Play interactive tour

Edit tour

Linux Analysis Report beamer.arm7-20211202-2350

Overview

General Information

Sample Name:	beamer.arm7-20211202-2350
Analysis ID:	533078
MD5:	642789a96c5a2bdcd9e667084f3d07c6
SHA1:	09b0e3d7d7c708f3d87448d1bbf76364fd694e18
SHA256:	3ec65cfa98b26a48f25e8b6c79885e2d8f99e157007e7991c300aaade2bcfdf9
Infos:

Detection

Mirai

Score:	60
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected Mirai

Multi AV Scanner detection for submitted file

Contains symbols with names commonly found in malware

Deletes log files

Uses the "uname" system call to query kernel version information (possible evasion)

Executes commands using a shell command-line interpreter

Executes the "systemctl" command used for controlling the systemd system and service manager

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures

All HTTP servers contacted by the sample do not answer. Likely the sample is an old dropper which does no longer work

Static ELF header machine description suggests that the sample might not execute correctly on this machine

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	533078
Start date:	03.12.2021
Start time:	00:56:50
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	beamer.arm7-20211202-2350
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal60.troj.linARM7-20211202-2350@0/53@0/0

Process Tree

system is lnxubuntu20

systemd New Fork (PID: 5199, Parent: 1)

logrotate (PID: 5199, Parent: 1, MD5: ff9f6831debb63e53a31ff8057143af6) Arguments: /usr/sbin/logrotate /etc/logrotate.conf

logrotate New Fork (PID: 5262, Parent: 5199)

gzip (PID: 5262, Parent: 5199, MD5: beef4e1f54ec90564d2acd57c0b0c897) Arguments: /bin/gzip

logrotate New Fork (PID: 5263, Parent: 5199)

sh (PID: 5263, Parent: 5199, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\n\t\tinvoke-rc.d --quiet cups restart > /dev/null\n" logrotate_script "/var/log/cups/*log "

sh New Fork (PID: 5264, Parent: 5263)

invoke-rc.d (PID: 5264, Parent: 5263, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: invoke-rc.d --quiet cups restart

invoke-rc.d New Fork (PID: 5265, Parent: 5264)

runlevel (PID: 5265, Parent: 5264, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: /sbin/runlevel

invoke-rc.d New Fork (PID: 5266, Parent: 5264)

systemctl (PID: 5266, Parent: 5264, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl --quiet is-enabled cups.service

invoke-rc.d New Fork (PID: 5269, Parent: 5264)

ls (PID: 5269, Parent: 5264, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls /etc/rc[S2345].d/S[0-9][0-9]cups

invoke-rc.d New Fork (PID: 5272, Parent: 5264)

systemctl (PID: 5272, Parent: 5264, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl --quiet is-active cups.service

logrotate New Fork (PID: 5273, Parent: 5199)

gzip (PID: 5273, Parent: 5199, MD5: beef4e1f54ec90564d2acd57c0b0c897) Arguments: /bin/gzip

logrotate New Fork (PID: 5274, Parent: 5199)

sh (PID: 5274, Parent: 5199, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/syslog

sh New Fork (PID: 5275, Parent: 5274)

rsyslog-rotate (PID: 5275, Parent: 5274, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/lib/rsyslog/rsyslog-rotate

rsyslog-rotate New Fork (PID: 5276, Parent: 5275)

systemctl (PID: 5276, Parent: 5275, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl kill -s HUP rsyslog.service

systemd New Fork (PID: 5200, Parent: 1)

install (PID: 5200, Parent: 1, MD5: 55e2520049dc6a62e8c94732e36cdd54) Arguments: /usr/bin/install -d -o man -g man -m 0755 /var/cache/man

systemd New Fork (PID: 5261, Parent: 1)

find (PID: 5261, Parent: 1, MD5: b68ef002f84cc54dd472238ba7df80ab) Arguments: /usr/bin/find /var/cache/man -type f -name *.gz -atime +6 -delete

systemd New Fork (PID: 5267, Parent: 1)

mandb (PID: 5267, Parent: 1, MD5: 1dda5ea0027ecf1c2db0f5a3de7e6941) Arguments: /usr/bin/mandb --quiet

beamer.arm7-20211202-2350 (PID: 5284, Parent: 5119, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/beamer.arm7-20211202-2350

beamer.arm7-20211202-2350 New Fork (PID: 5286, Parent: 5284)

beamer.arm7-20211202-2350 New Fork (PID: 5287, Parent: 5284)

beamer.arm7-20211202-2350 New Fork (PID: 5288, Parent: 5284)

cleanup

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
beamer.arm7-20211202-2350	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for submitted file

Show sources

Source: beamer.arm7-20211202-2350

Virustotal: Detection: 37%

Perma Link

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: global traffic

TCP traffic: 192.168.2.23:52018 -> 45.134.225.20:544

Source: /tmp/beamer.arm7-20211202-2350 (PID: 5284)

Socket: 192.168.2.23::34895

Jump to behavior

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20
Source: unknown	TCP traffic detected without corresponding DNS query: 45.134.225.20

System Summary:

Contains symbols with names commonly found in malware

Show sources

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_icmp.c
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_method.c
Source: ELF static info symbol of initial sample	Name: attack_method_std
Source: ELF static info symbol of initial sample	Name: attack_method_tcpack
Source: ELF static info symbol of initial sample	Name: attack_method_tcpall
Source: ELF static info symbol of initial sample	Name: attack_method_tcpsyn

Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: /proc/%s/maps/tmp/root/mnt/var/run/home/init/usr/bin/usr/sbin/var/wlancont/var/tmp/stainfologinbusyboxdnsrelaybashshtelnetdsshdropbearwebhikvisionlibcgi-binconfigdvrappsofia127.0.0.1unknown45.134.225.20lost connection

Source: classification engine

Classification label: mal60.troj.linARM7-20211202-2350@0/53@0/0

Source: /usr/sbin/logrotate (PID: 5263)	Shell command executed: sh -c "\n\t\tinvoke-rc.d --quiet cups restart > /dev/null\n" logrotate_script "/var/log/cups/*log "			Jump to behavior
Source: /usr/sbin/logrotate (PID: 5274)	Shell command executed: sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/syslog			Jump to behavior

Source: /usr/sbin/invoke-rc.d (PID: 5266)	Systemctl executable: /usr/bin/systemctl -> systemctl --quiet is-enabled cups.service	Jump to behavior
Source: /usr/sbin/invoke-rc.d (PID: 5272)	Systemctl executable: /usr/bin/systemctl -> systemctl --quiet is-active cups.service	Jump to behavior
Source: /usr/lib/rsyslog/rsyslog-rotate (PID: 5276)	Systemctl executable: /usr/bin/systemctl -> systemctl kill -s HUP rsyslog.service	Jump to behavior

Source: /usr/sbin/logrotate (PID: 5199)	Truncated file: /var/log/cups/access_log.1			Jump to behavior
Source: /usr/sbin/logrotate (PID: 5199)	Truncated file: /var/log/syslog.1			Jump to behavior

Source: /usr/bin/find (PID: 5261)	Queries kernel information via 'uname':			Jump to behavior
Source: /tmp/beamer.arm7-20211202-2350 (PID: 5284)	Queries kernel information via 'uname':			Jump to behavior

Source: 5267.20.dr	Binary or memory string: -9915837702310A--gzvmware kernel module
Source: 5267.20.dr	Binary or memory string: -1116261022170A--gzQEMU User Emulator
Source: 5267.20.dr	Binary or memory string: qemu-or1k
Source: 5267.20.dr	Binary or memory string: qemu-riscv64
Source: 5267.20.dr	Binary or memory string: {cqemu
Source: 5267.20.dr	Binary or memory string: qemu-arm
Source: 5267.20.dr	Binary or memory string: (qemu
Source: 5267.20.dr	Binary or memory string: qemu-tilegx
Source: 5267.20.dr	Binary or memory string: qemu-hppa
Source: 5267.20.dr	Binary or memory string: q{rqemu%
Source: 5267.20.dr	Binary or memory string: )qemu
Source: 5267.20.dr	Binary or memory string: vmware-toolbox-cmd
Source: 5267.20.dr	Binary or memory string: qemu-ppc
Source: 5267.20.dr	Binary or memory string: Tqemu9
Source: 5267.20.dr	Binary or memory string: qemu-aarch64_be
Source: 5267.20.dr	Binary or memory string: 0qemu9
Source: 5267.20.dr	Binary or memory string: qemu-sparc64
Source: 5267.20.dr	Binary or memory string: qemu-mips64
Source: 5267.20.dr	Binary or memory string: vV:qemu9
Source: 5267.20.dr	Binary or memory string: qemu-ppc64le
Source: 5267.20.dr	Binary or memory string: <glib::param::uint64Glib::Param::UInt643pm315820097650A--gzWrapper for uint64 parameters in GLibx86_64-linux-gnu-ld.gold-1116112426130B--gzThe GNU ELF linkerprinter-profile-1115804162510A--gzProfile using X-Rite ColorMunki and Argyll CMSgrub-fstest-1116214898500A--gzdebug tool for GRUB filesystem driversxdg-user-dir-1115483406210A--gzFind an XDG user dirkmodsign-1115569251480A--gzKernel module signing toolsensible-editor-1115739932820A--gzsensible editing, paging, and web browsingminesMines6615854478170Cgnome-mines-gzinputattach-1115708189280A--gzattach a serial line to an input-layer devicegapplication-1116155671180A--gzD-Bus application launcherip-tunnel-8815816145190A--gztunnel configurationkoi8rxterm-1116140167530A--gzX terminal emulator for KOI8-R environmentsfoo2hiperc-wrapper-1115804162510A-tgzConvert Postscript into a HIPERC printer streamcryptsetup-reencrypt-8816002888050A--gztool for offline LUKS device re-encryptionsyndaemon-1115861716810A--gza program that monitors keyboard activity and disables the touchpad when the keyboard is being used.gslj-1115980290200B--gzFormat and print text for LaserJet printer using ghostscriptfile2brl-1115757179490A--gzTranslate an xml or a text file into an embosser-ready braille filexfdesktop-settings-1115793419820A--gzDesktop settings for Xfceua-1115856013570B--gzManage Ubuntu Advantage services from Canonicallatin4-7715812813670B--gzISO 8859-4 character set encoded in octal, decimal, and hexadecimalsane-genesys-5516003468200A--gzSANE backend for GL646, GL841, GL843, GL847 and GL124 based USB flatbed scannerspdftohtml-1115853266670A--gzprogram to convert PDF files into HTML, XML and PNG imagesbluetooth-sendto-1116015653360A--gzGTK application for transferring files over Bluetoothqemu-ppc64-1116261022170B--gzQEMU User Emulatorcache_metadata_size-8815811608350A--gzEstimate the size of the metadata device needed for a given configuration.net::dbus::exporterNet::DBus::Exporter3pm315773746310A--gzExport object methods and signals to the bussane-pint-5516003468200A--gzSANE backend for scanners that use the PINT device driverbpf-helpers7-7715812813670A--gzlist of eBPF helper functionsfull-4415812813670A--gzalways full devicelogin-1115906478670A--gzbegin session on the systemcups-snmp-8815877390340A--gzcups snmp backend (deprecated)ordchr-3am315728089600A--gzconvert characters to strings and vice versasosreport-1116092694050A--gzCollect and package diagnostic and support datatop-1115827827270A--gzdisplay Linux processesuri::_punycodeURI::_punycode3pm315811897880A--gzencodes Unicode string in Punycodettytty4tty1systemd-localed-8816268940210B--gzLocale bus mechanismlvmsadc-8815816289110
Source: 5267.20.dr	Binary or memory string: vmware
Source: 5267.20.dr	Binary or memory string: qemu-cris
Source: 5267.20.dr	Binary or memory string: libvmtools
Source: 5267.20.dr	Binary or memory string: qemu-m68k
Source: 5267.20.dr	Binary or memory string: qemu-xtensa
Source: 5267.20.dr	Binary or memory string: 9qemu
Source: 5267.20.dr	Binary or memory string: qemu-sh4
Source: 5267.20.dr	Binary or memory string: Dprezip-bin-1116269780060A--gzprefix zip delta word list compressor/decompressornameif-8815490444730A--gzname network interfaces based on MAC addressesxdg-user-dirs-update-1115483406210A--gzUpdate XDG user dir configurationip-link-8815816145190A--gznetwork device configurationhpsa-4415812813670A--gzHP Smart Array SCSI driverhd4-4415812813670A--gzMFM/IDE hard disk devicessane-canon630u-5516003468200A--gzSANE backend for the Canon 630u USB flatbed scannersg_copy_results-8815825816070A--gzsend SCSI RECEIVE COPY RESULTS command (XCOPY related)grub-macbless-8816214898500A--gzbless a mac file/directoryntfstruncate-8815568625640A-tgztruncate a file on an NTFS volumelessfile-1115936459130B--gz"input preprocessor" for less.sane-artec-5516003468200A--gzSANE backend for Artec flatbed scannersrmdir-1115676799200A--gzremove empty directoriessystemd-networkd-wait-online.service-8816268940210A--gzWait for network to come onlinemkfs.ntfs-8815568625640B-tgzcreate an NTFS file systemsg_inq-8815825816070A--gzissue SCSI INQUIRY command and/or decode its responseradattr.so-8815955079440Cpppd-radattr-gzc_rehash-1ssl116164130370B--gzCreate symbolic links to files named by the hash valuestc-htb-8815816145190A--gzHierarchy Token Bucketgvfs-open-1115868766090A--gzsg_rbuf-8815825816070A--gzreads data using SCSI READ BUFFER commandglib-compile-schemas-1116155671180A--gzGSettings schema compileropenssl-srp-1ssl116164130370B--gzmaintain SRP password fileopenssl-rehash-1ssl116164130370B--gzCreate symbolic links to files named by the hash valueslibvmtools-3315837702310A--gzvmware shared librarypasswd5-5515906478670A--gzthe password filenet::dbus::dumperNet::DBus::Dumper3pm315773746310A--gzStringify Net::DBus objects suitable for printingsane-hp4200-5516003468200A--gzSANE backend for Hewlett-Packard 4200 scannersposixoptions-7715812813670A--gzoptional parts of the POSIX standardnetworkmanager.confNetworkManager.conf5516002723180A--gzNetworkManager configuration fileownership-8815771238010A--gzCompaq ownership tag retrieveroakdecode-1115804162510A--gzDecode an OAKT printer stream into human readable form.gvfs-save-1115868766090A--gzmkfs.minix-8815953177680A--gzmake a Minix filesystemuri7-7715812813670A--gzuniform resource identifier (URI), including a URL or URNedit-1115714399500B--gzexecute programs via entries in the mailcap filegit-diff-files-1116148628880A--gzCompares files in the working tree and the index.ldaprc-5516136581350Cldap.conf-gzpactl-1116219586470A--gzControl a running PulseAudio sound servertempfile-1115756848240A--gzcreate a temporary file in a safe mannerhp-check-1115857238880A--gzDependency/Vers
Source: beamer.arm7-20211202-2350, 5284.1.000000007d0209a0.000000002adf3422.rw-.sdmp, beamer.arm7-20211202-2350, 5287.1.000000007d0209a0.0000000097a45fc9.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: 5267.20.dr	Binary or memory string: .qemu{
Source: 5267.20.dr	Binary or memory string: qemu-ppc64abi32
Source: 5267.20.dr	Binary or memory string: qemu-ppc64
Source: 5267.20.dr	Binary or memory string: qemu-i386
Source: 5267.20.dr	Binary or memory string: qemu-x86_64
Source: 5267.20.dr	Binary or memory string: H~6\nqemu*q
Source: 5267.20.dr	Binary or memory string: @qemu
Source: 5267.20.dr	Binary or memory string: Fqqemu
Source: 5267.20.dr	Binary or memory string: N4qemu
Source: 5267.20.dr	Binary or memory string: ~6\nqemu*q
Source: 5267.20.dr	Binary or memory string: qemu-mips64el
Source: 5267.20.dr	Binary or memory string: hqemu
Source: 5267.20.dr	Binary or memory string: &mqemu
Source: 5267.20.dr	Binary or memory string: $qemu
Source: 5267.20.dr	Binary or memory string: qemu-sparc
Source: 5267.20.dr	Binary or memory string: qemu-microblaze
Source: 5267.20.dr	Binary or memory string: qemu-user
Source: 5267.20.dr	Binary or memory string: qemu-aarch64
Source: 5267.20.dr	Binary or memory string: qemu-sh4eb
Source: 5267.20.dr	Binary or memory string: iqemu
Source: 5267.20.dr	Binary or memory string: qemu-mipsel
Source: 5267.20.dr	Binary or memory string: qemuP`
Source: 5267.20.dr	Binary or memory string: qemu-alpha
Source: 5267.20.dr	Binary or memory string: qemu-microblazeel
Source: 5267.20.dr	Binary or memory string: \qemu
Source: 5267.20.dr	Binary or memory string: qemu-xtensaeb
Source: 5267.20.dr	Binary or memory string: qemu-mipsn32el
Source: 5267.20.dr	Binary or memory string: SAqemu
Source: 5267.20.dr	Binary or memory string: Vqemu
Source: 5267.20.dr	Binary or memory string: qemu-mipsn32
Source: 5267.20.dr	Binary or memory string: qemuAU
Source: 5267.20.dr	Binary or memory string: qemu-riscv32
Source: 5267.20.dr	Binary or memory string: qemu-sparc32plus
Source: 5267.20.dr	Binary or memory string: 7,qemu
Source: 5267.20.dr	Binary or memory string: qemu-s390x
Source: beamer.arm7-20211202-2350, 5284.1.00000000deac6dc6.000000000c545520.rw-.sdmp, beamer.arm7-20211202-2350, 5287.1.00000000deac6dc6.000000000c545520.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/beamer.arm7-20211202-2350SUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/beamer.arm7-20211202-2350
Source: 5267.20.dr	Binary or memory string: vmware-checkvm
Source: 5267.20.dr	Binary or memory string: qemu-nios2
Source: 5267.20.dr	Binary or memory string: qemu-armeb
Source: 5267.20.dr	Binary or memory string: -4415868968400A--gzVMware SVGA video driver
Source: 5267.20.dr	Binary or memory string: 7xml::parser::style::streamXML::Parser::Style::Stream3pm315701248990A--gzStream style for XML::Parsersystemd-timedated-8816268940210B--gzTime and date bus mechanismxfce4-keyboard-settings-1115867081120A--gzKeyboard settings for Xfcepygettext2-1115841026830B--gzPython equivalent of xgettext(1)sudoedit-8816110660620B--gzexecute a command as another userintro7-7715812813670A--gzintroduction to overview and miscellany sectionsprof-1115812813670A--gzread and display shared object profiling datadhclient.conf-5516219398220A--gzDHCP client configuration filepam_group-8815953742440A--gzPAM module for group accesssystemd-ask-password-1116268940210A--gzQuery the user for a system passwordupdate-dictcommon-hunspell-8815422954860A--gzrebuild hunspell database and emacsen stuffqemu-nios2-1116261022170B--gzQEMU User Emulatorlwp::useragentLWP::UserAgent3pm315750405830A--gzWeb user agent classgpgcompose-1115838662460A--gzGenerate a stream of OpenPGP packetsecho-1115676799200A--gzdisplay a line of textio::socket::ssl::utilsIO::Socket::SSL::Utils3pm315817106800A--gz- loading, storing, creating certificates and keyscurl-1116268709580A--gztransfer a URLgetcap-8815819434600A--gzexamine file capabilitieszegrep-1115762517060B--gzsearch possibly compressed files for a regular expressiongrub-syslinux2cfg-1116214898500A--gztransform syslinux config into grub.cfgrtc-4415812813670A--gzreal-time clockglib::codegenGlib::CodeGen3pm315820097650A--gzcode generation utilities for Glib-based bindings.wpa_cli-8816146062790A--gzWPA command line clientiso_8859_3-7715812813670B--gzISO 8859-3 character set encoded in octal, decimal, and hexadecimaliso_8859-9-7715812813670A-tgzISO 8859-9 character set encoded in octal, decimal, and hexadecimallvextend-8815816289110A--gzAdd space to a logical volumeresolvectl-1116268940210A--gzResolve domain names, IPV4 and IPv6 addresses, DNS resource records, and services; introspect and reconfigure the DNS resolverchgrp-1115676799200A--gzchange group ownershipsystemd-cgls-1116268940210A--gzRecursively show control group contentspygettext3.8-1113852085880A--gzPython equivalent of xgettext(1)ping4-8815804258830B--gzsend ICMP ECHO_REQUEST to network hostsidmapwb-8816000845410A--gzwinbind ID mapping plugin for cifs-utilsapturl-gtk-8815799493830B--gzgraphical apt-protocol interpreting package installersane-epsonds-5516003468200A--gzSANE backend for EPSON ESC/I-2 scannersgvfs-monitor-file-1115868766090A--gzrstart-1115829564830A--gza sample implementation of a Remote Start clientgit-stage-1116148628880A--gzAdd file contents to the staging areatc-pedit-8815816145190A--gzgeneric packet editor actioniptables-save-881582899
Source: 5267.20.dr	Binary or memory string: I_qemu
Source: beamer.arm7-20211202-2350, 5284.1.000000007d0209a0.000000002adf3422.rw-.sdmp, beamer.arm7-20211202-2350, 5287.1.000000007d0209a0.0000000097a45fc9.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: beamer.arm7-20211202-2350, 5284.1.00000000deac6dc6.000000000c545520.rw-.sdmp, beamer.arm7-20211202-2350, 5287.1.00000000deac6dc6.000000000c545520.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: 5267.20.dr	Binary or memory string: -1116261022170B--gzQEMU User Emulator
Source: 5267.20.dr	Binary or memory string: -3315837702310A--gzvmware shared library
Source: 5267.20.dr	Binary or memory string: qemu-mips
Source: 5267.20.dr	Binary or memory string: qemuj\
Source: 5267.20.dr	Binary or memory string: {qemuQ&
Source: 5267.20.dr	Binary or memory string: Wgnome-text-editor-111629209547491759146B--gztext editor for the GNOME Desktopx11::protocol::connection::filehandleX11::Protocol::Connection::FileHandle3pm314314075500A--gzPerl module base class for FileHandle-based X11 connectionshtbHTB8815816145190Ctc-htb-gzcifscreds-1116000845410A--gzmanage NTLM credentials in kernel keyringiwconfig-8815490049440A--gzconfigure a wireless network interfaceossl_store-file-7ssl716164130370A--gzThe store 'file' scheme loadertc-stab-8815816145190A--gzGeneric size table manipulationsnotifier-7715877390340A--gzcups notification interfaceqemu-arm-1116261022170B--gzQEMU User EmulatorgemfileGemfile5516263767190Cgemfile2.7-gzglib::object::subclassGlib::Object::Subclass3pm315820097650A--gzregister a perl class as a GObject classnetcat-111612200165426646725B--gzarbitrary TCP and UDP connections and listensdpkg::changelog::parseDpkg::Changelog::Parse3perl315849439740A--gzgeneric changelog parser for dpkg-parsechangelogmpris-proxy-1116243432320A--gzBluetooth mpris-proxybundle-pristine2.7-1116263767190A--gzRestores installed gems to their pristine conditionfsck.ext3-8815816604980B--gzcheck a Linux ext2/ext3/ext4 file systemvolname-1115625752510A--gzreturn volume nameiso-8859-9-7715812813670B--gzISO 8859-9 character set encoded in octal, decimal, and hexadecimalheadhead1HEAD1psd-4415812813670A--gzdriver for SCSI disk driveschrt-1115953177680A--gzmanipulate the real-time attributes of a processvcs-4415812813670A--gzvirtual console memorygit-upload-archive-1116148628880A--gzSend archive back to git-archivenet::dbus::binding::message::errorNet::DBus::Binding::Message::Error3pm315773746310A--gza message encoding a method call errorpkcs11.conf-5516097870510A--gzConfiguration files for PKCS#11 modulessfill-1115227593860A--gzsecure free disk and inode space wiper (secure_deletion toolkit)ldattach-8815953177680A--gzattach a line discipline to a serial linethin_restore-8815811608350A--gzrestore thin provisioning metadata file to device or file.phar.phar7.4-1116254980150B--gzPHAR (PHP archive) command line toolbundle-outdated2.7-1116263767190A--gzList installed gems with newer versions availablemail::addressMail::Address3pm315640244160A--gzparse mail addressesopenssl-ca-1ssl116164130370B--gzsample minimal CA applicationchardet3-1115765858900A--gzuniversal character encoding detectorerb2.7-1116263767190A--gzRuby Templatingchktrust-1115826667350A--gzCheck the trust of a PE executable.sg_raw-8815825816070A--gzsend arbitrary SCSI command to a devicegvfs-trash-1115868766090A--gzintro1-1115812813670A--gzintroduction to user commandsmailcap-5515714399500A--gzmetamail capabilities filegigoloGigolo1gig
Source: 5267.20.dr	Binary or memory string: vmware-xferlogs

Stealing of Sensitive Information:

Yara detected Mirai

Show sources

Source: Yara match

File source: beamer.arm7-20211202-2350, type: SAMPLE

Remote Access Functionality:

Yara detected Mirai

Show sources

Source: Yara match

File source: beamer.arm7-20211202-2350, type: SAMPLE

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting1	Systemd Service1	Systemd Service1	Scripting1	OS Credential Dumping	Security Software Discovery11	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Indicator Removal on Host1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Standard Port1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Malware Configuration

No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
beamer.arm7-20211202-2350	38%	Virustotal		Browse

Dropped Files

No Antivirus matches

Domains

No Antivirus matches

URLs

No Antivirus matches

Domains and IPs

Contacted Domains

No contacted domains info

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
45.134.225.20	unknown	Germany	203380	DAINTERNATIONALGROUPGB	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Runtime Messages

Command:	/tmp/beamer.arm7-20211202-2350
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
45.134.225.20	beamer.arm-20211202-2350	Get hash	malicious	Browse
	fAS1IqIeKJ	Get hash	malicious	Browse
	q6L054nmNP	Get hash	malicious	Browse
	rNroDrxDX8	Get hash	malicious	Browse
	a13lg45BBF	Get hash	malicious	Browse
	HdxaOdBHLy	Get hash	malicious	Browse
	SianBf68ns	Get hash	malicious	Browse
	j22Vry7PQB	Get hash	malicious	Browse
	jJ1l2W978w	Get hash	malicious	Browse
	VSE57F94Eu	Get hash	malicious	Browse
	95dSetGliK	Get hash	malicious	Browse
	H7MTKzOUnc	Get hash	malicious	Browse
	z0sDGe1HWt	Get hash	malicious	Browse
	bx8ZRDTbie	Get hash	malicious	Browse
	HOi5DIja39	Get hash	malicious	Browse
	KXcyJaK55a	Get hash	malicious	Browse
	beamer.x86	Get hash	malicious	Browse
	beamer.arm	Get hash	malicious	Browse
109.202.202.202	beamer.arm-20211202-2350	Get hash	malicious	Browse
	a-r.m-4.Sakura	Get hash	malicious	Browse
	a-r.m-5.Sakura	Get hash	malicious	Browse
	x-8.6-.Sakura	Get hash	malicious	Browse
	x-3.2-.Sakura	Get hash	malicious	Browse
	Mo7tMkRLVz	Get hash	malicious	Browse
	m-p.s-l.Sakura	Get hash	malicious	Browse
	m-i.p-s.Sakura	Get hash	malicious	Browse
	mirai.arm7	Get hash	malicious	Browse
	eh.arm7-20211202-2050	Get hash	malicious	Browse
	eh.x86-20211202-2050	Get hash	malicious	Browse
	eh.arm-20211202-2050	Get hash	malicious	Browse
	mirai.arm	Get hash	malicious	Browse
	RAyX4iU3dy	Get hash	malicious	Browse
	oeOZvHnuaU	Get hash	malicious	Browse
	nYdomnUtHq	Get hash	malicious	Browse
	peon7hY4z4	Get hash	malicious	Browse
	y4yhQj9Eff	Get hash	malicious	Browse
	qHBU9CAlTZ	Get hash	malicious	Browse
	mQOIu95oK0	Get hash	malicious	Browse

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
DAINTERNATIONALGROUPGB	beamer.arm-20211202-2350	Get hash	malicious	Browse	45.134.225.20
	fAS1IqIeKJ	Get hash	malicious	Browse	45.134.225.20
	q6L054nmNP	Get hash	malicious	Browse	45.134.225.20
	rNroDrxDX8	Get hash	malicious	Browse	45.134.225.20
	a13lg45BBF	Get hash	malicious	Browse	45.134.225.20
	HdxaOdBHLy	Get hash	malicious	Browse	45.134.225.20
	SianBf68ns	Get hash	malicious	Browse	45.134.225.20
	j22Vry7PQB	Get hash	malicious	Browse	45.134.225.20
	jJ1l2W978w	Get hash	malicious	Browse	45.134.225.20
	VSE57F94Eu	Get hash	malicious	Browse	45.134.225.20
	N6y7A7R9wg.exe	Get hash	malicious	Browse	45.134.225.35
	2b0519e3978cea744b220f109077b4b012dc4e9856be8.exe	Get hash	malicious	Browse	45.134.225.35
	95dSetGliK	Get hash	malicious	Browse	45.134.225.20
	H7MTKzOUnc	Get hash	malicious	Browse	45.134.225.20
	z0sDGe1HWt	Get hash	malicious	Browse	45.134.225.20
	bx8ZRDTbie	Get hash	malicious	Browse	45.134.225.20
	HOi5DIja39	Get hash	malicious	Browse	45.134.225.20
	KXcyJaK55a	Get hash	malicious	Browse	45.134.225.20
	beamer.x86	Get hash	malicious	Browse	45.134.225.20
	beamer.arm	Get hash	malicious	Browse	45.134.225.20
INIT7CH	beamer.arm-20211202-2350	Get hash	malicious	Browse	109.202.202.202
	a-r.m-4.Sakura	Get hash	malicious	Browse	109.202.202.202
	a-r.m-5.Sakura	Get hash	malicious	Browse	109.202.202.202
	x-8.6-.Sakura	Get hash	malicious	Browse	109.202.202.202
	x-3.2-.Sakura	Get hash	malicious	Browse	109.202.202.202
	Mo7tMkRLVz	Get hash	malicious	Browse	109.202.202.202
	m-p.s-l.Sakura	Get hash	malicious	Browse	109.202.202.202
	m-i.p-s.Sakura	Get hash	malicious	Browse	109.202.202.202
	mirai.arm7	Get hash	malicious	Browse	109.202.202.202
	eh.arm7-20211202-2050	Get hash	malicious	Browse	109.202.202.202
	eh.x86-20211202-2050	Get hash	malicious	Browse	109.202.202.202
	eh.arm-20211202-2050	Get hash	malicious	Browse	109.202.202.202
	mirai.arm	Get hash	malicious	Browse	109.202.202.202
	RAyX4iU3dy	Get hash	malicious	Browse	109.202.202.202
	oeOZvHnuaU	Get hash	malicious	Browse	109.202.202.202
	nYdomnUtHq	Get hash	malicious	Browse	109.202.202.202
	peon7hY4z4	Get hash	malicious	Browse	109.202.202.202
	y4yhQj9Eff	Get hash	malicious	Browse	109.202.202.202
	qHBU9CAlTZ	Get hash	malicious	Browse	109.202.202.202
	mQOIu95oK0	Get hash	malicious	Browse	109.202.202.202

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

/var/cache/man/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	622592
Entropy (8bit):	4.657516417799966
Encrypted:	false
SSDEEP:	6144:rb7cWWov4H5N80nuDSyvxYCWZ0/VmpRELAR/QuU/MzUCl1NZ:H4WWoGgvSiOp2kl
MD5:	0C99179B6C5CFE82203424AD7DAD0D8F
SHA1:	CAC50B64B1352723FF8F58BB1B103B93C396539B
SHA-256:	CEC6859D12C6A981ACA4D7C88F6E62E9616FB4D765C4A52147A7DA7BAD4F2420
SHA-512:	4226FDE9F558FFEF2107C330DB942E7E665C51C520A840221541AD255D0995AF64101C69D42C4BD43037364CC4D152851625A53DC56CC188DC28A3DC8C5602F6
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.W.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/cs/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	1.6070136442091312
Encrypted:	false
SSDEEP:	48:bhVGQeUzGLIsWUMZJ5CggJHtheYdiKNHTlJ8NK:bhVGaGLIWMZXZgxeYtzll
MD5:	D0CA2EBA9E7A17D4680AA9DDC5F88946
SHA1:	270F443EFF85209052AE8FFA86660AFB0FAAD39B
SHA-256:	9504DC65F8B4E057D0939FA3B2C640FC703D0290EE19381836BAA5EB3EFBADBD
SHA-512:	9F999B0467E396E78A91F0BFE56E191DB9D9AFA6DC47858F3427CB44A39D5A13A206542A471CE15C8851674A234B9A7A49AAB7E6D5AF8D080BBC99C2BA3C56D8
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/cs/index.db.wk1uiv Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/da/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	2.24195239843379
Encrypted:	false
SSDEEP:	96:bhHY2DzMnpU0QMiloesQdUTn3WVE0UnknJfsWdv0SBpEVvsb6eZeGfRL+:dYKM+oagn3WW5nkniWdv0SAVE6eZee6
MD5:	4DF08004EE4C5384C02376841F2B50BC
SHA1:	C02E58212CA012913390B4C1CCD64DD3353009EE
SHA-256:	F4D6A62A734E2844B99F3AD0EB480373AFBE56B29C0CFC9C70D9DFDF19D95C02
SHA-512:	6146001CA7028F58595235F244AE8FC4ECAEA3E95C83276514FC704E91B7596678E74CDE9963D680F2493F9C04AFDEBC4DB5094E2AB7C1A949E9378307AE0116
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/da/index.db.qgrMjv Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/de/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	4.1630098465333445
Encrypted:	false
SSDEEP:	768:gMGrknsA3KVtOOcmGMrTJDEEf5RQOHsiVDdtq5:/GrkncXD+qvHsGLq
MD5:	F9931CC4F6E8D8C554AC7B1C5DC84F17
SHA1:	678200CFAC1E9EE67065E8E35888FC15F7C50A41
SHA-256:	E0578F4FD75E490F6E104D99995A2E5BAFEAA532E0A4675EA351BD65AA148559
SHA-512:	866A906949A93EC3E55AFAF5D16C238538D03759AE399E64E39C8B3A37349FDDD8D5050DB60CF8E2F86F0559DC82048CA607DC13E8015BC5AC5CBDC25005CC7D
Malicious:	false
Preview:	.W.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/de/index.db.ACgHvu Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.20558603354177746
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	55880A8B73FD160B73198E09A21C83DB
SHA1:	5EB780702D2501747AF46F7525EF5C635EC5E64C
SHA-256:	66BD4C98AF40E2E208AC102ACD0F555A6C118E7258D91B833BE1D53EBFFB7BBB
SHA-512:	388924B8CAE80CCA6CA8E5109D0239A963A66CC0454450223EC7FB2A188F6F05E49632E535DC06E49DF6D007B221AA6B3D5F23C80203BCC861FF95EFA10AC1F9
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/es/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	2.469907427008948
Encrypted:	false
SSDEEP:	96:bhj9SeW/8iDdO/tktuGWTaZxzn3zbHGc2WjAXGBCgfd6Dgzs30z8ztvpWF4DXst:99PGo9Tmn3zbNBSw/fd6Oz8ztQSDXo
MD5:	3DBF4FF017D406F407BFBC2011BCAE9E
SHA1:	FF64864ACA18DFA7869715CE8AA5ECC3DABA54B6
SHA-256:	640C040F364061A5825E913682798C9BC8E1081088894D3FEB2C3EC39D02A379
SHA-512:	3DCC8F432487C532A1F69D321EB57EFE5CFE65AA3C99B81EA1A56613F8F460EA9ED7D2031615F2E60A3F2EE279D411848E5387CC8B8D5F28D8F8D0055D72489B
Malicious:	false
Preview:	.W..............................P......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/es/index.db.zeaUEt Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.3847690842836057
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	F0B902DEA5EF122A0B1F0F496DDC781B
SHA1:	90176D320A9C3601787D53CC346DC743367D53F1
SHA-256:	CFD64D42263C5D323AF423FC09CDB5DDB2F914114B87BAB6566EAB1020F15DE0
SHA-512:	3A5BC0E51D53A12E65441FB98E1201DC434C42DB389CFCA4C96FF65C2413CF9B06B29CC39A48BD3FDC61F4896396813E54B9C2CE404EF35AC33B35377E718874
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fi/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.5882948808594274
Encrypted:	false
SSDEEP:	12:Ey20yaajjjjjjjjjjjjjjjjjjjjjjjjjjGjjjjjjjjjjjjjjjjjjjjjjjjjjjjjp:bhjz+9Ab
MD5:	09F6ED1A60B8A4203EA97CF5926C6AFF
SHA1:	C28F4E393D55AD057E3C7608741904B796F67076
SHA-256:	56664D61D0BB8BF34CCA28C73CB314CB73EA1C4FAC64D2208B43F63C009FC855
SHA-512:	476EAE37D827C8BB322213799AB52DBE8FA43274DB3447BC5FEDFED64ECCEAF2C11DA375FDA09B37977D03CA1910E22443B22A3EEA875CE6F3BC698F8ADCC0E2
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fi/index.db.Kk2dlr Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fr.ISO8859-1/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.9312184489410064
Encrypted:	false
SSDEEP:	12:Ey20yIpyjjjjjjjjjjjjjjjjjjjjjjjjXjjjjjjjjjjjjjjjjjjjjjjjjjjjjGz7:bhbpFi043WmkN2GmGufUeDDx+yxrq3
MD5:	43ADE2E40B8B5A0DFA0A155FC9A02F7F
SHA1:	3D04BDFFD0E2A8433150C87D334014099336A5C5
SHA-256:	81E48EE4653A5E6F25C33133F24F045EB1EB2CC6724ECE0C5336612AB711273E
SHA-512:	C9C5C436A0E986A39CE3FA1CAF15A92D509F4450744BAE0283204B58CDD6FE9B8EEB8D3E2CAFB4B1ACB46729317FFAEFE86B0DD2D60472CAB30B204CC2003B03
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fr.ISO8859-1/index.db.ZPE3Gu Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fr.UTF-8/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.9312184489410064
Encrypted:	false
SSDEEP:	12:Ey20yIpyjjjjjjjjjjjjjjjjjjjjjjjjXjjjjjjjjjjjjjjjjjjjjjjjjjjjjGz7:bhbpFi043WmkN2GmGufUeDDx+yxrq3
MD5:	43ADE2E40B8B5A0DFA0A155FC9A02F7F
SHA1:	3D04BDFFD0E2A8433150C87D334014099336A5C5
SHA-256:	81E48EE4653A5E6F25C33133F24F045EB1EB2CC6724ECE0C5336612AB711273E
SHA-512:	C9C5C436A0E986A39CE3FA1CAF15A92D509F4450744BAE0283204B58CDD6FE9B8EEB8D3E2CAFB4B1ACB46729317FFAEFE86B0DD2D60472CAB30B204CC2003B03
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fr.UTF-8/index.db.TuXJtt Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fr/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	3.8302627910430243
Encrypted:	false
SSDEEP:	768:A4VX6Bd+dla5HmdT8qHl87BaIPay4uz8HkszHnwNO:A4ROd+dStM83PavzHC
MD5:	6164B3B9F7114D4A45EA9F80FE3C0BB6
SHA1:	AC6E8DB6B77F34BE01A99793CCC1551522265168
SHA-256:	4D69AC3ED2D204C4AE04C96AD6839444D1981CDA1F50AD4F2C6D6AD99E84D817
SHA-512:	458C9C5E1ACED5B8D622E60CB27106DAF9B89DD63E9E6D8644A8539A6C8D7EFADB58495F4B04E4B84BB1B935936289EF81B1D092FC1C60E9F881793D5CCC69B1
Malicious:	false
Preview:	.W.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/fr/index.db.fr0jJr Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.22208993462959856
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	425CB57CD9B42556C8089FE7A7A3E495
SHA1:	4F33F9A9897218FDED958FD8F8D7AF7CD8BC48F3
SHA-256:	85E01EFF2AC0C83C827E118D5CE2CD1E1A19E059688B6E0D09CB3CC131F065D3
SHA-512:	8C7D4DACF5C5C5C4B78775048427AF99ED8057590AA3A69FD5B3F875B6DDD249A6DB0AF3A51BB96A7F629D1017B272317583A8DFF89FB3968FFE2F246F040F33
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/hu/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.9419610786280751
Encrypted:	false
SSDEEP:	24:bh04IR9rYz9kvNQFl46MdnqfPE9eTuF0Ce:bhXIHakVQmnqXqeT/Ce
MD5:	18F02B57872A97DE1E82FF5348A5AF1B
SHA1:	52F332343B120B1C950AC02B3C923556C70DC62A
SHA-256:	5C605DE68B3E05754698485F73413F4052AEA8C3AAE6012AC6416B3B6B056DF7
SHA-512:	E33A8412F52D26BDE55E4D72E0D9D09EB777F4B882F5BB1C4625AB392EE321D6ACD8795001BF50CCDACFAC131A1263B1398F208799F753554C43349136EB8BEC
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/hu/index.db.Pzf5Ps Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/id/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	1.309811236154278
Encrypted:	false
SSDEEP:	48:bhESUeDVrWTVd5ekRv/KSmGWqR0VouC4btU8IzTC74ExJKGtII:bhEVeBqTVdAcn3Iowl4UBtx
MD5:	3AFDA1B0F729816929FF7A6628D776D5
SHA1:	5982940A5782F11AEB5BF859C055DE3FEFBDF5DB
SHA-256:	77809D5F38F6D96A2E8BA9BE0DFBB16C10B6B1FF7D2BA1DD5FB9437F73C47E7F
SHA-512:	6D4CE03475C68EDC0AE928E7F65BB8C06198721146A1266F55455AF3D5E24F44A569E007C0DC44BC7745C1573DBC7F02B8C4094F9BD97FAF6A0B5894BE0E07E5
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/id/index.db.dAjxbr Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/index.db.Ik5ltt Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	622592
Entropy (8bit):	0.022159377425242585
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	2E442DBA85DEDFDCB07090FDF9DE90D0
SHA1:	02658086E93854D13D82B1F0D80F4B78D26DCA51
SHA-256:	62406BFE7657964E490DE65A0007F7C1D59B62B2B9AD35BA55BA219673378848
SHA-512:	FDBBA0DEF310CF7DBF448CFB6E5C9CDCEFBF6A0CAEB26CA3AFA91A388FBA10A9E77BCC27CA9B0AEA2A7B67F964849E147FB44862C7394C2C7CDCB572C06FCB05
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/it/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	3.3621193886235408
Encrypted:	false
SSDEEP:	384:Jtp0q5d98n3SaMfhtxfmbMy+HseeNwoMbHf:JDd9QSBf
MD5:	B228DE097081AF360D337CF8C8FF2C6F
SHA1:	7DD2C4640925B225F98014566F73C35F4E960940
SHA-256:	1056CECADA78542B173EE469C9BEAF61F81298EBBD21B54EA6EE449028E18B3F
SHA-512:	F61D7F9040E452C4B1B77F3657BE4252475C3BF23D78EED903A5E55FA97BA0571BA3AD90DBA7F77C334DF5B721F909B12720515034421A4AAB0450D1D43B32E4
Malicious:	false
Preview:	.W..............................P......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/it/index.db.GwIJZt Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.3847690842836057
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	F0B902DEA5EF122A0B1F0F496DDC781B
SHA1:	90176D320A9C3601787D53CC346DC743367D53F1
SHA-256:	CFD64D42263C5D323AF423FC09CDB5DDB2F914114B87BAB6566EAB1020F15DE0
SHA-512:	3A5BC0E51D53A12E65441FB98E1201DC434C42DB389CFCA4C96FF65C2413CF9B06B29CC39A48BD3FDC61F4896396813E54B9C2CE404EF35AC33B35377E718874
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/ja/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	3.667488020062395
Encrypted:	false
SSDEEP:	192:CF4pPRfAgFn35FF1veUMjGiEGBuPhiB0PUKwA+U:5PRfAgFn35MSeAPUjN
MD5:	D3CD7D67F8155491493BB7235FB9AA57
SHA1:	5A7AE62A7AFE50EFCCED06CBD56AE2A0A284EFF3
SHA-256:	6958349ECA637F99AABC419B5E402CFB50BC5B8867F31BCB67F064F47A209929
SHA-512:	1168BF697CDE563F7D82A71EAE1CD496EA81D178B26F87EAAF2EDEED13274B1E3500CE1C981647717598495EBE1FF8F8AC54AD33547506E566C925D7002F5CFF
Malicious:	false
Preview:	.W..............................P......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/ja/index.db.buwzVt Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.3847690842836057
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	F0B902DEA5EF122A0B1F0F496DDC781B
SHA1:	90176D320A9C3601787D53CC346DC743367D53F1
SHA-256:	CFD64D42263C5D323AF423FC09CDB5DDB2F914114B87BAB6566EAB1020F15DE0
SHA-512:	3A5BC0E51D53A12E65441FB98E1201DC434C42DB389CFCA4C96FF65C2413CF9B06B29CC39A48BD3FDC61F4896396813E54B9C2CE404EF35AC33B35377E718874
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/ko/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.7847786157292606
Encrypted:	false
SSDEEP:	12:Ey20yYn0jjjjjjjjjjjjjjjjjjjjjjjjjjGjjjjjjjjjjjjjjjjjjjjjjjjjmjj7:bhXYznMk31RFe6f
MD5:	FBA25855E1C99D8F87E8AC13E2E2ECB1
SHA1:	D99351AC40D6CC4C9BE54E0E018C44A9A88983D7
SHA-256:	C0E18ED1CEFF427FD4D57D1B79CE1AF7320AC8453BAF8A0349C08267464C4D71
SHA-512:	0969DF6506E083A4995A18518BC3C4472157E7790EEC26C08221B0FC6DE9C7DA0ADB11CF92C56BC35B89BC60447F3D991F935E352552B58FB9BD1D4B2579FBB0
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/ko/index.db.XuJJss Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/nl/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	2.554204221242331
Encrypted:	false
SSDEEP:	192:H8Y5a2oquB2aCYn3lvu3whjXVobdbs7dq1KJGbtf0Hoa:hoquYaCYn3Q8jXqbdbs7dGbKHoa
MD5:	27FED1CA8EB0101C459D9A617C833293
SHA1:	503B2A3E33FE79FF2CD58F831ED33DB358849BEA
SHA-256:	C3033C4F7CF0D6108611EF5A62CA893F98EE6463DDCFF7100D3BAFDEB0036D9E
SHA-512:	7BD630F5E0C5A91C34D2E48D0053923C9F2F5BAA07D21FDA79E60F3AFDF759E594E6639562C1F3EE68DD080D417009DC3AFB7DA534E3B8C29FF7B10438C3FD4E
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/nl/index.db.q5ppiu Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/pl/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	2.880948418505059
Encrypted:	false
SSDEEP:	192:7Sf8026LXqn3ZTV6pXAmA44BRqvc3X3GVAjvAk/AvdWjWftxA:E802uXqn3/6pxARqr8kdWjW1
MD5:	37CEBCD3F5BF6322785FFF568EE33131
SHA1:	201298C827C77C60CD314BF721DC4C27EF95BD64
SHA-256:	012C5597C5DD8654EB14432AFCEFD9B131F2CE75AD21488991A5A688929AAEA6
SHA-512:	CCC8A8CCF4ACA332CAF610155DE9E7C4A12D1C45C98D20766B86098A3D2EF332189F159E3956944CD302DF652FE7A6F0D07CA39CBE7DF4A655D3211452487582
Malicious:	false
Preview:	.W..............................P......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/pl/index.db.Rl79ou Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.3847690842836057
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	F0B902DEA5EF122A0B1F0F496DDC781B
SHA1:	90176D320A9C3601787D53CC346DC743367D53F1
SHA-256:	CFD64D42263C5D323AF423FC09CDB5DDB2F914114B87BAB6566EAB1020F15DE0
SHA-512:	3A5BC0E51D53A12E65441FB98E1201DC434C42DB389CFCA4C96FF65C2413CF9B06B29CC39A48BD3FDC61F4896396813E54B9C2CE404EF35AC33B35377E718874
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/pt/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	2.4110695640960995
Encrypted:	false
SSDEEP:	192:mva8yGn35+0+eo8TAnBW4VppKP8qtRJI:Sa8Rn35+peo8T8V/fqlI
MD5:	782FF89B6FA5932F7019AF9CF3F82E43
SHA1:	2ECE8DC134E3A292E2545AA2DCD24114A5FC5749
SHA-256:	01E77D9235C524F2A61EA03953607C13831C391A5B9AB0D9094F9C38F0EEB02E
SHA-512:	2305BEC024CA5D8B43267F5487B02081A0A746B73608E11217D19C91AD857B6A5D8E935194AC4228DA3A5383086E60D593095309E64BAF38841A6E32D7EA7805
Malicious:	false
Preview:	.W..............................P......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/pt/index.db.J5jb1u Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.3847690842836057
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	F0B902DEA5EF122A0B1F0F496DDC781B
SHA1:	90176D320A9C3601787D53CC346DC743367D53F1
SHA-256:	CFD64D42263C5D323AF423FC09CDB5DDB2F914114B87BAB6566EAB1020F15DE0
SHA-512:	3A5BC0E51D53A12E65441FB98E1201DC434C42DB389CFCA4C96FF65C2413CF9B06B29CC39A48BD3FDC61F4896396813E54B9C2CE404EF35AC33B35377E718874
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/pt_BR/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	1.7510008687365202
Encrypted:	false
SSDEEP:	48:bhX6G+IwvnUZe4Gv/KSmGROqAQAuSe0dDOfInYbmucrm3QEAvJBFIz:bhq5bnUY4Gn3P+/Z1tvJDQ
MD5:	A11F5E85A2A07AF84255570AE29318FB
SHA1:	D06BF25E5FD4A17BCF7C5BD77ACD747F0FE181E8
SHA-256:	8FFA8BC408B254217275A622D054853CB72B08409A11AA49C4C664C0DABFB62F
SHA-512:	059F3CBC93750B68942D88EDD4AD2531B2291CEC421EB903280B9105010D1C8AD70F9F3CFA1B1A50D5110DCBFDB807A6E7A3F9EBC9A48AC8C3A49DEC4B6B3899
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/pt_BR/index.db.OCpg1s Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/ru/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	24576
Entropy (8bit):	3.440634655325007
Encrypted:	false
SSDEEP:	384:SpjHrhEon3PRekEF3PS6y13Vi6w5TlmmcOB:Q3hNEk23MuxrB
MD5:	DF5C1114538C5D8EA1EE929FFAC24E3C
SHA1:	B6331AF77566B63EA8204BE85F5DC99FAF51479E
SHA-256:	F238C75DAD82E10AB011A9BF79775B2A5F5889644A5A06835933340845A08555
SHA-512:	9514A424CC2A9290F749F527F515B35E45C6A829CB3930DBFB39DC9D70A684640A31686EC77258FF285FE89B6DD44BB01A478848FF9B3EBD764741A6F7856704
Malicious:	false
Preview:	.W..............................`......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/ru/index.db.MHfKPq Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	24576
Entropy (8bit):	0.3337394253577246
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	5B66CE03BFE548DEE335E0518E4E0554
SHA1:	65397845DC679AA972454B0FF237A513C0F490CB
SHA-256:	C38BB21B1D92166794DC09807C9A55B67B0A760C684FEEDD0C931F8415DD6D29
SHA-512:	A31C3D23F25607333250443490F0EE295BB702B46A636905FD413E8AEAA8ED23AAB42106868D2938718555C9DEEFB69FB416CAF5228A422F64D6CA8DB438FEE8
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/sl/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.8558400366712392
Encrypted:	false
SSDEEP:	12:Ey20y8jjjjjjjjjjjjjjjjjjjjjjjjjjGjjjKuV0jjjjjjjjjjjjjjjjjjjjjjje:bhaVZjx6ot7m13SmZQs
MD5:	67697BEA7C23E4805A82FE9755BB3CAE
SHA1:	14ACAFF0BECBDB116E4C0BC329E59DEF68CF46D1
SHA-256:	553DA7FF76999B7CCC4450498B11E6BD98B3B1E5FF81D82A53568F84B0D270D5
SHA-512:	D966DD6430003E708C6EE10764DC072A1ED0A252E6E1C822CBD28271A2EDD4B1F61C7F9AA7D1D442D6175791A104A365DE25B9C2598500AE705C9250C8BA46A1
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/sl/index.db.9uldJs Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/sr/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	1.3868484511023333
Encrypted:	false
SSDEEP:	48:bhLSUCt/WFekRv/KSmGWqApnEVyfNsu+tBNGg2PgULLE2vRy2QwfoQEDiR2e3iRj:bhLVC48cn3Vu2FtBv7AtboQIqb3qwK
MD5:	0DD75ECC81E4E564EA56A57FF32A24D3
SHA1:	859C0FE5F86A2C5A32BAD7920787BE845F34C4FB
SHA-256:	DB778B175D19DEFA4180D0B12D675AD0B8B22CC4BB77702D9EC8510F894EB3B1
SHA-512:	7B0C56A76797383527509F8036EB4911F8925E7ACC005CDC3269F0A43231479E3A0A9887BF4D2979F05CBFE18324997DEF715FDA6921EEF827B385C9D902C708
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/sr/index.db.DPUSSr Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/sv/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	2.5432558448090097
Encrypted:	false
SSDEEP:	96:bhk/+fz7b9ldxbe2Vn3iwkVJIB0D6c6aZ4+1Wrzbxpl4/tMe1:imrn9lHbe2Vn3iwKhD6cvTAbl4/tMe
MD5:	D97454D6B1F39F39966A809BCA3D9647
SHA1:	276931CED8F34B7651C1BDFC8522FF0560E2C377
SHA-256:	DCB8CE7F4F21595D851100F315C56B717541DB898AEB9ED9C0CCC9FF217A5801
SHA-512:	3E014F3EA8EEE79B87726EDA6291AC2D0BD9B22803EE848F61CA2AAD39D5FB87704410C57C648EE4AF8A1B78EFB0D766524F6DB750208C9BAC346079FD8EE69E
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/sv/index.db.UTTpjv Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/tr/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	1.7558188637474321
Encrypted:	false
SSDEEP:	96:bhWV1OIM7cn3UZiPU1wywyoEpJmz6W2Mzgg:YDOL4n3fPvywrzgMU
MD5:	5F905B930E7310E72BC3DF5C50F8E579
SHA1:	50B1AD3115F095C743CB26F87ECCE406FAC3523B
SHA-256:	1DB72BA77CA01F25CA9768999825D8F97F5ED4D00E17C9130D6F7CDE34130270
SHA-512:	A6066F4DF4097DB93673CD156BBE5F910C3F64D01E1671E481BC9FBDD720DBD6F8CEF337E20404F7C6AE97B2FA1F5E67088041ACBB6EA85D6758924D5740D06C
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/tr/index.db.1ku4gr Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/zh_CN/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	2.6210042560348144
Encrypted:	false
SSDEEP:	48:bh5roGafX8XKu5YIoBHtF2YekDsv/KSmGWNmA/y0uJNI/oyjaOUUfEHKn9nnjoEJ:bhdoLfX8N9oBNF2XFn3UD/9FZiy0aoN
MD5:	39398A15564A55EB7BFE895D7668A5A3
SHA1:	28DA677435B87176E08AFABBF8B51F7B93E22948
SHA-256:	A4C0216476E357ED3A23E71333DBE7DE91E04370EF049032EE8E47BB1EDBD83B
SHA-512:	B4E69212338C742F8C83194552078A86E4BED59375D82563C0B4059B7E0D6A58D6317151AB1F2A6FB20D2FF6DB7C550DF6A6984B2BB873A111D58AF9AEB7D95E
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/zh_CN/index.db.cSGWjt Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/zh_TW/5267 Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	1.0170167917961734
Encrypted:	false
SSDEEP:	24:bhAvIZuF4ptmpzf50dhOv8WvxjMMhFmMKxevOfOots+:bhDi4p+ahOhFFKxewj
MD5:	1FC5F2B98E5BC25B10373353D91B86B1
SHA1:	D848DA35B0731328195D59C1E996B95C4952F1F9
SHA-256:	509FAD18B4454CD70D974755F6156D4A5FA9B960AB9FF468D1FC350F0B64F379
SHA-512:	95BC2E289EDE5D9A3F56C9D8AE9DD13D9379BE2ABF8927CDABBE92B9F57A8EB667E9C08E4DFD82BF9F1F57118CE6E495722ADA2668AFF4FA0540F46C0A6D5138
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/cache/man/zh_TW/index.db.8bdRas Download File
Process:	/usr/bin/mandb
File Type:	GNU dbm 1.x or ndbm database, little endian, 64-bit
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.45676214072558463
Encrypted:	false
SSDEEP:	12:Ey20ypjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj3:bh
MD5:	EE429C7E8B222AFF73C611A8C358B661
SHA1:	DA353E80DCF1195F259CCBC32D39F5923710453F
SHA-256:	BDAAC26D90701E063943763B7CBD9204B6F0007C6F1BCA3C7B4FE3B09CDF6091
SHA-512:	DC651AF7AEB4A64C63986100E416A7DA4782678497B73F1CE42536DE02DB9E4115748881A56B86EC5B12E34C9FDF829BD194BEA7790FDCA7B2F5178A24930809
Malicious:	false
Preview:	.W..............................@......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/var/lib/logrotate/status.tmp Download File
Process:	/usr/sbin/logrotate
File Type:	ASCII text
Category:	dropped
Size (bytes):	1614
Entropy (8bit):	4.7991056541661585
Encrypted:	false
SSDEEP:	48:UHSskqJFNNkr05k4kK5Npq4pNGkJNcsXNU3N6NA59k5xHStNq4wNZNDNU1LN3o9g:WtrP/5NNm4pMgxe3Mm91A4wTteJYrtnC
MD5:	F0E17906575D635AADE251CB9D5BD175
SHA1:	06159F0EBA3D2B053B69433C02C272285C3B8C39
SHA-256:	E8A3F0BDE0B75A8337AC6FE8D7E1004EEA2D31A9F34D9F79B32A9AD1D5909502
SHA-512:	CE10C825A58D84B0FF2683D9D9A351E1166FF71289B3277DD423E8A95BFDAF2F8BC80778A62C836A8AF7A9A922485307989F1577DA731FE1AA10F806F8F53524
Malicious:	false
Preview:	logrotate state -- version 2."/var/log/syslog" 2021-12-3-0:57:31."/var/log/dpkg.log" 2021-12-2-23:56:56."/var/log/speech-dispatcher/debug-flite" 2021-8-20-13:0:0."/var/log/unattended-upgrades/unattended-upgrades.log" 2021-12-2-23:56:56."/var/log/unattended-upgrades/unattended-upgrades-shutdown.log" 2021-9-17-9:23:29."/var/log/auth.log" 2021-12-2-23:56:56."/var/log/apt/term.log" 2021-12-2-23:56:56."/var/log/ppp-connect-errors" 2021-8-20-13:0:0."/var/log/apport.log" 2021-9-17-9:23:29."/var/log/speech-dispatcher/speech-dispatcher-protocol.log" 2021-8-20-13:0:0."/var/log/apt/history.log" 2021-12-2-23:56:56."/var/log/boot.log" 2021-8-20-13:0:0."/var/log/alternatives.log" 2021-9-17-9:23:29."/var/log/lightdm/*.log" 2021-8-20-13:0:0."/var/log/mail.log" 2021-8-20-13:0:0."/var/log/debug" 2021-8-20-13:0:0."/var/log/kern.log" 2021-12-2-23:56:56."/var/log/cups/access_log" 2021-12-3-0:57:31."/var/log/ufw.log" 2021-8-20-13:0:0."/var/log/speech-dispatcher/speech-dispatcher.log" 2021-8-20-13:0:0."/var/

/var/log/cups/access_log.1.gz Download File
Process:	/bin/gzip
File Type:	gzip compressed data, last modified: Thu Dec 2 23:56:56 2021, from Unix
Category:	dropped
Size (bytes):	195
Entropy (8bit):	6.9532335187668854
Encrypted:	false
SSDEEP:	6:XxQGcpNMGE0e1rk8dmSZ9UnkjL+3EZQKT/n:Xx4L3okS9Unseh2
MD5:	9AA688708C6726D49A75079B37068E29
SHA1:	27E8DA97AF94416FAF7589C9DC800C96DBFF491A
SHA-256:	D17D697540B64F9614BEC7B99F0D03550035DD834D6DB65ECDECBB0C82916129
SHA-512:	C80053EB6F1DC88FD74025802FE63A8AA08138ED5FBAF41C0CA1D870486F5985058EFAAF670B1320FE76F4B1636F83599EE480859E30D31C319B9C4311A16092
Malicious:	false
Preview:	....H].a....;..0...._q.jj...+.n..f..^"..%m.....0!.s./...\|.6.&s...P..E..R.p.s..........<.....'.T....v...X3=.v.......5z.O...`.z2.vxB.3.7ci6o.K...b.:...8..G..J..I..m`..9f)..&...l.R.......*...

/var/log/syslog.1.gz Download File
Process:	/bin/gzip
File Type:	gzip compressed data, last modified: Thu Dec 2 23:56:56 2021, from Unix
Category:	dropped
Size (bytes):	2959
Entropy (8bit):	7.929352522759954
Encrypted:	false
SSDEEP:	48:XW7YR4+XZ7ez+MYttn/Bvc8HLlsnSbXFFKGUE1XtRRSEUE5mp5tMWdwJB4Ogu2:wvkaq9tnnlsnSrFFKGUExR7h5mdpdEBY
MD5:	98F9FFC6D5FC171CF26FD40528C9CD50
SHA1:	1DE231B6F75AF17F9CD33BCA8D1078B592944D70
SHA-256:	BCDC6A5069D845AA312B333DCAFC231ADCA0B34B6CE1DB0B714092F3E7187002
SHA-512:	11155843934B522F20E3679859CBE7B378865215EAB872620411D30324AA954ED2CF3883DB0D3959B33B14E6BD7E39A40252E327FB0BC08DAE1EA03C06E259A4
Malicious:	false
Preview:	....H].a...\is...._...'...-R3.L.w..g.(.n..x ..X..C..._......R..~.!..{_ ....Gf8.....)N1..F...)...t.d.P..D.qA...o...o....C-0l..SCwz..C..:..N.P....A.7...r#b..}E..1G.\|.$._FML...d..}.`M.....M"2@.2...Il.A.'4.3......D.$%\q}>.9.R.(%......G...^~.q......~..`W5.....'e..#.......Kt..1)$..F....<>S.x$p!..".N.`.Ta....VD.iqe{.)E'".%t.2"0@`.t.(.5K.0.....7Y.4...T.7.T..G..;..6k8T.)...".&3O......Rh..H...L/......_`..`.A..K...P.b2\..!$J>.z...........@y.D.@i.L.:..tI.L..5.`..B..5.....0...1.m`.Y.....D..E..t.o.... .g....T#...Q{wy1.P..R0.\|.'<O.=........Mr,f..Ih....q...l.~.R..T.....d._.-N...bZf...pA..~..i.j.`.2.U..,.Z-H$Xq.E..'..$.h.B@.....X....z.xf...o.. .%..g@....M..r7..^....l3...%n.....!q}.&.{v.G.V.e.\|#@..\..g.......&.bF...B.._.....m.?.x...e`..........W..S..8.xs.......[.......~~./.?of.A.V...M...1... .h...q......Z..`..A...]<..o.8...#k..G 3...e.S6.<k."L).h.d...4..E.s.o...8....0.@{...[.._..L]....9...9...+....,.I....'.<.i.x.!."...1..9...g..7H. .A5\|...." .D^$T 6....

Static File Info

General
File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.917734334434105
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	beamer.arm7-20211202-2350
File size:	132573
MD5:	642789a96c5a2bdcd9e667084f3d07c6
SHA1:	09b0e3d7d7c708f3d87448d1bbf76364fd694e18
SHA256:	3ec65cfa98b26a48f25e8b6c79885e2d8f99e157007e7991c300aaade2bcfdf9
SHA512:	d457d8fb5e380e7e605bb68806c90e3d361c090845f0bf307b7b9262d2925f71998e3c6d7afbe4a9134838aadd88b70fd8efb1e65c681fcd9c4acb2805c95c6c
SSDEEP:	3072:PxGaSonmrNNadnvLlnQ9zTLOKNIWx1xM/9hfSmv1ZmrwiWDr:PxGaSHBNadnvL9Qt7IWxPM/999ZmrwiA
File Content Preview:	.ELF..............(.........4...........4. ...(........p(...(...(...................................@...@................ ... ... ......D3............... ... ... ..................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	101120
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x102cc	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x183bc	0x103bc	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x183d0	0x103d0	0x1840	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x19c10	0x11c10	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x19c28	0x11c28	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x22000	0x12000	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x22004	0x12004	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x22004	0x12004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x22008	0x12008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2200c	0x1200c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x22010	0x12010	0xa8	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x220b8	0x120b8	0x264	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2231c	0x1231c	0x3028	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1231c	0xb56	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x12e78	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x12fb8	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x131cb	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1520e	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x158f0	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x16768	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x16a20	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x172ea	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x18479	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x189d1	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x189e7	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x18f88	0x4df0	0x10	0x0		28	708	4
.strtab	STRTAB	0x0	0x1dd78	0x2865	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x11c28	0x19c28	0x19c28	0x118	0x118	1.6118	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x11d40	0x11d40	3.4298	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x12000	0x22000	0x22000	0x31c	0x3344	2.7458	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
TLS	0x12004	0x22004	0x22004	0x0	0x8	0.0000	0x4	R	0x4
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x183bc	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x183d0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x19c10	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x19c28	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x22000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x22004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x22004	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x22008	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2200c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x22010	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x220b8	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x2231c	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x183bc	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x183c8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x84e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8554	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x85c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x88b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8afc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x91f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x98a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9f4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa6d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa974	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xacb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaeac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaefc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xafa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb1e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb22c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb2ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb3dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb9d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xba34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xba9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbb78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbb9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbc3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbcdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbf60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbf88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbfd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbff4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc018	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc154	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc1e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc278	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc2f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc40c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc718	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc78c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc7cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc9d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcbb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcc74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcd24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd1e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd2b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd714	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd8f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd928	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe0f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe1d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe3dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe94c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xea68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf19c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf44c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf464	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf694	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf880	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf934	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfac0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfc2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfc98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10788	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11168	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1120c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11384	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11988	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x121bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1220c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x127a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1293c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12974	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1314c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1327c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13284	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13358	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1345c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1349c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13524	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13564	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1363c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1369c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13708	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1371c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1434c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14db0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15374	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15674	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15710	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15814	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1586c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15874	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15918	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15bd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15be0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x162e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16cdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17178	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17be8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18340	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18388	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22008	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22004	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8884	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8af8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x183d0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x91f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x989c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9f48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa430	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaea8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb1d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x220b8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xb224	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb25c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb3d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb9ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22114	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x22118	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xba24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xba8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbb68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbb98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbc34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbcd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbf1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2211c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xc4b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc59c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc690	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc6d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc714	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc784	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc7c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc80c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc88c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc95c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc9cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcac4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcba8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcc68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcd1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x188b0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xcdf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xce28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xce5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd2ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd6e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd784	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd8dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22124	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x22120	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xe0d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18920	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xe384	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe91c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22208	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x18928	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xecfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf254	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf444	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf560	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x189ac	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xf5ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf690	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf73c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf7b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf7f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf838	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf878	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf8e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf92c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf99c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf9e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfab8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfafc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfb50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfc20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10624	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2220c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1076c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10fcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1113c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22224	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x111f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x112a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11368	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1140c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2223c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x222d4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x114b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11584	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11678	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11768	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19518	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11978	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x222e8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x11b74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12190	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12208	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x125b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1279c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x128c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x128e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12bec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ca0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22300	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x131c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x131f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13270	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x132ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13350	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x133b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13520	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13560	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13638	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13694	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13700	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1396c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13d1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13e54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1414c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19bc8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14da8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15348	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1544c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1553c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15628	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15800	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15810	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15900	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15bac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15cbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ffc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1611c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x161f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x162dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1715c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x2230c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x195ac	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x22314	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x198ac	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x19588	12	OBJECT	<unknown>	DEFAULT	4
C.5.3826	.symtab	0x183d0	36	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x188b0	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x19594	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x188c8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x188f8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x188d4	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x188ec	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x188e0	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x24e2c	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0xf348	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xf364	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x132f0	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x22010	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x16f10	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x16f14	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x17bc4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x16f08	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x16f4c	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x17be8	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x18388	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x16f40	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x17b58	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x17b7c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x17ba0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x16e70	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x17488	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x16ebc	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2230c	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x195ac	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x22314	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x198ac	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x22000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x22000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2230c	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_tolower	.symtab	0x22314	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x12900	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x128e4	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x22310	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_tolower	.symtab	0x22318	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0xce0c	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0xc420	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x14c84	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0xf44c	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x12900	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xc4b8	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x12990	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x12a20	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x15830	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x12990	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x12974	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x12a20	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x12a04	24	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0xfc50	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0xfc74	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0xfc2c	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x12c38	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x12d08	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x15830	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x15814	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0xf464	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x132f0	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x11028	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x11774	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0xf6bc	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x15c70	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x12900	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0xc9d0	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x13ca8	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x13cdc	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x13980	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xf744	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x11988	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0xce60	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xc4b8	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0xed18	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x14b40	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x14c84	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0xe94c	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0xf0c4	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0xd190	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1220c	972	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0xf164	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x15e1c	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x15e40	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x13358	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0xf19c	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x14c84	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1345c	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x13488	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1349c	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x134b0	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x134c4	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x12670	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x134ec	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xf7b8	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x13524	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x13564	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0xf694	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x15710	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x11590	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xc5c0	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0xf5f4	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xc6a0	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0xf7fc	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x16270	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x15260	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xf260	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0xf270	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x15350	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x15374	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xf280	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1314c	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x13578	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x135bc	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1363c	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x12990	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0xcbb0	196	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0xc718	116	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x126b8	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x11168	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x11428	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x12a20	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0xcd24	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x13894	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0xc78c	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xf880	112	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1369c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xc810	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xf934	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0xf9f0	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xc894	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xfa78	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x11688	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x131f4	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0xfb04	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0xfb54	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xfb68	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0xc8d4	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x127a8	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xfac0	68	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0xd1b0	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x114b8	216	FUNC	<unknown>	HIDDEN	2
__GI_strcasestr	.symtab	0xf570	132	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x15454	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x15544	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x15240	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x15240	28	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x15630	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xf320	96	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0xf380	204	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x15674	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x156c4	76	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x11794	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x11b98	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0xf618	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xc960	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x13708	20	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0xc990	64	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0xd1e4	208	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x13d24	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x13d9c	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x13d78	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x15830	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2200c	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x2200c	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x17bc4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x17b58	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x17b7c	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x17ba0	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x16430	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x16d8c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x16d8c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x16d70	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x16e1c	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x16430	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x16da4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x16dec	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x16e04	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x16dd4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x16dbc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x16ad0	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x16840	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x16424	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1642c	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1678c	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x16764	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x162e0	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1640c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x167e0	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x132a0	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x16740	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xc2f8	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0xc3f4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x167cc	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x17b24	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x17b1c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x17b14	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x248e4	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x222e8	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x25344	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2231c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2231c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x12cb4	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x12900	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x128e4	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x16cec	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x22310	4	OBJECT	<unknown>	DEFAULT	13
__ctype_tolower	.symtab	0x22318	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x24e28	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x220b8	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x13294	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x13288	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xc40c	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x16ad0	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x162e0	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x22008	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x25344	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x248dc	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x16cec	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0xce0c	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x19d40	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x19c28	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2438c	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x1678c	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0xc420	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x14c84	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2200c	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x22008	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x16e1c	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x167e0	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x16764	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x167cc	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x16740	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x1220c	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x25310	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x25314	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x24390	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x22004	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x16cdc	148	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x133bc	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x15cd4	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x134c4	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x12670	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0xf44c	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x172c8	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x173b0	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x17b48	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x17344	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x17468	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x17b50	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x17c2c	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x18340	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x175cc	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x16cdc	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x22008	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x22004	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x16ce4	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x12900	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xf744	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x12a90	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x12b18	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0xc4b8	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1220c	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x25318	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x1363c	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x12990	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x12a20	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xf880	112	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xc810	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xf934	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0xf9f0	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x159a4	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x131f4	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x248d8	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x15830	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x125d8	152	FUNC	<unknown>	HIDDEN	2
__ltdf2	.symtab	0x16ce4	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x10bf8	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0xfc98	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2220c	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x24f98	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x10b48	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x16840	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x16cec	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x12990	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x12974	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x248e0	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x22004	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x22004	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x22304	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x22308	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x15bd4	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x12bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x12bf4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x12bf4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x12bf4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x12bf4	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x12a20	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x12a04	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x17b2c	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x248e8	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0xfc50	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xfc74	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xfc2c	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x16230	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x15cc8	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x22130	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x16000	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x13e58	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x16058	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x13f34	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x16120	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x161f4	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x16150	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x14074	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0xd8f8	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x22134	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x1642c	788	FUNC	<unknown>	HIDDEN	2
__sys_connect	.symtab	0xf700	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0xf83c	68	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0xf8f0	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0xf9a4	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x131c8	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x135fc	64	FUNC	<unknown>	DEFAULT	2
__syscall_poll	.symtab	0xc6d8	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x132b0	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0xc7cc	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x15980	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x12c38	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x12d08	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x12d60	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x22300	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0xc2f8	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x15830	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x15814	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0xf464	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x137e8	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x1371c	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2437c	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x25344	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0xd928	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x24f40	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x24f68	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x22208	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x15be0	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x15c18	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x2533c	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x25340	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x25330	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x2532c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x25334	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x25324	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x15918	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x25320	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x25338	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x25328	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x2531c	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x2231c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x25344	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x132f0	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x183bc	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2237c	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0xd97c	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1434c	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x14150	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x14db0	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0xe0f4	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0xe3dc	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0xe194	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0xe1d8	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0xe388	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x12c0c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x12c04	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1327c	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x24f90	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x8194	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0xd2b4	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0xd714	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x22138	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x2235c	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0xea68	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x22378	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x22368	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x22374	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x2213c	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0xd794	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x22120	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0x117b0	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x141c4	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x189bc	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x141f0	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0xda00	1780	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x11028	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
anti_gdb_entry	.symtab	0xb214	24	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x11774	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x11774	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x8554	112	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x84e8	108	FUNC	<unknown>	DEFAULT	2
attack_icmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_init	.symtab	0x85c4	748	FUNC	<unknown>	DEFAULT	2
attack_method.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_method_std	.symtab	0xa6d4	672	FUNC	<unknown>	DEFAULT	2
attack_method_tcpack	.symtab	0x8afc	1784	FUNC	<unknown>	DEFAULT	2
attack_method_tcpall	.symtab	0x98a0	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpsyn	.symtab	0x91f4	1708	FUNC	<unknown>	DEFAULT	2
attack_method_udphex	.symtab	0xa974	832	FUNC	<unknown>	DEFAULT	2
attack_parse	.symtab	0x82cc	540	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x81d0	252	FUNC	<unknown>	DEFAULT	2
attack_udp_generic	.symtab	0x9f4c	1256	FUNC	<unknown>	DEFAULT	2
attack_udp_plain	.symtab	0xa434	672	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x24388	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0xf6bc	68	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
blacknurse	.symtab	0x88b0	588	FUNC	<unknown>	DEFAULT	2
brk	.symtab	0x15c70	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xfb68	196	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x10648	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0xaeac	80	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0xaefc	164	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0xce2c	52	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x12900	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0xc9d0	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5105	.symtab	0x2231c	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0xf744	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x248dc	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x11988	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x19bc8	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0xce60	816	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xc4b8	244	FUNC	<unknown>	DEFAULT	2
fd_serv	.symtab	0x22114	4	OBJECT	<unknown>	DEFAULT	13
fd_to_DIR	.symtab	0xcae0	208	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0xcc74	176	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0xed18	940	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x14b40	324	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x14c84	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0xe94c	284	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0xf0c4	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
flood_udp_bypass	.symtab	0xacb4	504	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x19bb0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0xd190	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x1220c	972	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x24394	1348	OBJECT	<unknown>	DEFAULT	14
fputs_unlocked	.symtab	0xf164	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8134	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x10dac	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x15e1c	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x15e1c	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x15e40	448	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x13358	100	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0xf19c	188	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_eit_entry	.symtab	0x16f58	544	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x14b40	324	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x14c84	300	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1345c	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x13488	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1349c	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x134b0	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x134c4	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x12670	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0xc5ac	20	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x134ec	56	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xf7b8	68	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0x13524	64	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x13564	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	8
index	.symtab	0x15454	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xf694	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x15710	248	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2021 00:57:38.840843916 CET	52018	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:38.868700027 CET	544	52018	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:38.869201899 CET	52018	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:38.869416952 CET	52018	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:38.896656990 CET	544	52018	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:38.896677971 CET	544	52018	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:38.896760941 CET	52018	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:38.896976948 CET	52018	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:38.924310923 CET	544	52018	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:39.897569895 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:39.925570965 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:39.925858021 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:39.926011086 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:39.953649998 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:39.953978062 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:57:39.981746912 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:51.923144102 CET	43928	443	192.168.2.23	91.189.91.42
Dec 3, 2021 00:57:54.996021986 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:57:54.996160030 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:58:02.163182020 CET	42836	443	192.168.2.23	91.189.91.43
Dec 3, 2021 00:58:06.259140968 CET	42516	80	192.168.2.23	109.202.202.202
Dec 3, 2021 00:58:10.035929918 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:58:10.036102057 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:58:19.954967976 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:58:19.983232975 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:58:19.983263016 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:58:19.983345985 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:58:32.882854939 CET	43928	443	192.168.2.23	91.189.91.42
Dec 3, 2021 00:58:35.027947903 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:58:35.028179884 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:58:50.055002928 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:58:50.055237055 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:58:53.362602949 CET	42836	443	192.168.2.23	91.189.91.43
Dec 3, 2021 00:59:05.081926107 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:59:05.082113981 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:59:10.018584967 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:59:10.046063900 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:59:10.046220064 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:59:25.075900078 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:59:25.076047897 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:59:40.102874041 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:59:40.102982998 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 00:59:55.132886887 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 00:59:55.133060932 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:00:00.070066929 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:00:00.098014116 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 01:00:00.098144054 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:00:15.139975071 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 01:00:15.140151978 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:00:30.195960999 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 01:00:30.196151018 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:00:45.235934973 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 01:00:45.236063957 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:00:50.137615919 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:00:50.165577888 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 01:00:50.165709972 CET	52020	544	192.168.2.23	45.134.225.20
Dec 3, 2021 01:01:05.204247952 CET	544	52020	45.134.225.20	192.168.2.23
Dec 3, 2021 01:01:05.204477072 CET	52020	544	192.168.2.23	45.134.225.20

System Behavior

Analysis Process: systemd PID: 5199 Parent PID: 1

General

Start time:	00:57:30
Start date:	03/12/2021
Path:	/usr/lib/systemd/systemd
Arguments:	n/a
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: logrotate PID: 5199 Parent PID: 1

General

Start time:	00:57:30
Start date:	03/12/2021
Path:	/usr/sbin/logrotate
Arguments:	/usr/sbin/logrotate /etc/logrotate.conf
File size:	84056 bytes
MD5 hash:	ff9f6831debb63e53a31ff8057143af6

Chronological Activities

Analysis Process: logrotate PID: 5262 Parent PID: 5199

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/usr/sbin/logrotate
Arguments:	n/a
File size:	84056 bytes
MD5 hash:	ff9f6831debb63e53a31ff8057143af6

Chronological Activities

Analysis Process: gzip PID: 5262 Parent PID: 5199

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/bin/gzip
Arguments:	/bin/gzip
File size:	97496 bytes
MD5 hash:	beef4e1f54ec90564d2acd57c0b0c897

Chronological Activities

Analysis Process: logrotate PID: 5263 Parent PID: 5199

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/usr/sbin/logrotate
Arguments:	n/a
File size:	84056 bytes
MD5 hash:	ff9f6831debb63e53a31ff8057143af6

Chronological Activities

Analysis Process: sh PID: 5263 Parent PID: 5199

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/bin/sh
Arguments:	sh -c "\n\t\tinvoke-rc.d --quiet cups restart > /dev/null\n" logrotate_script "/var/log/cups/*log "
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5264 Parent PID: 5263

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/bin/sh
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: invoke-rc.d PID: 5264 Parent PID: 5263

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/usr/sbin/invoke-rc.d
Arguments:	invoke-rc.d --quiet cups restart
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: invoke-rc.d PID: 5265 Parent PID: 5264

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/usr/sbin/invoke-rc.d
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: runlevel PID: 5265 Parent PID: 5264

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/sbin/runlevel
Arguments:	/sbin/runlevel
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: invoke-rc.d PID: 5266 Parent PID: 5264

General

Start time:	00:57:32
Start date:	03/12/2021
Path:	/usr/sbin/invoke-rc.d
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemctl PID: 5266 Parent PID: 5264

General

Start time:	00:57:32
Start date:	03/12/2021
Path:	/usr/bin/systemctl
Arguments:	systemctl --quiet is-enabled cups.service
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: invoke-rc.d PID: 5269 Parent PID: 5264

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/sbin/invoke-rc.d
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: ls PID: 5269 Parent PID: 5264

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/bin/ls
Arguments:	ls /etc/rc[S2345].d/S[0-9][0-9]cups
File size:	142144 bytes
MD5 hash:	e7793f15c2ff7e747b4bc7079f5cd4f7

Chronological Activities

Analysis Process: invoke-rc.d PID: 5272 Parent PID: 5264

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/sbin/invoke-rc.d
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemctl PID: 5272 Parent PID: 5264

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/bin/systemctl
Arguments:	systemctl --quiet is-active cups.service
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: logrotate PID: 5273 Parent PID: 5199

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/sbin/logrotate
Arguments:	n/a
File size:	84056 bytes
MD5 hash:	ff9f6831debb63e53a31ff8057143af6

Chronological Activities

Analysis Process: gzip PID: 5273 Parent PID: 5199

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/bin/gzip
Arguments:	/bin/gzip
File size:	97496 bytes
MD5 hash:	beef4e1f54ec90564d2acd57c0b0c897

Chronological Activities

Analysis Process: logrotate PID: 5274 Parent PID: 5199

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/sbin/logrotate
Arguments:	n/a
File size:	84056 bytes
MD5 hash:	ff9f6831debb63e53a31ff8057143af6

Chronological Activities

Analysis Process: sh PID: 5274 Parent PID: 5199

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/bin/sh
Arguments:	sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/syslog
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5275 Parent PID: 5274

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/bin/sh
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rsyslog-rotate PID: 5275 Parent PID: 5274

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/lib/rsyslog/rsyslog-rotate
Arguments:	/usr/lib/rsyslog/rsyslog-rotate
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rsyslog-rotate PID: 5276 Parent PID: 5275

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/lib/rsyslog/rsyslog-rotate
Arguments:	n/a
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemctl PID: 5276 Parent PID: 5275

General

Start time:	00:57:33
Start date:	03/12/2021
Path:	/usr/bin/systemctl
Arguments:	systemctl kill -s HUP rsyslog.service
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: systemd PID: 5200 Parent PID: 1

General

Start time:	00:57:30
Start date:	03/12/2021
Path:	/usr/lib/systemd/systemd
Arguments:	n/a
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: install PID: 5200 Parent PID: 1

General

Start time:	00:57:30
Start date:	03/12/2021
Path:	/usr/bin/install
Arguments:	/usr/bin/install -d -o man -g man -m 0755 /var/cache/man
File size:	158112 bytes
MD5 hash:	55e2520049dc6a62e8c94732e36cdd54

Chronological Activities

Analysis Process: systemd PID: 5261 Parent PID: 1

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/usr/lib/systemd/systemd
Arguments:	n/a
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: find PID: 5261 Parent PID: 1

General

Start time:	00:57:31
Start date:	03/12/2021
Path:	/usr/bin/find
Arguments:	/usr/bin/find /var/cache/man -type f -name *.gz -atime +6 -delete
File size:	320160 bytes
MD5 hash:	b68ef002f84cc54dd472238ba7df80ab

Chronological Activities

Analysis Process: systemd PID: 5267 Parent PID: 1

General

Start time:	00:57:32
Start date:	03/12/2021
Path:	/usr/lib/systemd/systemd
Arguments:	n/a
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: mandb PID: 5267 Parent PID: 1

General

Start time:	00:57:32
Start date:	03/12/2021
Path:	/usr/bin/mandb
Arguments:	/usr/bin/mandb --quiet
File size:	142432 bytes
MD5 hash:	1dda5ea0027ecf1c2db0f5a3de7e6941

Chronological Activities

Analysis Process: beamer.arm7-20211202-2350 PID: 5284 Parent PID: 5119

General

Start time:	00:57:37
Start date:	03/12/2021
Path:	/tmp/beamer.arm7-20211202-2350
Arguments:	/tmp/beamer.arm7-20211202-2350
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: beamer.arm7-20211202-2350 PID: 5286 Parent PID: 5284

General

Start time:	00:57:37
Start date:	03/12/2021
Path:	/tmp/beamer.arm7-20211202-2350
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: beamer.arm7-20211202-2350 PID: 5287 Parent PID: 5284

General

Start time:	00:57:37
Start date:	03/12/2021
Path:	/tmp/beamer.arm7-20211202-2350
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: beamer.arm7-20211202-2350 PID: 5288 Parent PID: 5284

General

Start time:	00:57:37
Start date:	03/12/2021
Path:	/tmp/beamer.arm7-20211202-2350
Arguments:	n/a
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify systemd services to repeatedly execute malicious payloads as part of persistence. The systemd service manager is commonly used for managing background daemon processes (also known as services) and other system resources.Systemd is the default initialization (init) system on many Linux distributions starting with Debian 8, Ubuntu 15.04, CentOS 7, RHEL 7, Fedora 15, and replaces legacy init systems including SysVinit and Upstart while remaining backwards compatible with the aforementioned init systems.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or alter generated artifacts on a host system, including logs or captured files such as quarantined malware. Locations and format of logs are platform or product-specific, however standard operating system logs are captured as Windows events or Linux/macOS files such as Bash History and /var/log/*.
Tactics:	Defense Evasion
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Linux Analysis Report beamer.arm7-20211202-2350

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Process Tree

Yara Overview

Initial Sample

Jbx Signature Overview

AV Detection:

Networking:

System Summary:

Persistence and Installation Behavior:

Malware Analysis System Evasion:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted IPs

Public

Runtime Messages

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: systemd PID: 5199 Parent PID: 1

General

Analysis Process: logrotate PID: 5199 Parent PID: 1

General

Analysis Process: logrotate PID: 5262 Parent PID: 5199

General

Analysis Process: gzip PID: 5262 Parent PID: 5199

General

Analysis Process: logrotate PID: 5263 Parent PID: 5199

General

Analysis Process: sh PID: 5263 Parent PID: 5199

General

Analysis Process: sh PID: 5264 Parent PID: 5263

General

Analysis Process: invoke-rc.d PID: 5264 Parent PID: 5263

General

Analysis Process: invoke-rc.d PID: 5265 Parent PID: 5264

General

Analysis Process: runlevel PID: 5265 Parent PID: 5264

General

Analysis Process: invoke-rc.d PID: 5266 Parent PID: 5264

General

Analysis Process: systemctl PID: 5266 Parent PID: 5264