Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
fuckjewishpeople.sparc

Overview

General Information

Sample Name:	fuckjewishpeople.sparc
Analysis ID:	557483
MD5:	bdcba1bbc28618db0462a019f1c1b4ba
SHA1:	99f94c04365ae632b6ba3b565799e3f0267c9a78
SHA256:	63a6e3f1bbfbd4abfdb1457ba4d2d10569265ca6cba34922a5b35c6e5e195828
Tags:	elfgafgyt
Infos:

Detection

Gafgyt Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected Mirai

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Classification

×

Analysis Advice

All HTTP servers contacted by the sample do not answer. Likely the sample is an old dropper which does no longer work

Static ELF header machine description suggests that the sample might not execute correctly on this machine

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	557483
Start date:	21.01.2022
Start time:	07:55:37
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	fuckjewishpeople.sparc
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal68.spre.troj.linSPARC@0/1@0/0

Runtime Messages

Command:	/tmp/fuckjewishpeople.sparc
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

fuckjewishpeople.sparc (PID: 5225, Parent: 5116, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/fuckjewishpeople.sparc

fuckjewishpeople.sparc New Fork (PID: 5227, Parent: 5225)

fuckjewishpeople.sparc New Fork (PID: 5229, Parent: 5227)

cleanup

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
fuckjewishpeople.sparc	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
fuckjewishpeople.sparc	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5225.1.00000000ad74106a.0000000028064f45.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5225.1.00000000ad74106a.0000000028064f45.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5227.1.00000000ad74106a.0000000028064f45.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5227.1.00000000ad74106a.0000000028064f45.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: fuckjewishpeople.sparc	Virustotal: Detection: 50%			Perma Link
Source: fuckjewishpeople.sparc	ReversingLabs: Detection: 55%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/fuckjewishpeople.sparc (PID: 5225)

Opens: /proc/net/route

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: global traffic

TCP traffic: 192.168.2.23:53078 -> 78.47.230.250:4258

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.230.250

Source: fuckjewishpeople.sparc	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: fuckjewishpeople.sparc	String found in binary or memory: http://feedback.redkolibri.com/
Source: fuckjewishpeople.sparc	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: fuckjewishpeople.sparc	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: fuckjewishpeople.sparc	String found in binary or memory: http://www.billybobbot.com/crawler/)

Source: classification engine

Classification label: mal68.spre.troj.linSPARC@0/1@0/0

Source: ELF static info symbol of initial sample	FILE: libc/string/sparc/memchr.S
Source: ELF static info symbol of initial sample	FILE: libc/string/sparc/memcpy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/sparc/memset.S
Source: ELF static info symbol of initial sample	FILE: libc/string/sparc/strchr.S
Source: ELF static info symbol of initial sample	FILE: libc/string/sparc/strcmp.S
Source: ELF static info symbol of initial sample	FILE: libc/string/sparc/strcpy.S
Source: ELF static info symbol of initial sample	FILE: libc/string/sparc/strlen.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/crt1.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/crti.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/crtn.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/fork.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/rem.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/udiv.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/umul.S
Source: ELF static info symbol of initial sample	FILE: libc/sysdeps/linux/sparc/urem.S

Source: /tmp/fuckjewishpeople.sparc (PID: 5225)

Queries kernel information via 'uname':

Jump to behavior

Source: fuckjewishpeople.sparc, 5225.1.000000007f3ee2ad.000000002b34661e.rw-.sdmp, fuckjewishpeople.sparc, 5227.1.000000007f3ee2ad.000000002b34661e.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: fuckjewishpeople.sparc, 5225.1.000000007f3ee2ad.000000002b34661e.rw-.sdmp, fuckjewishpeople.sparc, 5227.1.000000007f3ee2ad.000000002b34661e.rw-.sdmp	Binary or memory string: \9V!/etc/qemu-binfmt/sparc
Source: fuckjewishpeople.sparc, 5225.1.0000000028a4a2eb.00000000bd2a76c8.rw-.sdmp	Binary or memory string: /tmp/qemu-open.thwEoj
Source: fuckjewishpeople.sparc, 5225.1.0000000028a4a2eb.00000000bd2a76c8.rw-.sdmp, fuckjewishpeople.sparc, 5227.1.0000000028a4a2eb.00000000bd2a76c8.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc
Source: fuckjewishpeople.sparc, 5225.1.0000000028a4a2eb.00000000bd2a76c8.rw-.sdmp	Binary or memory string: \'dY9V/tmp/qemu-open.thwEoj\
Source: fuckjewishpeople.sparc, 5225.1.0000000028a4a2eb.00000000bd2a76c8.rw-.sdmp, fuckjewishpeople.sparc, 5227.1.0000000028a4a2eb.00000000bd2a76c8.rw-.sdmp	Binary or memory string: Vx86_64/usr/bin/qemu-sparc/tmp/fuckjewishpeople.sparcSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/fuckjewishpeople.sparc

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: fuckjewishpeople.sparc, type: SAMPLE
Source: Yara match	File source: 5225.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5227.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY

Yara detected Gafgyt

Source: Yara match	File source: fuckjewishpeople.sparc, type: SAMPLE
Source: Yara match	File source: 5225.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5227.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: fuckjewishpeople.sparc, type: SAMPLE
Source: Yara match	File source: 5225.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5227.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY

Yara detected Gafgyt

Source: Yara match	File source: fuckjewishpeople.sparc, type: SAMPLE
Source: Yara match	File source: 5225.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5227.1.00000000ad74106a.0000000028064f45.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Data Obfuscation	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Standard Port	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
fuckjewishpeople.sparc	51%	Virustotal		Browse
fuckjewishpeople.sparc	56%	ReversingLabs	Linux.Trojan.Gafgyt

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://www.billybobbot.com/crawler/)	0%	URL Reputation	safe
http://fast.no/support/crawler.asp)	0%	URL Reputation	safe
http://feedback.redkolibri.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.baidu.com/search/spider.html)	fuckjewishpeople.sparc	false		high
http://www.billybobbot.com/crawler/)	fuckjewishpeople.sparc	false	URL Reputation: safe	unknown
http://fast.no/support/crawler.asp)	fuckjewishpeople.sparc	false	URL Reputation: safe	unknown
http://feedback.redkolibri.com/	fuckjewishpeople.sparc	false	URL Reputation: safe	unknown
http://www.baidu.com/search/spider.htm)	fuckjewishpeople.sparc	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
78.47.230.250	unknown	Germany		24940	HETZNER-ASDE	false
109.202.202.202	unknown	Switzerland		13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom		41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
78.47.230.250	fuckjewishpeople.x86	Get hash	malicious	Browse
109.202.202.202	fuckjewishpeople.x86	Get hash	malicious	Browse
	beamer.arm-20220121-0505	Get hash	malicious	Browse
	beamer.mpsl-20220121-0505	Get hash	malicious	Browse
	beamer.x86-20220121-0505	Get hash	malicious	Browse
	beamer.arm5-20220121-0505	Get hash	malicious	Browse
	beamer.arm7-20220121-0505	Get hash	malicious	Browse
	beamer.arm6-20220121-0505	Get hash	malicious	Browse
	beamer.mips-20220121-0505	Get hash	malicious	Browse
	apL.mips-20220121-0317	Get hash	malicious	Browse
	sofgiiKIp3	Get hash	malicious	Browse
	3BEtt6iGtf	Get hash	malicious	Browse
	beamer.arm-20220121-0227	Get hash	malicious	Browse
	beamer.mpsl-20220121-0227	Get hash	malicious	Browse
	beamer.arm5-20220121-0227	Get hash	malicious	Browse
	beamer.arm7-20220121-0227	Get hash	malicious	Browse
	beamer.x86-20220121-0227	Get hash	malicious	Browse
	beamer.arm6-20220121-0228	Get hash	malicious	Browse
	beamer.mips-20220121-0228	Get hash	malicious	Browse
	znqCpAz1XA	Get hash	malicious	Browse
	QAJtrv7H4M	Get hash	malicious	Browse
91.189.91.43	fuckjewishpeople.x86	Get hash	malicious	Browse
	beamer.arm-20220121-0505	Get hash	malicious	Browse
	beamer.mpsl-20220121-0505	Get hash	malicious	Browse
	beamer.x86-20220121-0505	Get hash	malicious	Browse
	beamer.arm5-20220121-0505	Get hash	malicious	Browse
	beamer.arm7-20220121-0505	Get hash	malicious	Browse
	beamer.arm6-20220121-0505	Get hash	malicious	Browse
	beamer.mips-20220121-0505	Get hash	malicious	Browse
	apL.mips-20220121-0317	Get hash	malicious	Browse
	sofgiiKIp3	Get hash	malicious	Browse
	3BEtt6iGtf	Get hash	malicious	Browse
	beamer.arm-20220121-0227	Get hash	malicious	Browse
	beamer.mpsl-20220121-0227	Get hash	malicious	Browse
	beamer.arm5-20220121-0227	Get hash	malicious	Browse
	beamer.arm7-20220121-0227	Get hash	malicious	Browse
	beamer.x86-20220121-0227	Get hash	malicious	Browse
	beamer.arm6-20220121-0228	Get hash	malicious	Browse
	beamer.mips-20220121-0228	Get hash	malicious	Browse
	znqCpAz1XA	Get hash	malicious	Browse
	QAJtrv7H4M	Get hash	malicious	Browse
91.189.91.42	fuckjewishpeople.x86	Get hash	malicious	Browse
	beamer.arm-20220121-0505	Get hash	malicious	Browse
	beamer.mpsl-20220121-0505	Get hash	malicious	Browse
	beamer.x86-20220121-0505	Get hash	malicious	Browse
	beamer.arm5-20220121-0505	Get hash	malicious	Browse
	beamer.arm7-20220121-0505	Get hash	malicious	Browse
	beamer.arm6-20220121-0505	Get hash	malicious	Browse
	beamer.mips-20220121-0505	Get hash	malicious	Browse
	apL.mips-20220121-0317	Get hash	malicious	Browse
	sofgiiKIp3	Get hash	malicious	Browse
	3BEtt6iGtf	Get hash	malicious	Browse
	beamer.arm-20220121-0227	Get hash	malicious	Browse
	beamer.mpsl-20220121-0227	Get hash	malicious	Browse
	beamer.arm5-20220121-0227	Get hash	malicious	Browse
	beamer.arm7-20220121-0227	Get hash	malicious	Browse
	beamer.x86-20220121-0227	Get hash	malicious	Browse
	beamer.arm6-20220121-0228	Get hash	malicious	Browse
	beamer.mips-20220121-0228	Get hash	malicious	Browse
	znqCpAz1XA	Get hash	malicious	Browse
	QAJtrv7H4M	Get hash	malicious	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CANONICAL-ASGB	fuckjewishpeople.x86	Get hash	malicious	Browse	91.189.91.42
	beamer.arm-20220121-0505	Get hash	malicious	Browse	91.189.91.42
	beamer.mpsl-20220121-0505	Get hash	malicious	Browse	91.189.91.42
	beamer.x86-20220121-0505	Get hash	malicious	Browse	91.189.91.42
	beamer.arm5-20220121-0505	Get hash	malicious	Browse	91.189.91.42
	beamer.arm7-20220121-0505	Get hash	malicious	Browse	91.189.91.42
	beamer.arm6-20220121-0505	Get hash	malicious	Browse	91.189.91.42
	beamer.mips-20220121-0505	Get hash	malicious	Browse	91.189.91.42
	apL.mips-20220121-0317	Get hash	malicious	Browse	91.189.91.42
	sofgiiKIp3	Get hash	malicious	Browse	91.189.91.42
	3BEtt6iGtf	Get hash	malicious	Browse	91.189.91.42
	beamer.arm-20220121-0227	Get hash	malicious	Browse	91.189.91.42
	beamer.mpsl-20220121-0227	Get hash	malicious	Browse	91.189.91.42
	beamer.arm5-20220121-0227	Get hash	malicious	Browse	91.189.91.42
	beamer.arm7-20220121-0227	Get hash	malicious	Browse	91.189.91.42
	beamer.x86-20220121-0227	Get hash	malicious	Browse	91.189.91.42
	beamer.arm6-20220121-0228	Get hash	malicious	Browse	91.189.91.42
	beamer.mips-20220121-0228	Get hash	malicious	Browse	91.189.91.42
	znqCpAz1XA	Get hash	malicious	Browse	91.189.91.42
	QAJtrv7H4M	Get hash	malicious	Browse	91.189.91.42
INIT7CH	fuckjewishpeople.x86	Get hash	malicious	Browse	109.202.202.202
	beamer.arm-20220121-0505	Get hash	malicious	Browse	109.202.202.202
	beamer.mpsl-20220121-0505	Get hash	malicious	Browse	109.202.202.202
	beamer.x86-20220121-0505	Get hash	malicious	Browse	109.202.202.202
	beamer.arm5-20220121-0505	Get hash	malicious	Browse	109.202.202.202
	beamer.arm7-20220121-0505	Get hash	malicious	Browse	109.202.202.202
	beamer.arm6-20220121-0505	Get hash	malicious	Browse	109.202.202.202
	beamer.mips-20220121-0505	Get hash	malicious	Browse	109.202.202.202
	apL.mips-20220121-0317	Get hash	malicious	Browse	109.202.202.202
	sofgiiKIp3	Get hash	malicious	Browse	109.202.202.202
	3BEtt6iGtf	Get hash	malicious	Browse	109.202.202.202
	beamer.arm-20220121-0227	Get hash	malicious	Browse	109.202.202.202
	beamer.mpsl-20220121-0227	Get hash	malicious	Browse	109.202.202.202
	beamer.arm5-20220121-0227	Get hash	malicious	Browse	109.202.202.202
	beamer.arm7-20220121-0227	Get hash	malicious	Browse	109.202.202.202
	beamer.x86-20220121-0227	Get hash	malicious	Browse	109.202.202.202
	beamer.arm6-20220121-0228	Get hash	malicious	Browse	109.202.202.202
	beamer.mips-20220121-0228	Get hash	malicious	Browse	109.202.202.202
	znqCpAz1XA	Get hash	malicious	Browse	109.202.202.202
	QAJtrv7H4M	Get hash	malicious	Browse	109.202.202.202
HETZNER-ASDE	fuckjewishpeople.x86	Get hash	malicious	Browse	78.47.230.250
	M5wYTVw6jf.exe	Get hash	malicious	Browse	95.216.16.44
	d4hM13EtvO.xls	Get hash	malicious	Browse	178.63.25.185
	h59qHi83fy.xls	Get hash	malicious	Browse	178.63.25.185
	7rP7wTfXF5.exe	Get hash	malicious	Browse	95.216.16.44
	6eh03uWogb.xls	Get hash	malicious	Browse	178.63.25.185
	oP5GfAKaQe.xls	Get hash	malicious	Browse	178.63.25.185
	Wrm8zRqsi8.xls	Get hash	malicious	Browse	178.63.25.185
	4aweia3dXX.xls	Get hash	malicious	Browse	178.63.25.185
	1FB1NWmx4U.xls	Get hash	malicious	Browse	178.63.25.185
	vkMy8N40u3.xls	Get hash	malicious	Browse	178.63.25.185
	RuEdWpcH6M.xls	Get hash	malicious	Browse	178.63.25.185
	cgVeJBCOwx.xls	Get hash	malicious	Browse	178.63.25.185
	SKGHCCMAidbki_pri.xlsx	Get hash	malicious	Browse	144.76.242.220
	74654_0572.xlsm	Get hash	malicious	Browse	78.47.204.80
	Eo4fUr4Nrw.xls	Get hash	malicious	Browse	178.63.25.185
	GNVAV62Lvr.xls	Get hash	malicious	Browse	178.63.25.185
	CshcvHW436.dll	Get hash	malicious	Browse	78.47.204.80
	WWAaHV4zF5.dll	Get hash	malicious	Browse	78.47.204.80
	5F4cRaOS5o.dll	Get hash	malicious	Browse	78.47.204.80

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.thwEoj (deleted)

Process:	/tmp/fuckjewishpeople.sparc
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.06498057839219
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	fuckjewishpeople.sparc
File size:	102442
MD5:	bdcba1bbc28618db0462a019f1c1b4ba
SHA1:	99f94c04365ae632b6ba3b565799e3f0267c9a78
SHA256:	63a6e3f1bbfbd4abfdb1457ba4d2d10569265ca6cba34922a5b35c6e5e195828
SHA512:	bb288aa0957e85ae107614bfcb9aa4f4e46ced5a1e62d3d58b7d19e6d0b8a5bc769783b9f8ba4ab8897dba53ed2ee5753f76507d9b1418fe49e1a373e923a529
SSDEEP:	1536:xfRuqNM5h7t/RiRt4n6phaQoRKzO6F6OXj6ufeRTe:OqN8jRiRtphaQoRKzO6F6OXGufcTe
File Content Preview:	.ELF...........................4..Bx.....4. ...(.......................l...l...............l...l...l......g.........dt.Q................................@..(....@.9.................#.....b...`.....!....."...@.....".........`......$"..."...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	82552
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100b0	0xb0	0xe764	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1e814	0xe814	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1e828	0xe828	0x4640	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x22e68	0x12e68	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x32e6c	0x12e6c	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x32e74	0x12e74	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x32e7c	0x12e7c	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x32e80	0x12e80	0x474	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x332f8	0x132f4	0x6368	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x132f4	0x9c6	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x13cba	0x20	0x0	0x0		0	0	1
.debug_pubnames	PROGBITS	0x0	0x13cda	0x1f	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x13cf9	0x16e	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x13e67	0xfb	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x13f62	0x7c	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x13fe0	0x28	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x14008	0x10b	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x14113	0x6e	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x14181	0x18	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x14199	0xdc	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x14638	0x29d0	0x10	0x0		23	255	4
.strtab	STRTAB	0x0	0x17008	0x2022	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x10000	0x10000	0x12e6c	0x12e6c	3.8594	0x5	R E	0x10000		.init .text .fini .rodata .eh_frame
LOAD	0x12e6c	0x32e6c	0x32e6c	0x488	0x67f4	1.9574	0x6	RW	0x10000		.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Version Info Name	Version Info File Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
			.symtab	0x10094	0	SECTION	<unknown>	DEFAULT	1
			.symtab	0x100b0	0	SECTION	<unknown>	DEFAULT	2
			.symtab	0x1e814	0	SECTION	<unknown>	DEFAULT	3
			.symtab	0x1e828	0	SECTION	<unknown>	DEFAULT	4
			.symtab	0x22e68	0	SECTION	<unknown>	DEFAULT	5
			.symtab	0x32e6c	0	SECTION	<unknown>	DEFAULT	6
			.symtab	0x32e74	0	SECTION	<unknown>	DEFAULT	7
			.symtab	0x32e7c	0	SECTION	<unknown>	DEFAULT	8
			.symtab	0x32e80	0	SECTION	<unknown>	DEFAULT	9
			.symtab	0x332f8	0	SECTION	<unknown>	DEFAULT	10
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
.rem			.symtab	0x14e10	44	FUNC	<unknown>	DEFAULT	2
.udiv			.symtab	0x14df0	20	FUNC	<unknown>	DEFAULT	2
.umul			.symtab	0x14e04	12	FUNC	<unknown>	DEFAULT	2
.urem			.symtab	0x14dd0	32	FUNC	<unknown>	DEFAULT	2
C.72.4749			.symtab	0x1ff80	104	OBJECT	<unknown>	DEFAULT	4
C.82.4860			.symtab	0x21014	1128	OBJECT	<unknown>	DEFAULT	4
Q			.symtab	0x33330	16384	OBJECT	<unknown>	DEFAULT	10
Randhex			.symtab	0x12144	428	FUNC	<unknown>	DEFAULT	2
SendHTTPHex			.symtab	0x13088	464	FUNC	<unknown>	DEFAULT	2
SendSTD			.symtab	0x11cd0	428	FUNC	<unknown>	DEFAULT	2
UDPRAW			.symtab	0x11fe0	356	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__			.symtab	0x32e70	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__			.symtab	0x32e6c	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b			.symtab	0x32f8c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data			.symtab	0x216f8	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower			.symtab	0x332b8	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data			.symtab	0x22a02	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper			.symtab	0x32f94	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data			.symtab	0x219f8	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__			.symtab	0x32e78	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__			.symtab	0x32e74	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__			.symtab	0x22e68	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__			.symtab	0x22e68	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b			.symtab	0x32f8c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data			.symtab	0x216f8	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower			.symtab	0x332b8	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data			.symtab	0x22a02	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper			.symtab	0x32f94	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data			.symtab	0x219f8	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b			.symtab	0x32f90	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower			.symtab	0x332bc	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper			.symtab	0x32f98	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location			.symtab	0x15330	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked			.symtab	0x1e39c	328	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r			.symtab	0x18b3c	32	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location			.symtab	0x1a7fc	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl			.symtab	0x14e3c	136	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64			.symtab	0x14ec4	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open			.symtab	0x150dc	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini			.symtab	0x1a190	132	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init			.symtab	0x1a268	104	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r			.symtab	0x18b5c	284	FUNC	<unknown>	HIDDEN	2
__GI__exit			.symtab	0x14f28	64	FUNC	<unknown>	HIDDEN	2
__GI_abort			.symtab	0x1c604	316	FUNC	<unknown>	HIDDEN	2
__GI_atoi			.symtab	0x19d8c	24	FUNC	<unknown>	HIDDEN	2
__GI_atol			.symtab	0x19d8c	24	FUNC	<unknown>	HIDDEN	2
__GI_brk			.symtab	0x1c75c	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir			.symtab	0x14f68	68	FUNC	<unknown>	HIDDEN	2
__GI_close			.symtab	0x14fac	68	FUNC	<unknown>	HIDDEN	2
__GI_connect			.symtab	0x1919c	76	FUNC	<unknown>	HIDDEN	2
__GI_errno			.symtab	0x39564	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit			.symtab	0x19f64	128	FUNC	<unknown>	HIDDEN	2
__GI_fclose			.symtab	0x1c834	324	FUNC	<unknown>	HIDDEN	2
__GI_fcntl			.symtab	0x14e3c	136	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64			.symtab	0x14ec4	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked			.symtab	0x1d048	420	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked			.symtab	0x1e39c	328	FUNC	<unknown>	HIDDEN	2
__GI_fgets			.symtab	0x1ced0	100	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked			.symtab	0x1d1ec	192	FUNC	<unknown>	HIDDEN	2
__GI_fopen			.symtab	0x1c978	24	FUNC	<unknown>	HIDDEN	2
__GI_fork			.symtab	0x14d9c	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked			.symtab	0x164f8	60	FUNC	<unknown>	HIDDEN	2
__GI_fseek			.symtab	0x1c990	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64			.symtab	0x1c9b4	272	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked			.symtab	0x16534	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked			.symtab	0x1e39c	328	FUNC	<unknown>	HIDDEN	2
__GI_getegid			.symtab	0x1a584	64	FUNC	<unknown>	HIDDEN	2
__GI_geteuid			.symtab	0x1a5c4	64	FUNC	<unknown>	HIDDEN	2
__GI_getgid			.symtab	0x1a604	64	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname			.symtab	0x18e60	60	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r			.symtab	0x18e9c	768	FUNC	<unknown>	HIDDEN	2
__GI_getpid			.symtab	0x14ff0	64	FUNC	<unknown>	HIDDEN	2
__GI_getsockname			.symtab	0x191e8	76	FUNC	<unknown>	HIDDEN	2
__GI_getuid			.symtab	0x1a644	64	FUNC	<unknown>	HIDDEN	2
__GI_h_errno			.symtab	0x39568	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr			.symtab	0x18e38	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton			.symtab	0x1ba2c	220	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa			.symtab	0x18e14	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r			.symtab	0x18da4	112	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop			.symtab	0x1d990	684	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton			.symtab	0x1d5cc	544	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r			.symtab	0x19ca8	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl			.symtab	0x15030	100	FUNC	<unknown>	HIDDEN	2
__GI_isatty			.symtab	0x18cec	32	FUNC	<unknown>	HIDDEN	2
__GI_kill			.symtab	0x15094	72	FUNC	<unknown>	HIDDEN	2
__GI_lseek64			.symtab	0x1e308	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr			.symtab	0x1b620	280	FUNC	<unknown>	HIDDEN	2
__GI_memcpy			.symtab	0x16c10	4212	FUNC	<unknown>	HIDDEN	2
__GI_memmove			.symtab	0x1662c	1508	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy			.symtab	0x1b738	32	FUNC	<unknown>	HIDDEN	2
__GI_memrchr			.symtab	0x1b758	272	FUNC	<unknown>	HIDDEN	2
__GI_memset			.symtab	0x17cb8	416	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep			.symtab	0x1a684	72	FUNC	<unknown>	HIDDEN	2
__GI_open			.symtab	0x150dc	120	FUNC	<unknown>	HIDDEN	2
__GI_poll			.symtab	0x1c7e8	76	FUNC	<unknown>	HIDDEN	2
__GI_raise			.symtab	0x1e2f0	24	FUNC	<unknown>	HIDDEN	2
__GI_random			.symtab	0x198a8	80	FUNC	<unknown>	HIDDEN	2
__GI_random_r			.symtab	0x19b28	156	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr			.symtab	0x1d2ac	204	FUNC	<unknown>	HIDDEN	2
__GI_read			.symtab	0x1516c	76	FUNC	<unknown>	HIDDEN	2
__GI_recv			.symtab	0x19288	32	FUNC	<unknown>	HIDDEN	2
__GI_sbrk			.symtab	0x1a6cc	84	FUNC	<unknown>	HIDDEN	2
__GI_select			.symtab	0x151b8	84	FUNC	<unknown>	HIDDEN	2
__GI_send			.symtab	0x192a8	32	FUNC	<unknown>	HIDDEN	2
__GI_setsid			.symtab	0x1520c	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt			.symtab	0x192c8	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r			.symtab	0x19a04	292	FUNC	<unknown>	HIDDEN	2
__GI_sigaction			.symtab	0x1c564	160	FUNC	<unknown>	HIDDEN	2
__GI_signal			.symtab	0x19340	188	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask			.symtab	0x1a720	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep			.symtab	0x19fe4	428	FUNC	<unknown>	HIDDEN	2
__GI_socket			.symtab	0x192f4	76	FUNC	<unknown>	HIDDEN	2
__GI_sprintf			.symtab	0x1533c	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r			.symtab	0x19bc4	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp			.symtab	0x18c78	92	FUNC	<unknown>	HIDDEN	2
__GI_strchr			.symtab	0x17ecc	524	FUNC	<unknown>	HIDDEN	2
__GI_strcmp			.symtab	0x1822c	648	FUNC	<unknown>	HIDDEN	2
__GI_strcoll			.symtab	0x1822c	648	FUNC	<unknown>	HIDDEN	2
__GI_strcpy			.symtab	0x1851c	804	FUNC	<unknown>	HIDDEN	2
__GI_strdup			.symtab	0x1d4c8	56	FUNC	<unknown>	HIDDEN	2
__GI_strlen			.symtab	0x188a8	120	FUNC	<unknown>	HIDDEN	2
__GI_strncat			.symtab	0x1d378	224	FUNC	<unknown>	HIDDEN	2
__GI_strncpy			.symtab	0x1b868	248	FUNC	<unknown>	HIDDEN	2
__GI_strnlen			.symtab	0x18920	252	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk			.symtab	0x1b9dc	80	FUNC	<unknown>	HIDDEN	2
__GI_strrchr			.symtab	0x180d8	192	FUNC	<unknown>	HIDDEN	2
__GI_strspn			.symtab	0x1d458	112	FUNC	<unknown>	HIDDEN	2
__GI_strstr			.symtab	0x18a1c	288	FUNC	<unknown>	HIDDEN	2
__GI_strtok			.symtab	0x18cd4	24	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r			.symtab	0x1b960	124	FUNC	<unknown>	HIDDEN	2
__GI_strtol			.symtab	0x19da4	20	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr			.symtab	0x18d0c	112	FUNC	<unknown>	HIDDEN	2
__GI_time			.symtab	0x1524c	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower			.symtab	0x1e378	36	FUNC	<unknown>	HIDDEN	2
__GI_toupper			.symtab	0x1530c	36	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf			.symtab	0x15370	156	FUNC	<unknown>	HIDDEN	2
__GI_wait4			.symtab	0x1a7ac	80	FUNC	<unknown>	HIDDEN	2
__GI_waitpid			.symtab	0x15294	20	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb			.symtab	0x1a808	72	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs			.symtab	0x1a86c	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs			.symtab	0x1a850	28	FUNC	<unknown>	HIDDEN	2
__GI_write			.symtab	0x152a8	76	FUNC	<unknown>	HIDDEN	2
__JCR_END__			.symtab	0x32e7c	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__			.symtab	0x32e7c	0	OBJECT	<unknown>	DEFAULT	8
__app_fini			.symtab	0x39558	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock			.symtab	0x3329c	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal			.symtab	0x19340	188	FUNC	<unknown>	HIDDEN	2
__bss_start			.symtab	0x332f4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd			.symtab	0x1a224	68	FUNC	<unknown>	DEFAULT	2
__ctype_b			.symtab	0x32f90	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower			.symtab	0x332bc	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper			.symtab	0x32f98	4	OBJECT	<unknown>	DEFAULT	9
__curbrk			.symtab	0x3958c	4	OBJECT	<unknown>	HIDDEN	10
__data_start			.symtab	0x32e88	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer			.symtab	0x1dec4	240	FUNC	<unknown>	HIDDEN	2
__decode_dotted			.symtab	0x1e588	196	FUNC	<unknown>	HIDDEN	2
__decode_header			.symtab	0x1dd58	208	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup			.symtab	0x1bb08	1852	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux			.symtab	0x1e7cc	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux			.symtab	0x100b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle			.symtab	0x32e80	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted			.symtab	0x1e4e4	164	FUNC	<unknown>	HIDDEN	2
__encode_header			.symtab	0x1dc3c	284	FUNC	<unknown>	HIDDEN	2
__encode_question			.symtab	0x1de28	120	FUNC	<unknown>	HIDDEN	2
__environ			.symtab	0x39550	4	OBJECT	<unknown>	DEFAULT	10
__errno_location			.symtab	0x15330	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup			.symtab	0x39548	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked			.symtab	0x1e39c	328	FUNC	<unknown>	DEFAULT	2
__fini_array_end			.symtab	0x32e6c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start			.symtab	0x32e6c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r			.symtab	0x1c52c	56	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r			.symtab	0x18b3c	32	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location			.symtab	0x1a7fc	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc			.symtab	0x196a4	160	FUNC	<unknown>	DEFAULT	2
__heap_free			.symtab	0x1978c	268	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area			.symtab	0x19744	48	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after			.symtab	0x19774	24	FUNC	<unknown>	DEFAULT	2
__init_array_end			.symtab	0x32e6c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start			.symtab	0x32e6c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted			.symtab	0x1e64c	72	FUNC	<unknown>	HIDDEN	2
__length_question			.symtab	0x1dea0	36	FUNC	<unknown>	HIDDEN	2
__libc_close			.symtab	0x14fac	68	FUNC	<unknown>	DEFAULT	2
__libc_connect			.symtab	0x1919c	76	FUNC	<unknown>	DEFAULT	2
__libc_creat			.symtab	0x15154	24	FUNC	<unknown>	DEFAULT	2
__libc_fcntl			.symtab	0x14e3c	136	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64			.symtab	0x14ec4	100	FUNC	<unknown>	DEFAULT	2
__libc_fork			.symtab	0x14d9c	52	FUNC	<unknown>	DEFAULT	2
__libc_getpid			.symtab	0x14ff0	64	FUNC	<unknown>	DEFAULT	2
__libc_lseek64			.symtab	0x1e308	112	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep			.symtab	0x1a684	72	FUNC	<unknown>	DEFAULT	2
__libc_open			.symtab	0x150dc	120	FUNC	<unknown>	DEFAULT	2
__libc_poll			.symtab	0x1c7e8	76	FUNC	<unknown>	DEFAULT	2
__libc_read			.symtab	0x1516c	76	FUNC	<unknown>	DEFAULT	2
__libc_recv			.symtab	0x19288	32	FUNC	<unknown>	DEFAULT	2
__libc_select			.symtab	0x151b8	84	FUNC	<unknown>	DEFAULT	2
__libc_send			.symtab	0x192a8	32	FUNC	<unknown>	DEFAULT	2
__libc_sigaction			.symtab	0x1c564	160	FUNC	<unknown>	DEFAULT	2
__libc_stack_end			.symtab	0x3954c	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid			.symtab	0x15294	20	FUNC	<unknown>	DEFAULT	2
__libc_write			.symtab	0x152a8	76	FUNC	<unknown>	DEFAULT	2
__malloc_heap			.symtab	0x330d8	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock			.symtab	0x39530	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock			.symtab	0x39618	24	OBJECT	<unknown>	DEFAULT	10
__muldi3			.symtab	0x14cc8	212	FUNC	<unknown>	DEFAULT	2
__nameserver			.symtab	0x39640	12	OBJECT	<unknown>	HIDDEN	10
__nameservers			.symtab	0x3964c	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts			.symtab	0x1dfb4	56	FUNC	<unknown>	HIDDEN	2
__open_nameservers			.symtab	0x1c244	744	FUNC	<unknown>	HIDDEN	2
__pagesize			.symtab	0x39554	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end			.symtab	0x32e6c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start			.symtab	0x32e6c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init			.symtab	0x1a214	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock			.symtab	0x1a214	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock			.symtab	0x1a214	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock			.symtab	0x1a214	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0			.symtab	0x1a214	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void			.symtab	0x1a21c	8	FUNC	<unknown>	DEFAULT	2
__raise			.symtab	0x1e2f0	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r			.symtab	0x1dfec	772	FUNC	<unknown>	HIDDEN	2
__register_frame_info			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock			.symtab	0x332c4	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini			.symtab	0x3955c	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain			.symtab	0x39630	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains			.symtab	0x39650	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset			.symtab	0x19424	44	FUNC	<unknown>	DEFAULT	2
__sigdelset			.symtab	0x19450	44	FUNC	<unknown>	DEFAULT	2
__sigismember			.symtab	0x193fc	40	FUNC	<unknown>	DEFAULT	2
__socketcall			.symtab	0x1a53c	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin			.symtab	0x32fa8	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ			.symtab	0x1e694	104	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE			.symtab	0x1a928	196	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position			.symtab	0x1cac4	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite			.symtab	0x1a9ec	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex			.symtab	0x1546c	28	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3860			.symtab	0x21cf8	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill			.symtab	0x1e6fc	56	FUNC	<unknown>	HIDDEN	2
__stdio_seek			.symtab	0x1ce9c	52	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o			.symtab	0x1e734	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o			.symtab	0x1ab2c	252	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit			.symtab	0x15538	56	FUNC	<unknown>	HIDDEN	2
__stdout			.symtab	0x32fac	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction			.symtab	0x1c798	80	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini			.symtab	0x1a190	132	FUNC	<unknown>	DEFAULT	2
__uClibc_init			.symtab	0x1a268	104	FUNC	<unknown>	DEFAULT	2
__uClibc_main			.symtab	0x1a2d0	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__ubp_memchr			.symtab	0x1b620	280	FUNC	<unknown>	DEFAULT	2
__uclibc_progname			.symtab	0x332b4	4	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r			.symtab	0x18b5c	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad			.symtab	0x15570	60	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init			.symtab	0x1c740	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr			.symtab	0x39654	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum			.symtab	0x39658	4	OBJECT	<unknown>	DEFAULT	10
_edata			.symtab	0x332f4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end			.symtab	0x39660	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno			.symtab	0x39564	4	OBJECT	<unknown>	DEFAULT	10
_exit			.symtab	0x14f28	64	FUNC	<unknown>	DEFAULT	2
_exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini			.symtab	0x1e814	8	FUNC	<unknown>	DEFAULT	3
_fixed_buffers			.symtab	0x37338	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow			.symtab	0x155ac	128	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr			.symtab	0x1ae2c	1908	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno			.symtab	0x39568	4	OBJECT	<unknown>	DEFAULT	10
_init			.symtab	0x10094	8	FUNC	<unknown>	DEFAULT	1
_load_inttype			.symtab	0x1ac28	144	FUNC	<unknown>	HIDDEN	2
_load_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init			.symtab	0x15ca8	164	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec			.symtab	0x15fb0	1352	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs			.symtab	0x15d4c	60	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs			.symtab	0x15d88	480	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size			.symtab	0x15f68	72	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore			.symtab	0x1a21c	8	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer			.symtab	0x1a21c	8	FUNC	<unknown>	DEFAULT	2
_rfill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr			.symtab	0x39598	128	OBJECT	<unknown>	HIDDEN	10
_start			.symtab	0x101a4	56	FUNC	<unknown>	DEFAULT	2
_stdio.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen			.symtab	0x1cbc0	732	FUNC	<unknown>	HIDDEN	2
_stdio_init			.symtab	0x1540c	96	FUNC	<unknown>	HIDDEN	2
_stdio_openlist			.symtab	0x32fb0	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock			.symtab	0x32fb4	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use			.symtab	0x1cf34	276	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count			.symtab	0x37334	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock			.symtab	0x32fcc	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count			.symtab	0x37330	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams			.symtab	0x32fe8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term			.symtab	0x15488	176	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking			.symtab	0x32fe4	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l			.symtab	0x19db8	428	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype			.symtab	0x1acb8	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs			.symtab	0x21e58	2934	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr			.symtab	0x1acf4	312	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal			.symtab	0x1562c	1660	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort			.symtab	0x1c604	316	FUNC	<unknown>	DEFAULT	2
abort.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi			.symtab	0x19d8c	24	FUNC	<unknown>	DEFAULT	2
atol			.symtab	0x19d8c	24	FUNC	<unknown>	DEFAULT	2
atol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy			.symtab	0x16620	12	FUNC	<unknown>	DEFAULT	2
been_there_done_that			.symtab	0x39588	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2818			.symtab	0x39560	4	OBJECT	<unknown>	DEFAULT	10
bot.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk			.symtab	0x1c75c	60	FUNC	<unknown>	DEFAULT	2
brk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal			.symtab	0x19340	188	FUNC	<unknown>	DEFAULT	2
buf.2628			.symtab	0x39340	16	OBJECT	<unknown>	DEFAULT	10
buf.4861			.symtab	0x39350	460	OBJECT	<unknown>	DEFAULT	10
bzero			.symtab	0x17c84	52	FUNC	<unknown>	DEFAULT	2
c			.symtab	0x32f84	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux			.symtab	0x1e808	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux			.symtab	0x1012c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy			.symtab	0x10198	0	FUNC	<unknown>	DEFAULT	2
chdir			.symtab	0x14f68	68	FUNC	<unknown>	DEFAULT	2
chdir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close			.symtab	0x14fac	68	FUNC	<unknown>	DEFAULT	2
close.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer			.symtab	0x32e8c	4	OBJECT	<unknown>	DEFAULT	9
completed.2248			.symtab	0x332f8	1	OBJECT	<unknown>	DEFAULT	10
connect			.symtab	0x1919c	76	FUNC	<unknown>	DEFAULT	2
connect.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout			.symtab	0x11734	672	FUNC	<unknown>	DEFAULT	2
creat			.symtab	0x15154	24	FUNC	<unknown>	DEFAULT	2
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer			.symtab	0x32f80	4	OBJECT	<unknown>	DEFAULT	9
data_start			.symtab	0x32e88	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns			.symtab	0x32e90	4	OBJECT	<unknown>	DEFAULT	9
dnslookup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ			.symtab	0x39550	4	OBJECT	<unknown>	DEFAULT	10
errno			.symtab	0x39564	4	OBJECT	<unknown>	DEFAULT	10
errno.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx			.symtab	0x21dc8	126	OBJECT	<unknown>	DEFAULT	4
exit			.symtab	0x19f64	128	FUNC	<unknown>	DEFAULT	2
exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table			.symtab	0x22d60	72	OBJECT	<unknown>	DEFAULT	4
fclose			.symtab	0x1c834	324	FUNC	<unknown>	DEFAULT	2
fclose.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl			.symtab	0x14e3c	136	FUNC	<unknown>	DEFAULT	2
fcntl64			.symtab	0x14ec4	100	FUNC	<unknown>	DEFAULT	2
fdgets			.symtab	0x10484	224	FUNC	<unknown>	DEFAULT	2
fflush_unlocked			.symtab	0x1d048	420	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked			.symtab	0x1e39c	328	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets			.symtab	0x1ced0	100	FUNC	<unknown>	DEFAULT	2
fgets.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked			.symtab	0x1d1ec	192	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt			.symtab	0x22d48	20	OBJECT	<unknown>	DEFAULT	4
fopen			.symtab	0x1c978	24	FUNC	<unknown>	DEFAULT	2
fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork			.symtab	0x14d9c	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked			.symtab	0x164f8	60	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy			.symtab	0x10138	0	FUNC	<unknown>	DEFAULT	2
free			.symtab	0x195bc	232	FUNC	<unknown>	DEFAULT	2
free.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek			.symtab	0x1c990	36	FUNC	<unknown>	DEFAULT	2
fseeko			.symtab	0x1c990	36	FUNC	<unknown>	DEFAULT	2
fseeko.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64			.symtab	0x1c9b4	272	FUNC	<unknown>	DEFAULT	2
fseeko64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked			.symtab	0x16534	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch			.symtab	0x13428	28	FUNC	<unknown>	DEFAULT	2
getHost			.symtab	0x113e0	100	FUNC	<unknown>	DEFAULT	2
getOurIP			.symtab	0x10564	892	FUNC	<unknown>	DEFAULT	2
getRandomIP			.symtab	0x10424	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked			.symtab	0x1e39c	328	FUNC	<unknown>	DEFAULT	2
getegid			.symtab	0x1a584	64	FUNC	<unknown>	DEFAULT	2
getegid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid			.symtab	0x1a5c4	64	FUNC	<unknown>	DEFAULT	2
geteuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid			.symtab	0x1a604	64	FUNC	<unknown>	DEFAULT	2
getgid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname			.symtab	0x18e60	60	FUNC	<unknown>	DEFAULT	2
gethostbyname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r			.symtab	0x18e9c	768	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid			.symtab	0x14ff0	64	FUNC	<unknown>	DEFAULT	2
getpid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname			.symtab	0x191e8	76	FUNC	<unknown>	DEFAULT	2
getsockname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt			.symtab	0x19234	84	FUNC	<unknown>	DEFAULT	2
getsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid			.symtab	0x1a644	64	FUNC	<unknown>	DEFAULT	2
getuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4860			.symtab	0x3951c	20	OBJECT	<unknown>	DEFAULT	10
h_errno			.symtab	0x39568	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl			.symtab	0x18d90	8	FUNC	<unknown>	DEFAULT	2
htons			.symtab	0x18d98	12	FUNC	<unknown>	DEFAULT	2
i.4140			.symtab	0x32f88	4	OBJECT	<unknown>	DEFAULT	9
index			.symtab	0x17ecc	524	FUNC	<unknown>	DEFAULT	2
inet_addr			.symtab	0x18e38	40	FUNC	<unknown>	DEFAULT	2
inet_aton			.symtab	0x1ba2c	220	FUNC	<unknown>	DEFAULT	2
inet_aton.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa			.symtab	0x18e14	36	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r			.symtab	0x18da4	112	FUNC	<unknown>	DEFAULT	2
inet_ntop			.symtab	0x1d990	684	FUNC	<unknown>	DEFAULT	2
inet_ntop4			.symtab	0x1d7ec	420	FUNC	<unknown>	DEFAULT	2
inet_pton			.symtab	0x1d5cc	544	FUNC	<unknown>	DEFAULT	2
inet_pton4			.symtab	0x1d500	204	FUNC	<unknown>	DEFAULT	2
initConnection			.symtab	0x14060	468	FUNC	<unknown>	DEFAULT	2
init_rand			.symtab	0x101dc	228	FUNC	<unknown>	DEFAULT	2
initfini.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa			.symtab	0x330e0	264	OBJECT	<unknown>	DEFAULT	9
initstate			.symtab	0x19958	96	FUNC	<unknown>	DEFAULT	2
initstate_r			.symtab	0x19ca8	228	FUNC	<unknown>	DEFAULT	2
ioctl			.symtab	0x15030	100	FUNC	<unknown>	DEFAULT	2
ioctl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty			.symtab	0x18cec	32	FUNC	<unknown>	DEFAULT	2
isatty.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace			.symtab	0x152f4	24	FUNC	<unknown>	DEFAULT	2
isspace.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill			.symtab	0x15094	72	FUNC	<unknown>	DEFAULT	2
kill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memchr.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memcpy.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memset.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strchr.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcmp.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcpy.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strlen.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crt1.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crti.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crtn.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/fork.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/rem.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/udiv.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/umul.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/urem.S			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork			.symtab	0x119d4	432	FUNC	<unknown>	DEFAULT	2
llseek.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64			.symtab	0x1e308	112	FUNC	<unknown>	DEFAULT	2
macAddress			.symtab	0x33328	6	OBJECT	<unknown>	DEFAULT	10
main			.symtab	0x14234	2708	FUNC	<unknown>	DEFAULT	2
mainCommSock			.symtab	0x33318	4	OBJECT	<unknown>	DEFAULT	10
malloc			.symtab	0x1947c	320	FUNC	<unknown>	DEFAULT	2
malloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr			.symtab	0x1b620	280	FUNC	<unknown>	DEFAULT	2
memcpy			.symtab	0x16c10	4212	FUNC	<unknown>	DEFAULT	2
memmove			.symtab	0x1662c	1508	FUNC	<unknown>	DEFAULT	2
mempcpy			.symtab	0x1b738	32	FUNC	<unknown>	DEFAULT	2
mempcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr			.symtab	0x1b758	272	FUNC	<unknown>	DEFAULT	2
memrchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset			.symtab	0x17cb8	416	FUNC	<unknown>	DEFAULT	2
mylock			.symtab	0x331e8	24	OBJECT	<unknown>	DEFAULT	9
mylock			.symtab	0x3956c	24	OBJECT	<unknown>	DEFAULT	10
mylock			.symtab	0x332dc	24	OBJECT	<unknown>	DEFAULT	9
nanosleep			.symtab	0x1a684	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1092			.symtab	0x39338	4	OBJECT	<unknown>	DEFAULT	10
ntohl			.symtab	0x18d7c	8	FUNC	<unknown>	DEFAULT	2
ntohl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs			.symtab	0x18d84	12	FUNC	<unknown>	DEFAULT	2
ntop.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids			.symtab	0x33320	8	OBJECT	<unknown>	DEFAULT	10
object.2329			.symtab	0x332fc	24	OBJECT	<unknown>	DEFAULT	10
open			.symtab	0x150dc	120	FUNC	<unknown>	DEFAULT	2
open.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP			.symtab	0x39590	4	OBJECT	<unknown>	DEFAULT	10
ovhl7			.symtab	0x122f0	3480	FUNC	<unknown>	DEFAULT	2
p.2246			.symtab	0x32e84	0	OBJECT	<unknown>	DEFAULT	9
pids			.symtab	0x39594	4	OBJECT	<unknown>	DEFAULT	10
poll			.symtab	0x1c7e8	76	FUNC	<unknown>	DEFAULT	2
poll.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4072			.symtab	0x21d20	12	OBJECT	<unknown>	DEFAULT	4
print			.symtab	0x10e78	1144	FUNC	<unknown>	DEFAULT	2
printchar			.symtab	0x10a38	108	FUNC	<unknown>	DEFAULT	2
printi			.symtab	0x10c60	536	FUNC	<unknown>	DEFAULT	2
prints			.symtab	0x10aa4	444	FUNC	<unknown>	DEFAULT	2
processCmd			.symtab	0x13444	3100	FUNC	<unknown>	DEFAULT	2
qual_chars.4078			.symtab	0x21d38	20	OBJECT	<unknown>	DEFAULT	4
raise			.symtab	0x1e2f0	24	FUNC	<unknown>	DEFAULT	2
raise.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand			.symtab	0x19898	16	FUNC	<unknown>	DEFAULT	2
rand.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc			.symtab	0x102c0	356	FUNC	<unknown>	DEFAULT	2
random			.symtab	0x198a8	80	FUNC	<unknown>	DEFAULT	2
random.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info			.symtab	0x229d0	40	OBJECT	<unknown>	DEFAULT	4
random_r			.symtab	0x19b28	156	FUNC	<unknown>	DEFAULT	2
random_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl			.symtab	0x3321c	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr			.symtab	0x1d2ac	204	FUNC	<unknown>	DEFAULT	2
rawmemchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read			.symtab	0x1516c	76	FUNC	<unknown>	DEFAULT	2
read.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv			.symtab	0x19288	32	FUNC	<unknown>	DEFAULT	2
recv.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine			.symtab	0x11444	752	FUNC	<unknown>	DEFAULT	2
rindex			.symtab	0x180d8	192	FUNC	<unknown>	DEFAULT	2
sbrk			.symtab	0x1a6cc	84	FUNC	<unknown>	DEFAULT	2
sbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select			.symtab	0x151b8	84	FUNC	<unknown>	DEFAULT	2
select.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send			.symtab	0x192a8	32	FUNC	<unknown>	DEFAULT	2
send.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHTTPtwo			.symtab	0x13258	464	FUNC	<unknown>	DEFAULT	2
setsid			.symtab	0x1520c	64	FUNC	<unknown>	DEFAULT	2
setsid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt			.symtab	0x192c8	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate			.symtab	0x198f8	96	FUNC	<unknown>	DEFAULT	2
setstate_r			.symtab	0x19a04	292	FUNC	<unknown>	DEFAULT	2
sigaction			.symtab	0x1c564	160	FUNC	<unknown>	DEFAULT	2
sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal			.symtab	0x19340	188	FUNC	<unknown>	DEFAULT	2
signal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask			.symtab	0x1a720	140	FUNC	<unknown>	DEFAULT	2
sigprocmask.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep			.symtab	0x19fe4	428	FUNC	<unknown>	DEFAULT	2
sleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket			.symtab	0x192f4	76	FUNC	<unknown>	DEFAULT	2
socket.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect			.symtab	0x11b84	332	FUNC	<unknown>	DEFAULT	2
sockprintf			.symtab	0x112f0	240	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4077			.symtab	0x21d4c	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4071			.symtab	0x21d30	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4074			.symtab	0x21d80	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4073			.symtab	0x21d98	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4076			.symtab	0x21d5c	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4075			.symtab	0x21d70	9	OBJECT	<unknown>	DEFAULT	4
sprintf			.symtab	0x1533c	52	FUNC	<unknown>	DEFAULT	2
sprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand			.symtab	0x199b8	76	FUNC	<unknown>	DEFAULT	2
srandom			.symtab	0x199b8	76	FUNC	<unknown>	DEFAULT	2
srandom_r			.symtab	0x19bc4	228	FUNC	<unknown>	DEFAULT	2
static_id			.symtab	0x332c0	2	OBJECT	<unknown>	DEFAULT	9
static_ns			.symtab	0x39584	4	OBJECT	<unknown>	DEFAULT	10
stderr			.symtab	0x32fa4	4	OBJECT	<unknown>	DEFAULT	9
stdin			.symtab	0x32f9c	4	OBJECT	<unknown>	DEFAULT	9
stdout			.symtab	0x32fa0	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp			.symtab	0x18c78	92	FUNC	<unknown>	DEFAULT	2
strcasecmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr			.symtab	0x17ecc	524	FUNC	<unknown>	DEFAULT	2
strcmp			.symtab	0x1822c	648	FUNC	<unknown>	DEFAULT	2
strcoll			.symtab	0x1822c	648	FUNC	<unknown>	DEFAULT	2
strcpy			.symtab	0x1851c	804	FUNC	<unknown>	DEFAULT	2
strdup			.symtab	0x1d4c8	56	FUNC	<unknown>	DEFAULT	2
strdup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r			.symtab	0x18b5c	284	FUNC	<unknown>	DEFAULT	2
strlen			.symtab	0x188a8	120	FUNC	<unknown>	DEFAULT	2
strncat			.symtab	0x1d378	224	FUNC	<unknown>	DEFAULT	2
strncat.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy			.symtab	0x1b868	248	FUNC	<unknown>	DEFAULT	2
strncpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen			.symtab	0x18920	252	FUNC	<unknown>	DEFAULT	2
strnlen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk			.symtab	0x1b9dc	80	FUNC	<unknown>	DEFAULT	2
strpbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr			.symtab	0x180d8	192	FUNC	<unknown>	DEFAULT	2
strspn			.symtab	0x1d458	112	FUNC	<unknown>	DEFAULT	2
strspn.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr			.symtab	0x18a1c	288	FUNC	<unknown>	DEFAULT	2
strstr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok			.symtab	0x18cd4	24	FUNC	<unknown>	DEFAULT	2
strtok.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r			.symtab	0x1b960	124	FUNC	<unknown>	DEFAULT	2
strtok_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol			.symtab	0x19da4	20	FUNC	<unknown>	DEFAULT	2
strtol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr			.symtab	0x18d0c	112	FUNC	<unknown>	DEFAULT	2
tcgetattr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time			.symtab	0x1524c	72	FUNC	<unknown>	DEFAULT	2
time.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower			.symtab	0x1e378	36	FUNC	<unknown>	DEFAULT	2
tolower.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper			.symtab	0x1530c	36	FUNC	<unknown>	DEFAULT	2
toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim			.symtab	0x108e0	344	FUNC	<unknown>	DEFAULT	2
type_codes			.symtab	0x21da0	24	OBJECT	<unknown>	DEFAULT	4
type_sizes			.symtab	0x21db8	12	OBJECT	<unknown>	DEFAULT	4
unknown.1115			.symtab	0x21e48	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state			.symtab	0x33200	28	OBJECT	<unknown>	DEFAULT	9
useragents			.symtab	0x32e94	236	OBJECT	<unknown>	DEFAULT	9
vsnprintf			.symtab	0x15370	156	FUNC	<unknown>	DEFAULT	2
vsnprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4			.symtab	0x1a7ac	80	FUNC	<unknown>	DEFAULT	2
wait4.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid			.symtab	0x15294	20	FUNC	<unknown>	DEFAULT	2
waitpid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb			.symtab	0x1a808	72	FUNC	<unknown>	DEFAULT	2
wcrtomb.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs			.symtab	0x1a86c	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs			.symtab	0x1a850	28	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write			.symtab	0x152a8	76	FUNC	<unknown>	DEFAULT	2
write.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3071			.symtab	0x22e20	17	OBJECT	<unknown>	DEFAULT	4
xtdcustom			.symtab	0x11e7c	356	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 21, 2022 07:56:20.326699018 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:56:20.347093105 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:56:20.347248077 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:56:20.980556011 CET	42836	443	192.168.2.23	91.189.91.43
Jan 21, 2022 07:56:21.332513094 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:56:21.352804899 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:56:21.353111982 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:56:21.354468107 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:56:21.374387980 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:56:21.748706102 CET	42516	80	192.168.2.23	109.202.202.202
Jan 21, 2022 07:56:28.887317896 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:56:28.887620926 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:56:28.907609940 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:56:28.907803059 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:56:36.083677053 CET	43928	443	192.168.2.23	91.189.91.42
Jan 21, 2022 07:56:48.371124029 CET	42836	443	192.168.2.23	91.189.91.43
Jan 21, 2022 07:56:52.466788054 CET	42516	80	192.168.2.23	109.202.202.202
Jan 21, 2022 07:57:17.041477919 CET	43928	443	192.168.2.23	91.189.91.42
Jan 21, 2022 07:57:28.890743017 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:57:28.890999079 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:57:28.911156893 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:57:28.911377907 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:58:28.893708944 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:58:28.893976927 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:58:28.913947105 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:58:28.914210081 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:59:28.897310972 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:59:28.897664070 CET	53078	4258	192.168.2.23	78.47.230.250
Jan 21, 2022 07:59:28.918031931 CET	4258	53078	78.47.230.250	192.168.2.23
Jan 21, 2022 07:59:28.918338060 CET	53078	4258	192.168.2.23	78.47.230.250

System Behavior

Analysis Process: fuckjewishpeople.sparc PID: 5225, Parent PID: 5116

General

Start time:	07:56:18
Start date:	21/01/2022
Path:	/tmp/fuckjewishpeople.sparc
Arguments:	/tmp/fuckjewishpeople.sparc
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: fuckjewishpeople.sparc PID: 5227, Parent PID: 5225

General

Start time:	07:56:19
Start date:	21/01/2022
Path:	/tmp/fuckjewishpeople.sparc
Arguments:	n/a
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: fuckjewishpeople.sparc PID: 5229, Parent PID: 5227

General

Start time:	07:56:19
Start date:	21/01/2022
Path:	/tmp/fuckjewishpeople.sparc
Arguments:	n/a
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e