e870f59dcdd6286698c0c
SHA1:	2912756f9a171d8ccf14c3a0e0f3920ef266a75f
SHA256:	9e3a68c10add832cae7bc92dc6901a328bd928cbb783d317d2379029514ff767
SHA512:	6b7a2ee787a24c619191866cf7e6e705e88e5a87c8196df95de59f7618bfc22fe66d7556e15e99e472543c38373c32b0b45ad8c7f4b090ec941df9e695753187
SSDEEP:	786432:FuyPtsgt1j9ubslD/3+WTjnCD2WllgQdSrY+foI4T:fGgFubslD/3+WTjnCD2WllgQdEH70
TLSH:	3DA79F1BB2E31868D1A3C434476F4262A732F8264235ABBB314D97702FA7DE05779B71
File Content Preview:	.ELF..............>.............@.......H...........@.8...@.............@.......@.@.....@.@.....................................P.......P.@.....P.@...............................................@.......@......{Q......{Q.......................Q............

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x94abd3
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	14
Section Header Offset:	46203208
Section Header Size:	64
Number of Section Headers:	31
Header String Table Index:	30

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.interp	PROGBITS	0x400350	0x350	0x1c	0x0	0x2	A	0	0	1
.note.gnu.build-id	NOTE	0x40036c	0x36c	0x24	0x0	0x2	A	0	0	4
.note.ABI-tag	NOTE	0x400390	0x390	0x20	0x0	0x2	A	0	0	4
.gnu.hash	GNU_HASH	0x4003b0	0x3b0	0x65eb4	0x0	0x2	A	5	0	8
.dynsym	DYNSYM	0x466268	0x66268	0x146868	0x18	0x2	A	6	1	8
.dynstr	STRTAB	0x5acad0	0x1acad0	0x34c42d	0x0	0x2	A	0	0	1
.gnu.version	VERSYM	0x8f8efe	0x4f8efe	0x1b35e	0x2	0x2	A	5	0	2
.gnu.version_r	VERNEED	0x914260	0x514260	0x230	0x0	0x2	A	6	7	8
.rela.dyn	RELA	0x914490	0x514490	0x678	0x18	0x2	A	5	0	8
.rela.plt	RELA	0x914b08	0x514b08	0x30a8	0x18	0x42	AI	5	26	8
.init	PROGBITS	0x918000	0x518000	0x1f	0x0	0x6	AX	0	0	4
.plt	PROGBITS	0x918020	0x518020	0x2080	0x10	0x6	AX	0	0	16
.text	PROGBITS	0x91c000	0x51b000	0x167a76a	0x0	0x6	AX	0	0	8192
lpstub	PROGBITS	0x2000000	0x1b96000	0x1c1	0x0	0x6	AX	0	0	2097152
.fini	PROGBITS	0x20001c4	0x1b961c4	0x9	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x2001000	0x1b97000	0xd454b8	0x0	0x2	A	0	0	64
.eh_frame_hdr	PROGBITS	0x2d464b8	0x28dc4b8	0x7e304	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x2dc47c0	0x295a7c0	0x29b810	0x0	0x2	A	0	0	8
.gcc_except_table	PROGBITS	0x305ffd0	0x2bf5fd0	0x57e	0x0	0x2	A	0	0	4
.tdata	PROGBITS	0x3062538	0x2bf7538	0x4	0x0	0x403	WAT	0	0	8
.tbss	NOBITS	0x3062540	0x2bf753c	0x58	0x0	0x403	WAT	0	0	8
.init_array	INIT_ARRAY	0x3062540	0x2bf7540	0x10b0	0x8	0x3	WA	0	0	8
.fini_array	FINI_ARRAY	0x30635f0	0x2bf85f0	0x10	0x8	0x3	WA	0	0	8
.data.rel.ro	PROGBITS	0x3063600	0x2bf8600	0x640	0x0	0x3	WA	0	0	32
.dynamic	DYNAMIC	0x3063c40	0x2bf8c40	0x250	0x10	0x3	WA	6	0	8
.got	PROGBITS	0x3063e90	0x2bf8e90	0x1170	0x8	0x3	WA	0	0	8
.data	PROGBITS	0x3065000	0x2bfa000	0x15fc0	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x307afc0	0x2c0ffc0	0x21b10	0x0	0x3	WA	0	0	64
.comment	PROGBITS	0x0	0x2c0ffc0	0x66	0x1	0x30	MS	0	0	1
.shstrtab	STRTAB	0x0	0x2c10026	0x11d	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
PHDR	0x40	0x400040	0x400040	0x310	0x310	2.2772	0x4	R	0x8
INTERP	0x350	0x400350	0x400350	0x1c	0x1c	3.9408	0x4	R	0x1	/lib64/ld-linux-x86-64.so.2	.interp
LOAD	0x0	0x400000	0x400000	0x517bb0	0x517bb0	5.7540	0x4	R	0x1000		.interp .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt
LOAD	0x518000	0x918000	0x918000	0x20a0	0x20a0	4.9446	0x5	R E	0x1000		.init .plt
LOAD	0x51b000	0x91c000	0x91c000	0x167a76a	0x167a76a	6.4441	0x5	R E	0x1000		.text
LOAD	0x1b96000	0x2000000	0x2000000	0x1cd	0x1cd	5.8789	0x5	R E	0x1000		lpstub .fini
LOAD	0x1b97000	0x2001000	0x2001000	0x105f54e	0x105f54e	6.1228	0x4	R	0x1000		.rodata .eh_frame_hdr .eh_frame .gcc_except_table
LOAD	0x2bf7538	0x3062538	0x3062538	0x18a88	0x3a598	2.7621	0x6	RW	0x1000		.tdata .tbss .init_array .fini_array .data.rel.ro .dynamic .got .data .bss
DYNAMIC	0x2bf8c40	0x3063c40	0x3063c40	0x250	0x250	1.7410	0x6	RW	0x8		.dynamic
NOTE	0x36c	0x40036c	0x40036c	0x44	0x44	3.4924	0x4	R	0x4		.note.gnu.build-id .note.ABI-tag
TLS	0x2bf7538	0x3062538	0x3062538	0x4	0x60	0.0000	0x4	R	0x8		.tdata .tbss
GNU_EH_FRAME	0x28dc4b8	0x2d464b8	0x2d464b8	0x7e304	0x7e304	6.8237	0x4	R	0x4		.eh_frame_hdr
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x10
GNU_RELRO	0x2bf7538	0x3062538	0x3062538	0x2ac8	0x2ac8	2.5908	0x4	R	0x1		.tdata .tbss .init_array .fini_array .data.rel.ro .dynamic .got

Dynamic Tags

Type	Meta	Value	Tag
DT_NEEDED	sharedlib	libdl.so.2	0x1
DT_NEEDED	sharedlib	libstdc++.so.6	0x1
DT_NEEDED	sharedlib	libm.so.6	0x1
DT_NEEDED	sharedlib	libgcc_s.so.1	0x1
DT_NEEDED	sharedlib	libpthread.so.0	0x1
DT_NEEDED	sharedlib	libc.so.6	0x1
DT_NEEDED	sharedlib	ld-linux-x86-64.so.2	0x1
DT_INIT	value	0x918000	0xc
DT_FINI	value	0x20001c4	0xd
DT_INIT_ARRAY	value	0x3062540	0x19
DT_INIT_ARRAYSZ	bytes	4272	0x1b
DT_FINI_ARRAY	value	0x30635f0	0x1a
DT_FINI_ARRAYSZ	bytes	16	0x1c
DT_GNU_HASH	value	0x4003b0	0x6ffffef5
DT_STRTAB	value	0x5acad0	0x5
DT_SYMTAB	value	0x466268	0x6
DT_STRSZ	bytes	3458093	0xa
DT_SYMENT	bytes	24	0xb
DT_DEBUG	value	0x0	0x15
DT_PLTGOT	value	0x3063e90	0x3
DT_PLTRELSZ	bytes	12456	0x2
DT_PLTREL	pltrel	DT_RELA	0x14
DT_JMPREL	value	0x914b08	0x17
DT_RELA	value	0x914490	0x7
DT_RELASZ	bytes	1656	0x8
DT_RELAENT	bytes	24	0x9
DT_BIND_NOW	value	0x0	0x18
DT_FLAGS_1	value	0x1	0x6ffffffb
DT_VERNEED	value	0x914260	0x6ffffffe
DT_VERNEEDNUM	value	7	0x6fffffff
DT_VERSYM	value	0x8f8efe	0x6ffffff0
DT_NULL	value	0x0	0x0

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.dynsym	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
ACCESS_DESCRIPTION_free	.dynsym	0xdb72c0	31	FUNC	<unknown>	DEFAULT	13
ACCESS_DESCRIPTION_it	.dynsym	0xdb2b90	6	FUNC	<unknown>	DEFAULT	13
ACCESS_DESCRIPTION_new	.dynsym	0xdb3c80	53	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_free	.dynsym	0xda5800	31	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_get0_admissionAuthority	.dynsym	0xda3d70	4	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_get0_namingAuthority	.dynsym	0xda3d80	5	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_get0_professionInfos	.dynsym	0xda3d90	5	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_it	.dynsym	0xda1560	6	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_new	.dynsym	0xda3b80	53	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_set0_admissionAuthority	.dynsym	0xda59f0	47	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_set0_namingAuthority	.dynsym	0xda5a20	49	FUNC	<unknown>	DEFAULT	13
ADMISSIONS_set0_professionInfos	.dynsym	0xda5a60	247	FUNC	<unknown>	DEFAULT	13
ADMISSION_SYNTAX_free	.dynsym	0xda58a0	31	FUNC	<unknown>	DEFAULT	13
ADMISSION_SYNTAX_get0_admissionAuthority	.dynsym	0xda3d50	4	FUNC	<unknown>	DEFAULT	13
ADMISSION_SYNTAX_get0_contentsOfAdmissions	.dynsym	0xda3d60	5	FUNC	<unknown>	DEFAULT	13
ADMISSION_SYNTAX_it	.dynsym	0xda1570	6	FUNC	<unknown>	DEFAULT	13
ADMISSION_SYNTAX_new	.dynsym	0xda3bc0	53	FUNC	<unknown>	DEFAULT	13
ADMISSION_SYNTAX_set0_admissionAuthority	.dynsym	0xda58c0	47	FUNC	<unknown>	DEFAULT	13
ADMISSION_SYNTAX_set0_contentsOfAdmissions	.dynsym	0xda58f0	247	FUNC	<unknown>	DEFAULT	13
AES_bi_ige_encrypt	.dynsym	0xbf0f00	2316	FUNC	<unknown>	DEFAULT	13
AES_cbc_encrypt	.dynsym	0x1c8a020	1427	FUNC	<unknown>	DEFAULT	13
AES_cfb128_encrypt	.dynsym	0xbf0b10	24	FUNC	<unknown>	DEFAULT	13
AES_cfb1_encrypt	.dynsym	0xbeb950	193	FUNC	<unknown>	DEFAULT	13
AES_cfb8_encrypt	.dynsym	0xbeba20	187	FUNC	<unknown>	DEFAULT	13
AES_decrypt	.dynsym	0x1c89a70	188	FUNC	<unknown>	DEFAULT	13
AES_ecb_encrypt	.dynsym	0xbebae0	21	FUNC	<unknown>	DEFAULT	13
AES_encrypt	.dynsym	0x1c894e0	181	FUNC	<unknown>	DEFAULT	13
AES_ige_encrypt	.dynsym	0xbf0b30	972	FUNC	<unknown>	DEFAULT	13
AES_ofb128_encrypt	.dynsym	0xbf1810	19	FUNC	<unknown>	DEFAULT	13
AES_options	.dynsym	0xbebb00	6	FUNC	<unknown>	DEFAULT	13
AES_set_decrypt_key	.dynsym	0x1c89df0	545	FUNC	<unknown>	DEFAULT	13
AES_set_encrypt_key	.dynsym	0x1c89b30	39	FUNC	<unknown>	DEFAULT	13
AES_unwrap_key	.dynsym	0xbebb50	130	FUNC	<unknown>	DEFAULT	13
AES_wrap_key	.dynsym	0xbebb10	52	FUNC	<unknown>	DEFAULT	13
ASIdOrRange_free	.dynsym	0xda5d50	31	FUNC	<unknown>	DEFAULT	13
ASIdOrRange_it	.dynsym	0xda15a0	6	FUNC	<unknown>	DEFAULT	13
ASIdOrRange_new	.dynsym	0xda4210	53	FUNC	<unknown>	DEFAULT	13
ASIdentifierChoice_free	.dynsym	0xda5df0	31	FUNC	<unknown>	DEFAULT	13
ASIdentifierChoice_it	.dynsym	0xda15b0	6	FUNC	<unknown>	DEFAULT	13
ASIdentifierChoice_new	.dynsym	0xda4250	53	FUNC	<unknown>	DEFAULT	13
ASIdentifiers_free	.dynsym	0xda5e90	31	FUNC	<unknown>	DEFAULT	13
ASIdentifiers_it	.dynsym	0xda15c0	6	FUNC	<unknown>	DEFAULT	13
ASIdentifiers_new	.dynsym	0xda4290	53	FUNC	<unknown>	DEFAULT	13
ASN1_ANY_it	.dynsym	0xbfc850	6	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_check	.dynsym	0xbed370	99	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_free	.dynsym	0xbfda80	103	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_get_bit	.dynsym	0xbed320	65	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_it	.dynsym	0xbfc710	6	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_name_print	.dynsym	0xc00500	216	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_new	.dynsym	0xbffce0	164	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_num_asc	.dynsym	0xbfd6c0	90	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_set	.dynsym	0xbf1830	5	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_set_asc	.dynsym	0xc00470	139	FUNC	<unknown>	DEFAULT	13
ASN1_BIT_STRING_set_bit	.dynsym	0xbf1aa0	348	FUNC	<unknown>	DEFAULT	13
ASN1_BMPSTRING_free	.dynsym	0xbfde70	103	FUNC	<unknown>	DEFAULT	13
ASN1_BMPSTRING_it	.dynsym	0xbfc820	6	FUNC	<unknown>	DEFAULT	13
ASN1_BMPSTRING_new	.dynsym	0xc003c0	164	FUNC	<unknown>	DEFAULT	13
ASN1_BOOLEAN_it	.dynsym	0xbfc8a0	6	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_free	.dynsym	0xbfda10	103	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_get	.dynsym	0xbf32c0	464	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_get_int64	.dynsym	0xbf3060	599	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_it	.dynsym	0xbfc700	6	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_new	.dynsym	0xbffc30	164	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_set	.dynsym	0xbf1a10	117	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_set_int64	.dynsym	0xbf1990	117	FUNC	<unknown>	DEFAULT	13
ASN1_ENUMERATED_to_BN	.dynsym	0xbf3490	209	FUNC	<unknown>	DEFAULT	13
ASN1_FBOOLEAN_it	.dynsym	0xbfc8c0	6	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_adj	.dynsym	0xbfa900	111	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_check	.dynsym	0xbf6b90	26	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_dup	.dynsym	0xbf1e90	13	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_free	.dynsym	0xbfdd20	103	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_it	.dynsym	0xbfc7f0	6	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_new	.dynsym	0xc001b0	164	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_print	.dynsym	0xbfb350	40	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_set	.dynsym	0xbfa970	57	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALIZEDTIME_set_string	.dynsym	0xbf6bb0	159	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALSTRING_free	.dynsym	0xbfdc40	103	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALSTRING_it	.dynsym	0xbfc7d0	6	FUNC	<unknown>	DEFAULT	13
ASN1_GENERALSTRING_new	.dynsym	0xc00050	164	FUNC	<unknown>	DEFAULT	13
ASN1_IA5STRING_free	.dynsym	0xbfdbd0	103	FUNC	<unknown>	DEFAULT	13
ASN1_IA5STRING_it	.dynsym	0xbfc7c0	6	FUNC	<unknown>	DEFAULT	13
ASN1_IA5STRING_new	.dynsym	0xbfffa0	164	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_cmp	.dynsym	0xbed3e0	103	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_dup	.dynsym	0xbf70a0	5	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_free	.dynsym	0xbfc690	103	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_get	.dynsym	0xbf2d90	486	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_get_int64	.dynsym	0xbf2940	599	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_get_uint64	.dynsym	0xbf2ba0	489	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_it	.dynsym	0xbfc680	6	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_new	.dynsym	0xbffb80	164	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_set	.dynsym	0xbf1910	117	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_set_int64	.dynsym	0xbf1840	117	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_set_uint64	.dynsym	0xbf18c0	69	FUNC	<unknown>	DEFAULT	13
ASN1_INTEGER_to_BN	.dynsym	0xbf2f80	209	FUNC	<unknown>	DEFAULT	13
ASN1_ITEM_get	.dynsym	0xbfcdd0	19	FUNC	<unknown>	DEFAULT	13
ASN1_ITEM_lookup	.dynsym	0xbfcd80	75	FUNC	<unknown>	DEFAULT	13
ASN1_NULL_free	.dynsym	0xc090a0	31	FUNC	<unknown>	DEFAULT	13
ASN1_NULL_it	.dynsym	0xbfc830	6	FUNC	<unknown>	DEFAULT	13
ASN1_NULL_new	.dynsym	0xc0ad50	53	FUNC	<unknown>	DEFAULT	13
ASN1_OBJECT_create	.dynsym	0xbf3850	365	FUNC	<unknown>	DEFAULT	13
ASN1_OBJECT_free	.dynsym	0xbeb800	145	FUNC	<unknown>	DEFAULT	13
ASN1_OBJECT_it	.dynsym	0xbfc840	6	FUNC	<unknown>	DEFAULT	13
ASN1_OBJECT_new	.dynsym	0xbf37a0	172	FUNC	<unknown>	DEFAULT	13
ASN1_OCTET_STRING_NDEF_it	.dynsym	0xbfc8d0	6	FUNC	<unknown>	DEFAULT	13
ASN1_OCTET_STRING_cmp	.dynsym	0xbed890	81	FUNC	<unknown>	DEFAULT	13
ASN1_OCTET_STRING_dup	.dynsym	0xbf70b0	5	FUNC	<unknown>	DEFAULT	13
ASN1_OCTET_STRING_free	.dynsym	0xbfd400	103	FUNC	<unknown>	DEFAULT	13
ASN1_OCTET_STRING_it	.dynsym	0xbfc670	6	FUNC	<unknown>	DEFAULT	13
ASN1_OCTET_STRING_new	.dynsym	0xbffad0	164	FUNC	<unknown>	DEFAULT	13
ASN1_OCTET_STRING_set	.dynsym	0xbf1a90	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_free	.dynsym	0xbfd8c0	37	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_get_cert_flags	.dynsym	0xbfd930	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_get_flags	.dynsym	0xbfd8f0	4	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_get_nm_flags	.dynsym	0xbfd910	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_get_oid_flags	.dynsym	0xbfd950	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_get_str_flags	.dynsym	0xbfd970	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_new	.dynsym	0xbff960	164	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_set_cert_flags	.dynsym	0xbfd940	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_set_flags	.dynsym	0xbfd900	4	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_set_nm_flags	.dynsym	0xbfd920	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_set_oid_flags	.dynsym	0xbfd960	5	FUNC	<unknown>	DEFAULT	13
ASN1_PCTX_set_str_flags	.dynsym	0xbfd980	5	FUNC	<unknown>	DEFAULT	13
ASN1_PRINTABLESTRING_free	.dynsym	0xbfdaf0	103	FUNC	<unknown>	DEFAULT	13
ASN1_PRINTABLESTRING_it	.dynsym	0xbfc7a0	6	FUNC	<unknown>	DEFAULT	13
ASN1_PRINTABLESTRING_new	.dynsym	0xbffe40	164	FUNC	<unknown>	DEFAULT	13
ASN1_PRINTABLE_free	.dynsym	0xc090c0	31	FUNC	<unknown>	DEFAULT	13
ASN1_PRINTABLE_it	.dynsym	0xbfc870	6	FUNC	<unknown>	DEFAULT	13
ASN1_PRINTABLE_new	.dynsym	0xc11cf0	53	FUNC	<unknown>	DEFAULT	13
ASN1_PRINTABLE_type	.dynsym	0xbed8f0	166	FUNC	<unknown>	DEFAULT	13
ASN1_SCTX_free	.dynsym	0xbfd990	37	FUNC	<unknown>	DEFAULT	13
ASN1_SCTX_get_app_data	.dynsym	0xbfda00	5	FUNC	<unknown>	DEFAULT	13
ASN1_SCTX_get_flags	.dynsym	0xbfd9e0	5	FUNC	<unknown>	DEFAULT	13
ASN1_SCTX_get_item	.dynsym	0xbfd9c0	4	FUNC	<unknown>	DEFAULT	13
ASN1_SCTX_get_template	.dynsym	0xbfd9d0	5	FUNC	<unknown>	DEFAULT	13
ASN1_SCTX_new	.dynsym	0xbffa10	188	FUNC	<unknown>	DEFAULT	13
ASN1_SCTX_set_app_data	.dynsym	0xbfd9f0	5	FUNC	<unknown>	DEFAULT	13
ASN1_SEQUENCE_ANY_it	.dynsym	0xbfc8e0	6	FUNC	<unknown>	DEFAULT	13
ASN1_SEQUENCE_it	.dynsym	0xbfc860	6	FUNC	<unknown>	DEFAULT	13
ASN1_SET_ANY_it	.dynsym	0xbfc8f0	6	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_TABLE_add	.dynsym	0xbfa5a0	441	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_TABLE_cleanup	.dynsym	0xbedd20	193	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_TABLE_get	.dynsym	0xbedc70	162	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_clear_free	.dynsym	0xbfd160	153	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_cmp	.dynsym	0xbfd200	81	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_copy	.dynsym	0xbfe870	99	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_data	.dynsym	0xbfd2a0	5	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_dup	.dynsym	0xbfe8e0	265	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_free	.dynsym	0xbfd0f0	103	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_get0_data	.dynsym	0xbfd290	5	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_get_default_mask	.dynsym	0xbedb40	8	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_length	.dynsym	0xbfd260	3	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_length_set	.dynsym	0xbfd270	3	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_new	.dynsym	0xbfe9f0	164	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_print	.dynsym	0xbf3cd0	730	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_print_ex	.dynsym	0xbedb20	14	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_print_ex_fp	.dynsym	0xbf9470	581	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_set	.dynsym	0xbfe730	312	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_set0	.dynsym	0xbfd0a0	80	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_set_by_NID	.dynsym	0xbf52a0	173	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_set_default_mask	.dynsym	0xbedb30	8	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_set_default_mask_asc	.dynsym	0xbedb50	282	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_to_UTF8	.dynsym	0xbf5210	143	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_type	.dynsym	0xbfd280	4	FUNC	<unknown>	DEFAULT	13
ASN1_STRING_type_new	.dynsym	0xbfe680	172	FUNC	<unknown>	DEFAULT	13
ASN1_T61STRING_free	.dynsym	0xbfdb60	103	FUNC	<unknown>	DEFAULT	13
ASN1_T61STRING_it	.dynsym	0xbfc7b0	6	FUNC	<unknown>	DEFAULT	13
ASN1_T61STRING_new	.dynsym	0xbffef0	164	FUNC	<unknown>	DEFAULT	13
ASN1_TBOOLEAN_it	.dynsym	0xbfc8b0	6	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_adj	.dynsym	0xbfa9b0	177	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_check	.dynsym	0xbf6c70	26	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_cmp_time_t	.dynsym	0xbfadf0	233	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_compare	.dynsym	0xbfaee0	312	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_diff	.dynsym	0xbfacf0	253	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_dup	.dynsym	0xbf1ea0	13	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_free	.dynsym	0xbef9b0	31	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_it	.dynsym	0xbeb8a0	6	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_new	.dynsym	0xbeddf0	53	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_normalize	.dynsym	0xbfabb0	142	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_print	.dynsym	0xbfb330	24	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_print_ex	.dynsym	0xbfb380	22	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_set	.dynsym	0xbfaa70	121	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_set_string	.dynsym	0xbf6d90	350	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_set_string_X509	.dynsym	0xbf6ef0	395	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_to_generalizedtime	.dynsym	0xbfaaf0	180	FUNC	<unknown>	DEFAULT	13
ASN1_TIME_to_tm	.dynsym	0xbf6c90	94	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_cmp	.dynsym	0xbede50	182	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_free	.dynsym	0xc08fd0	31	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_get	.dynsym	0xbede30	26	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_get_int_octetstring	.dynsym	0xc0cd10	202	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_get_octetstring	.dynsym	0xbfecb0	124	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_new	.dynsym	0xc0ad90	53	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_pack_sequence	.dynsym	0xbfb530	188	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_set	.dynsym	0xbfb3d0	101	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_set1	.dynsym	0xbfb440	236	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_set_int_octetstring	.dynsym	0xc09500	180	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_set_octetstring	.dynsym	0xbfebb0	243	FUNC	<unknown>	DEFAULT	13
ASN1_TYPE_unpack_sequence	.dynsym	0xbf41e0	273	FUNC	<unknown>	DEFAULT	13
ASN1_UNIVERSALSTRING_free	.dynsym	0xbfde00	103	FUNC	<unknown>	DEFAULT	13
ASN1_UNIVERSALSTRING_it	.dynsym	0xbfc810	6	FUNC	<unknown>	DEFAULT	13
ASN1_UNIVERSALSTRING_new	.dynsym	0xc00310	164	FUNC	<unknown>	DEFAULT	13
ASN1_UNIVERSALSTRING_to_string	.dynsym	0xbed9a0	375	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_adj	.dynsym	0xbfac40	111	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_check	.dynsym	0xbf6c50	26	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_cmp_time_t	.dynsym	0xbfb020	136	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_dup	.dynsym	0xbf1eb0	13	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_free	.dynsym	0xbfdcb0	103	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_it	.dynsym	0xbfc7e0	6	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_new	.dynsym	0xc00100	164	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_print	.dynsym	0xbfb3a0	40	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_set	.dynsym	0xbfacb0	57	FUNC	<unknown>	DEFAULT	13
ASN1_UTCTIME_set_string	.dynsym	0xbf6cf0	159	FUNC	<unknown>	DEFAULT	13
ASN1_UTF8STRING_free	.dynsym	0xbfc730	103	FUNC	<unknown>	DEFAULT	13
ASN1_UTF8STRING_it	.dynsym	0xbfc720	6	FUNC	<unknown>	DEFAULT	13
ASN1_UTF8STRING_new	.dynsym	0xbffd90	164	FUNC	<unknown>	DEFAULT	13
ASN1_VISIBLESTRING_free	.dynsym	0xbfdd90	103	FUNC	<unknown>	DEFAULT	13
ASN1_VISIBLESTRING_it	.dynsym	0xbfc800	6	FUNC	<unknown>	DEFAULT	13
ASN1_VISIBLESTRING_new	.dynsym	0xc00260	164	FUNC	<unknown>	DEFAULT	13
ASN1_add_oid_module	.dynsym	0xc03cf0	361	FUNC	<unknown>	DEFAULT	13
ASN1_add_stable_module	.dynsym	0xc03e60	361	FUNC	<unknown>	DEFAULT	13
ASN1_bn_print	.dynsym	0xc05620	22	FUNC	<unknown>	DEFAULT	13
ASN1_buf_print	.dynsym	0xc005e0	913	FUNC	<unknown>	DEFAULT	13
ASN1_check_infinite_end	.dynsym	0xbfcdf0	53	FUNC	<unknown>	DEFAULT	13
ASN1_const_check_infinite_end	.dynsym	0xbfce30	53	FUNC	<unknown>	DEFAULT	13
ASN1_d2i_bio	.dynsym	0xbf5c90	101	FUNC	<unknown>	DEFAULT	13
ASN1_d2i_fp	.dynsym	0xbf5d00	201	FUNC	<unknown>	DEFAULT	13
ASN1_digest	.dynsym	0xbf61d0	331	FUNC	<unknown>	DEFAULT	13
ASN1_dup	.dynsym	0xbf1c00	205	FUNC	<unknown>	DEFAULT	13
ASN1_generate_nconf	.dynsym	0xbf44d0	215	FUNC	<unknown>	DEFAULT	13
ASN1_generate_v3	.dynsym	0xbf4460	101	FUNC	<unknown>	DEFAULT	13
ASN1_get_object	.dynsym	0xbfe390	740	FUNC	<unknown>	DEFAULT	13
ASN1_i2d_bio	.dynsym	0xbf1ec0	723	FUNC	<unknown>	DEFAULT	13
ASN1_i2d_fp	.dynsym	0xbf5350	158	FUNC	<unknown>	DEFAULT	13
ASN1_item_d2i	.dynsym	0xc0d640	183	FUNC	<unknown>	DEFAULT	13
ASN1_item_d2i_bio	.dynsym	0xbf5ef0	271	FUNC	<unknown>	DEFAULT	13
ASN1_item_d2i_bio_ex	.dynsym	0xbf5dd0	279	FUNC	<unknown>	DEFAULT	13
ASN1_item_d2i_ex	.dynsym	0xc0c470	183	FUNC	<unknown>	DEFAULT	13
ASN1_item_d2i_fp	.dynsym	0xbf60f0	209	FUNC	<unknown>	DEFAULT	13
ASN1_item_d2i_fp_ex	.dynsym	0xbf6000	225	FUNC	<unknown>	DEFAULT	13
ASN1_item_digest	.dynsym	0xbf6460	19	FUNC	<unknown>	DEFAULT	13
ASN1_item_dup	.dynsym	0xbf1cd0	441	FUNC	<unknown>	DEFAULT	13
ASN1_item_ex_d2i	.dynsym	0xc0d5a0	157	FUNC	<unknown>	DEFAULT	13
ASN1_item_ex_free	.dynsym	0xc08dc0	7	FUNC	<unknown>	DEFAULT	13
ASN1_item_ex_i2d	.dynsym	0xc05d20	1218	FUNC	<unknown>	DEFAULT	13
ASN1_item_ex_new	.dynsym	0xc0aba0	12	FUNC	<unknown>	DEFAULT	13
ASN1_item_free	.dynsym	0xc08dd0	26	FUNC	<unknown>	DEFAULT	13
ASN1_item_i2d	.dynsym	0xc06c10	215	FUNC	<unknown>	DEFAULT	13
ASN1_item_i2d_bio	.dynsym	0xbf21a0	745	FUNC	<unknown>	DEFAULT	13
ASN1_item_i2d_fp	.dynsym	0xbf53f0	158	FUNC	<unknown>	DEFAULT	13
ASN1_item_i2d_mem_bio	.dynsym	0xbf5490	141	FUNC	<unknown>	DEFAULT	13
ASN1_item_ndef_i2d	.dynsym	0xc06b30	223	FUNC	<unknown>	DEFAULT	13
ASN1_item_new	.dynsym	0xc094c0	51	FUNC	<unknown>	DEFAULT	13
ASN1_item_new_ex	.dynsym	0xc0ab60	52	FUNC	<unknown>	DEFAULT	13
ASN1_item_pack	.dynsym	0xc06cf0	350	FUNC	<unknown>	DEFAULT	13
ASN1_item_print	.dynsym	0xc11110	59	FUNC	<unknown>	DEFAULT	13
ASN1_item_sign	.dynsym	0xbf8cd0	237	FUNC	<unknown>	DEFAULT	13
ASN1_item_sign_ctx	.dynsym	0xbf8600	1489	FUNC	<unknown>	DEFAULT	13
ASN1_item_sign_ex	.dynsym	0xbf8be0	225	FUNC	<unknown>	DEFAULT	13
ASN1_item_unpack	.dynsym	0xc0cc20	225	FUNC	<unknown>	DEFAULT	13
ASN1_item_verify	.dynsym	0xbfbda0	104	FUNC	<unknown>	DEFAULT	13
ASN1_item_verify_ctx	.dynsym	0xbfb8b0	1130	FUNC	<unknown>	DEFAULT	13
ASN1_item_verify_ex	.dynsym	0xbfbd20	120	FUNC	<unknown>	DEFAULT	13
ASN1_mbstring_copy	.dynsym	0xbf51f0	19	FUNC	<unknown>	DEFAULT	13
ASN1_mbstring_ncopy	.dynsym	0xbf4a60	1934	FUNC	<unknown>	DEFAULT	13
ASN1_object_size	.dynsym	0xbfccf0	99	FUNC	<unknown>	DEFAULT	13
ASN1_parse	.dynsym	0xc10860	34	FUNC	<unknown>	DEFAULT	13
ASN1_parse_dump	.dynsym	0xc10890	34	FUNC	<unknown>	DEFAULT	13
ASN1_put_eoc	.dynsym	0xbfd010	21	FUNC	<unknown>	DEFAULT	13
ASN1_put_object	.dynsym	0xbfce70	407	FUNC	<unknown>	DEFAULT	13
ASN1_sign	.dynsym	0xbf8110	1263	FUNC	<unknown>	DEFAULT	13
ASN1_str2mask	.dynsym	0xbfe0f0	271	FUNC	<unknown>	DEFAULT	13
ASN1_tag2bit	.dynsym	0xbfcd60	19	FUNC	<unknown>	DEFAULT	13
ASN1_tag2str	.dynsym	0xbfd470	43	FUNC	<unknown>	DEFAULT	13
ASN1_verify	.dynsym	0xbfb5f0	700	FUNC	<unknown>	DEFAULT	13
ASRange_free	.dynsym	0xda5cb0	31	FUNC	<unknown>	DEFAULT	13
ASRange_it	.dynsym	0xda1590	6	FUNC	<unknown>	DEFAULT	13
ASRange_new	.dynsym	0xda41d0	53	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_clear_fd	.dynsym	0xc13220	151	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_free	.dynsym	0xc13040	177	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_get_all_fds	.dynsym	0xc13150	62	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_get_callback	.dynsym	0xc132e0	35	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_get_changed_fds	.dynsym	0xc13190	137	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_get_fd	.dynsym	0xc13100	69	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_get_status	.dynsym	0xc13320	4	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_new	.dynsym	0xc12fe0	96	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_set_callback	.dynsym	0xc132c0	27	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_set_status	.dynsym	0xc13310	9	FUNC	<unknown>	DEFAULT	13
ASYNC_WAIT_CTX_set_wait_fd	.dynsym	0xc15ee0	152	FUNC	<unknown>	DEFAULT	13
ASYNC_block_pause	.dynsym	0xc12f30	70	FUNC	<unknown>	DEFAULT	13
ASYNC_cleanup_thread	.dynsym	0xc207a0	93	FUNC	<unknown>	DEFAULT	13
ASYNC_get_current_job	.dynsym	0xc12ee0	55	FUNC	<unknown>	DEFAULT	13
ASYNC_get_wait_ctx	.dynsym	0xc12f20	8	FUNC	<unknown>	DEFAULT	13
ASYNC_init_thread	.dynsym	0xc20800	763	FUNC	<unknown>	DEFAULT	13
ASYNC_is_capable	.dynsym	0xc12ca0	31	FUNC	<unknown>	DEFAULT	13
ASYNC_pause_job	.dynsym	0xc15db0	303	FUNC	<unknown>	DEFAULT	13
ASYNC_start_job	.dynsym	0xc211b0	101	FUNC	<unknown>	DEFAULT	13
ASYNC_unblock_pause	.dynsym	0xc12f80	82	FUNC	<unknown>	DEFAULT	13
AUTHORITY_INFO_ACCESS_free	.dynsym	0xdb7360	31	FUNC	<unknown>	DEFAULT	13
AUTHORITY_INFO_ACCESS_it	.dynsym	0xdb2ba0	6	FUNC	<unknown>	DEFAULT	13
AUTHORITY_INFO_ACCESS_new	.dynsym	0xdb3cc0	53	FUNC	<unknown>	DEFAULT	13
AUTHORITY_KEYID_free	.dynsym	0xda5c10	31	FUNC	<unknown>	DEFAULT	13
AUTHORITY_KEYID_it	.dynsym	0xda1580	6	FUNC	<unknown>	DEFAULT	13
AUTHORITY_KEYID_new	.dynsym	0xda4190	53	FUNC	<unknown>	DEFAULT	13
BAKERY	.dynsym	0x306ba58	8	OBJECT	<unknown>	DEFAULT	27
BASIC_CONSTRAINTS_free	.dynsym	0xdb6870	31	FUNC	<unknown>	DEFAULT	13
BASIC_CONSTRAINTS_it	.dynsym	0xdb2a90	6	FUNC	<unknown>	DEFAULT	13
BASIC_CONSTRAINTS_new	.dynsym	0xdb36d0	53	FUNC	<unknown>	DEFAULT	13
BF_cbc_encrypt	.dynsym	0xc13c70	1195	FUNC	<unknown>	DEFAULT	13
BF_cfb64_encrypt	.dynsym	0xc13710	311	FUNC	<unknown>	DEFAULT	13
BF_decrypt	.dynsym	0xc13850	963	FUNC	<unknown>	DEFAULT	13
BF_ecb_encrypt	.dynsym	0xc13c20	79	FUNC	<unknown>	DEFAULT	13
BF_encrypt	.dynsym	0xc13340	963	FUNC	<unknown>	DEFAULT	13
BF_ofb64_encrypt	.dynsym	0xc14120	221	FUNC	<unknown>	DEFAULT	13
BF_options	.dynsym	0xc13330	6	FUNC	<unknown>	DEFAULT	13
BF_set_key	.dynsym	0xc14200	293	FUNC	<unknown>	DEFAULT	13
BIGNUM_it	.dynsym	0xc11dd0	6	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_address	.dynsym	0xc148b0	12	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_family	.dynsym	0xc14830	11	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_free	.dynsym	0xc148c0	169	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_next	.dynsym	0xc14820	12	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_protocol	.dynsym	0xc14850	54	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_sockaddr	.dynsym	0xc148a0	12	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_sockaddr_size	.dynsym	0xc14890	11	FUNC	<unknown>	DEFAULT	13
BIO_ADDRINFO_socktype	.dynsym	0xc14840	11	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_clear	.dynsym	0xc14520	41	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_family	.dynsym	0xc14700	4	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_free	.dynsym	0xc144f0	37	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_hostname_string	.dynsym	0xc1c8e0	43	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_make	.dynsym	0xc14550	173	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_new	.dynsym	0xc16440	180	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_path_string	.dynsym	0xc14dc0	35	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_rawaddress	.dynsym	0xc14710	122	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_rawmake	.dynsym	0xc14600	241	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_rawport	.dynsym	0xc14790	41	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_service_string	.dynsym	0xc1c910	43	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_sockaddr	.dynsym	0xc147d0	4	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_sockaddr_noconst	.dynsym	0xc147e0	4	FUNC	<unknown>	DEFAULT	13
BIO_ADDR_sockaddr_size	.dynsym	0xc147f0	39	FUNC	<unknown>	DEFAULT	13
BIO_CONNECT_free	.dynsym	0xc151e0	159	FUNC	<unknown>	DEFAULT	13
BIO_CONNECT_new	.dynsym	0xc1ec40	172	FUNC	<unknown>	DEFAULT	13
BIO_accept	.dynsym	0xc1e010	619	FUNC	<unknown>	DEFAULT	13
BIO_accept_ex	.dynsym	0xc1def0	276	FUNC	<unknown>	DEFAULT	13
BIO_asn1_get_prefix	.dynsym	0xbfd5c0	52	FUNC	<unknown>	DEFAULT	13
BIO_asn1_get_suffix	.dynsym	0xbfd630	52	FUNC	<unknown>	DEFAULT	13
BIO_asn1_set_prefix	.dynsym	0xbfd590	40	FUNC	<unknown>	DEFAULT	13
BIO_asn1_set_suffix	.dynsym	0xbfd600	40	FUNC	<unknown>	DEFAULT	13
BIO_bind	.dynsym	0xc1d960	406	FUNC	<unknown>	DEFAULT	13
BIO_callback_ctrl	.dynsym	0xc19ce0	340	FUNC	<unknown>	DEFAULT	13
BIO_clear_flags	.dynsym	0xc14340	6	FUNC	<unknown>	DEFAULT	13
BIO_closesocket	.dynsym	0xc15060	35	FUNC	<unknown>	DEFAULT	13
BIO_connect	.dynsym	0xc1d680	730	FUNC	<unknown>	DEFAULT	13
BIO_copy_next_retry	.dynsym	0xc14350	20	FUNC	<unknown>	DEFAULT	13
BIO_ctrl	.dynsym	0xc18e20	336	FUNC	<unknown>	DEFAULT	13
BIO_ctrl_get_read_request	.dynsym	0xc151b0	12	FUNC	<unknown>	DEFAULT	13
BIO_ctrl_get_write_guarantee	.dynsym	0xc151a0	12	FUNC	<unknown>	DEFAULT	13
BIO_ctrl_pending	.dynsym	0xc14b80	12	FUNC	<unknown>	DEFAULT	13
BIO_ctrl_reset_read_request	.dynsym	0xc151c0	30	FUNC	<unknown>	DEFAULT	13
BIO_ctrl_wpending	.dynsym	0xc14b90	12	FUNC	<unknown>	DEFAULT	13
BIO_debug_callback	.dynsym	0xc1cbd0	78	FUNC	<unknown>	DEFAULT	13
BIO_debug_callback_ex	.dynsym	0xc1c940	644	FUNC	<unknown>	DEFAULT	13
BIO_dgram_non_fatal_error	.dynsym	0xc250e0	54	FUNC	<unknown>	DEFAULT	13
BIO_do_connect_retry	.dynsym	0xc23c90	750	FUNC	<unknown>	DEFAULT	13
BIO_dump	.dynsym	0xc14a80	7	FUNC	<unknown>	DEFAULT	13
BIO_dump_cb	.dynsym	0xc14a50	5	FUNC	<unknown>	DEFAULT	13
BIO_dump_fp	.dynsym	0xc14a60	18	FUNC	<unknown>	DEFAULT	13
BIO_dump_indent	.dynsym	0xc14a90	5	FUNC	<unknown>	DEFAULT	13
BIO_dump_indent_cb	.dynsym	0xc1cc20	797	FUNC	<unknown>	DEFAULT	13
BIO_dump_indent_fp	.dynsym	0xc1cf40	21	FUNC	<unknown>	DEFAULT	13
BIO_dup_chain	.dynsym	0xc22220	270	FUNC	<unknown>	DEFAULT	13
BIO_f_asn1	.dynsym	0xbfd580	6	FUNC	<unknown>	DEFAULT	13
BIO_f_base64	.dynsym	0xccc0a0	6	FUNC	<unknown>	DEFAULT	13
BIO_f_buffer	.dynsym	0xc14330	6	FUNC	<unknown>	DEFAULT	13
BIO_f_cipher	.dynsym	0xccc0b0	6	FUNC	<unknown>	DEFAULT	13
BIO_f_linebuffer	.dynsym	0xc14440	6	FUNC	<unknown>	DEFAULT	13
BIO_f_md	.dynsym	0xccc270	6	FUNC	<unknown>	DEFAULT	13
BIO_f_nbio_test	.dynsym	0xc14450	6	FUNC	<unknown>	DEFAULT	13
BIO_f_null	.dynsym	0xc14470	6	FUNC	<unknown>	DEFAULT	13
BIO_f_prefix	.dynsym	0xc14480	6	FUNC	<unknown>	DEFAULT	13
BIO_f_readbuffer	.dynsym	0xc144e0	6	FUNC	<unknown>	DEFAULT	13
BIO_f_reliable	.dynsym	0xccc3c0	6	FUNC	<unknown>	DEFAULT	13
BIO_f_ssl	.dynsym	0xb8c7c0	6	FUNC	<unknown>	DEFAULT	13
BIO_fd_non_fatal_error	.dynsym	0xc25200	63	FUNC	<unknown>	DEFAULT	13
BIO_fd_should_retry	.dynsym	0xc25190	109	FUNC	<unknown>	DEFAULT	13
BIO_find_type	.dynsym	0xc19ef0	139	FUNC	<unknown>	DEFAULT	13
BIO_free	.dynsym	0xc21ae0	195	FUNC	<unknown>	DEFAULT	13
BIO_free_all	.dynsym	0xc21cf0	330	FUNC	<unknown>	DEFAULT	13
BIO_get_accept_socket	.dynsym	0xc217e0	765	FUNC	<unknown>	DEFAULT	13
BIO_get_callback	.dynsym	0xc14b00	5	FUNC	<unknown>	DEFAULT	13
BIO_get_callback_arg	.dynsym	0xc14b50	5	FUNC	<unknown>	DEFAULT	13
BIO_get_callback_ex	.dynsym	0xc14b20	5	FUNC	<unknown>	DEFAULT	13
BIO_get_data	.dynsym	0xc144b0	5	FUNC	<unknown>	DEFAULT	13
BIO_get_ex_data	.dynsym	0xc14cc0	35	FUNC	<unknown>	DEFAULT	13
BIO_get_host_ip	.dynsym	0xc1cf60	606	FUNC	<unknown>	DEFAULT	13
BIO_get_init	.dynsym	0xc14aa0	4	FUNC	<unknown>	DEFAULT	13
BIO_get_line	.dynsym	0xc187c0	922	FUNC	<unknown>	DEFAULT	13
BIO_get_new_index	.dynsym	0xc1a210	115	FUNC	<unknown>	DEFAULT	13
BIO_get_port	.dynsym	0xc1d1c0	608	FUNC	<unknown>	DEFAULT	13
BIO_get_retry_BIO	.dynsym	0xc14c60	44	FUNC	<unknown>	DEFAULT	13
BIO_get_retry_reason	.dynsym	0xc14c90	4	FUNC	<unknown>	DEFAULT	13
BIO_get_shutdown	.dynsym	0xc14ac0	4	FUNC	<unknown>	DEFAULT	13
BIO_gethostbyname	.dynsym	0xc15040	5	FUNC	<unknown>	DEFAULT	13
BIO_gets	.dynsym	0xc18500	583	FUNC	<unknown>	DEFAULT	13
BIO_hex_string	.dynsym	0xc1c3d0	233	FUNC	<unknown>	DEFAULT	13
BIO_indent	.dynsym	0xc18b60	689	FUNC	<unknown>	DEFAULT	13
BIO_int_ctrl	.dynsym	0xc18f70	23	FUNC	<unknown>	DEFAULT	13
BIO_listen	.dynsym	0xc1db00	1005	FUNC	<unknown>	DEFAULT	13
BIO_lookup	.dynsym	0xc168e0	971	FUNC	<unknown>	DEFAULT	13
BIO_lookup_ex	.dynsym	0xc16500	987	FUNC	<unknown>	DEFAULT	13
BIO_meth_free	.dynsym	0xc14df0	117	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_callback_ctrl	.dynsym	0xc14fd0	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_create	.dynsym	0xc14f90	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_ctrl	.dynsym	0xc14f70	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_destroy	.dynsym	0xc14fb0	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_gets	.dynsym	0xc14f50	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_puts	.dynsym	0xc14f30	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_read	.dynsym	0xc14ed0	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_read_ex	.dynsym	0xc14ee0	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_write	.dynsym	0xc14e70	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_get_write_ex	.dynsym	0xc14e80	5	FUNC	<unknown>	DEFAULT	13
BIO_meth_new	.dynsym	0xc1a290	194	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_callback_ctrl	.dynsym	0xc14fe0	10	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_create	.dynsym	0xc14fa0	10	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_ctrl	.dynsym	0xc14f80	10	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_destroy	.dynsym	0xc14fc0	10	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_gets	.dynsym	0xc14f60	10	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_puts	.dynsym	0xc14f40	10	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_read	.dynsym	0xc14ef0	18	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_read_ex	.dynsym	0xc14f10	18	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_write	.dynsym	0xc14e90	18	FUNC	<unknown>	DEFAULT	13
BIO_meth_set_write_ex	.dynsym	0xc14eb0	18	FUNC	<unknown>	DEFAULT	13
BIO_method_name	.dynsym	0xc14b60	9	FUNC	<unknown>	DEFAULT	13
BIO_method_type	.dynsym	0xc14b70	7	FUNC	<unknown>	DEFAULT	13
BIO_new	.dynsym	0xc22060	10	FUNC	<unknown>	DEFAULT	13
BIO_new_CMS	.dynsym	0xc5f030	10	FUNC	<unknown>	DEFAULT	13
BIO_new_NDEF	.dynsym	0xc01630	459	FUNC	<unknown>	DEFAULT	13
BIO_new_PKCS7	.dynsym	0xd63040	10	FUNC	<unknown>	DEFAULT	13
BIO_new_accept	.dynsym	0xc22070	87	FUNC	<unknown>	DEFAULT	13
BIO_new_bio_pair	.dynsym	0xc220d0	232	FUNC	<unknown>	DEFAULT	13
BIO_new_buffer_ssl_connect	.dynsym	0xb8ee10	133	FUNC	<unknown>	DEFAULT	13
BIO_new_connect	.dynsym	0xc221c0	87	FUNC	<unknown>	DEFAULT	13
BIO_new_dgram	.dynsym	0xc29420	69	FUNC	<unknown>	DEFAULT	13
BIO_new_ex	.dynsym	0xc21e90	457	FUNC	<unknown>	DEFAULT	13
BIO_new_fd	.dynsym	0xc29470	69	FUNC	<unknown>	DEFAULT	13
BIO_new_file	.dynsym	0xc29e50	324	FUNC	<unknown>	DEFAULT	13
BIO_new_fp	.dynsym	0xc294c0	58	FUNC	<unknown>	DEFAULT	13
BIO_new_from_core_bio	.dynsym	0xc293a0	125	FUNC	<unknown>	DEFAULT	13
BIO_new_mem_buf	.dynsym	0xc2a180	160	FUNC	<unknown>	DEFAULT	13
BIO_new_socket	.dynsym	0xc29500	69	FUNC	<unknown>	DEFAULT	13
BIO_new_ssl	.dynsym	0xb8eea0	317	FUNC	<unknown>	DEFAULT	13
BIO_new_ssl_connect	.dynsym	0xb8ed40	196	FUNC	<unknown>	DEFAULT	13
BIO_next	.dynsym	0xc144c0	19	FUNC	<unknown>	DEFAULT	13
BIO_nread	.dynsym	0xc1eaf0	100	FUNC	<unknown>	DEFAULT	13
BIO_nread0	.dynsym	0xc1ea80	99	FUNC	<unknown>	DEFAULT	13
BIO_number_read	.dynsym	0xc14cf0	12	FUNC	<unknown>	DEFAULT	13
BIO_number_written	.dynsym	0xc14d00	12	FUNC	<unknown>	DEFAULT	13
BIO_nwrite	.dynsym	0xc1ebd0	100	FUNC	<unknown>	DEFAULT	13
BIO_nwrite0	.dynsym	0xc1eb60	99	FUNC	<unknown>	DEFAULT	13
BIO_parse_hostserv	.dynsym	0xc21570	611	FUNC	<unknown>	DEFAULT	13
BIO_pop	.dynsym	0xc14bf0	102	FUNC	<unknown>	DEFAULT	13
BIO_printf	.dynsym	0xc1bf50	140	FUNC	<unknown>	DEFAULT	13
BIO_ptr_ctrl	.dynsym	0xc19cb0	42	FUNC	<unknown>	DEFAULT	13
BIO_push	.dynsym	0xc14ba0	68	FUNC	<unknown>	DEFAULT	13
BIO_puts	.dynsym	0xc18290	551	FUNC	<unknown>	DEFAULT	13
BIO_read	.dynsym	0xc17030	43	FUNC	<unknown>	DEFAULT	13
BIO_read_ex	.dynsym	0xc17410	22	FUNC	<unknown>	DEFAULT	13
BIO_s_accept	.dynsym	0xc15180	6	FUNC	<unknown>	DEFAULT	13
BIO_s_bio	.dynsym	0xc15190	6	FUNC	<unknown>	DEFAULT	13
BIO_s_connect	.dynsym	0xc15280	6	FUNC	<unknown>	DEFAULT	13
BIO_s_core	.dynsym	0xc250c0	6	FUNC	<unknown>	DEFAULT	13
BIO_s_datagram	.dynsym	0xc250d0	6	FUNC	<unknown>	DEFAULT	13
BIO_s_fd	.dynsym	0xc25120	6	FUNC	<unknown>	DEFAULT	13
BIO_s_file	.dynsym	0xc25240	6	FUNC	<unknown>	DEFAULT	13
BIO_s_log	.dynsym	0xc25250	6	FUNC	<unknown>	DEFAULT	13
BIO_s_mem	.dynsym	0xc25260	6	FUNC	<unknown>	DEFAULT	13
BIO_s_null	.dynsym	0xc25280	6	FUNC	<unknown>	DEFAULT	13
BIO_s_secmem	.dynsym	0xc25270	6	FUNC	<unknown>	DEFAULT	13
BIO_s_socket	.dynsym	0xc25290	6	FUNC	<unknown>	DEFAULT	13
BIO_set_callback	.dynsym	0xc14b10	5	FUNC	<unknown>	DEFAULT	13
BIO_set_callback_arg	.dynsym	0xc14b40	5	FUNC	<unknown>	DEFAULT	13
BIO_set_callback_ex	.dynsym	0xc14b30	5	FUNC	<unknown>	DEFAULT	13
BIO_set_cipher	.dynsym	0xccc0c0	418	FUNC	<unknown>	DEFAULT	13
BIO_set_data	.dynsym	0xc144a0	5	FUNC	<unknown>	DEFAULT	13
BIO_set_ex_data	.dynsym	0xc22330	9	FUNC	<unknown>	DEFAULT	13
BIO_set_flags	.dynsym	0xc14460	4	FUNC	<unknown>	DEFAULT	13
BIO_set_init	.dynsym	0xc14490	4	FUNC	<unknown>	DEFAULT	13
BIO_set_next	.dynsym	0xc14cb0	5	FUNC	<unknown>	DEFAULT	13
BIO_set_retry_reason	.dynsym	0xc14ca0	4	FUNC	<unknown>	DEFAULT	13
BIO_set_shutdown	.dynsym	0xc14ab0	4	FUNC	<unknown>	DEFAULT	13
BIO_set_tcp_ndelay	.dynsym	0xc15090	47	FUNC	<unknown>	DEFAULT	13
BIO_snprintf	.dynsym	0xc1c520	231	FUNC	<unknown>	DEFAULT	13
BIO_sock_error	.dynsym	0xc14ff0	69	FUNC	<unknown>	DEFAULT	13
BIO_sock_info	.dynsym	0xc1d4f0	258	FUNC	<unknown>	DEFAULT	13
BIO_sock_init	.dynsym	0xc147c0	6	FUNC	<unknown>	DEFAULT	13
BIO_sock_non_fatal_error	.dynsym	0xc25310	63	FUNC	<unknown>	DEFAULT	13
BIO_sock_should_retry	.dynsym	0xc252a0	109	FUNC	<unknown>	DEFAULT	13
BIO_socket	.dynsym	0xc1d600	116	FUNC	<unknown>	DEFAULT	13
BIO_socket_ioctl	.dynsym	0xc1d490	87	FUNC	<unknown>	DEFAULT	13
BIO_socket_nbio	.dynsym	0xc1d420	110	FUNC	<unknown>	DEFAULT	13
BIO_socket_wait	.dynsym	0xc150c0	182	FUNC	<unknown>	DEFAULT	13
BIO_ssl_copy_session_id	.dynsym	0xb8f4c0	252	FUNC	<unknown>	DEFAULT	13
BIO_ssl_shutdown	.dynsym	0xb8e1e0	81	FUNC	<unknown>	DEFAULT	13
BIO_test_flags	.dynsym	0xc14af0	6	FUNC	<unknown>	DEFAULT	13
BIO_up_ref	.dynsym	0xc14ad0	19	FUNC	<unknown>	DEFAULT	13
BIO_vfree	.dynsym	0xc21bb0	5	FUNC	<unknown>	DEFAULT	13
BIO_vprintf	.dynsym	0xc1be80	208	FUNC	<unknown>	DEFAULT	13
BIO_vsnprintf	.dynsym	0xc1c4c0	95	FUNC	<unknown>	DEFAULT	13
BIO_wait	.dynsym	0xc19f80	267	FUNC	<unknown>	DEFAULT	13
BIO_write	.dynsym	0xc17790	370	FUNC	<unknown>	DEFAULT	13
BIO_write_ex	.dynsym	0xc180e0	419	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_convert	.dynsym	0xc38ce0	207	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_convert_ex	.dynsym	0xc38bd0	268	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_create_param	.dynsym	0xc38750	770	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_free	.dynsym	0xc26200	145	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_get_flags	.dynsym	0xc26310	5	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_invert	.dynsym	0xc34100	233	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_invert_ex	.dynsym	0xc34000	246	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_is_current_thread	.dynsym	0xc262a0	21	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_lock	.dynsym	0xc262d0	26	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_new	.dynsym	0xc30db0	406	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_set_current_thread	.dynsym	0xc262c0	15	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_set_flags	.dynsym	0xc26320	5	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_unlock	.dynsym	0xc262f0	26	FUNC	<unknown>	DEFAULT	13
BN_BLINDING_update	.dynsym	0xc38a60	355	FUNC	<unknown>	DEFAULT	13
BN_CTX_end	.dynsym	0xc26380	139	FUNC	<unknown>	DEFAULT	13
BN_CTX_free	.dynsym	0xc26600	17	FUNC	<unknown>	DEFAULT	13
BN_CTX_get	.dynsym	0xc2a630	909	FUNC	<unknown>	DEFAULT	13
BN_CTX_new	.dynsym	0xc2a490	7	FUNC	<unknown>	DEFAULT	13
BN_CTX_new_ex	.dynsym	0xc2a3d0	188	FUNC	<unknown>	DEFAULT	13
BN_CTX_secure_new	.dynsym	0xc2a4c0	28	FUNC	<unknown>	DEFAULT	13
BN_CTX_secure_new_ex	.dynsym	0xc2a4a0	26	FUNC	<unknown>	DEFAULT	13
BN_CTX_start	.dynsym	0xc2a4e0	329	FUNC	<unknown>	DEFAULT	13
BN_GENCB_call	.dynsym	0xc28dc0	86	FUNC	<unknown>	DEFAULT	13
BN_GENCB_free	.dynsym	0xc27aa0	41	FUNC	<unknown>	DEFAULT	13
BN_GENCB_get_arg	.dynsym	0xc27ae0	5	FUNC	<unknown>	DEFAULT	13
BN_GENCB_new	.dynsym	0xc2ae40	134	FUNC	<unknown>	DEFAULT	13
BN_GENCB_set	.dynsym	0xc27ad0	15	FUNC	<unknown>	DEFAULT	13
BN_GENCB_set_old	.dynsym	0xc266a0	15	FUNC	<unknown>	DEFAULT	13
BN_GF2m_add	.dynsym	0xc2dab0	431	FUNC	<unknown>	DEFAULT	13
BN_GF2m_arr2poly	.dynsym	0xc2e100	242	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod	.dynsym	0xc2b3a0	244	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_arr	.dynsym	0xc2b070	815	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_div	.dynsym	0xc363d0	143	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_div_arr	.dynsym	0xc36460	399	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_exp	.dynsym	0xc2ee80	434	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_exp_arr	.dynsym	0xc2ed30	324	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_inv	.dynsym	0xc35af0	1917	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_inv_arr	.dynsym	0xc36270	346	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_mul	.dynsym	0xc2de70	434	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_mul_arr	.dynsym	0xc2dc60	528	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_solve_quad	.dynsym	0xc2e6b0	324	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_solve_quad_arr	.dynsym	0xc2e680	36	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_sqr	.dynsym	0xc2c320	421	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_sqr_arr	.dynsym	0xc2b4a0	3699	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_sqrt	.dynsym	0xc2f0f0	372	FUNC	<unknown>	DEFAULT	13
BN_GF2m_mod_sqrt_arr	.dynsym	0xc2f040	161	FUNC	<unknown>	DEFAULT	13
BN_GF2m_poly2arr	.dynsym	0xc26780	173	FUNC	<unknown>	DEFAULT	13
BN_MONT_CTX_copy	.dynsym	0xc2e930	126	FUNC	<unknown>	DEFAULT	13
BN_MONT_CTX_free	.dynsym	0xc27b30	73	FUNC	<unknown>	DEFAULT	13
BN_MONT_CTX_init	.dynsym	0xc27af0	61	FUNC	<unknown>	DEFAULT	13
BN_MONT_CTX_new	.dynsym	0xc2fd40	214	FUNC	<unknown>	DEFAULT	13
BN_MONT_CTX_set	.dynsym	0xc36870	21	FUNC	<unknown>	DEFAULT	13
BN_MONT_CTX_set_locked	.dynsym	0xc39690	192	FUNC	<unknown>	DEFAULT	13
BN_RECP_CTX_free	.dynsym	0xc3b3f0	57	FUNC	<unknown>	DEFAULT	13
BN_RECP_CTX_init	.dynsym	0xc3b3c0	47	FUNC	<unknown>	DEFAULT	13
BN_RECP_CTX_new	.dynsym	0xc401e0	126	FUNC	<unknown>	DEFAULT	13
BN_RECP_CTX_set	.dynsym	0xc426d0	71	FUNC	<unknown>	DEFAULT	13
BN_X931_derive_prime_ex	.dynsym	0xc44f90	683	FUNC	<unknown>	DEFAULT	13
BN_X931_generate_Xpq	.dynsym	0xc42720	243	FUNC	<unknown>	DEFAULT	13
BN_X931_generate_prime_ex	.dynsym	0xc44c70	793	FUNC	<unknown>	DEFAULT	13
BN_abs_is_word	.dynsym	0xc26330	41	FUNC	<unknown>	DEFAULT	13
BN_add	.dynsym	0xc2c730	134	FUNC	<unknown>	DEFAULT	13
BN_add_word	.dynsym	0xc43db0	214	FUNC	<unknown>	DEFAULT	13
BN_asc2bn	.dynsym	0xc31750	137	FUNC	<unknown>	DEFAULT	13
BN_bin2bn	.dynsym	0xc2c8a0	403	FUNC	<unknown>	DEFAULT	13
BN_bn2bin	.dynsym	0xc26ff0	186	FUNC	<unknown>	DEFAULT	13
BN_bn2binpad	.dynsym	0xc26e90	338	FUNC	<unknown>	DEFAULT	13
BN_bn2dec	.dynsym	0xc312c0	634	FUNC	<unknown>	DEFAULT	13
BN_bn2hex	.dynsym	0xc30f80	822	FUNC	<unknown>	DEFAULT	13
BN_bn2lebinpad	.dynsym	0xc270b0	338	FUNC	<unknown>	DEFAULT	13
BN_bn2mpi	.dynsym	0xc27b80	326	FUNC	<unknown>	DEFAULT	13
BN_bn2nativepad	.dynsym	0xc27210	338	FUNC	<unknown>	DEFAULT	13
BN_bntest_rand	.dynsym	0xc41c60	36	FUNC	<unknown>	DEFAULT	13
BN_check_prime	.dynsym	0xc28ee0	175	FUNC	<unknown>	DEFAULT	13
BN_clear	.dynsym	0xc26c40	49	FUNC	<unknown>	DEFAULT	13
BN_clear_bit	.dynsym	0xc27600	109	FUNC	<unknown>	DEFAULT	13
BN_clear_free	.dynsym	0xc26620	124	FUNC	<unknown>	DEFAULT	13
BN_cmp	.dynsym	0xc273c0	147	FUNC	<unknown>	DEFAULT	13
BN_consttime_swap	.dynsym	0xc27890	323	FUNC	<unknown>	DEFAULT	13
BN_copy	.dynsym	0xc2e280	125	FUNC	<unknown>	DEFAULT	13
BN_dec2bn	.dynsym	0xc31540	518	FUNC	<unknown>	DEFAULT	13
BN_div	.dynsym	0xc31ce0	197	FUNC	<unknown>	DEFAULT	13
BN_div_recp	.dynsym	0xc428a0	732	FUNC	<unknown>	DEFAULT	13
BN_div_word	.dynsym	0xc42ca0	32	FUNC	<unknown>	DEFAULT	13
BN_dup	.dynsym	0xc2e800	110	FUNC	<unknown>	DEFAULT	13
BN_exp	.dynsym	0xc336a0	468	FUNC	<unknown>	DEFAULT	13
BN_free	.dynsym	0xc25040	113	FUNC	<unknown>	DEFAULT	13
BN_from_montgomery	.dynsym	0xc2fa30	112	FUNC	<unknown>	DEFAULT	13
BN_gcd	.dynsym	0xc34c80	699	FUNC	<unknown>	DEFAULT	13
BN_generate_dsa_nonce	.dynsym	0xc41c90	979	FUNC	<unknown>	DEFAULT	13
BN_generate_prime	.dynsym	0xc3abc0	173	FUNC	<unknown>	DEFAULT	13
BN_generate_prime_ex	.dynsym	0xc3ab40	116	FUNC	<unknown>	DEFAULT	13
BN_generate_prime_ex2	.dynsym	0xc39fc0	2930	FUNC	<unknown>	DEFAULT	13
BN_get0_nist_prime_192	.dynsym	0xc28cc0	6	FUNC	<unknown>	DEFAULT	13
BN_get0_nist_prime_224	.dynsym	0xc28cd0	6	FUNC	<unknown>	DEFAULT	13
BN_get0_nist_prime_256	.dynsym	0xc28ce0	6	FUNC	<unknown>	DEFAULT	13
BN_get0_nist_prime_384	.dynsym	0xc28cf0	6	FUNC	<unknown>	DEFAULT	13
BN_get0_nist_prime_521	.dynsym	0xc28d00	6	FUNC	<unknown>	DEFAULT	13
BN_get_flags	.dynsym	0xc261f0	6	FUNC	<unknown>	DEFAULT	13
BN_get_params	.dynsym	0xc269f0	71	FUNC	<unknown>	DEFAULT	13
BN_get_rfc2409_prime_1024	.dynsym	0xc2cc10	531	FUNC	<unknown>	DEFAULT	13
BN_get_rfc2409_prime_768	.dynsym	0xc2ca40	463	FUNC	<unknown>	DEFAULT	13
BN_get_rfc3526_prime_1536	.dynsym	0xc2e870	26	FUNC	<unknown>	DEFAULT	13
BN_get_rfc3526_prime_2048	.dynsym	0xc2e890	26	FUNC	<unknown>	DEFAULT	13
BN_get_rfc3526_prime_3072	.dynsym	0xc2e8b0	26	FUNC	<unknown>	DEFAULT	13
BN_get_rfc3526_prime_4096	.dynsym	0xc2e8d0	26	FUNC	<unknown>	DEFAULT	13
BN_get_rfc3526_prime_6144	.dynsym	0xc2e8f0	26	FUNC	<unknown>	DEFAULT	13
BN_get_rfc3526_prime_8192	.dynsym	0xc2e910	26	FUNC	<unknown>	DEFAULT	13
BN_get_word	.dynsym	0xc26c80	31	FUNC	<unknown>	DEFAULT	13
BN_hex2bn	.dynsym	0xc2ce50	1416	FUNC	<unknown>	DEFAULT	13
BN_is_bit_set	.dynsym	0xc26720	35	FUNC	<unknown>	DEFAULT	13
BN_is_negative	.dynsym	0xc26370	11	FUNC	<unknown>	DEFAULT	13
BN_is_odd	.dynsym	0xc266b0	19	FUNC	<unknown>	DEFAULT	13
BN_is_one	.dynsym	0xc27a70	36	FUNC	<unknown>	DEFAULT	13
BN_is_prime	.dynsym	0xc39cf0	362	FUNC	<unknown>	DEFAULT	13
BN_is_prime_ex	.dynsym	0xc39e60	346	FUNC	<unknown>	DEFAULT	13
BN_is_prime_fasttest	.dynsym	0xc27520	215	FUNC	<unknown>	DEFAULT	13
BN_is_prime_fasttest_ex	.dynsym	0xc28e20	191	FUNC	<unknown>	DEFAULT	13
BN_is_word	.dynsym	0xc266d0	64	FUNC	<unknown>	DEFAULT	13
BN_is_zero	.dynsym	0xc26360	11	FUNC	<unknown>	DEFAULT	13
BN_kronecker	.dynsym	0xc31e20	592	FUNC	<unknown>	DEFAULT	13
BN_lebin2bn	.dynsym	0xc2f270	403	FUNC	<unknown>	DEFAULT	13
BN_lshift	.dynsym	0xc40260	106	FUNC	<unknown>	DEFAULT	13
BN_lshift1	.dynsym	0xc3b430	214	FUNC	<unknown>	DEFAULT	13
BN_mask_bits	.dynsym	0xc27670	135	FUNC	<unknown>	DEFAULT	13
BN_mod_add	.dynsym	0xc334d0	114	FUNC	<unknown>	DEFAULT	13
BN_mod_add_quick	.dynsym	0xc2fd00	54	FUNC	<unknown>	DEFAULT	13
BN_mod_exp	.dynsym	0xc386b0	155	FUNC	<unknown>	DEFAULT	13
BN_mod_exp2_mont	.dynsym	0xc39630	83	FUNC	<unknown>	DEFAULT	13
BN_mod_exp_mont	.dynsym	0xc38680	35	FUNC	<unknown>	DEFAULT	13
BN_mod_exp_mont_consttime	.dynsym	0xc36890	3738	FUNC	<unknown>	DEFAULT	13
BN_mod_exp_mont_consttime_x2	.dynsym	0xc37c80	736	FUNC	<unknown>	DEFAULT	13
BN_mod_exp_mont_word	.dynsym	0xc37730	1357	FUNC	<unknown>	DEFAULT	13
BN_mod_exp_recp	.dynsym	0xc347c0	83	FUNC	<unknown>	DEFAULT	13
BN_mod_exp_simple	.dynsym	0xc33930	1221	FUNC	<unknown>	DEFAULT	13
BN_mod_inverse	.dynsym	0xc359e0	260	FUNC	<unknown>	DEFAULT	13
BN_mod_lshift	.dynsym	0xc34bb0	196	FUNC	<unknown>	DEFAULT	13
BN_mod_lshift1	.dynsym	0xc34820	114	FUNC	<unknown>	DEFAULT	13
BN_mod_lshift1_quick	.dynsym	0xc348a0	77	FUNC	<unknown>	DEFAULT	13
BN_mod_lshift_quick	.dynsym	0xc348f0	693	FUNC	<unknown>	DEFAULT	13
BN_mod_mul	.dynsym	0xc33880	168	FUNC	<unknown>	DEFAULT	13
BN_mod_mul_montgomery	.dynsym	0xc33fb0	66	FUNC	<unknown>	DEFAULT	13
BN_mod_mul_reciprocal	.dynsym	0xc432a0	205	FUNC	<unknown>	DEFAULT	13
BN_mod_sqr	.dynsym	0xc33e00	119	FUNC	<unknown>	DEFAULT	13
BN_mod_sqrt	.dynsym	0xc43e90	2145	FUNC	<unknown>	DEFAULT	13
BN_mod_sub	.dynsym	0xc33550	114	FUNC	<unknown>	DEFAULT	13
BN_mod_sub_quick	.dynsym	0xc2c850	69	FUNC	<unknown>	DEFAULT	13
BN_mod_word	.dynsym	0xc44700	243	FUNC	<unknown>	DEFAULT	13
BN_mpi2bn	.dynsym	0xc2fe20	485	FUNC	<unknown>	DEFAULT	13
BN_mul	.dynsym	0xc2ec80	66	FUNC	<unknown>	DEFAULT	13
BN_mul_word	.dynsym	0xc43370	140	FUNC	<unknown>	DEFAULT	13
BN_native2bn	.dynsym	0xc2f410	5	FUNC	<unknown>	DEFAULT	13
BN_new	.dynsym	0xc2ace0	164	FUNC	<unknown>	DEFAULT	13
BN_nist_mod_192	.dynsym	0xc32070	732	FUNC	<unknown>	DEFAULT	13
BN_nist_mod_224	.dynsym	0xc32350	1064	FUNC	<unknown>	DEFAULT	13
BN_nist_mod_256	.dynsym	0xc32780	1037	FUNC	<unknown>	DEFAULT	13
BN_nist_mod_384	.dynsym	0xc32b90	1197	FUNC	<unknown>	DEFAULT	13
BN_nist_mod_521	.dynsym	0xc33040	1162	FUNC	<unknown>	DEFAULT	13
BN_nist_mod_func	.dynsym	0xc28d10	156	FUNC	<unknown>	DEFAULT	13
BN_nnmod	.dynsym	0xc31db0	101	FUNC	<unknown>	DEFAULT	13
BN_num_bits	.dynsym	0xc26b10	215	FUNC	<unknown>	DEFAULT	13
BN_num_bits_word	.dynsym	0xc26a40	193	FUNC	<unknown>	DEFAULT	13
BN_options	.dynsym	0xc41330	73	FUNC	<unknown>	DEFAULT	13
BN_print	.dynsym	0xc3fe80	761	FUNC	<unknown>	DEFAULT	13
BN_print_fp	.dynsym	0xc40180	93	FUNC	<unknown>	DEFAULT	13
BN_priv_rand	.dynsym	0xc3b3b0	11	FUNC	<unknown>	DEFAULT	13
BN_priv_rand_ex	.dynsym	0xc3b3a0	5	FUNC	<unknown>	DEFAULT	13
BN_priv_rand_range	.dynsym	0xc42610	93	FUNC	<unknown>	DEFAULT	13
BN_priv_rand_range_ex	.dynsym	0xc425a0	101	FUNC	<unknown>	DEFAULT	13
BN_pseudo_rand	.dynsym	0xc41780	477	FUNC	<unknown>	DEFAULT	13
BN_pseudo_rand_range	.dynsym	0xc42670	90	FUNC	<unknown>	DEFAULT	13
BN_rand	.dynsym	0xc415a0	477	FUNC	<unknown>	DEFAULT	13
BN_rand_ex	.dynsym	0xc41380	534	FUNC	<unknown>	DEFAULT	13
BN_rand_range	.dynsym	0xc42540	90	FUNC	<unknown>	DEFAULT	13
BN_rand_range_ex	.dynsym	0xc424d0	98	FUNC	<unknown>	DEFAULT	13
BN_reciprocal	.dynsym	0xc42820	120	FUNC	<unknown>	DEFAULT	13
BN_rshift	.dynsym	0xc402d0	106	FUNC	<unknown>	DEFAULT	13
BN_rshift1	.dynsym	0xc3b510	231	FUNC	<unknown>	DEFAULT	13
BN_secure_new	.dynsym	0xc2ad90	164	FUNC	<unknown>	DEFAULT	13
BN_security_bits	.dynsym	0xc279e0	135	FUNC	<unknown>	DEFAULT	13
BN_set_bit	.dynsym	0xc2e030	203	FUNC	<unknown>	DEFAULT	13
BN_set_flags	.dynsym	0xc261e0	4	FUNC	<unknown>	DEFAULT	13
BN_set_negative	.dynsym	0xc27700	19	FUNC	<unknown>	DEFAULT	13
BN_set_params	.dynsym	0xc26990	85	FUNC	<unknown>	DEFAULT	13
BN_set_word	.dynsym	0xc2ecd0	86	FUNC	<unknown>	DEFAULT	13
BN_sqr	.dynsym	0xc43250	66	FUNC	<unknown>	DEFAULT	13
BN_sub	.dynsym	0xc2c7c0	144	FUNC	<unknown>	DEFAULT	13
BN_sub_word	.dynsym	0xc43400	208	FUNC	<unknown>	DEFAULT	13
BN_swap	.dynsym	0xc26bf0	78	FUNC	<unknown>	DEFAULT	13
BN_to_ASN1_ENUMERATED	.dynsym	0xbf7430	441	FUNC	<unknown>	DEFAULT	13
BN_to_ASN1_INTEGER	.dynsym	0xbf7270	441	FUNC	<unknown>	DEFAULT	13
BN_to_montgomery	.dynsym	0xc34210	82	FUNC	<unknown>	DEFAULT	13
BN_uadd	.dynsym	0xc2c4d0	266	FUNC	<unknown>	DEFAULT	13
BN_ucmp	.dynsym	0xc27370	71	FUNC	<unknown>	DEFAULT	13
BN_usub	.dynsym	0xc2c5e0	333	FUNC	<unknown>	DEFAULT	13
BN_value_one	.dynsym	0xc26710	6	FUNC	<unknown>	DEFAULT	13
BN_with_flags	.dynsym	0xc26750	43	FUNC	<unknown>	DEFAULT	13
BN_zero_ex	.dynsym	0xc261d0	15	FUNC	<unknown>	DEFAULT	13
BUF_MEM_free	.dynsym	0xc3ca00	129	FUNC	<unknown>	DEFAULT	13
BUF_MEM_grow	.dynsym	0xc40490	361	FUNC	<unknown>	DEFAULT	13
BUF_MEM_grow_clean	.dynsym	0xc40600	417	FUNC	<unknown>	DEFAULT	13
BUF_MEM_new	.dynsym	0xc40340	148	FUNC	<unknown>	DEFAULT	13
BUF_MEM_new_ex	.dynsym	0xc403e0	172	FUNC	<unknown>	DEFAULT	13
BUF_reverse	.dynsym	0xc3ca90	90	FUNC	<unknown>	DEFAULT	13
BrotliDecoderCreateInstance	.dynsym	0xe7dcb0	367	FUNC	<unknown>	DEFAULT	13
BrotliDecoderDecompress	.dynsym	0xe93310	445	FUNC	<unknown>	DEFAULT	13
BrotliDecoderDecompressStream	.dynsym	0xe91eb0	5201	FUNC	<unknown>	DEFAULT	13
BrotliDecoderDestroyInstance	.dynsym	0xe7de20	89	FUNC	<unknown>	DEFAULT	13
BrotliDecoderErrorString	.dynsym	0xe8f750	22	FUNC	<unknown>	DEFAULT	13
BrotliDecoderGetErrorCode	.dynsym	0xe8f740	4	FUNC	<unknown>	DEFAULT	13
BrotliDecoderHasMoreOutput	.dynsym	0xe8f5f0	49	FUNC	<unknown>	DEFAULT	13
BrotliDecoderIsFinished	.dynsym	0xe8f6f0	68	FUNC	<unknown>	DEFAULT	13
BrotliDecoderIsUsed	.dynsym	0xe8f6d0	21	FUNC	<unknown>	DEFAULT	13
BrotliDecoderSetParameter	.dynsym	0xe7dc40	98	FUNC	<unknown>	DEFAULT	13
BrotliDecoderTakeOutput	.dynsym	0xe8f630	154	FUNC	<unknown>	DEFAULT	13
BrotliDecoderVersion	.dynsym	0xe8f770	6	FUNC	<unknown>	DEFAULT	13
BrotliDefaultAllocFunc	.dynsym	0xe89790	8	FUNC	<unknown>	DEFAULT	13
BrotliDefaultFreeFunc	.dynsym	0xe897a0	8	FUNC	<unknown>	DEFAULT	13
BrotliEncoderCompress	.dynsym	0xe9a1c0	1167	FUNC	<unknown>	DEFAULT	13
BrotliEncoderCompressStream	.dynsym	0xe97050	5556	FUNC	<unknown>	DEFAULT	13
BrotliEncoderCreateInstance	.dynsym	0xe8f8f0	519	FUNC	<unknown>	DEFAULT	13
BrotliEncoderDestroyInstance	.dynsym	0xe8fb00	265	FUNC	<unknown>	DEFAULT	13
BrotliEncoderHasMoreOutput	.dynsym	0xe8fc60	14	FUNC	<unknown>	DEFAULT	13
BrotliEncoderIsFinished	.dynsym	0xe8fc40	30	FUNC	<unknown>	DEFAULT	13
BrotliEncoderMaxCompressedSize	.dynsym	0xe8fc10	38	FUNC	<unknown>	DEFAULT	13
BrotliEncoderSetParameter	.dynsym	0xe8f820	201	FUNC	<unknown>	DEFAULT	13
BrotliEncoderTakeOutput	.dynsym	0xe8fc70	135	FUNC	<unknown>	DEFAULT	13
BrotliEncoderVersion	.dynsym	0xe8fd00	6	FUNC	<unknown>	DEFAULT	13
BrotliGetDictionary	.dynsym	0xe8f5d0	6	FUNC	<unknown>	DEFAULT	13
BrotliGetTransforms	.dynsym	0xe8f5e0	6	FUNC	<unknown>	DEFAULT	13
BrotliSetDictionaryData	.dynsym	0xe8fe80	1	FUNC	<unknown>	DEFAULT	13
BrotliTransformDictionaryWord	.dynsym	0xe8fe90	2211	FUNC	<unknown>	DEFAULT	13
CAST_S_table0	.dynsym	0x29790a0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_S_table1	.dynsym	0x2978ca0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_S_table2	.dynsym	0x29788a0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_S_table3	.dynsym	0x29784a0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_S_table4	.dynsym	0x29780a0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_S_table5	.dynsym	0x2977ca0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_S_table6	.dynsym	0x29778a0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_S_table7	.dynsym	0x29774a0	1024	OBJECT	<unknown>	DEFAULT	16
CAST_cbc_encrypt	.dynsym	0xc3e220	1261	FUNC	<unknown>	DEFAULT	13
CAST_cfb64_encrypt	.dynsym	0xc3dc80	335	FUNC	<unknown>	DEFAULT	13
CAST_decrypt	.dynsym	0xc3ddd0	1023	FUNC	<unknown>	DEFAULT	13
CAST_ecb_encrypt	.dynsym	0xc3e1d0	79	FUNC	<unknown>	DEFAULT	13
CAST_encrypt	.dynsym	0xc3d860	1045	FUNC	<unknown>	DEFAULT	13
CAST_ofb64_encrypt	.dynsym	0xc3e710	220	FUNC	<unknown>	DEFAULT	13
CAST_set_key	.dynsym	0xc3e7f0	3597	FUNC	<unknown>	DEFAULT	13
CBIGNUM_it	.dynsym	0xc11de0	6	FUNC	<unknown>	DEFAULT	13
CERTIFICATEPOLICIES_free	.dynsym	0xdb6910	31	FUNC	<unknown>	DEFAULT	13
CERTIFICATEPOLICIES_it	.dynsym	0xdb2aa0	6	FUNC	<unknown>	DEFAULT	13
CERTIFICATEPOLICIES_new	.dynsym	0xdb3780	53	FUNC	<unknown>	DEFAULT	13
CMAC_CTX_cleanup	.dynsym	0xc45400	80	FUNC	<unknown>	DEFAULT	13
CMAC_CTX_copy	.dynsym	0xc45520	160	FUNC	<unknown>	DEFAULT	13
CMAC_CTX_free	.dynsym	0xc45450	193	FUNC	<unknown>	DEFAULT	13
CMAC_CTX_get0_cipher_ctx	.dynsym	0xc3f600	4	FUNC	<unknown>	DEFAULT	13
CMAC_CTX_new	.dynsym	0xc407b0	218	FUNC	<unknown>	DEFAULT	13
CMAC_Final	.dynsym	0xc456f0	989	FUNC	<unknown>	DEFAULT	13
CMAC_Init	.dynsym	0xc45ad0	661	FUNC	<unknown>	DEFAULT	13
CMAC_Update	.dynsym	0xc455c0	291	FUNC	<unknown>	DEFAULT	13
CMAC_resume	.dynsym	0xc3f610	51	FUNC	<unknown>	DEFAULT	13
CMS_Attributes_Sign_it	.dynsym	0xc4c8b0	6	FUNC	<unknown>	DEFAULT	13
CMS_Attributes_Verify_it	.dynsym	0xc4c8c0	6	FUNC	<unknown>	DEFAULT	13
CMS_AuthEnvelopedData_create	.dynsym	0xc4e940	441	FUNC	<unknown>	DEFAULT	13
CMS_AuthEnvelopedData_create_ex	.dynsym	0xc4e7a0	401	FUNC	<unknown>	DEFAULT	13
CMS_AuthEnvelopedData_it	.dynsym	0xc4c530	6	FUNC	<unknown>	DEFAULT	13
CMS_CertificateChoices_it	.dynsym	0xc4c3a0	6	FUNC	<unknown>	DEFAULT	13
CMS_CompressedData_it	.dynsym	0xc4c550	6	FUNC	<unknown>	DEFAULT	13
CMS_ContentInfo_free	.dynsym	0xc5e0b0	95	FUNC	<unknown>	DEFAULT	13
CMS_ContentInfo_it	.dynsym	0xc4c570	6	FUNC	<unknown>	DEFAULT	13
CMS_ContentInfo_new	.dynsym	0xc5cf10	71	FUNC	<unknown>	DEFAULT	13
CMS_ContentInfo_new_ex	.dynsym	0xc5d860	217	FUNC	<unknown>	DEFAULT	13
CMS_ContentInfo_print_ctx	.dynsym	0xc5cec0	69	FUNC	<unknown>	DEFAULT	13
CMS_DigestedData_it	.dynsym	0xc4c510	6	FUNC	<unknown>	DEFAULT	13
CMS_EncryptedData_decrypt	.dynsym	0xc668f0	404	FUNC	<unknown>	DEFAULT	13
CMS_EncryptedData_encrypt	.dynsym	0xc67240	308	FUNC	<unknown>	DEFAULT	13
CMS_EncryptedData_encrypt_ex	.dynsym	0xc67130	268	FUNC	<unknown>	DEFAULT	13
CMS_EncryptedData_it	.dynsym	0xc4c520	6	FUNC	<unknown>	DEFAULT	13
CMS_EncryptedData_set1_key	.dynsym	0xc4df20	497	FUNC	<unknown>	DEFAULT	13
CMS_EnvelopedData_create	.dynsym	0xc4e5e0	441	FUNC	<unknown>	DEFAULT	13
CMS_EnvelopedData_create_ex	.dynsym	0xc4e440	401	FUNC	<unknown>	DEFAULT	13
CMS_EnvelopedData_it	.dynsym	0xc4c500	6	FUNC	<unknown>	DEFAULT	13
CMS_IssuerAndSerialNumber_it	.dynsym	0xc4c380	6	FUNC	<unknown>	DEFAULT	13
CMS_KEKRecipientInfo_it	.dynsym	0xc4c4c0	6	FUNC	<unknown>	DEFAULT	13
CMS_KeyAgreeRecipientInfo_it	.dynsym	0xc4c4a0	6	FUNC	<unknown>	DEFAULT	13
CMS_KeyTransRecipientInfo_it	.dynsym	0xc4c430	6	FUNC	<unknown>	DEFAULT	13
CMS_OriginatorPublicKey_it	.dynsym	0xc4c480	6	FUNC	<unknown>	DEFAULT	13
CMS_OtherKeyAttribute_it	.dynsym	0xc4c440	6	FUNC	<unknown>	DEFAULT	13
CMS_PasswordRecipientInfo_it	.dynsym	0xc4c4d0	6	FUNC	<unknown>	DEFAULT	13
CMS_ReceiptRequest_create0	.dynsym	0xc50280	282	FUNC	<unknown>	DEFAULT	13
CMS_ReceiptRequest_create0_ex	.dynsym	0xc50150	298	FUNC	<unknown>	DEFAULT	13
CMS_ReceiptRequest_free	.dynsym	0xc4ee80	31	FUNC	<unknown>	DEFAULT	13
CMS_ReceiptRequest_get0_values	.dynsym	0xc4ce00	89	FUNC	<unknown>	DEFAULT	13
CMS_ReceiptRequest_it	.dynsym	0xc4c590	6	FUNC	<unknown>	DEFAULT	13
CMS_ReceiptRequest_new	.dynsym	0xc4cdc0	53	FUNC	<unknown>	DEFAULT	13
CMS_Receipt_it	.dynsym	0xc4c8d0	6	FUNC	<unknown>	DEFAULT	13
CMS_RecipientEncryptedKey_cert_cmp	.dynsym	0xc5f4e0	167	FUNC	<unknown>	DEFAULT	13
CMS_RecipientEncryptedKey_get0_id	.dynsym	0xc5cde0	179	FUNC	<unknown>	DEFAULT	13
CMS_RecipientEncryptedKey_it	.dynsym	0xc4c470	6	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_decrypt	.dynsym	0xc5b430	1882	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_encrypt	.dynsym	0xc5bb90	1287	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_get0_pkey_ctx	.dynsym	0xc4cca0	52	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_it	.dynsym	0xc4c4f0	6	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_decrypt	.dynsym	0xc5f9b0	265	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_get0_alg	.dynsym	0xc5d690	111	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_get0_ctx	.dynsym	0xc5cea0	25	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_get0_orig_id	.dynsym	0xc5d750	266	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_get0_reks	.dynsym	0xc5d700	71	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_orig_id_cmp	.dynsym	0xc5f3e0	242	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_set0_pkey	.dynsym	0xc5f7a0	141	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kari_set0_pkey_and_peer	.dynsym	0xc5f6f0	165	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kekri_get0_id	.dynsym	0xc4dc80	206	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_kekri_id_cmp	.dynsym	0xc4dc00	123	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_ktri_cert_cmp	.dynsym	0xc5b330	246	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_ktri_get0_algs	.dynsym	0xc4dae0	123	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_ktri_get0_signer_id	.dynsym	0xc4db60	159	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_set0_key	.dynsym	0xc4dd50	87	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_set0_password	.dynsym	0xc5d940	96	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_set0_pkey	.dynsym	0xc558a0	109	FUNC	<unknown>	DEFAULT	13
CMS_RecipientInfo_type	.dynsym	0xc4cce0	3	FUNC	<unknown>	DEFAULT	13
CMS_RecipientKeyIdentifier_it	.dynsym	0xc4c450	6	FUNC	<unknown>	DEFAULT	13
CMS_RevocationInfoChoice_it	.dynsym	0xc4c3f0	6	FUNC	<unknown>	DEFAULT	13
CMS_SharedInfo_encode	.dynsym	0xc4c8e0	96	FUNC	<unknown>	DEFAULT	13
CMS_SignedData_init	.dynsym	0xc5fbd0	251	FUNC	<unknown>	DEFAULT	13
CMS_SignedData_it	.dynsym	0xc4c400	6	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_cert_cmp	.dynsym	0xc5f640	167	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_get0_algs	.dynsym	0xc5cf70	49	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_get0_md_ctx	.dynsym	0xc5d010	5	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_get0_pkey_ctx	.dynsym	0xc5cfb0	5	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_get0_signature	.dynsym	0xc5d070	5	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_get0_signer_id	.dynsym	0xc5d020	75	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_it	.dynsym	0xc4c3d0	6	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_set1_signer_cert	.dynsym	0xc63ef0	84	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_sign	.dynsym	0xc642e0	660	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_verify	.dynsym	0xc65860	738	FUNC	<unknown>	DEFAULT	13
CMS_SignerInfo_verify_content	.dynsym	0xc66040	712	FUNC	<unknown>	DEFAULT	13
CMS_add0_CertificateChoices	.dynsym	0xc60980	206	FUNC	<unknown>	DEFAULT	13
CMS_add0_RevocationInfoChoice	.dynsym	0xc60c70	248	FUNC	<unknown>	DEFAULT	13
CMS_add0_cert	.dynsym	0xc60a50	501	FUNC	<unknown>	DEFAULT	13
CMS_add0_crl	.dynsym	0xc60d70	298	FUNC	<unknown>	DEFAULT	13
CMS_add0_recipient_key	.dynsym	0xc4eb00	768	FUNC	<unknown>	DEFAULT	13
CMS_add0_recipient_password	.dynsym	0xc62390	1341	FUNC	<unknown>	DEFAULT	13
CMS_add1_ReceiptRequest	.dynsym	0xc4ddb0	192	FUNC	<unknown>	DEFAULT	13
CMS_add1_cert	.dynsym	0xc60c50	26	FUNC	<unknown>	DEFAULT	13
CMS_add1_crl	.dynsym	0xc60ea0	306	FUNC	<unknown>	DEFAULT	13
CMS_add1_recipient	.dynsym	0xc5b000	799	FUNC	<unknown>	DEFAULT	13
CMS_add1_recipient_cert	.dynsym	0xc5b320	12	FUNC	<unknown>	DEFAULT	13
CMS_add1_signer	.dynsym	0xc64580	2799	FUNC	<unknown>	DEFAULT	13
CMS_add_simple_smimecap	.dynsym	0xc61980	413	FUNC	<unknown>	DEFAULT	13
CMS_add_smimecap	.dynsym	0xc5d080	144	FUNC	<unknown>	DEFAULT	13
CMS_add_standard_smimecap	.dynsym	0xc61be0	462	FUNC	<unknown>	DEFAULT	13
CMS_compress	.dynsym	0xc5d9e0	55	FUNC	<unknown>	DEFAULT	13
CMS_data	.dynsym	0xc666b0	157	FUNC	<unknown>	DEFAULT	13
CMS_dataFinal	.dynsym	0xc65600	594	FUNC	<unknown>	DEFAULT	13
CMS_dataInit	.dynsym	0xc65e10	552	FUNC	<unknown>	DEFAULT	13
CMS_data_create	.dynsym	0xc66d00	308	FUNC	<unknown>	DEFAULT	13
CMS_data_create_ex	.dynsym	0xc66c00	256	FUNC	<unknown>	DEFAULT	13
CMS_decrypt	.dynsym	0xc691b0	554	FUNC	<unknown>	DEFAULT	13
CMS_decrypt_set1_key	.dynsym	0xc68710	541	FUNC	<unknown>	DEFAULT	13
CMS_decrypt_set1_password	.dynsym	0xc68930	537	FUNC	<unknown>	DEFAULT	13
CMS_decrypt_set1_pkey	.dynsym	0xc691a0	7	FUNC	<unknown>	DEFAULT	13
CMS_decrypt_set1_pkey_and_peer	.dynsym	0xc68b50	1608	FUNC	<unknown>	DEFAULT	13
CMS_digest_create	.dynsym	0xc66fa0	386	FUNC	<unknown>	DEFAULT	13
CMS_digest_create_ex	.dynsym	0xc66e40	346	FUNC	<unknown>	DEFAULT	13
CMS_digest_verify	.dynsym	0xc66750	413	FUNC	<unknown>	DEFAULT	13
CMS_encrypt	.dynsym	0xc68700	11	FUNC	<unknown>	DEFAULT	13
CMS_encrypt_ex	.dynsym	0xc68580	376	FUNC	<unknown>	DEFAULT	13
CMS_final	.dynsym	0xc66a90	362	FUNC	<unknown>	DEFAULT	13
CMS_get0_RecipientInfos	.dynsym	0xc4e1c0	90	FUNC	<unknown>	DEFAULT	13
CMS_get0_SignerInfos	.dynsym	0xc5dd70	80	FUNC	<unknown>	DEFAULT	13
CMS_get0_content	.dynsym	0xc5ddc0	224	FUNC	<unknown>	DEFAULT	13
CMS_get0_eContentType	.dynsym	0xc5ded0	181	FUNC	<unknown>	DEFAULT	13
CMS_get0_signers	.dynsym	0xc63b30	300	FUNC	<unknown>	DEFAULT	13
CMS_get0_type	.dynsym	0xc5cf60	4	FUNC	<unknown>	DEFAULT	13
CMS_get1_ReceiptRequest	.dynsym	0xc5c5b0	141	FUNC	<unknown>	DEFAULT	13
CMS_get1_certs	.dynsym	0xc61600	386	FUNC	<unknown>	DEFAULT	13
CMS_get1_crls	.dynsym	0xc61790	490	FUNC	<unknown>	DEFAULT	13
CMS_is_detached	.dynsym	0xc5dea0	42	FUNC	<unknown>	DEFAULT	13
CMS_set1_eContentType	.dynsym	0xc5df90	277	FUNC	<unknown>	DEFAULT	13
CMS_set1_signers_certs	.dynsym	0xc63f50	909	FUNC	<unknown>	DEFAULT	13
CMS_set_detached	.dynsym	0xc5e9a0	244	FUNC	<unknown>	DEFAULT	13
CMS_sign	.dynsym	0xc67590	19	FUNC	<unknown>	DEFAULT	13
CMS_sign_ex	.dynsym	0xc67380	520	FUNC	<unknown>	DEFAULT	13
CMS_sign_receipt	.dynsym	0xc68370	513	FUNC	<unknown>	DEFAULT	13
CMS_signed_add1_attr	.dynsym	0xc582c0	27	FUNC	<unknown>	DEFAULT	13
CMS_signed_add1_attr_by_NID	.dynsym	0xc58410	345	FUNC	<unknown>	DEFAULT	13
CMS_signed_add1_attr_by_OBJ	.dynsym	0xc58300	267	FUNC	<unknown>	DEFAULT	13
CMS_signed_add1_attr_by_txt	.dynsym	0xc58570	379	FUNC	<unknown>	DEFAULT	13
CMS_signed_delete_attr	.dynsym	0xc51a60	35	FUNC	<unknown>	DEFAULT	13
CMS_signed_get0_data_by_OBJ	.dynsym	0xc58ae0	9	FUNC	<unknown>	DEFAULT	13
CMS_signed_get_attr	.dynsym	0xc4ca00	35	FUNC	<unknown>	DEFAULT	13
CMS_signed_get_attr_by_NID	.dynsym	0xc4cb20	186	FUNC	<unknown>	DEFAULT	13
CMS_signed_get_attr_by_OBJ	.dynsym	0xc4c960	146	FUNC	<unknown>	DEFAULT	13
CMS_signed_get_attr_count	.dynsym	0xc4c940	18	FUNC	<unknown>	DEFAULT	13
CMS_stream	.dynsym	0xc5e900	153	FUNC	<unknown>	DEFAULT	13
CMS_uncompress	.dynsym	0xc5d9a0	55	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_add1_attr	.dynsym	0xc582e0	27	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_add1_attr_by_NID	.dynsym	0xc58800	345	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_add1_attr_by_OBJ	.dynsym	0xc586f0	267	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_add1_attr_by_txt	.dynsym	0xc58960	379	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_delete_attr	.dynsym	0xc51a90	35	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_get0_data_by_OBJ	.dynsym	0xc58af0	9	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_get_attr	.dynsym	0xc4caf0	35	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_get_attr_by_NID	.dynsym	0xc4cbe0	186	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_get_attr_by_OBJ	.dynsym	0xc4ca50	146	FUNC	<unknown>	DEFAULT	13
CMS_unsigned_get_attr_count	.dynsym	0xc4ca30	18	FUNC	<unknown>	DEFAULT	13
CMS_verify	.dynsym	0xc675b0	3427	FUNC	<unknown>	DEFAULT	13
CMS_verify_receipt	.dynsym	0xc68320	72	FUNC	<unknown>	DEFAULT	13
CONF_dump_bio	.dynsym	0xc5d250	82	FUNC	<unknown>	DEFAULT	13
CONF_dump_fp	.dynsym	0xc5ed90	197	FUNC	<unknown>	DEFAULT	13
CONF_free	.dynsym	0xc5d130	66	FUNC	<unknown>	DEFAULT	13
CONF_get1_default_config_file	.dynsym	0xc6a450	111	FUNC	<unknown>	DEFAULT	13
CONF_get_number	.dynsym	0xc69850	162	FUNC	<unknown>	DEFAULT	13
CONF_get_section	.dynsym	0xc699a0	90	FUNC	<unknown>	DEFAULT	13
CONF_get_string	.dynsym	0xc69620	173	FUNC	<unknown>	DEFAULT	13
CONF_imodule_get_flags	.dynsym	0xc5d430	5	FUNC	<unknown>	DEFAULT	13
CONF_imodule_get_module	.dynsym	0xc5d420	4	FUNC	<unknown>	DEFAULT	13
CONF_imodule_get_name	.dynsym	0xc5d3e0	5	FUNC	<unknown>	DEFAULT	13
CONF_imodule_get_usr_data	.dynsym	0xc5d400	5	FUNC	<unknown>	DEFAULT	13
CONF_imodule_get_value	.dynsym	0xc5d3f0	5	FUNC	<unknown>	DEFAULT	13
CONF_imodule_set_flags	.dynsym	0xc5d440	5	FUNC	<unknown>	DEFAULT	13
CONF_imodule_set_usr_data	.dynsym	0xc5d410	5	FUNC	<unknown>	DEFAULT	13
CONF_load	.dynsym	0xc6a390	185	FUNC	<unknown>	DEFAULT	13
CONF_load_bio	.dynsym	0xc5d1e0	98	FUNC	<unknown>	DEFAULT	13
CONF_load_fp	.dynsym	0xc5ecb0	221	FUNC	<unknown>	DEFAULT	13
CONF_module_add	.dynsym	0xc612d0	445	FUNC	<unknown>	DEFAULT	13
CONF_module_get_usr_data	.dynsym	0xc5d450	5	FUNC	<unknown>	DEFAULT	13
CONF_module_set_usr_data	.dynsym	0xc5d460	5	FUNC	<unknown>	DEFAULT	13
CONF_modules_finish	.dynsym	0xc63ea0	69	FUNC	<unknown>	DEFAULT	13
CONF_modules_load	.dynsym	0xc6cda0	22	FUNC	<unknown>	DEFAULT	13
CONF_modules_load_file	.dynsym	0xc6d080	16	FUNC	<unknown>	DEFAULT	13
CONF_modules_load_file_ex	.dynsym	0xc6cdc0	693	FUNC	<unknown>	DEFAULT	13
CONF_modules_unload	.dynsym	0xc6c460	524	FUNC	<unknown>	DEFAULT	13
CONF_parse_list	.dynsym	0xc5dc90	71	FUNC	<unknown>	DEFAULT	13
CONF_set_default_method	.dynsym	0xc5d1d0	13	FUNC	<unknown>	DEFAULT	13
CONF_set_nconf	.dynsym	0xc5d180	66	FUNC	<unknown>	DEFAULT	13
CRL_DIST_POINTS_free	.dynsym	0xdb6dc0	31	FUNC	<unknown>	DEFAULT	13
CRL_DIST_POINTS_it	.dynsym	0xdb2b20	6	FUNC	<unknown>	DEFAULT	13
CRL_DIST_POINTS_new	.dynsym	0xdb3990	53	FUNC	<unknown>	DEFAULT	13
CRYPTO_128_unwrap	.dynsym	0xd40c60	107	FUNC	<unknown>	DEFAULT	13
CRYPTO_128_unwrap_pad	.dynsym	0xd40cd0	330	FUNC	<unknown>	DEFAULT	13
CRYPTO_128_wrap	.dynsym	0xd40f10	29	FUNC	<unknown>	DEFAULT	13
CRYPTO_128_wrap_pad	.dynsym	0xd40f30	269	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_cleanup_local	.dynsym	0xd2c710	24	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_compare_id	.dynsym	0xd2c740	9	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_get_current_id	.dynsym	0xd2c730	5	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_get_local	.dynsym	0xd2b1f0	7	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_init_local	.dynsym	0xd2c6d0	22	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_lock_free	.dynsym	0xd2add0	65	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_lock_new	.dynsym	0xd2c5a0	159	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_read_lock	.dynsym	0xd2b200	22	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_run_once	.dynsym	0xd2b1d0	22	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_set_local	.dynsym	0xd2c6f0	24	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_unlock	.dynsym	0xd27330	22	FUNC	<unknown>	DEFAULT	13
CRYPTO_THREAD_write_lock	.dynsym	0xd27300	22	FUNC	<unknown>	DEFAULT	13
CRYPTO_alloc_ex_data	.dynsym	0xd1a810	45	FUNC	<unknown>	DEFAULT	13
CRYPTO_atomic_add	.dynsym	0xd2c750	16	FUNC	<unknown>	DEFAULT	13
CRYPTO_atomic_load	.dynsym	0xd2c780	12	FUNC	<unknown>	DEFAULT	13
CRYPTO_atomic_or	.dynsym	0xd2c760	25	FUNC	<unknown>	DEFAULT	13
CRYPTO_cbc128_decrypt	.dynsym	0xd395a0	17	FUNC	<unknown>	DEFAULT	13
CRYPTO_cbc128_encrypt	.dynsym	0xd39010	17	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_aad	.dynsym	0xd39710	404	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_decrypt	.dynsym	0xd39e60	1134	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_decrypt_ccm64	.dynsym	0xd3ab20	1572	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_encrypt	.dynsym	0xd398b0	1455	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_encrypt_ccm64	.dynsym	0xd3a2d0	2126	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_init	.dynsym	0xd395c0	44	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_setiv	.dynsym	0xd395f0	286	FUNC	<unknown>	DEFAULT	13
CRYPTO_ccm128_tag	.dynsym	0xd3b150	172	FUNC	<unknown>	DEFAULT	13
CRYPTO_cfb128_1_encrypt	.dynsym	0xd3b870	212	FUNC	<unknown>	DEFAULT	13
CRYPTO_cfb128_8_encrypt	.dynsym	0xd3b950	183	FUNC	<unknown>	DEFAULT	13
CRYPTO_cfb128_encrypt	.dynsym	0xd3b200	1644	FUNC	<unknown>	DEFAULT	13
CRYPTO_clear_free	.dynsym	0xd26a30	113	FUNC	<unknown>	DEFAULT	13
CRYPTO_clear_realloc	.dynsym	0xd26c00	187	FUNC	<unknown>	DEFAULT	13
CRYPTO_ctr128_encrypt	.dynsym	0xd3ba10	1096	FUNC	<unknown>	DEFAULT	13
CRYPTO_ctr128_encrypt_ctr32	.dynsym	0xd3be60	1182	FUNC	<unknown>	DEFAULT	13
CRYPTO_cts128_decrypt	.dynsym	0xd3d3c0	469	FUNC	<unknown>	DEFAULT	13
CRYPTO_cts128_decrypt_block	.dynsym	0xd3ca40	1259	FUNC	<unknown>	DEFAULT	13
CRYPTO_cts128_encrypt	.dynsym	0xd3c740	443	FUNC	<unknown>	DEFAULT	13
CRYPTO_cts128_encrypt_block	.dynsym	0xd3c300	633	FUNC	<unknown>	DEFAULT	13
CRYPTO_dup_ex_data	.dynsym	0xd250d0	749	FUNC	<unknown>	DEFAULT	13
CRYPTO_free	.dynsym	0xd26a10	29	FUNC	<unknown>	DEFAULT	13
CRYPTO_free_ex_data	.dynsym	0xd253c0	587	FUNC	<unknown>	DEFAULT	13
CRYPTO_free_ex_index	.dynsym	0xd1a320	292	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_aad	.dynsym	0xd3dd60	598	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_decrypt	.dynsym	0xd3e5e0	1528	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_decrypt_ctr32	.dynsym	0xd3f120	1335	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_encrypt	.dynsym	0xd3dfc0	1560	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_encrypt_ctr32	.dynsym	0xd3ebe0	1335	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_finish	.dynsym	0xd3f660	420	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_init	.dynsym	0xd3d750	732	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_new	.dynsym	0xd3f8e0	115	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_release	.dynsym	0xd3f960	73	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_setiv	.dynsym	0xd3da30	808	FUNC	<unknown>	DEFAULT	13
CRYPTO_gcm128_tag	.dynsym	0xd3f810	201	FUNC	<unknown>	DEFAULT	13
CRYPTO_get_ex_data	.dynsym	0xd193c0	35	FUNC	<unknown>	DEFAULT	13
CRYPTO_get_ex_new_index	.dynsym	0xd24d90	32	FUNC	<unknown>	DEFAULT	13
CRYPTO_get_mem_functions	.dynsym	0xd272c0	46	FUNC	<unknown>	DEFAULT	13
CRYPTO_malloc	.dynsym	0xd267f0	67	FUNC	<unknown>	DEFAULT	13
CRYPTO_memcmp	.dynsym	0x1cd4e40	95	FUNC	<unknown>	DEFAULT	13
CRYPTO_memdup	.dynsym	0xd2e630	131	FUNC	<unknown>	DEFAULT	13
CRYPTO_new_ex_data	.dynsym	0xd1a6f0	15	FUNC	<unknown>	DEFAULT	13
CRYPTO_nistcts128_decrypt	.dynsym	0xd3d5a0	432	FUNC	<unknown>	DEFAULT	13
CRYPTO_nistcts128_decrypt_block	.dynsym	0xd3cf30	1159	FUNC	<unknown>	DEFAULT	13
CRYPTO_nistcts128_encrypt	.dynsym	0xd3c900	310	FUNC	<unknown>	DEFAULT	13
CRYPTO_nistcts128_encrypt_block	.dynsym	0xd3c580	433	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_aad	.dynsym	0xd3fc90	464	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_cleanup	.dynsym	0xd40780	57	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_copy_ctx	.dynsym	0xd44510	273	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_decrypt	.dynsym	0xd40260	1045	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_encrypt	.dynsym	0xd3fe60	1013	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_finish	.dynsym	0xd40680	118	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_init	.dynsym	0xd43d40	1804	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_new	.dynsym	0xd44450	183	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_setiv	.dynsym	0xd3f9b0	730	FUNC	<unknown>	DEFAULT	13
CRYPTO_ocb128_tag	.dynsym	0xd40700	126	FUNC	<unknown>	DEFAULT	13

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 11
• 443 (HTTPS)
• 80 (HTTP)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2025 16:54:27.984997034 CEST	43928	443	192.168.2.23	91.189.91.42
Apr 23, 2025 16:54:33.359484911 CEST	42836	443	192.168.2.23	91.189.91.43
Apr 23, 2025 16:54:35.151139975 CEST	42516	80	192.168.2.23	109.202.202.202
Apr 23, 2025 16:54:47.949417114 CEST	43928	443	192.168.2.23	91.189.91.42
Apr 23, 2025 16:54:48.946634054 CEST	39250	443	192.168.2.23	34.249.145.219
Apr 23, 2025 16:54:48.946696043 CEST	443	39250	34.249.145.219	192.168.2.23
Apr 23, 2025 16:54:48.946759939 CEST	39250	443	192.168.2.23	34.249.145.219
Apr 23, 2025 16:54:48.947010040 CEST	39250	443	192.168.2.23	34.249.145.219
Apr 23, 2025 16:54:48.947024107 CEST	443	39250	34.249.145.219	192.168.2.23
Apr 23, 2025 16:55:00.235608101 CEST	42836	443	192.168.2.23	91.189.91.43
Apr 23, 2025 16:55:06.378741026 CEST	42516	80	192.168.2.23	109.202.202.202
Apr 23, 2025 16:55:28.903733969 CEST	43928	443	192.168.2.23	91.189.91.42
Apr 23, 2025 16:55:48.938718081 CEST	39250	443	192.168.2.23	34.249.145.219
Apr 23, 2025 16:55:48.980285883 CEST	443	39250	34.249.145.219	192.168.2.23

System Behavior

Analysis Process: argon_https.elf PID: 6226, Parent PID: 6148

General

Start time (UTC):	14:54:27
Start date (UTC):	23/04/2025
Path:	/tmp/argon_https.elf
Arguments:	/tmp/argon_https.elf
File size:	46359878 bytes
MD5 hash:	fd3a23d2232e870f59dcdd6286698c0c

File Activities

File Opened

File Read

System Activities

Query System Information (uname)

Chronological Activities

Analysis Process: dash PID: 6288, Parent PID: 4331

General

Start time (UTC):	14:55:48
Start date (UTC):	23/04/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rm PID: 6288, Parent PID: 4331

General

Start time (UTC):	14:55:48
Start date (UTC):	23/04/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.h3TUhDakBS /tmp/tmp.AzUTjSAgid /tmp/tmp.JVH5GHe9Ka
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

File Activities

File Opened

File Deleted

File Read

Chronological Activities

Analysis Process: dash PID: 6289, Parent PID: 4331

General

Start time (UTC):	14:55:48
Start date (UTC):	23/04/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rm PID: 6289, Parent PID: 4331

General

Start time (UTC):	14:55:48
Start date (UTC):	23/04/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.h3TUhDakBS /tmp/tmp.AzUTjSAgid /tmp/tmp.JVH5GHe9Ka
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report argon_https.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Dynamic Tags

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: argon_https.elf PID: 6226, Parent PID: 6148

General

File Activities

File Opened

File Read

System Activities

Query System Information (uname)

Chronological Activities

Analysis Process: dash PID: 6288, Parent PID: 4331

General

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rm PID: 6288, Parent PID: 4331

General

File Activities

File Opened

File Deleted

File Read

Chronological Activities

Analysis Process: dash PID: 6289, Parent PID: 4331

General

Process Activities

Linux Analysis Report
argon_https.elf