Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
GdfWOGzXow.elf

Overview

General Information

Sample name:GdfWOGzXow.elf
renamed because original name is a hash value
Original sample name:b9f3a0a43dfe1e92c05f1525b067ff73.elf
Analysis ID:1432368
MD5:b9f3a0a43dfe1e92c05f1525b067ff73
SHA1:41aab1b285df191f4172fa4f62e0721928e4045f
SHA256:5194a7d24954e34eeb049e7127050db40ca7105d5de76a90309b4981a88a6c75
Tags:32armelfmirai
Infos:

Detection

Gafgyt, Mirai
Score:92
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Gafgyt
Yara detected Mirai
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Sample contains strings that are user agent strings indicative of HTTP manipulation
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.
Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.
Joe Sandbox version:40.0.0 Tourmaline
Analysis ID:1432368
Start date and time:2024-04-26 23:17:32 +02:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 27s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:GdfWOGzXow.elf
renamed because original name is a hash value
Original Sample Name:b9f3a0a43dfe1e92c05f1525b067ff73.elf
Detection:MAL
Classification:mal92.spre.troj.linELF@0/0@2/0
  • VT rate limit hit for: GdfWOGzXow.elf
Command:/tmp/GdfWOGzXow.elf
PID:5475
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:
  • system is lnxubuntu20
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
GdfWOGzXow.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    GdfWOGzXow.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      GdfWOGzXow.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
      • 0x10dc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10dd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10de8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10dfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      GdfWOGzXow.elfLinux_Trojan_Gafgyt_ea92cca8unknownunknown
      • 0x10d70:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
      SourceRuleDescriptionAuthorStrings
      5477.1.00007f6728017000.00007f672802b000.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security
        5477.1.00007f6728017000.00007f672802b000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
          5477.1.00007f6728017000.00007f672802b000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
          • 0x10dc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10dd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10de8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10dfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x10f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          5477.1.00007f6728017000.00007f672802b000.r-x.sdmpLinux_Trojan_Gafgyt_ea92cca8unknownunknown
          • 0x10d70:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
          5475.1.00007f6728017000.00007f672802b000.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security
            Click to see the 9 entries
            No Snort rule has matched

            Click to jump to signature section

            Show All Signature Results

            AV Detection

            barindex
            Source: GdfWOGzXow.elfAvira: detected
            Source: GdfWOGzXow.elfMalware Configuration Extractor: Gafgyt {"C2 url": "147.185.221.19:30455"}
            Source: GdfWOGzXow.elfReversingLabs: Detection: 63%

            Spreading

            barindex
            Source: /tmp/GdfWOGzXow.elf (PID: 5475)Opens: /proc/net/routeJump to behavior
            Source: global trafficTCP traffic: 192.168.2.13:33684 -> 147.185.221.19:30455
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: unknownTCP traffic detected without corresponding DNS query: 147.185.221.19
            Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com
            Source: GdfWOGzXow.elfString found in binary or memory: http://fast.no/support/crawler.asp)
            Source: GdfWOGzXow.elfString found in binary or memory: http://feedback.redkolibri.com/
            Source: GdfWOGzXow.elfString found in binary or memory: http://www.baidu.com/search/spider.htm)
            Source: GdfWOGzXow.elfString found in binary or memory: http://www.baidu.com/search/spider.html)
            Source: GdfWOGzXow.elfString found in binary or memory: http://www.billybobbot.com/crawler/)

            System Summary

            barindex
            Source: GdfWOGzXow.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: GdfWOGzXow.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5475, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5475, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5477, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5477, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
            Source: GdfWOGzXow.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: GdfWOGzXow.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5475, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5475, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5477, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
            Source: Process Memory Space: GdfWOGzXow.elf PID: 5477, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
            Source: classification engineClassification label: mal92.spre.troj.linELF@0/0@2/0
            Source: /tmp/GdfWOGzXow.elf (PID: 5475)Queries kernel information via 'uname': Jump to behavior
            Source: GdfWOGzXow.elf, 5475.1.00007ffee5e06000.00007ffee5e27000.rw-.sdmp, GdfWOGzXow.elf, 5477.1.00007ffee5e06000.00007ffee5e27000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/GdfWOGzXow.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/GdfWOGzXow.elf
            Source: GdfWOGzXow.elf, 5475.1.0000555d070e0000.0000555d0720e000.rw-.sdmp, GdfWOGzXow.elf, 5477.1.0000555d070e0000.0000555d0720e000.rw-.sdmpBinary or memory string: ]U!/etc/qemu-binfmt/arm
            Source: GdfWOGzXow.elf, 5475.1.0000555d070e0000.0000555d0720e000.rw-.sdmp, GdfWOGzXow.elf, 5477.1.0000555d070e0000.0000555d0720e000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
            Source: GdfWOGzXow.elf, 5475.1.00007ffee5e06000.00007ffee5e27000.rw-.sdmp, GdfWOGzXow.elf, 5477.1.00007ffee5e06000.00007ffee5e27000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

            Stealing of Sensitive Information

            barindex
            Source: Yara matchFile source: GdfWOGzXow.elf, type: SAMPLE
            Source: Yara matchFile source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: GdfWOGzXow.elf, type: SAMPLE
            Source: Yara matchFile source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: GdfWOGzXow.elf PID: 5475, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: GdfWOGzXow.elf PID: 5477, type: MEMORYSTR
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
            Source: Initial sampleUser agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
            Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
            Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
            Source: Initial sampleUser agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
            Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
            Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
            Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
            Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
            Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
            Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
            Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
            Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

            Remote Access Functionality

            barindex
            Source: Yara matchFile source: GdfWOGzXow.elf, type: SAMPLE
            Source: Yara matchFile source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: GdfWOGzXow.elf, type: SAMPLE
            Source: Yara matchFile source: 5477.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: 5475.1.00007f6728017000.00007f672802b000.r-x.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: GdfWOGzXow.elf PID: 5475, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: GdfWOGzXow.elf PID: 5477, type: MEMORYSTR
            ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
            Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume AccessOS Credential Dumping11
            Security Software Discovery
            Remote ServicesData from Local System1
            Data Obfuscation
            Exfiltration Over Other Network MediumAbuse Accessibility Features
            CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
            Remote System Discovery
            Remote Desktop ProtocolData from Removable Media1
            Non-Standard Port
            Exfiltration Over BluetoothNetwork Denial of Service
            Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
            Non-Application Layer Protocol
            Automated ExfiltrationData Encrypted for Impact
            Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
            Application Layer Protocol
            Traffic DuplicationData Destruction
            {"C2 url": "147.185.221.19:30455"}
            Hide Legend

            Legend:

            • Process
            • Signature
            • Created File
            • DNS/IP Info
            • Is Dropped
            • Number of created Files
            • Is malicious
            • Internet
            SourceDetectionScannerLabelLink
            GdfWOGzXow.elf63%ReversingLabsLinux.Trojan.Mirai
            GdfWOGzXow.elf100%AviraLINUX/Gafgyt.opnd
            No Antivirus matches
            No Antivirus matches
            SourceDetectionScannerLabelLink
            http://www.billybobbot.com/crawler/)100%URL Reputationphishing
            http://fast.no/support/crawler.asp)0%URL Reputationsafe
            http://feedback.redkolibri.com/0%URL Reputationsafe
            NameIPActiveMaliciousAntivirus DetectionReputation
            daisy.ubuntu.com
            162.213.35.24
            truefalse
              high
              NameMaliciousAntivirus DetectionReputation
              147.185.221.19:30455true
                unknown
                NameSourceMaliciousAntivirus DetectionReputation
                http://www.baidu.com/search/spider.html)GdfWOGzXow.elffalse
                  high
                  http://www.billybobbot.com/crawler/)GdfWOGzXow.elftrue
                  • URL Reputation: phishing
                  unknown
                  http://fast.no/support/crawler.asp)GdfWOGzXow.elffalse
                  • URL Reputation: safe
                  unknown
                  http://feedback.redkolibri.com/GdfWOGzXow.elffalse
                  • URL Reputation: safe
                  unknown
                  http://www.baidu.com/search/spider.htm)GdfWOGzXow.elffalse
                    high
                    • No. of IPs < 25%
                    • 25% < No. of IPs < 50%
                    • 50% < No. of IPs < 75%
                    • 75% < No. of IPs
                    IPDomainCountryFlagASNASN NameMalicious
                    147.185.221.19
                    unknownUnited States
                    12087SALSGIVERUStrue
                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                    147.185.221.19SecuriteInfo.com.Win32.Evo-gen.15237.11182.exeGet hashmaliciousAmadey, RedLine, RisePro StealerBrowse
                    • b-stamps.gl.at.ply.gg:30946/
                    X82dKIfzi3.exeGet hashmaliciousRedLineBrowse
                    • rights-mountains.gl.at.ply.gg:23403/
                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                    daisy.ubuntu.comMEyL2q7wA5.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 162.213.35.25
                    4ShRJ4y7f6.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 162.213.35.24
                    mAJ0gF8xM2.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 162.213.35.24
                    0fKTty8KAX.elfGet hashmaliciousMiraiBrowse
                    • 162.213.35.25
                    mG0CUyFnyP.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.24
                    5JWSChksKD.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.25
                    0ll10IxBC6.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.25
                    BXj2uizaOx.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.25
                    GXSTlWYDyv.elfGet hashmaliciousMiraiBrowse
                    • 162.213.35.24
                    uxx5kdh6ov.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.24
                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                    SALSGIVERUSMEyL2q7wA5.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 147.185.221.19
                    4ShRJ4y7f6.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 147.185.221.19
                    W7v6a74sWr.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 147.185.221.19
                    mAJ0gF8xM2.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 147.185.221.19
                    SecuriteInfo.com.Win64.PWSX-gen.30087.11508.exeGet hashmaliciousRemcosBrowse
                    • 147.185.221.19
                    SecuriteInfo.com.Win32.Evo-gen.15237.11182.exeGet hashmaliciousAmadey, RedLine, RisePro StealerBrowse
                    • 147.185.221.19
                    X82dKIfzi3.exeGet hashmaliciousRedLineBrowse
                    • 147.185.221.19
                    bKwh3xPyu9.exeGet hashmaliciousQuasarBrowse
                    • 147.185.221.18
                    anXHkKikd6.exeGet hashmaliciousQuasarBrowse
                    • 147.185.221.19
                    system.batGet hashmaliciousXWormBrowse
                    • 147.185.221.17
                    No context
                    No context
                    No created / dropped files found
                    File type:ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
                    Entropy (8bit):6.05220640887674
                    TrID:
                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                    File name:GdfWOGzXow.elf
                    File size:115'173 bytes
                    MD5:b9f3a0a43dfe1e92c05f1525b067ff73
                    SHA1:41aab1b285df191f4172fa4f62e0721928e4045f
                    SHA256:5194a7d24954e34eeb049e7127050db40ca7105d5de76a90309b4981a88a6c75
                    SHA512:7fa2db69fe77ba78dba81503a847cef1fc9e18e3678d802e8399759d7346ad1e5acc37a56637dcdd1fe7d60842071940bb41e02984a311a829436d379f732865
                    SSDEEP:3072:Qw1v79qjFWYJ+HJG14R1Qm5hPwr4UDmhQxu1bXWIn:Q8vRMwJG14bQm5hPwr7DmhQxu1rWIn
                    TLSH:2BB33805F9144613C1C32B7AB79B434937226BE997EB33156638AFF43BC27991D36A80
                    File Content Preview:.ELF...a..........(.........4...\S......4. ...(.....................`0..`0..............`0..`0..`0.......i..........Q.td..................................-...L."....<..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

                    ELF header

                    Class:ELF32
                    Data:2's complement, little endian
                    Version:1 (current)
                    Machine:ARM
                    Version Number:0x1
                    Type:EXEC (Executable file)
                    OS/ABI:ARM - ABI
                    ABI Version:0
                    Entry Point Address:0x8190
                    Flags:0x202
                    ELF Header Size:52
                    Program Header Offset:52
                    Program Header Size:32
                    Number of Program Headers:3
                    Section Header Offset:86876
                    Section Header Size:40
                    Number of Section Headers:21
                    Header String Table Index:18
                    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                    NULL0x00x00x00x00x0000
                    .initPROGBITS0x80940x940x180x00x6AX004
                    .textPROGBITS0x80b00xb00xf0880x00x6AX0016
                    .finiPROGBITS0x171380xf1380x140x00x6AX004
                    .rodataPROGBITS0x1714c0xf14c0x3f140x00x2A004
                    .eh_framePROGBITS0x230600x130600x40x00x3WA004
                    .ctorsPROGBITS0x230640x130640x80x00x3WA004
                    .dtorsPROGBITS0x2306c0x1306c0x80x00x3WA004
                    .jcrPROGBITS0x230740x130740x40x00x3WA004
                    .dataPROGBITS0x230780x130780x3700x00x3WA004
                    .bssNOBITS0x233e80x133e80x66600x00x3WA004
                    .commentPROGBITS0x00x133e80xbb00x00x0001
                    .debug_arangesPROGBITS0x00x13f980x1200x00x0008
                    .debug_infoPROGBITS0x00x140b80x70d0x00x0001
                    .debug_abbrevPROGBITS0x00x147c50xb40x00x0001
                    .debug_linePROGBITS0x00x148790x9780x00x0001
                    .debug_framePROGBITS0x00x151f40xa00x00x0004
                    .ARM.attributesARM_ATTRIBUTES0x00x152940x100x00x0001
                    .shstrtabSTRTAB0x00x152a40xb80x00x0001
                    .symtabSYMTAB0x00x156a40x46a00x100x0206224
                    .strtabSTRTAB0x00x19d440x24a10x00x0001
                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                    LOAD0x00x80000x80000x130600x130606.23220x5R E0x8000.init .text .fini .rodata
                    LOAD0x130600x230600x230600x3880x69e84.05150x6RW 0x8000.eh_frame .ctors .dtors .jcr .data .bss
                    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                    NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                    .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    .symtab0x80940SECTION<unknown>DEFAULT1
                    .symtab0x80b00SECTION<unknown>DEFAULT2
                    .symtab0x171380SECTION<unknown>DEFAULT3
                    .symtab0x1714c0SECTION<unknown>DEFAULT4
                    .symtab0x230600SECTION<unknown>DEFAULT5
                    .symtab0x230640SECTION<unknown>DEFAULT6
                    .symtab0x2306c0SECTION<unknown>DEFAULT7
                    .symtab0x230740SECTION<unknown>DEFAULT8
                    .symtab0x230780SECTION<unknown>DEFAULT9
                    .symtab0x233e80SECTION<unknown>DEFAULT10
                    .symtab0x00SECTION<unknown>DEFAULT11
                    .symtab0x00SECTION<unknown>DEFAULT12
                    .symtab0x00SECTION<unknown>DEFAULT13
                    .symtab0x00SECTION<unknown>DEFAULT14
                    .symtab0x00SECTION<unknown>DEFAULT15
                    .symtab0x00SECTION<unknown>DEFAULT16
                    .symtab0x00SECTION<unknown>DEFAULT17
                    $a.symtab0x80940NOTYPE<unknown>DEFAULT1
                    $a.symtab0x171380NOTYPE<unknown>DEFAULT3
                    $a.symtab0x80b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x81280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x171440NOTYPE<unknown>DEFAULT3
                    $a.symtab0x81880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x80a00NOTYPE<unknown>DEFAULT1
                    $a.symtab0x170fc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x171300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x80a40NOTYPE<unknown>DEFAULT1
                    $a.symtab0x80a80NOTYPE<unknown>DEFAULT1
                    $a.symtab0x171480NOTYPE<unknown>DEFAULT3
                    $a.symtab0x81900NOTYPE<unknown>DEFAULT2
                    $a.symtab0x81cc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x82a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x83d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x84380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x87d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x90d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x94d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x98f40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9be00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9d400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9ea00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xa05c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xade40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xae000NOTYPE<unknown>DEFAULT2
                    $a.symtab0xb9900NOTYPE<unknown>DEFAULT2
                    $a.symtab0xbb1c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc3100NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc4200NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc4ec0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc4f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc5380NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6000NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6280NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6540NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6800NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6ac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6b40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7040NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7300NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc78c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7b80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7e80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8140NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc81c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8240NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8500NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8680NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc89c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8a80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8dc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc9900NOTYPE<unknown>DEFAULT2
                    $a.symtab0xca0c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xca1c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcad40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcb000NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd22c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd2c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd2fc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd4980NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd4e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xda240NOTYPE<unknown>DEFAULT2
                    $a.symtab0xda580NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdb100NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdb200NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdb300NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdb400NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdbe00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdc000NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdc600NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdd4c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdd700NOTYPE<unknown>DEFAULT2
                    $a.symtab0xde480NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdf400NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdf540NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe03c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe0480NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe0680NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe0e00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe1480NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe1d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe1fc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe2040NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe2540NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe2800NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe2ac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe2dc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe3080NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe3340NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe3640NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe3900NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe4340NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe4a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xed5c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf1b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf1d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf2d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf2dc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf3580NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf3e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf47c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf4f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf5c00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf64c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf72c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf7f40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf8000NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf8080NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf9a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfa3c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfae40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfbfc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xffd40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x101f40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x102980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x102d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1031c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x105bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1061c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x106900NOTYPE<unknown>DEFAULT2
                    $a.symtab0x106980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x106c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x106f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107480NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1077c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107a80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107d40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1082c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1085c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x108880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1095c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10a180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10ab40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10b480NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10c1c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10c280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10fb00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110cc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1123c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x112480NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1131c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x116080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x117400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x118440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x118b80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x118f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11a4c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x121ec0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x122a80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x123440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x124840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x126540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x127840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x128200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12cb00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12da40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12dbc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12e980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12f800NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12fc00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x130040NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1304c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x130c00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x131000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x131f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x134880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x134a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x135ac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x139140NOTYPE<unknown>DEFAULT2
                    $a.symtab0x139380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x139700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x139c00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x139f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13fd80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x141380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x141440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1427c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x142d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x143980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x143c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x144800NOTYPE<unknown>DEFAULT2
                    $a.symtab0x144b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x145600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x146180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x148e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14c900NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14d840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x155140NOTYPE<unknown>DEFAULT2
                    $a.symtab0x155540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x155940NOTYPE<unknown>DEFAULT2
                    $a.symtab0x159a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15a1c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15a640NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15d600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15dd00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15dfc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15e4c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15e780NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15ee00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15ef00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15f200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x160080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x160bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x161180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x161240NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1630c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x163880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x164300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x165700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x166540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16a540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16f800NOTYPE<unknown>DEFAULT2
                    $a.symtab0x170a80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x230640NOTYPE<unknown>DEFAULT6
                    $d.symtab0x2306c0NOTYPE<unknown>DEFAULT7
                    $d.symtab0x81180NOTYPE<unknown>DEFAULT2
                    $d.symtab0x81740NOTYPE<unknown>DEFAULT2
                    $d.symtab0x230800NOTYPE<unknown>DEFAULT9
                    $d.symtab0x1712c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x230840NOTYPE<unknown>DEFAULT9
                    $d.symtab0x81c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x230880NOTYPE<unknown>DEFAULT9
                    $d.symtab0x82980NOTYPE<unknown>DEFAULT2
                    $d.symtab0x83cc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x84340NOTYPE<unknown>DEFAULT2
                    $d.symtab0x87c40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x90cc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x94cc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x98ec0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x188180NOTYPE<unknown>DEFAULT4
                    $d.symtab0x9bdc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x9d3c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x9e9c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xa0580NOTYPE<unknown>DEFAULT2
                    $d.symtab0xa9dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xadfc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xb9600NOTYPE<unknown>DEFAULT2
                    $d.symtab0xbb100NOTYPE<unknown>DEFAULT2
                    $d.symtab0xc2f40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x00NOTYPE<unknown>DEFAULT16
                    $d.symtab0x200NOTYPE<unknown>DEFAULT16
                    $d.symtab0x280NOTYPE<unknown>DEFAULT16
                    $d.symtab0x480NOTYPE<unknown>DEFAULT16
                    $d.symtab0xc8640NOTYPE<unknown>DEFAULT2
                    $d.symtab0xc8980NOTYPE<unknown>DEFAULT2
                    $d.symtab0x231880NOTYPE<unknown>DEFAULT9
                    $d.symtab0x199c00NOTYPE<unknown>DEFAULT4
                    $d.symtab0x231900NOTYPE<unknown>DEFAULT9
                    $d.symtab0x19cc00NOTYPE<unknown>DEFAULT4
                    $d.symtab0xc8a40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xca080NOTYPE<unknown>DEFAULT2
                    $d.symtab0xca180NOTYPE<unknown>DEFAULT2
                    $d.symtab0xcac40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x231980NOTYPE<unknown>DEFAULT9
                    $d.symtab0x19fc00NOTYPE<unknown>DEFAULT4
                    $d.symtab0xd2100NOTYPE<unknown>DEFAULT2
                    $d.symtab0x19ff40NOTYPE<unknown>DEFAULT4
                    $d.symtab0xd4940NOTYPE<unknown>DEFAULT2
                    $d.symtab0xd4d80NOTYPE<unknown>DEFAULT2
                    $d.symtab0xd9f40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x232d40NOTYPE<unknown>DEFAULT9
                    $d.symtab0x19ffc0NOTYPE<unknown>DEFAULT4
                    $d.symtab0xdd440NOTYPE<unknown>DEFAULT2
                    $d.symtab0xde400NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe0340NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1a0800NOTYPE<unknown>DEFAULT4
                    $d.symtab0xe0440NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe0dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe1d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe24c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe4300NOTYPE<unknown>DEFAULT2
                    $d.symtab0xed3c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x232d80NOTYPE<unknown>DEFAULT9
                    $d.symtab0xf1900NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf1d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf2c80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x232f00NOTYPE<unknown>DEFAULT9
                    $d.symtab0xf3400NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf3cc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf4640NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf4e00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x233080NOTYPE<unknown>DEFAULT9
                    $d.symtab0xf5bc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf6480NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf7200NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf7f00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1abec0NOTYPE<unknown>DEFAULT4
                    $d.symtab0xf99c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfa200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x233b40NOTYPE<unknown>DEFAULT9
                    $d.symtab0xfae00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfbdc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfc100NOTYPE<unknown>DEFAULT2
                    $d.symtab0x101d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x102880NOTYPE<unknown>DEFAULT2
                    $d.symtab0x102cc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x103100NOTYPE<unknown>DEFAULT2
                    $d.symtab0x105800NOTYPE<unknown>DEFAULT2
                    $d.symtab0x233cc0NOTYPE<unknown>DEFAULT9
                    $d.symtab0x106880NOTYPE<unknown>DEFAULT2
                    $d.symtab0x107440NOTYPE<unknown>DEFAULT2
                    $d.symtab0x108280NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1094c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10a140NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10ab00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1ac680NOTYPE<unknown>DEFAULT4
                    $d.symtab0x10c0c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x296280NOTYPE<unknown>DEFAULT10
                    $d.symtab0x10c240NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10fac0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x112200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x115d80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x121c80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1ac940NOTYPE<unknown>DEFAULT4
                    $d.symtab0x122980NOTYPE<unknown>DEFAULT2
                    $d.symtab0x123340NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1245c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x126340NOTYPE<unknown>DEFAULT2
                    $d.symtab0x127800NOTYPE<unknown>DEFAULT2
                    $d.symtab0x12d9c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x12e900NOTYPE<unknown>DEFAULT2
                    $d.symtab0x12f780NOTYPE<unknown>DEFAULT2
                    $d.symtab0x131ec0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x135980NOTYPE<unknown>DEFAULT2
                    $d.symtab0x138fc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x139300NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1396c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1426c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x145580NOTYPE<unknown>DEFAULT2
                    $d.symtab0x148dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x14c880NOTYPE<unknown>DEFAULT2
                    $d.symtab0x154dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x233d80NOTYPE<unknown>DEFAULT9
                    $d.symtab0x155500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x155900NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1595c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x233da0NOTYPE<unknown>DEFAULT9
                    $d.symtab0x1ad400NOTYPE<unknown>DEFAULT4
                    $d.symtab0x15a080NOTYPE<unknown>DEFAULT2
                    $d.symtab0x161200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x163040NOTYPE<unknown>DEFAULT2
                    $d.symtab0x163840NOTYPE<unknown>DEFAULT2
                    $d.symtab0x233dc0NOTYPE<unknown>DEFAULT9
                    $d.symtab0x1ad600NOTYPE<unknown>DEFAULT4
                    $d.symtab0x500NOTYPE<unknown>DEFAULT16
                    $d.symtab0x700NOTYPE<unknown>DEFAULT16
                    $d.symtab0x780NOTYPE<unknown>DEFAULT16
                    $d.symtab0x980NOTYPE<unknown>DEFAULT16
                    C.1.3461.symtab0x1ac6824OBJECT<unknown>DEFAULT4
                    C.70.5136.symtab0x18818104OBJECT<unknown>DEFAULT4
                    C.77.5235.symtab0x194ac1128OBJECT<unknown>DEFAULT4
                    Laligned.symtab0xdc280NOTYPE<unknown>DEFAULT2
                    Llastword.symtab0xdc440NOTYPE<unknown>DEFAULT2
                    Q.symtab0x2341816384OBJECT<unknown>DEFAULT10
                    Randhex.symtab0x9ea0444FUNC<unknown>DEFAULT2
                    SendSTD.symtab0x9a40416FUNC<unknown>DEFAULT2
                    UDPRAW.symtab0x9d40352FUNC<unknown>DEFAULT2
                    _Exit.symtab0xc60040FUNC<unknown>DEFAULT2
                    _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __CTOR_END__.symtab0x230680OBJECT<unknown>DEFAULT6
                    __CTOR_LIST__.symtab0x230640OBJECT<unknown>DEFAULT6
                    __C_ctype_b.symtab0x231884OBJECT<unknown>DEFAULT9
                    __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_b_data.symtab0x199c0768OBJECT<unknown>DEFAULT4
                    __C_ctype_tolower.symtab0x233dc4OBJECT<unknown>DEFAULT9
                    __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_tolower_data.symtab0x1ad60768OBJECT<unknown>DEFAULT4
                    __C_ctype_toupper.symtab0x231904OBJECT<unknown>DEFAULT9
                    __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_toupper_data.symtab0x19cc0768OBJECT<unknown>DEFAULT4
                    __DTOR_END__.symtab0x230700OBJECT<unknown>DEFAULT7
                    __DTOR_LIST__.symtab0x2306c0OBJECT<unknown>DEFAULT7
                    __EH_FRAME_BEGIN__.symtab0x230600OBJECT<unknown>DEFAULT5
                    __FRAME_END__.symtab0x230600OBJECT<unknown>DEFAULT5
                    __GI___C_ctype_b.symtab0x231884OBJECT<unknown>HIDDEN9
                    __GI___C_ctype_tolower.symtab0x233dc4OBJECT<unknown>HIDDEN9
                    __GI___C_ctype_toupper.symtab0x231904OBJECT<unknown>HIDDEN9
                    __GI___ctype_b.symtab0x2318c4OBJECT<unknown>HIDDEN9
                    __GI___ctype_tolower.symtab0x233e04OBJECT<unknown>HIDDEN9
                    __GI___ctype_toupper.symtab0x231944OBJECT<unknown>HIDDEN9
                    __GI___errno_location.symtab0xc89c12FUNC<unknown>HIDDEN2
                    __GI___fcntl_nocancel.symtab0xc59c100FUNC<unknown>HIDDEN2
                    __GI___fgetc_unlocked.symtab0x12654304FUNC<unknown>HIDDEN2
                    __GI___glibc_strerror_r.symtab0xdf4020FUNC<unknown>HIDDEN2
                    __GI___h_errno_location.symtab0x10c1c12FUNC<unknown>HIDDEN2
                    __GI___libc_fcntl.symtab0xc538100FUNC<unknown>HIDDEN2
                    __GI___sigaddset.symtab0xe45836FUNC<unknown>HIDDEN2
                    __GI___sigdelset.symtab0xe47c36FUNC<unknown>HIDDEN2
                    __GI___sigismember.symtab0xe43436FUNC<unknown>HIDDEN2
                    __GI___uClibc_fini.symtab0x1022c108FUNC<unknown>HIDDEN2
                    __GI___uClibc_init.symtab0x102d076FUNC<unknown>HIDDEN2
                    __GI___xpg_strerror_r.symtab0xdf54232FUNC<unknown>HIDDEN2
                    __GI__exit.symtab0xc60040FUNC<unknown>HIDDEN2
                    __GI_abort.symtab0xf1d8256FUNC<unknown>HIDDEN2
                    __GI_atoi.symtab0xf7f412FUNC<unknown>HIDDEN2
                    __GI_brk.symtab0x1393856FUNC<unknown>HIDDEN2
                    __GI_chdir.symtab0xc62844FUNC<unknown>HIDDEN2
                    __GI_clock_getres.symtab0x106c444FUNC<unknown>HIDDEN2
                    __GI_close.symtab0xc65444FUNC<unknown>HIDDEN2
                    __GI_closedir.symtab0x10888212FUNC<unknown>HIDDEN2
                    __GI_config_close.symtab0x10f4c48FUNC<unknown>HIDDEN2
                    __GI_config_open.symtab0x10f7c52FUNC<unknown>HIDDEN2
                    __GI_config_read.symtab0x10c28804FUNC<unknown>HIDDEN2
                    __GI_connect.symtab0xe25444FUNC<unknown>HIDDEN2
                    __GI_errno.symtab0x296284OBJECT<unknown>HIDDEN10
                    __GI_exit.symtab0xf9a0156FUNC<unknown>HIDDEN2
                    __GI_fclose.symtab0x110cc368FUNC<unknown>HIDDEN2
                    __GI_fcntl.symtab0xc538100FUNC<unknown>HIDDEN2
                    __GI_fflush_unlocked.symtab0x12484464FUNC<unknown>HIDDEN2
                    __GI_fgetc.symtab0x121ec188FUNC<unknown>HIDDEN2
                    __GI_fgetc_unlocked.symtab0x12654304FUNC<unknown>HIDDEN2
                    __GI_fgets.symtab0x122a8156FUNC<unknown>HIDDEN2
                    __GI_fgets_unlocked.symtab0x12784148FUNC<unknown>HIDDEN2
                    __GI_fopen.symtab0x1123c12FUNC<unknown>HIDDEN2
                    __GI_fork.symtab0xc68044FUNC<unknown>HIDDEN2
                    __GI_fputs_unlocked.symtab0xda2452FUNC<unknown>HIDDEN2
                    __GI_fseek.symtab0x1413812FUNC<unknown>HIDDEN2
                    __GI_fseeko64.symtab0x14144312FUNC<unknown>HIDDEN2
                    __GI_fstat.symtab0x1397080FUNC<unknown>HIDDEN2
                    __GI_fwrite_unlocked.symtab0xda58172FUNC<unknown>HIDDEN2
                    __GI_getc_unlocked.symtab0x12654304FUNC<unknown>HIDDEN2
                    __GI_getdtablesize.symtab0x106f040FUNC<unknown>HIDDEN2
                    __GI_getegid.symtab0x107188FUNC<unknown>HIDDEN2
                    __GI_geteuid.symtab0x107208FUNC<unknown>HIDDEN2
                    __GI_getgid.symtab0x107288FUNC<unknown>HIDDEN2
                    __GI_gethostbyname.symtab0xe1fc8FUNC<unknown>HIDDEN2
                    __GI_gethostbyname2.symtab0xe20480FUNC<unknown>HIDDEN2
                    __GI_gethostbyname2_r.symtab0x131f0664FUNC<unknown>HIDDEN2
                    __GI_gethostbyname_r.symtab0x15a64764FUNC<unknown>HIDDEN2
                    __GI_gethostname.symtab0x15d60112FUNC<unknown>HIDDEN2
                    __GI_getpagesize.symtab0x1073024FUNC<unknown>HIDDEN2
                    __GI_getpid.symtab0xc6ac8FUNC<unknown>HIDDEN2
                    __GI_getrlimit.symtab0x1074844FUNC<unknown>HIDDEN2
                    __GI_getsockname.symtab0xe28044FUNC<unknown>HIDDEN2
                    __GI_getuid.symtab0x107748FUNC<unknown>HIDDEN2
                    __GI_h_errno.symtab0x2962c4OBJECT<unknown>HIDDEN10
                    __GI_htonl.symtab0xe0f432FUNC<unknown>HIDDEN2
                    __GI_htons.symtab0xe0e020FUNC<unknown>HIDDEN2
                    __GI_inet_addr.symtab0xe1d836FUNC<unknown>HIDDEN2
                    __GI_inet_aton.symtab0x13100240FUNC<unknown>HIDDEN2
                    __GI_inet_ntoa.symtab0xe1cc12FUNC<unknown>HIDDEN2
                    __GI_inet_ntoa_r.symtab0xe148132FUNC<unknown>HIDDEN2
                    __GI_inet_ntop.symtab0x14a24620FUNC<unknown>HIDDEN2
                    __GI_inet_pton.symtab0x146e4512FUNC<unknown>HIDDEN2
                    __GI_initstate_r.symtab0xf72c200FUNC<unknown>HIDDEN2
                    __GI_ioctl.symtab0xc6b480FUNC<unknown>HIDDEN2
                    __GI_isatty.symtab0xe04832FUNC<unknown>HIDDEN2
                    __GI_isspace.symtab0xc85024FUNC<unknown>HIDDEN2
                    __GI_kill.symtab0xc70444FUNC<unknown>HIDDEN2
                    __GI_lseek64.symtab0x15e78100FUNC<unknown>HIDDEN2
                    __GI_memchr.symtab0x12cb0244FUNC<unknown>HIDDEN2
                    __GI_memcpy.symtab0xdb304FUNC<unknown>HIDDEN2
                    __GI_memmove.symtab0x15ee04FUNC<unknown>HIDDEN2
                    __GI_mempcpy.symtab0x12da424FUNC<unknown>HIDDEN2
                    __GI_memrchr.symtab0x12dbc220FUNC<unknown>HIDDEN2
                    __GI_memset.symtab0xdb40156FUNC<unknown>HIDDEN2
                    __GI_mmap.symtab0x105bc96FUNC<unknown>HIDDEN2
                    __GI_mremap.symtab0x139c048FUNC<unknown>HIDDEN2
                    __GI_munmap.symtab0x1077c44FUNC<unknown>HIDDEN2
                    __GI_nanosleep.symtab0x107a844FUNC<unknown>HIDDEN2
                    __GI_ntohl.symtab0xe12832FUNC<unknown>HIDDEN2
                    __GI_ntohs.symtab0xe11420FUNC<unknown>HIDDEN2
                    __GI_open.symtab0xc73092FUNC<unknown>HIDDEN2
                    __GI_opendir.symtab0x10a18156FUNC<unknown>HIDDEN2
                    __GI_poll.symtab0x15dd044FUNC<unknown>HIDDEN2
                    __GI_raise.symtab0x1348824FUNC<unknown>HIDDEN2
                    __GI_random.symtab0xf2dc124FUNC<unknown>HIDDEN2
                    __GI_random_r.symtab0xf5c0140FUNC<unknown>HIDDEN2
                    __GI_rawmemchr.symtab0x144b0176FUNC<unknown>HIDDEN2
                    __GI_read.symtab0xc78c44FUNC<unknown>HIDDEN2
                    __GI_readdir64.symtab0x10b48212FUNC<unknown>HIDDEN2
                    __GI_recv.symtab0xe2dc44FUNC<unknown>HIDDEN2
                    __GI_sbrk.symtab0x107d488FUNC<unknown>HIDDEN2
                    __GI_select.symtab0xc7b848FUNC<unknown>HIDDEN2
                    __GI_send.symtab0xe30844FUNC<unknown>HIDDEN2
                    __GI_setsid.symtab0xc7e844FUNC<unknown>HIDDEN2
                    __GI_setsockopt.symtab0xe33448FUNC<unknown>HIDDEN2
                    __GI_setstate_r.symtab0xf4f8200FUNC<unknown>HIDDEN2
                    __GI_sigaction.symtab0x1061c116FUNC<unknown>HIDDEN2
                    __GI_signal.symtab0xe390164FUNC<unknown>HIDDEN2
                    __GI_sigprocmask.symtab0x1082c48FUNC<unknown>HIDDEN2
                    __GI_sleep.symtab0xfa3c168FUNC<unknown>HIDDEN2
                    __GI_socket.symtab0xe36444FUNC<unknown>HIDDEN2
                    __GI_sprintf.symtab0xc8a852FUNC<unknown>HIDDEN2
                    __GI_srandom_r.symtab0xf64c224FUNC<unknown>HIDDEN2
                    __GI_stat.symtab0x15dfc80FUNC<unknown>HIDDEN2
                    __GI_strcasecmp.symtab0x1630c124FUNC<unknown>HIDDEN2
                    __GI_strchr.symtab0xdc60236FUNC<unknown>HIDDEN2
                    __GI_strchrnul.symtab0x12e98232FUNC<unknown>HIDDEN2
                    __GI_strcmp.symtab0xdbe028FUNC<unknown>HIDDEN2
                    __GI_strcoll.symtab0xdbe028FUNC<unknown>HIDDEN2
                    __GI_strcpy.symtab0xdd4c36FUNC<unknown>HIDDEN2
                    __GI_strcspn.symtab0x12f8064FUNC<unknown>HIDDEN2
                    __GI_strdup.symtab0x15ef048FUNC<unknown>HIDDEN2
                    __GI_strlen.symtab0xdc0096FUNC<unknown>HIDDEN2
                    __GI_strncpy.symtab0x14560184FUNC<unknown>HIDDEN2
                    __GI_strnlen.symtab0xdd70216FUNC<unknown>HIDDEN2
                    __GI_strpbrk.symtab0x130c064FUNC<unknown>HIDDEN2
                    __GI_strrchr.symtab0x12fc068FUNC<unknown>HIDDEN2
                    __GI_strspn.symtab0x1300472FUNC<unknown>HIDDEN2
                    __GI_strstr.symtab0xde48248FUNC<unknown>HIDDEN2
                    __GI_strtok.symtab0xe03c12FUNC<unknown>HIDDEN2
                    __GI_strtok_r.symtab0x1304c116FUNC<unknown>HIDDEN2
                    __GI_strtol.symtab0xf8008FUNC<unknown>HIDDEN2
                    __GI_sysconf.symtab0xfbfc1528FUNC<unknown>HIDDEN2
                    __GI_tcgetattr.symtab0xe068120FUNC<unknown>HIDDEN2
                    __GI_time.symtab0xc8148FUNC<unknown>HIDDEN2
                    __GI_toupper.symtab0xc86852FUNC<unknown>HIDDEN2
                    __GI_uname.symtab0x15e4c44FUNC<unknown>HIDDEN2
                    __GI_vsnprintf.symtab0xc8dc180FUNC<unknown>HIDDEN2
                    __GI_wait4.symtab0x1085c44FUNC<unknown>HIDDEN2
                    __GI_waitpid.symtab0xc81c8FUNC<unknown>HIDDEN2
                    __GI_wcrtomb.symtab0x10fb080FUNC<unknown>HIDDEN2
                    __GI_wcsnrtombs.symtab0x11020172FUNC<unknown>HIDDEN2
                    __GI_wcsrtombs.symtab0x1100032FUNC<unknown>HIDDEN2
                    __GI_write.symtab0xc82444FUNC<unknown>HIDDEN2
                    __JCR_END__.symtab0x230740OBJECT<unknown>DEFAULT8
                    __JCR_LIST__.symtab0x230740OBJECT<unknown>DEFAULT8
                    __adddf3.symtab0x16660736FUNC<unknown>HIDDEN2
                    __aeabi_cdcmpeq.symtab0x1703020FUNC<unknown>HIDDEN2
                    __aeabi_cdcmple.symtab0x1703020FUNC<unknown>HIDDEN2
                    __aeabi_cdrcmple.symtab0x1701448FUNC<unknown>HIDDEN2
                    __aeabi_d2uiz.symtab0x170a884FUNC<unknown>HIDDEN2
                    __aeabi_dadd.symtab0x16660736FUNC<unknown>HIDDEN2
                    __aeabi_dcmpeq.symtab0x1704420FUNC<unknown>HIDDEN2
                    __aeabi_dcmpge.symtab0x1708020FUNC<unknown>HIDDEN2
                    __aeabi_dcmpgt.symtab0x1709420FUNC<unknown>HIDDEN2
                    __aeabi_dcmple.symtab0x1706c20FUNC<unknown>HIDDEN2
                    __aeabi_dcmplt.symtab0x1705820FUNC<unknown>HIDDEN2
                    __aeabi_ddiv.symtab0x16d7c516FUNC<unknown>HIDDEN2
                    __aeabi_dmul.symtab0x16a54808FUNC<unknown>HIDDEN2
                    __aeabi_drsub.symtab0x166540FUNC<unknown>HIDDEN2
                    __aeabi_dsub.symtab0x1665c740FUNC<unknown>HIDDEN2
                    __aeabi_f2d.symtab0x1699464FUNC<unknown>HIDDEN2
                    __aeabi_i2d.symtab0x1696844FUNC<unknown>HIDDEN2
                    __aeabi_idiv.symtab0x164300FUNC<unknown>HIDDEN2
                    __aeabi_idiv0.symtab0xc4ec4FUNC<unknown>HIDDEN2
                    __aeabi_idivmod.symtab0x1655824FUNC<unknown>HIDDEN2
                    __aeabi_l2d.symtab0x169e8108FUNC<unknown>HIDDEN2
                    __aeabi_ldiv0.symtab0xc4ec4FUNC<unknown>HIDDEN2
                    __aeabi_ui2d.symtab0x1694040FUNC<unknown>HIDDEN2
                    __aeabi_uidiv.symtab0xc3100FUNC<unknown>HIDDEN2
                    __aeabi_uidivmod.symtab0xc40824FUNC<unknown>HIDDEN2
                    __aeabi_ul2d.symtab0x169d4128FUNC<unknown>HIDDEN2
                    __app_fini.symtab0x296204OBJECT<unknown>HIDDEN10
                    __atexit_lock.symtab0x233b424OBJECT<unknown>DEFAULT9
                    __bss_end__.symtab0x29a480NOTYPE<unknown>DEFAULTSHN_ABS
                    __bss_start.symtab0x233e80NOTYPE<unknown>DEFAULTSHN_ABS
                    __bss_start__.symtab0x233e80NOTYPE<unknown>DEFAULTSHN_ABS
                    __check_one_fd.symtab0x1029856FUNC<unknown>DEFAULT2
                    __close_nameservers.symtab0x159a0124FUNC<unknown>HIDDEN2
                    __cmpdf2.symtab0x16f90132FUNC<unknown>HIDDEN2
                    __ctype_b.symtab0x2318c4OBJECT<unknown>DEFAULT9
                    __ctype_tolower.symtab0x233e04OBJECT<unknown>DEFAULT9
                    __ctype_toupper.symtab0x231944OBJECT<unknown>DEFAULT9
                    __curbrk.symtab0x296304OBJECT<unknown>HIDDEN10
                    __data_start.symtab0x230780NOTYPE<unknown>DEFAULT9
                    __decode_dotted.symtab0x14c90244FUNC<unknown>HIDDEN2
                    __decode_header.symtab0x16008180FUNC<unknown>HIDDEN2
                    __default_rt_sa_restorer.symtab0x106940FUNC<unknown>DEFAULT2
                    __default_sa_restorer.symtab0x106900FUNC<unknown>DEFAULT2
                    __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __div0.symtab0xc4ec4FUNC<unknown>HIDDEN2
                    __divdf3.symtab0x16d7c516FUNC<unknown>HIDDEN2
                    __divsi3.symtab0x16430296FUNC<unknown>HIDDEN2
                    __dns_lookup.symtab0x14d841936FUNC<unknown>HIDDEN2
                    __do_global_ctors_aux.symtab0x170fc0FUNC<unknown>DEFAULT2
                    __do_global_dtors_aux.symtab0x80b00FUNC<unknown>DEFAULT2
                    __dso_handle.symtab0x2307c0OBJECT<unknown>HIDDEN9
                    __encode_dotted.symtab0x16388168FUNC<unknown>HIDDEN2
                    __encode_header.symtab0x15f20232FUNC<unknown>HIDDEN2
                    __encode_question.symtab0x160bc92FUNC<unknown>HIDDEN2
                    __end__.symtab0x29a480NOTYPE<unknown>DEFAULTSHN_ABS
                    __environ.symtab0x296184OBJECT<unknown>DEFAULT10
                    __eqdf2.symtab0x16f90132FUNC<unknown>HIDDEN2
                    __errno_location.symtab0xc89c12FUNC<unknown>DEFAULT2
                    __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __exit_cleanup.symtab0x296104OBJECT<unknown>HIDDEN10
                    __extendsfdf2.symtab0x1699464FUNC<unknown>HIDDEN2
                    __fcntl_nocancel.symtab0xc59c100FUNC<unknown>DEFAULT2
                    __fgetc_unlocked.symtab0x12654304FUNC<unknown>DEFAULT2
                    __fini_array_end.symtab0x230640NOTYPE<unknown>HIDDEN6
                    __fini_array_start.symtab0x230640NOTYPE<unknown>HIDDEN6
                    __fixunsdfsi.symtab0x170a884FUNC<unknown>HIDDEN2
                    __floatdidf.symtab0x169e8108FUNC<unknown>HIDDEN2
                    __floatsidf.symtab0x1696844FUNC<unknown>HIDDEN2
                    __floatundidf.symtab0x169d4128FUNC<unknown>HIDDEN2
                    __floatunsidf.symtab0x1694040FUNC<unknown>HIDDEN2
                    __gedf2.symtab0x16f80148FUNC<unknown>HIDDEN2
                    __get_hosts_byname_r.symtab0x15a1c72FUNC<unknown>HIDDEN2
                    __getdents64.symtab0x13fd8352FUNC<unknown>HIDDEN2
                    __getpagesize.symtab0x1073024FUNC<unknown>DEFAULT2
                    __glibc_strerror_r.symtab0xdf4020FUNC<unknown>DEFAULT2
                    __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __gtdf2.symtab0x16f80148FUNC<unknown>HIDDEN2
                    __h_errno_location.symtab0x10c1c12FUNC<unknown>DEFAULT2
                    __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __init_array_end.symtab0x230640NOTYPE<unknown>HIDDEN6
                    __init_array_start.symtab0x230640NOTYPE<unknown>HIDDEN6
                    __ledf2.symtab0x16f88140FUNC<unknown>HIDDEN2
                    __libc_close.symtab0xc65444FUNC<unknown>DEFAULT2
                    __libc_connect.symtab0xe25444FUNC<unknown>DEFAULT2
                    __libc_fcntl.symtab0xc538100FUNC<unknown>DEFAULT2
                    __libc_fork.symtab0xc68044FUNC<unknown>DEFAULT2
                    __libc_lseek64.symtab0x15e78100FUNC<unknown>DEFAULT2
                    __libc_nanosleep.symtab0x107a844FUNC<unknown>DEFAULT2
                    __libc_open.symtab0xc73092FUNC<unknown>DEFAULT2
                    __libc_read.symtab0xc78c44FUNC<unknown>DEFAULT2
                    __libc_recv.symtab0xe2dc44FUNC<unknown>DEFAULT2
                    __libc_select.symtab0xc7b848FUNC<unknown>DEFAULT2
                    __libc_send.symtab0xe30844FUNC<unknown>DEFAULT2
                    __libc_sigaction.symtab0x1061c116FUNC<unknown>DEFAULT2
                    __libc_stack_end.symtab0x296144OBJECT<unknown>DEFAULT10
                    __libc_waitpid.symtab0xc81c8FUNC<unknown>DEFAULT2
                    __libc_write.symtab0xc82444FUNC<unknown>DEFAULT2
                    __local_nameserver.symtab0x1ad4016OBJECT<unknown>HIDDEN4
                    __ltdf2.symtab0x16f88140FUNC<unknown>HIDDEN2
                    __malloc_consolidate.symtab0xee00424FUNC<unknown>HIDDEN2
                    __malloc_largebin_index.symtab0xe4a0120FUNC<unknown>DEFAULT2
                    __malloc_lock.symtab0x232d824OBJECT<unknown>DEFAULT9
                    __malloc_state.symtab0x296b4888OBJECT<unknown>DEFAULT10
                    __malloc_trim.symtab0xed5c164FUNC<unknown>DEFAULT2
                    __modsi3.symtab0x16570228FUNC<unknown>HIDDEN2
                    __muldf3.symtab0x16a54808FUNC<unknown>HIDDEN2
                    __muldi3.symtab0xc4f072FUNC<unknown>HIDDEN2
                    __nameserver.symtab0x29a3c4OBJECT<unknown>HIDDEN10
                    __nameservers.symtab0x29a404OBJECT<unknown>HIDDEN10
                    __nedf2.symtab0x16f90132FUNC<unknown>HIDDEN2
                    __open_etc_hosts.symtab0x1611812FUNC<unknown>HIDDEN2
                    __open_nameservers.symtab0x155941036FUNC<unknown>HIDDEN2
                    __pagesize.symtab0x2961c4OBJECT<unknown>DEFAULT10
                    __preinit_array_end.symtab0x230640NOTYPE<unknown>HIDDEN6
                    __preinit_array_start.symtab0x230640NOTYPE<unknown>HIDDEN6
                    __progname.symtab0x233d04OBJECT<unknown>DEFAULT9
                    __progname_full.symtab0x233d44OBJECT<unknown>DEFAULT9
                    __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __pthread_mutex_init.symtab0x101fc8FUNC<unknown>DEFAULT2
                    __pthread_mutex_lock.symtab0x101f48FUNC<unknown>DEFAULT2
                    __pthread_mutex_trylock.symtab0x101f48FUNC<unknown>DEFAULT2
                    __pthread_mutex_unlock.symtab0x101f48FUNC<unknown>DEFAULT2
                    __pthread_return_0.symtab0x101f48FUNC<unknown>DEFAULT2
                    __read_etc_hosts_r.symtab0x16124488FUNC<unknown>HIDDEN2
                    __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __res_sync.symtab0x29a344OBJECT<unknown>HIDDEN10
                    __resolv_attempts.symtab0x233db1OBJECT<unknown>HIDDEN9
                    __resolv_lock.symtab0x2963824OBJECT<unknown>DEFAULT10
                    __resolv_timeout.symtab0x233da1OBJECT<unknown>HIDDEN9
                    __rtld_fini.symtab0x296244OBJECT<unknown>HIDDEN10
                    __searchdomain.symtab0x29a384OBJECT<unknown>HIDDEN10
                    __searchdomains.symtab0x29a444OBJECT<unknown>HIDDEN10
                    __sigaddset.symtab0xe45836FUNC<unknown>DEFAULT2
                    __sigdelset.symtab0xe47c36FUNC<unknown>DEFAULT2
                    __sigismember.symtab0xe43436FUNC<unknown>DEFAULT2
                    __stdin.symtab0x231a44OBJECT<unknown>DEFAULT9
                    __stdio_READ.symtab0x1427c92FUNC<unknown>HIDDEN2
                    __stdio_WRITE.symtab0x11248212FUNC<unknown>HIDDEN2
                    __stdio_adjust_position.symtab0x142d8192FUNC<unknown>HIDDEN2
                    __stdio_fwrite.symtab0x11608312FUNC<unknown>HIDDEN2
                    __stdio_init_mutex.symtab0xca0c16FUNC<unknown>HIDDEN2
                    __stdio_mutex_initializer.4591.symtab0x19fc024OBJECT<unknown>DEFAULT4
                    __stdio_rfill.symtab0x1439844FUNC<unknown>HIDDEN2
                    __stdio_seek.symtab0x1448048FUNC<unknown>HIDDEN2
                    __stdio_trans2r_o.symtab0x143c4188FUNC<unknown>HIDDEN2
                    __stdio_trans2w_o.symtab0x11740260FUNC<unknown>HIDDEN2
                    __stdio_wcommit.symtab0xcad444FUNC<unknown>HIDDEN2
                    __stdout.symtab0x231a84OBJECT<unknown>DEFAULT9
                    __subdf3.symtab0x1665c740FUNC<unknown>HIDDEN2
                    __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __syscall_rt_sigaction.symtab0x1069844FUNC<unknown>DEFAULT2
                    __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __uClibc_fini.symtab0x1022c108FUNC<unknown>DEFAULT2
                    __uClibc_init.symtab0x102d076FUNC<unknown>DEFAULT2
                    __uClibc_main.symtab0x1031c672FUNC<unknown>DEFAULT2
                    __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __uclibc_progname.symtab0x233cc4OBJECT<unknown>HIDDEN9
                    __udivsi3.symtab0xc310248FUNC<unknown>HIDDEN2
                    __umodsi3.symtab0xc420204FUNC<unknown>HIDDEN2
                    __xpg_strerror_r.symtab0xdf54232FUNC<unknown>DEFAULT2
                    __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __xstat32_conv.symtab0x13d00728FUNC<unknown>HIDDEN2
                    __xstat64_conv.symtab0x139f0784FUNC<unknown>HIDDEN2
                    _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _bss_custom_printf_spec.symtab0x2942010OBJECT<unknown>DEFAULT10
                    _bss_end__.symtab0x29a480NOTYPE<unknown>DEFAULTSHN_ABS
                    _charpad.symtab0xcb0080FUNC<unknown>DEFAULT2
                    _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _custom_printf_arginfo.symtab0x2965c40OBJECT<unknown>HIDDEN10
                    _custom_printf_handler.symtab0x2968440OBJECT<unknown>HIDDEN10
                    _custom_printf_spec.symtab0x232d44OBJECT<unknown>HIDDEN9
                    _dl_aux_init.symtab0x1391436FUNC<unknown>DEFAULT2
                    _dl_phdr.symtab0x29a2c4OBJECT<unknown>DEFAULT10
                    _dl_phnum.symtab0x29a304OBJECT<unknown>DEFAULT10
                    _edata.symtab0x233e80NOTYPE<unknown>DEFAULTSHN_ABS
                    _end.symtab0x29a480NOTYPE<unknown>DEFAULTSHN_ABS
                    _errno.symtab0x296284OBJECT<unknown>DEFAULT10
                    _exit.symtab0xc60040FUNC<unknown>DEFAULT2
                    _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _fini.symtab0x171380FUNC<unknown>DEFAULT3
                    _fixed_buffers.symtab0x274208192OBJECT<unknown>DEFAULT10
                    _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _fp_out_narrow.symtab0xcb50128FUNC<unknown>DEFAULT2
                    _fpmaxtostr.symtab0x11a4c1952FUNC<unknown>HIDDEN2
                    _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _h_errno.symtab0x2962c4OBJECT<unknown>DEFAULT10
                    _init.symtab0x80940FUNC<unknown>DEFAULT1
                    _load_inttype.symtab0x11844116FUNC<unknown>HIDDEN2
                    _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _memcpy.symtab0x128200FUNC<unknown>HIDDEN2
                    _ppfs_init.symtab0xd22c152FUNC<unknown>HIDDEN2
                    _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _ppfs_parsespec.symtab0xd4e41344FUNC<unknown>HIDDEN2
                    _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _ppfs_prepargs.symtab0xd2c456FUNC<unknown>HIDDEN2
                    _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _ppfs_setargs.symtab0xd2fc412FUNC<unknown>HIDDEN2
                    _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _promoted_size.symtab0xd49876FUNC<unknown>DEFAULT2
                    _pthread_cleanup_pop_restore.symtab0x1020c32FUNC<unknown>DEFAULT2
                    _pthread_cleanup_push_defer.symtab0x102048FUNC<unknown>DEFAULT2
                    _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _sigintr.symtab0x296ac8OBJECT<unknown>HIDDEN10
                    _start.symtab0x81900FUNC<unknown>DEFAULT2
                    _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _stdio_fopen.symtab0x1131c748FUNC<unknown>HIDDEN2
                    _stdio_init.symtab0xc990124FUNC<unknown>HIDDEN2
                    _stdio_openlist.symtab0x231ac4OBJECT<unknown>DEFAULT9
                    _stdio_openlist_add_lock.symtab0x231b024OBJECT<unknown>DEFAULT9
                    _stdio_openlist_dec_use.symtab0x12344320FUNC<unknown>HIDDEN2
                    _stdio_openlist_del_count.symtab0x2741c4OBJECT<unknown>DEFAULT10
                    _stdio_openlist_del_lock.symtab0x231c824OBJECT<unknown>DEFAULT9
                    _stdio_openlist_use_count.symtab0x274184OBJECT<unknown>DEFAULT10
                    _stdio_streams.symtab0x231e4240OBJECT<unknown>DEFAULT9
                    _stdio_term.symtab0xca1c184FUNC<unknown>HIDDEN2
                    _stdio_user_locking.symtab0x231e04OBJECT<unknown>DEFAULT9
                    _stdlib_strto_l.symtab0xf808408FUNC<unknown>HIDDEN2
                    _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _store_inttype.symtab0x118b864FUNC<unknown>HIDDEN2
                    _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _string_syserrmsgs.symtab0x1a0902906OBJECT<unknown>HIDDEN4
                    _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _uintmaxtostr.symtab0x118f8340FUNC<unknown>HIDDEN2
                    _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _vfprintf_internal.symtab0xcbd01628FUNC<unknown>HIDDEN2
                    _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    abort.symtab0xf1d8256FUNC<unknown>DEFAULT2
                    abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    atoi.symtab0xf7f412FUNC<unknown>DEFAULT2
                    atol.symtab0xf7f412FUNC<unknown>DEFAULT2
                    atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    bcopy.symtab0xdb1016FUNC<unknown>DEFAULT2
                    been_there_done_that.symtab0x2960c4OBJECT<unknown>DEFAULT10
                    bot.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    brk.symtab0x1393856FUNC<unknown>DEFAULT2
                    brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    bsd_signal.symtab0xe390164FUNC<unknown>DEFAULT2
                    buf.2915.symtab0x2943016OBJECT<unknown>DEFAULT10
                    buf.5468.symtab0x29440440OBJECT<unknown>DEFAULT10
                    bzero.symtab0xdb2012FUNC<unknown>DEFAULT2
                    c.symtab0x231804OBJECT<unknown>DEFAULT9
                    call___do_global_ctors_aux.symtab0x171300FUNC<unknown>DEFAULT2
                    call___do_global_dtors_aux.symtab0x81280FUNC<unknown>DEFAULT2
                    call_frame_dummy.symtab0x81880FUNC<unknown>DEFAULT2
                    calloc.symtab0x134a0268FUNC<unknown>DEFAULT2
                    calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    chdir.symtab0xc62844FUNC<unknown>DEFAULT2
                    chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    clock_getres.symtab0x106c444FUNC<unknown>DEFAULT2
                    clock_getres.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    close.symtab0xc65444FUNC<unknown>DEFAULT2
                    close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    closedir.symtab0x10888212FUNC<unknown>DEFAULT2
                    closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    closenameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    commServer.symtab0x230884OBJECT<unknown>DEFAULT9
                    completed.4916.symtab0x233e81OBJECT<unknown>DEFAULT10
                    connect.symtab0xe25444FUNC<unknown>DEFAULT2
                    connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    connectTimeout.symtab0x94d0640FUNC<unknown>DEFAULT2
                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    currentServer.symtab0x2317c4OBJECT<unknown>DEFAULT9
                    data_start.symtab0x230840NOTYPE<unknown>DEFAULT9
                    decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    dns.symtab0x2308c4OBJECT<unknown>DEFAULT9
                    dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    environ.symtab0x296184OBJECT<unknown>DEFAULT10
                    errno.symtab0x296284OBJECT<unknown>DEFAULT10
                    errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    exit.symtab0xf9a0156FUNC<unknown>DEFAULT2
                    exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    exp10_table.symtab0x1ac9472OBJECT<unknown>DEFAULT4
                    fclose.symtab0x110cc368FUNC<unknown>DEFAULT2
                    fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fcntl.symtab0xc538100FUNC<unknown>DEFAULT2
                    fd_to_DIR.symtab0x1095c188FUNC<unknown>DEFAULT2
                    fdgets.symtab0x8438208FUNC<unknown>DEFAULT2
                    fdopendir.symtab0x10ab4148FUNC<unknown>DEFAULT2
                    fflush_unlocked.symtab0x12484464FUNC<unknown>DEFAULT2
                    fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgetc.symtab0x121ec188FUNC<unknown>DEFAULT2
                    fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgetc_unlocked.symtab0x12654304FUNC<unknown>DEFAULT2
                    fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgets.symtab0x122a8156FUNC<unknown>DEFAULT2
                    fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgets_unlocked.symtab0x12784148FUNC<unknown>DEFAULT2
                    fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fmt.symtab0x1ac8020OBJECT<unknown>DEFAULT4
                    fopen.symtab0x1123c12FUNC<unknown>DEFAULT2
                    fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    force_to_data.symtab0x230780OBJECT<unknown>DEFAULT9
                    force_to_data.symtab0x233e40OBJECT<unknown>DEFAULT9
                    fork.symtab0xc68044FUNC<unknown>DEFAULT2
                    fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fputs_unlocked.symtab0xda2452FUNC<unknown>DEFAULT2
                    fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    frame_dummy.symtab0x81300FUNC<unknown>DEFAULT2
                    free.symtab0xefa8520FUNC<unknown>DEFAULT2
                    free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fseek.symtab0x1413812FUNC<unknown>DEFAULT2
                    fseeko.symtab0x1413812FUNC<unknown>DEFAULT2
                    fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fseeko64.symtab0x14144312FUNC<unknown>DEFAULT2
                    fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fstat.symtab0x1397080FUNC<unknown>DEFAULT2
                    fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fwrite_unlocked.symtab0xda58172FUNC<unknown>DEFAULT2
                    fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getArch.symtab0xade428FUNC<unknown>DEFAULT2
                    getHost.symtab0x9198100FUNC<unknown>DEFAULT2
                    getOurIP.symtab0x8508720FUNC<unknown>DEFAULT2
                    getRandomIP.symtab0x83d896FUNC<unknown>DEFAULT2
                    get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getc.symtab0x121ec188FUNC<unknown>DEFAULT2
                    getc_unlocked.symtab0x12654304FUNC<unknown>DEFAULT2
                    getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getdtablesize.symtab0x106f040FUNC<unknown>DEFAULT2
                    getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getegid.symtab0x107188FUNC<unknown>DEFAULT2
                    getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    geteuid.symtab0x107208FUNC<unknown>DEFAULT2
                    geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getgid.symtab0x107288FUNC<unknown>DEFAULT2
                    getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname.symtab0xe1fc8FUNC<unknown>DEFAULT2
                    gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname2.symtab0xe20480FUNC<unknown>DEFAULT2
                    gethostbyname2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname2_r.symtab0x131f0664FUNC<unknown>DEFAULT2
                    gethostbyname2_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname_r.symtab0x15a64764FUNC<unknown>DEFAULT2
                    gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostname.symtab0x15d60112FUNC<unknown>DEFAULT2
                    gethostname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getpagesize.symtab0x1073024FUNC<unknown>DEFAULT2
                    getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getpid.symtab0xc6ac8FUNC<unknown>DEFAULT2
                    getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getrlimit.symtab0x1074844FUNC<unknown>DEFAULT2
                    getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getsockname.symtab0xe28044FUNC<unknown>DEFAULT2
                    getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getsockopt.symtab0xe2ac48FUNC<unknown>DEFAULT2
                    getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getuid.symtab0x107748FUNC<unknown>DEFAULT2
                    getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    h_errno.symtab0x2962c4OBJECT<unknown>DEFAULT10
                    hoste.5467.symtab0x295f820OBJECT<unknown>DEFAULT10
                    htonl.symtab0xe0f432FUNC<unknown>DEFAULT2
                    htons.symtab0xe0e020FUNC<unknown>DEFAULT2
                    i.4537.symtab0x231844OBJECT<unknown>DEFAULT9
                    index.symtab0xdc60236FUNC<unknown>DEFAULT2
                    inet_addr.symtab0xe1d836FUNC<unknown>DEFAULT2
                    inet_aton.symtab0x13100240FUNC<unknown>DEFAULT2
                    inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    inet_ntoa.symtab0xe1cc12FUNC<unknown>DEFAULT2
                    inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    inet_ntoa_r.symtab0xe148132FUNC<unknown>DEFAULT2
                    inet_ntop.symtab0x14a24620FUNC<unknown>DEFAULT2
                    inet_ntop4.symtab0x148e4320FUNC<unknown>DEFAULT2
                    inet_pton.symtab0x146e4512FUNC<unknown>DEFAULT2
                    inet_pton4.symtab0x14618204FUNC<unknown>DEFAULT2
                    initConnection.symtab0xb990396FUNC<unknown>DEFAULT2
                    init_rand.symtab0x81cc212FUNC<unknown>DEFAULT2
                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    initstate.symtab0xf3e4152FUNC<unknown>DEFAULT2
                    initstate_r.symtab0xf72c200FUNC<unknown>DEFAULT2
                    ioctl.symtab0xc6b480FUNC<unknown>DEFAULT2
                    ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    isatty.symtab0xe04832FUNC<unknown>DEFAULT2
                    isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    isspace.symtab0xc85024FUNC<unknown>DEFAULT2
                    isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    kill.symtab0xc70444FUNC<unknown>DEFAULT2
                    kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    last_id.5525.symtab0x233d82OBJECT<unknown>DEFAULT9
                    last_ns_num.5524.symtab0x296344OBJECT<unknown>DEFAULT10
                    libgcc2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    listFork.symtab0x9750420FUNC<unknown>DEFAULT2
                    llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    lseek64.symtab0x15e78100FUNC<unknown>DEFAULT2
                    macAddress.symtab0x234106OBJECT<unknown>DEFAULT10
                    main.symtab0xbb1c2036FUNC<unknown>DEFAULT2
                    mainCommSock.symtab0x234044OBJECT<unknown>DEFAULT10
                    malloc.symtab0xe5182116FUNC<unknown>DEFAULT2
                    malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    malloc_trim.symtab0xf1b040FUNC<unknown>DEFAULT2
                    memchr.symtab0x12cb0244FUNC<unknown>DEFAULT2
                    memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    memcpy.symtab0xdb304FUNC<unknown>DEFAULT2
                    memmove.symtab0x15ee04FUNC<unknown>DEFAULT2
                    mempcpy.symtab0x12da424FUNC<unknown>DEFAULT2
                    mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    memrchr.symtab0x12dbc220FUNC<unknown>DEFAULT2
                    memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    memset.symtab0xdb40156FUNC<unknown>DEFAULT2
                    mmap.symtab0x105bc96FUNC<unknown>DEFAULT2
                    mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    mremap.symtab0x139c048FUNC<unknown>DEFAULT2
                    mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    munmap.symtab0x1077c44FUNC<unknown>DEFAULT2
                    munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    mylock.symtab0x232f024OBJECT<unknown>DEFAULT9
                    mylock.symtab0x2330824OBJECT<unknown>DEFAULT9
                    nanosleep.symtab0x107a844FUNC<unknown>DEFAULT2
                    nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    next_start.1304.symtab0x2942c4OBJECT<unknown>DEFAULT10
                    nprocessors_onln.symtab0xfae4280FUNC<unknown>DEFAULT2
                    ntohl.symtab0xe12832FUNC<unknown>DEFAULT2
                    ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    ntohs.symtab0xe11420FUNC<unknown>DEFAULT2
                    ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    numpids.symtab0x234088OBJECT<unknown>DEFAULT10
                    object.4931.symtab0x233ec24OBJECT<unknown>DEFAULT10
                    open.symtab0xc73092FUNC<unknown>DEFAULT2
                    open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    opendir.symtab0x10a18156FUNC<unknown>DEFAULT2
                    opendir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    opennameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    ourIP.symtab0x296544OBJECT<unknown>DEFAULT10
                    ovhl7.symtab0xa05c3464FUNC<unknown>DEFAULT2
                    p.4914.symtab0x230800OBJECT<unknown>DEFAULT9
                    parse_config.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    pids.symtab0x296584OBJECT<unknown>DEFAULT10
                    poll.symtab0x15dd044FUNC<unknown>DEFAULT2
                    poll.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    prefix.4811.symtab0x19fe812OBJECT<unknown>DEFAULT4
                    print.symtab0x8ce01008FUNC<unknown>DEFAULT2
                    printchar.symtab0x8908108FUNC<unknown>DEFAULT2
                    printi.symtab0x8af8488FUNC<unknown>DEFAULT2
                    prints.symtab0x8974388FUNC<unknown>DEFAULT2
                    processCmd.symtab0xae002960FUNC<unknown>DEFAULT2
                    program_invocation_name.symtab0x233d44OBJECT<unknown>DEFAULT9
                    program_invocation_short_name.symtab0x233d04OBJECT<unknown>DEFAULT9
                    qual_chars.4820.symtab0x19ffc20OBJECT<unknown>DEFAULT4
                    raise.symtab0x1348824FUNC<unknown>DEFAULT2
                    raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    rand.symtab0xf2d84FUNC<unknown>DEFAULT2
                    rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    rand_cmwc.symtab0x82a0312FUNC<unknown>DEFAULT2
                    random.symtab0xf2dc124FUNC<unknown>DEFAULT2
                    random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    random_poly_info.symtab0x1abec40OBJECT<unknown>DEFAULT4
                    random_r.symtab0xf5c0140FUNC<unknown>DEFAULT2
                    random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    randtbl.symtab0x23334128OBJECT<unknown>DEFAULT9
                    rawmemchr.symtab0x144b0176FUNC<unknown>DEFAULT2
                    rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    read.symtab0xc78c44FUNC<unknown>DEFAULT2
                    read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    read_etc_hosts_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    readdir64.symtab0x10b48212FUNC<unknown>DEFAULT2
                    readdir64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    realloc.symtab0x135ac872FUNC<unknown>DEFAULT2
                    realloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    recv.symtab0xe2dc44FUNC<unknown>DEFAULT2
                    recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    recvLine.symtab0x91fc724FUNC<unknown>DEFAULT2
                    resolv_conf_mtime.5510.symtab0x296504OBJECT<unknown>DEFAULT10
                    rindex.symtab0x12fc068FUNC<unknown>DEFAULT2
                    sbrk.symtab0x107d488FUNC<unknown>DEFAULT2
                    sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    select.symtab0xc7b848FUNC<unknown>DEFAULT2
                    select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    TimestampSource PortDest PortSource IPDest IP
                    Apr 26, 2024 23:18:42.247013092 CEST3368430455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:18:43.264945984 CEST3368430455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:18:45.281148911 CEST3368430455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:18:49.504981995 CEST3368430455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:18:57.696881056 CEST3368430455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:13.825051069 CEST3368430455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:17.257622957 CEST3368630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:18.273016930 CEST3368630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:20.288898945 CEST3368630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:24.320938110 CEST3368630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:32.512857914 CEST3368630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:48.640849113 CEST3368630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:52.268316984 CEST3368830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:53.280905962 CEST3368830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:55.296879053 CEST3368830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:19:59.392855883 CEST3368830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:07.584871054 CEST3368830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:23.712857008 CEST3368830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:27.298520088 CEST3369030455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:28.320918083 CEST3369030455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:30.336900949 CEST3369030455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:34.464926004 CEST3369030455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:42.656862974 CEST3369030455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:20:58.784879923 CEST3369030455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:02.315124035 CEST3369230455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:03.328826904 CEST3369230455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:05.344774961 CEST3369230455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:09.536823034 CEST3369230455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:17.728899956 CEST3369230455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:27.284646988 CEST3481253192.168.2.138.8.8.8
                    Apr 26, 2024 23:21:27.468348980 CEST53348128.8.8.8192.168.2.13
                    Apr 26, 2024 23:21:27.468450069 CEST3481253192.168.2.138.8.8.8
                    Apr 26, 2024 23:21:27.468491077 CEST3481253192.168.2.138.8.8.8
                    Apr 26, 2024 23:21:27.468544006 CEST3481253192.168.2.138.8.8.8
                    Apr 26, 2024 23:21:27.643553972 CEST53348128.8.8.8192.168.2.13
                    Apr 26, 2024 23:21:27.643589973 CEST53348128.8.8.8192.168.2.13
                    Apr 26, 2024 23:21:27.643606901 CEST53348128.8.8.8192.168.2.13
                    Apr 26, 2024 23:21:27.643625021 CEST53348128.8.8.8192.168.2.13
                    Apr 26, 2024 23:21:27.643678904 CEST3481253192.168.2.138.8.8.8
                    Apr 26, 2024 23:21:27.643714905 CEST3481253192.168.2.138.8.8.8
                    Apr 26, 2024 23:21:29.643974066 CEST53348128.8.8.8192.168.2.13
                    Apr 26, 2024 23:21:29.644296885 CEST3481253192.168.2.138.8.8.8
                    Apr 26, 2024 23:21:29.819567919 CEST53348128.8.8.8192.168.2.13
                    Apr 26, 2024 23:21:33.856729031 CEST3369230455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:37.321274042 CEST3369630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:38.336927891 CEST3369630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:40.352854013 CEST3369630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:44.608884096 CEST3369630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:21:52.800854921 CEST3369630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:22:08.928903103 CEST3369630455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:22:12.351732016 CEST3369830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:22:13.376712084 CEST3369830455192.168.2.13147.185.221.19
                    Apr 26, 2024 23:22:15.392718077 CEST3369830455192.168.2.13147.185.221.19
                    TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                    Apr 26, 2024 23:21:27.468491077 CEST192.168.2.138.8.8.80xd258Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                    Apr 26, 2024 23:21:27.468544006 CEST192.168.2.138.8.8.80x9a21Standard query (0)daisy.ubuntu.com28IN (0x0001)false
                    TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                    Apr 26, 2024 23:21:27.643606901 CEST8.8.8.8192.168.2.130xd258No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
                    Apr 26, 2024 23:21:27.643606901 CEST8.8.8.8192.168.2.130xd258No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

                    System Behavior

                    Start time (UTC):21:18:40
                    Start date (UTC):26/04/2024
                    Path:/tmp/GdfWOGzXow.elf
                    Arguments:/tmp/GdfWOGzXow.elf
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    Start time (UTC):21:18:41
                    Start date (UTC):26/04/2024
                    Path:/tmp/GdfWOGzXow.elf
                    Arguments:-
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    Start time (UTC):21:18:41
                    Start date (UTC):26/04/2024
                    Path:/tmp/GdfWOGzXow.elf
                    Arguments:-
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1