Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
fuckjewishpeople.arm6

Overview

General Information

Sample Name:fuckjewishpeople.arm6
Analysis ID:557494
MD5:3cb08428c383887381a8adbfb2cc35af
SHA1:63e051d4e15ab274a3522240f0e00943c76b0e62
SHA256:ff2f8d288108f34e9d1c29fee8d1709ef132421ab3bab98f965e02abf8b33648
Tags:elfgafgyt
Infos:

Detection

Gafgyt Mirai
Score:76
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Yara detected Mirai
Multi AV Scanner detection for submitted file
Yara detected Gafgyt
Opens /proc/net/* files useful for finding connected devices and routers
Sample contains strings that are user agent strings indicative of HTTP manipulation
Uses the "uname" system call to query kernel version information (possible evasion)
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Detected TCP or UDP traffic on non-standard ports
Executes the "rm" command used to delete files or directories

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures
All HTTP servers contacted by the sample do not answer. Likely the sample is an old dropper which does no longer work
Static ELF header machine description suggests that the sample might not execute correctly on this machine

General Information

Joe Sandbox Version:34.0.0 Boulder Opal
Analysis ID:557494
Start date:21.01.2022
Start time:08:17:30
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 5m 29s
Hypervisor based Inspection enabled:false
Report type:light
Sample file name:fuckjewishpeople.arm6
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Detection:MAL
Classification:mal76.spre.troj.linARM6@0/1@0/0

Runtime Messages

Command:/tmp/fuckjewishpeople.arm6
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:

Process Tree

  • system is lnxubuntu20
  • dash New Fork (PID: 5214, Parent: 4331)
  • cat (PID: 5214, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.zZSir0SvNh
  • dash New Fork (PID: 5215, Parent: 4331)
  • head (PID: 5215, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10
  • dash New Fork (PID: 5216, Parent: 4331)
  • tr (PID: 5216, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037
  • dash New Fork (PID: 5217, Parent: 4331)
  • cut (PID: 5217, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80
  • dash New Fork (PID: 5218, Parent: 4331)
  • cat (PID: 5218, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.zZSir0SvNh
  • dash New Fork (PID: 5219, Parent: 4331)
  • head (PID: 5219, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10
  • dash New Fork (PID: 5220, Parent: 4331)
  • tr (PID: 5220, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037
  • dash New Fork (PID: 5221, Parent: 4331)
  • cut (PID: 5221, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80
  • dash New Fork (PID: 5222, Parent: 4331)
  • rm (PID: 5222, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.zZSir0SvNh /tmp/tmp.zhdUhR0yq7 /tmp/tmp.WcqJlHVoEF
  • cleanup

Yara Overview

Initial Sample

SourceRuleDescriptionAuthorStrings
fuckjewishpeople.arm6JoeSecurity_Mirai_8Yara detected MiraiJoe Security
    fuckjewishpeople.arm6JoeSecurity_GafgytYara detected GafgytJoe Security

      Memory Dumps

      SourceRuleDescriptionAuthorStrings
      5228.1.00000000a58e5839.0000000036504835.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
        5228.1.00000000a58e5839.0000000036504835.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security
          5226.1.00000000a58e5839.0000000036504835.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
            5226.1.00000000a58e5839.0000000036504835.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security

              Jbx Signature Overview

              Click to jump to signature section

              Show All Signature Results

              AV Detection

              barindex
              Antivirus / Scanner detection for submitted sample
              Source: fuckjewishpeople.arm6Avira: detected
              Multi AV Scanner detection for submitted file
              Source: fuckjewishpeople.arm6Virustotal: Detection: 54%Perma Link
              Source: fuckjewishpeople.arm6ReversingLabs: Detection: 60%

              Spreading

              barindex
              Opens /proc/net/* files useful for finding connected devices and routers
              Source: /tmp/fuckjewishpeople.arm6 (PID: 5226)Opens: /proc/net/route
              Source: global trafficTCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
              Source: global trafficTCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
              Source: global trafficTCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
              Source: global trafficTCP traffic: 192.168.2.23:53078 -> 78.47.230.250:4258
              Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
              Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
              Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
              Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: unknownTCP traffic detected without corresponding DNS query: 78.47.230.250
              Source: fuckjewishpeople.arm6String found in binary or memory: http://fast.no/support/crawler.asp)
              Source: fuckjewishpeople.arm6String found in binary or memory: http://feedback.redkolibri.com/
              Source: fuckjewishpeople.arm6String found in binary or memory: http://www.baidu.com/search/spider.htm)
              Source: fuckjewishpeople.arm6String found in binary or memory: http://www.baidu.com/search/spider.html)
              Source: fuckjewishpeople.arm6String found in binary or memory: http://www.billybobbot.com/crawler/)
              Source: motd-news.21.drString found in binary or memory: https://ubuntu.com/blog/microk8s-memory-optimisation
              Source: classification engineClassification label: mal76.spre.troj.linARM6@0/1@0/0
              Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
              Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
              Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
              Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
              Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
              Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
              Source: ELF static info symbol of initial sampleFILE: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/_memcpy.S
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/bcopy.S
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/bzero.S
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/memcpy.S
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/memmove.S
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/memset.S
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/strcmp.S
              Source: ELF static info symbol of initial sampleFILE: libc/string/arm/strlen.S
              Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/crt1.S
              Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/crti.S
              Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/crtn.S
              Source: ELF static info symbol of initial sampleFILE: libc/sysdeps/linux/arm/sigrestorer.S
              Source: /usr/bin/dash (PID: 5222)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.zZSir0SvNh /tmp/tmp.zhdUhR0yq7 /tmp/tmp.WcqJlHVoEF
              Source: /tmp/fuckjewishpeople.arm6 (PID: 5226)Queries kernel information via 'uname':
              Source: fuckjewishpeople.arm6, 5226.1.00000000b1f2565e.00000000452f5642.rw-.sdmp, fuckjewishpeople.arm6, 5228.1.00000000b1f2565e.00000000452f5642.rw-.sdmpBinary or memory string: r?x86_64/usr/bin/qemu-arm/tmp/fuckjewishpeople.arm6SUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/fuckjewishpeople.arm6
              Source: fuckjewishpeople.arm6, 5226.1.0000000087fb4b08.0000000054eefdb8.rw-.sdmp, fuckjewishpeople.arm6, 5228.1.0000000087fb4b08.0000000054eefdb8.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
              Source: fuckjewishpeople.arm6, 5226.1.0000000087fb4b08.0000000054eefdb8.rw-.sdmp, fuckjewishpeople.arm6, 5228.1.0000000087fb4b08.0000000054eefdb8.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
              Source: fuckjewishpeople.arm6, 5226.1.00000000b1f2565e.00000000452f5642.rw-.sdmp, fuckjewishpeople.arm6, 5228.1.00000000b1f2565e.00000000452f5642.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

              Stealing of Sensitive Information

              barindex
              Yara detected Mirai
              Source: Yara matchFile source: fuckjewishpeople.arm6, type: SAMPLE
              Source: Yara matchFile source: 5228.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5226.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY
              Yara detected Gafgyt
              Source: Yara matchFile source: fuckjewishpeople.arm6, type: SAMPLE
              Source: Yara matchFile source: 5228.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5226.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
              Source: Initial sampleUser agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
              Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
              Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
              Source: Initial sampleUser agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
              Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
              Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

              Remote Access Functionality

              barindex
              Yara detected Mirai
              Source: Yara matchFile source: fuckjewishpeople.arm6, type: SAMPLE
              Source: Yara matchFile source: 5228.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5226.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY
              Yara detected Gafgyt
              Source: Yara matchFile source: fuckjewishpeople.arm6, type: SAMPLE
              Source: Yara matchFile source: 5228.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5226.1.00000000a58e5839.0000000036504835.r-x.sdmp, type: MEMORY

              Mitre Att&ck Matrix

              Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
              Valid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
              File Deletion              		OS Credential Dumping11
              Security Software Discovery              		Remote ServicesData from Local SystemExfiltration Over Other Network Medium1
              Data Obfuscation              		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
              Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
              Remote System Discovery              		Remote Desktop ProtocolData from Removable MediaExfiltration Over Bluetooth1
              Encrypted Channel              		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
              Domain AccountsAt (Linux)Logon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveAutomated Exfiltration1
              Non-Standard Port              		Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
              Local AccountsAt (Windows)Logon Script (Mac)Logon Script (Mac)Binary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput CaptureScheduled Transfer1
              Application Layer Protocol              		SIM Card SwapCarrier Billing Fraud

              Malware Configuration

              ⊘No configs have been found

              Behavior Graph

              Hide Legend

              Legend:

              • Process
              • Signature
              • Created File
              • DNS/IP Info
              • Is Dropped
              • Number of created Files
              • Is malicious
              • Internet
              behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 557494 Sample: fuckjewishpeople.arm6 Startdate: 21/01/2022 Architecture: LINUX Score: 76 21 109.202.202.202, 80 INIT7CH Switzerland 2->21 23 78.47.230.250, 4258, 53078 HETZNER-ASDE Germany 2->23 25 2 other IPs or domains 2->25 27 Antivirus / Scanner detection for submitted sample 2->27 29 Multi AV Scanner detection for submitted file 2->29 31 Yara detected Gafgyt 2->31 33 Yara detected Mirai 2->33 8 dash rm fuckjewishpeople.arm6 2->8         started        11 dash head 2->11         started        13 dash tr 2->13         started        15 6 other processes 2->15 signatures3 process4 signatures5 35 Opens /proc/net/* files useful for finding connected devices and routers 8->35 17 fuckjewishpeople.arm6 8->17         started        process6 process7 19 fuckjewishpeople.arm6 17->19         started       

              Antivirus, Machine Learning and Genetic Malware Detection

              Initial Sample

              SourceDetectionScannerLabelLink
              fuckjewishpeople.arm654%VirustotalBrowse
              fuckjewishpeople.arm660%ReversingLabsLinux.Trojan.Gafgyt
              fuckjewishpeople.arm6100%AviraLINUX/Gafgyt.opnd

              Dropped Files

              ⊘No Antivirus matches

              Domains

              ⊘No Antivirus matches

              URLs

              SourceDetectionScannerLabelLink
              http://www.billybobbot.com/crawler/)0%URL Reputationsafe
              http://fast.no/support/crawler.asp)0%URL Reputationsafe
              http://feedback.redkolibri.com/0%URL Reputationsafe

              Domains and IPs

              Contacted Domains

              ⊘No contacted domains info

              URLs from Memory and Binaries

              NameSourceMaliciousAntivirus DetectionReputation
              http://www.baidu.com/search/spider.html)fuckjewishpeople.arm6false
                		high
                http://www.billybobbot.com/crawler/)fuckjewishpeople.arm6false
                • URL Reputation: safe
                		unknown
                http://fast.no/support/crawler.asp)fuckjewishpeople.arm6false
                • URL Reputation: safe
                		unknown
                http://feedback.redkolibri.com/fuckjewishpeople.arm6false
                • URL Reputation: safe
                		unknown
                http://www.baidu.com/search/spider.htm)fuckjewishpeople.arm6false
                  		high
                  https://ubuntu.com/blog/microk8s-memory-optimisationmotd-news.21.drfalse
                    		high

                    World Map of Contacted IPs

                    • No. of IPs < 25%
                    • 25% < No. of IPs < 50%
                    • 50% < No. of IPs < 75%
                    • 75% < No. of IPs

                    Public IPs

                    IPDomainCountryFlagASNASN NameMalicious
                    78.47.230.250
                    		unknownGermany
                    		24940HETZNER-ASDEfalse
                    109.202.202.202
                    		unknownSwitzerland
                    		13030INIT7CHfalse
                    91.189.91.43
                    		unknownUnited Kingdom
                    		41231CANONICAL-ASGBfalse
                    91.189.91.42
                    		unknownUnited Kingdom
                    		41231CANONICAL-ASGBfalse

                    Joe Sandbox View / Context

                    IPs

                    ⊘No context

                    Domains

                    ⊘No context

                    ASNs

                    ⊘No context

                    JA3 Fingerprints

                    ⊘No context

                    Dropped Files

                    ⊘No context

                    Created / dropped Files

                    /var/cache/motd-news

                    Download File
                    Process:/usr/bin/cut
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):191
                    Entropy (8bit):4.515771857099866
                    Encrypted:false
                    SSDEEP:3:P2lnI+5MsqqzNLz+FRNScHUBfRau95++sZzR5woLB1Fh0VTGTl/X5kURn:OZ8uNLzDc0pR75+9Zz/woFmIT52URn
                    MD5:DD514F892B5F93ED615D366E58AC58AF
                    SHA1:BA75EDB3C2232CC260BC187F604DC8F25AA72C11
                    SHA-256:F40D0DCE6E83DF74109FEF5E68E51CC255727783EEAE04C3E34677E23F7552CF
                    SHA-512:9150BDE63F6C4850C5340D8877892B4D9BBF9EBDC98CDCF557A93FA304C1222CEE446418F5BE2ACCDBF38393778AFA5D4F3EDCB37A47BF57D3A4B2DEAD42A2D0
                    Malicious:false
                    Reputation:moderate, very likely benign file
                    Preview: * Super-optimized for small spaces - read how we shrank the memory. footprint of MicroK8s to make it the smallest full K8s around... https://ubuntu.com/blog/microk8s-memory-optimisation.

                    Static File Info

                    General

                    File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                    Entropy (8bit):6.029462170570735
                    TrID:
                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                    File name:fuckjewishpeople.arm6
                    File size:118932
                    MD5:3cb08428c383887381a8adbfb2cc35af
                    SHA1:63e051d4e15ab274a3522240f0e00943c76b0e62
                    SHA256:ff2f8d288108f34e9d1c29fee8d1709ef132421ab3bab98f965e02abf8b33648
                    SHA512:f05406d3c1721218bf3a617f69075595bcf3e3f854fd55d2186ccb500a11c2115b7e41b66522d764a9fc90ba90ddfa62652f0e9a70296dda91ebb019de523959
                    SSDEEP:3072:idwracAAviNmLpMQ1xl5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxl5hKHKnlAdmyDQUJ1a4Tn
                    File Content Preview:.ELF..............(.........4...l]......4. ...(........p.9...........................................9...9...............@...@...@......Xj..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

                    Static ELF Info

                    ELF header

                    Class:ELF32
                    Data:2's complement, little endian
                    Version:1 (current)
                    Machine:ARM
                    Version Number:0x1
                    Type:EXEC (Executable file)
                    OS/ABI:UNIX - System V
                    ABI Version:0
                    Entry Point Address:0x81b0
                    Flags:0x4000002
                    ELF Header Size:52
                    Program Header Offset:52
                    Program Header Size:32
                    Number of Program Headers:4
                    Section Header Offset:89452
                    Section Header Size:40
                    Number of Section Headers:24
                    Header String Table Index:21

                    Sections

                    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                    NULL0x00x00x00x00x0000
                    .initPROGBITS0x80b40xb40x100x00x6AX004
                    .textPROGBITS0x80d00xd00xf8180x00x6AX0016
                    .finiPROGBITS0x178e80xf8e80x100x00x6AX004
                    .rodataPROGBITS0x178f80xf8f80x40b40x00x2A008
                    .ARM.extabPROGBITS0x1b9ac0x139ac0x180x00x2A004
                    .ARM.exidxARM_EXIDX0x1b9c40x139c40x100x00x82AL204
                    .eh_framePROGBITS0x240000x140000x40x00x3WA004
                    .init_arrayINIT_ARRAY0x240040x140040x40x00x3WA004
                    .fini_arrayFINI_ARRAY0x240080x140080x40x00x3WA004
                    .jcrPROGBITS0x2400c0x1400c0x40x00x3WA004
                    .gotPROGBITS0x240100x140100x780x40x3WA004
                    .dataPROGBITS0x240880x140880x3640x00x3WA004
                    .bssNOBITS0x243f00x143ec0x66680x00x3WA008
                    .commentPROGBITS0x00x143ec0xbc20x00x0001
                    .debug_arangesPROGBITS0x00x14fb00xe00x00x0008
                    .debug_infoPROGBITS0x00x150900x4b00x00x0001
                    .debug_abbrevPROGBITS0x00x155400x8c0x00x0001
                    .debug_linePROGBITS0x00x155cc0x6550x00x0001
                    .debug_framePROGBITS0x00x15c240x580x00x0004
                    .ARM.attributesARM_ATTRIBUTES0x00x15c7c0x100x00x0001
                    .shstrtabSTRTAB0x00x15c8c0xdd0x00x0001
                    .symtabSYMTAB0x00x1612c0x48300x100x0236274
                    .strtabSTRTAB0x00x1a95c0x27380x00x0001

                    Program Segments

                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                    EXIDX0x139c40x1b9c40x1b9c40x100x101.37500x4R 0x4.ARM.exidx
                    LOAD0x00x80000x80000x139d40x139d43.78340x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                    LOAD0x140000x240000x240000x3ec0x6a582.55860x6RW 0x8000.eh_frame .init_array .fini_array .jcr .got .data .bss
                    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                    Symbols

                    NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                    .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    .symtab0x80b40SECTION<unknown>DEFAULT1
                    .symtab0x80d00SECTION<unknown>DEFAULT2
                    .symtab0x178e80SECTION<unknown>DEFAULT3
                    .symtab0x178f80SECTION<unknown>DEFAULT4
                    .symtab0x1b9ac0SECTION<unknown>DEFAULT5
                    .symtab0x1b9c40SECTION<unknown>DEFAULT6
                    .symtab0x240000SECTION<unknown>DEFAULT7
                    .symtab0x240040SECTION<unknown>DEFAULT8
                    .symtab0x240080SECTION<unknown>DEFAULT9
                    .symtab0x2400c0SECTION<unknown>DEFAULT10
                    .symtab0x240100SECTION<unknown>DEFAULT11
                    .symtab0x240880SECTION<unknown>DEFAULT12
                    .symtab0x243f00SECTION<unknown>DEFAULT13
                    .symtab0x00SECTION<unknown>DEFAULT14
                    .symtab0x00SECTION<unknown>DEFAULT15
                    .symtab0x00SECTION<unknown>DEFAULT16
                    .symtab0x00SECTION<unknown>DEFAULT17
                    .symtab0x00SECTION<unknown>DEFAULT18
                    .symtab0x00SECTION<unknown>DEFAULT19
                    .symtab0x00SECTION<unknown>DEFAULT20
                    .symtab0x00SECTION<unknown>DEFAULT21
                    .symtab0x00SECTION<unknown>DEFAULT22
                    .symtab0x00SECTION<unknown>DEFAULT23
                    $a.symtab0x80b40NOTYPE<unknown>DEFAULT1
                    $a.symtab0x178e80NOTYPE<unknown>DEFAULT3
                    $a.symtab0x80c00NOTYPE<unknown>DEFAULT1
                    $a.symtab0x178f40NOTYPE<unknown>DEFAULT3
                    $a.symtab0x810c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x81500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x81b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x81ec0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x82c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x84080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x846c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x88040NOTYPE<unknown>DEFAULT2
                    $a.symtab0x91100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x951c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x99380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9c240NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9d740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9ec40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xa09c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xae200NOTYPE<unknown>DEFAULT2
                    $a.symtab0xaffc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xb1d40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xb1f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xbb940NOTYPE<unknown>DEFAULT2
                    $a.symtab0xbd240NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc5540NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6680NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc67c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6dc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc6f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7200NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7540NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7700NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc7e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8180NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc84c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8800NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc9580NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc98c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc9c00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xca140NOTYPE<unknown>DEFAULT2
                    $a.symtab0xca400NOTYPE<unknown>DEFAULT2
                    $a.symtab0xca740NOTYPE<unknown>DEFAULT2
                    $a.symtab0xca9c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcacc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcae80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcb1c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcbd00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcc380NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcc6c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcd400NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcd700NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd5300NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd5d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd6140NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd7c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xd8180NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdd880NOTYPE<unknown>DEFAULT2
                    $a.symtab0xddc00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xde700NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdf100NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdf700NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdf800NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdfa00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdfb00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdfc00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe0bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe1880NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe1ac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe29c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe2b40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe2e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe3500NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe4500NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe4740NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe4f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe5500NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe5f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe6200NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe63c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe6a40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe6dc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe7140NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe7580NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe7900NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe7c80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe80c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe8440NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe8600NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe9180NOTYPE<unknown>DEFAULT2
                    $a.symtab0xe9840NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf31c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf7bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf7fc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf9240NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf93c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf9e00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfa980NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfb580NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfbfc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfce00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfd700NOTYPE<unknown>DEFAULT2
                    $a.symtab0xfe480NOTYPE<unknown>DEFAULT2
                    $a.symtab0xff2c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xff4c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xff680NOTYPE<unknown>DEFAULT2
                    $a.symtab0x101280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x101e00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1028c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x103d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x109b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10a700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10ac40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10b300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10e040NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10e6c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10ef40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10f000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10f0c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10f400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10f680NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10f7c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10fb00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10fc40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x10fd80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110b80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x110ec0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x111200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x111580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x112500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x113200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x113cc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x114640NOTYPE<unknown>DEFAULT2
                    $a.symtab0x115500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1156c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x119100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x119640NOTYPE<unknown>DEFAULT2
                    $a.symtab0x119880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11a380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11bec0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11c0c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11cc00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11fc80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x121080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x121d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x122480NOTYPE<unknown>DEFAULT2
                    $a.symtab0x122740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x123d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12bc40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12ca00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12d5c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12ee40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x130f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1321c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x132c00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x137500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x138400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x138b80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x138fc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x139ac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13a8c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13ad80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13b280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13b4c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13c380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13c780NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13d700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x140100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x141440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x144f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x145300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1457c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x145880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x145bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x146140NOTYPE<unknown>DEFAULT2
                    $a.symtab0x148440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x148840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x149c80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x149ec0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14b3c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14b940NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14c580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14c880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14d200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14d5c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14e180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x151040NOTYPE<unknown>DEFAULT2
                    $a.symtab0x154cc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x155c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15dac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15e000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15e580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x162b40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1634c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x163980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x166900NOTYPE<unknown>DEFAULT2
                    $a.symtab0x166c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1673c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x167940NOTYPE<unknown>DEFAULT2
                    $a.symtab0x168000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x168100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x168440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x169300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x169e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16a440NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16a740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16c780NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16cac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16d580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16e9c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x172b80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x177540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x178940NOTYPE<unknown>DEFAULT2
                    $d.symtab0x81440NOTYPE<unknown>DEFAULT2
                    $d.symtab0x240080NOTYPE<unknown>DEFAULT9
                    $d.symtab0x819c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x240040NOTYPE<unknown>DEFAULT8
                    $d.symtab0x2408c0NOTYPE<unknown>DEFAULT12
                    $d.symtab0x81e00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x240900NOTYPE<unknown>DEFAULT12
                    $d.symtab0x82bc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x83fc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x84680NOTYPE<unknown>DEFAULT2
                    $d.symtab0x87f00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x910c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x95180NOTYPE<unknown>DEFAULT2
                    $d.symtab0x99300NOTYPE<unknown>DEFAULT2
                    $d.symtab0x18fc00NOTYPE<unknown>DEFAULT4
                    $d.symtab0x9c1c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x9d700NOTYPE<unknown>DEFAULT2
                    $d.symtab0x9ec00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xa0940NOTYPE<unknown>DEFAULT2
                    $d.symtab0xaa180NOTYPE<unknown>DEFAULT2
                    $d.symtab0xafe80NOTYPE<unknown>DEFAULT2
                    $d.symtab0xb1c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xb1f40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xbb680NOTYPE<unknown>DEFAULT2
                    $d.symtab0xbd180NOTYPE<unknown>DEFAULT2
                    $d.symtab0xc5340NOTYPE<unknown>DEFAULT2
                    $d.symtab0xca940NOTYPE<unknown>DEFAULT2
                    $d.symtab0xcac40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x241900NOTYPE<unknown>DEFAULT12
                    $d.symtab0x241980NOTYPE<unknown>DEFAULT12
                    $d.symtab0xcae00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xcc300NOTYPE<unknown>DEFAULT2
                    $d.symtab0xcc640NOTYPE<unknown>DEFAULT2
                    $d.symtab0xcd2c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x241d40NOTYPE<unknown>DEFAULT12
                    $d.symtab0x241a00NOTYPE<unknown>DEFAULT12
                    $d.symtab0x1a9080NOTYPE<unknown>DEFAULT4
                    $d.symtab0xd5100NOTYPE<unknown>DEFAULT2
                    $d.symtab0xd7c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xd80c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xdd580NOTYPE<unknown>DEFAULT2
                    $d.symtab0x242dc0NOTYPE<unknown>DEFAULT12
                    $d.symtab0xe1800NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe2940NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe2dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe3480NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe4440NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe4ec0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe5f00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe6980NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe6d80NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe7100NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe7540NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe78c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe7c40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe8080NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe8400NOTYPE<unknown>DEFAULT2
                    $d.symtab0xe9100NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf3000NOTYPE<unknown>DEFAULT2
                    $d.symtab0x242e00NOTYPE<unknown>DEFAULT12
                    $d.symtab0xf7a00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf7f40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf9100NOTYPE<unknown>DEFAULT2
                    $d.symtab0x242f80NOTYPE<unknown>DEFAULT12
                    $d.symtab0xf9c40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfa7c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfb3c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfbe00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x243100NOTYPE<unknown>DEFAULT12
                    $d.symtab0x243a80NOTYPE<unknown>DEFAULT12
                    $d.symtab0xfcd80NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfd6c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xfe3c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xff240NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b5340NOTYPE<unknown>DEFAULT4
                    $d.symtab0x101200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x101c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x243bc0NOTYPE<unknown>DEFAULT12
                    $d.symtab0x102880NOTYPE<unknown>DEFAULT2
                    $d.symtab0x103b40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1098c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10a5c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10abc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10b200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10dc40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x243d40NOTYPE<unknown>DEFAULT12
                    $d.symtab0x10ee80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x10f600NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1103c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x243e00NOTYPE<unknown>DEFAULT12
                    $d.symtab0x1123c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x113180NOTYPE<unknown>DEFAULT2
                    $d.symtab0x113c80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b8b00NOTYPE<unknown>DEFAULT4
                    $d.symtab0x1153c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2a6380NOTYPE<unknown>DEFAULT13
                    $d.symtab0x115640NOTYPE<unknown>DEFAULT2
                    $d.symtab0x119080NOTYPE<unknown>DEFAULT2
                    $d.symtab0x11bcc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x11f940NOTYPE<unknown>DEFAULT2
                    $d.symtab0x12ba40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b8e00NOTYPE<unknown>DEFAULT4
                    $d.symtab0x12c8c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x12d480NOTYPE<unknown>DEFAULT2
                    $d.symtab0x12eb80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x130cc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x132140NOTYPE<unknown>DEFAULT2
                    $d.symtab0x138380NOTYPE<unknown>DEFAULT2
                    $d.symtab0x139a40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13a840NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13c300NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13d680NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1412c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x144dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x145240NOTYPE<unknown>DEFAULT2
                    $d.symtab0x145740NOTYPE<unknown>DEFAULT2
                    $d.symtab0x14b280NOTYPE<unknown>DEFAULT2
                    $d.symtab0x150f80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x154c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15d700NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15df80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15e500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1626c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x163340NOTYPE<unknown>DEFAULT2
                    $d.symtab0x16a6c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x16c6c0NOTYPE<unknown>DEFAULT2
                    $t.symtab0x80d00NOTYPE<unknown>DEFAULT2
                    /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    C.1.3506.symtab0x1b8b024OBJECT<unknown>DEFAULT4
                    C.70.5182.symtab0x18fc0104OBJECT<unknown>DEFAULT4
                    C.77.5281.symtab0x19c541128OBJECT<unknown>DEFAULT4
                    Laligned.symtab0xdf380NOTYPE<unknown>DEFAULT2
                    Llastword.symtab0xdf540NOTYPE<unknown>DEFAULT2
                    Q.symtab0x2442816384OBJECT<unknown>DEFAULT13
                    Randhex.symtab0x9ec4472FUNC<unknown>DEFAULT2
                    SendHTTPHex.symtab0xae20476FUNC<unknown>DEFAULT2
                    SendSTD.symtab0x9a64448FUNC<unknown>DEFAULT2
                    UDPRAW.symtab0x9d74336FUNC<unknown>DEFAULT2
                    _Exit.symtab0xca1444FUNC<unknown>DEFAULT2
                    _GLOBAL_OFFSET_TABLE_.symtab0x240100OBJECT<unknown>HIDDEN11
                    _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_b.symtab0x241904OBJECT<unknown>DEFAULT12
                    __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_b_data.symtab0x1a308768OBJECT<unknown>DEFAULT4
                    __C_ctype_tolower.symtab0x243e04OBJECT<unknown>DEFAULT12
                    __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_tolower_data.symtab0x1b5ae768OBJECT<unknown>DEFAULT4
                    __C_ctype_toupper.symtab0x241984OBJECT<unknown>DEFAULT12
                    __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_toupper_data.symtab0x1a608768OBJECT<unknown>DEFAULT4
                    __EH_FRAME_BEGIN__.symtab0x240000OBJECT<unknown>DEFAULT7
                    __FRAME_END__.symtab0x240000OBJECT<unknown>DEFAULT7
                    __GI___C_ctype_b.symtab0x241904OBJECT<unknown>HIDDEN12
                    __GI___C_ctype_tolower.symtab0x243e04OBJECT<unknown>HIDDEN12
                    __GI___C_ctype_toupper.symtab0x241984OBJECT<unknown>HIDDEN12
                    __GI___ctype_b.symtab0x241944OBJECT<unknown>HIDDEN12
                    __GI___ctype_tolower.symtab0x243e44OBJECT<unknown>HIDDEN12
                    __GI___ctype_toupper.symtab0x2419c4OBJECT<unknown>HIDDEN12
                    __GI___errno_location.symtab0xcacc28FUNC<unknown>HIDDEN2
                    __GI___fcntl_nocancel.symtab0xc8ec108FUNC<unknown>HIDDEN2
                    __GI___fgetc_unlocked.symtab0x130f0300FUNC<unknown>HIDDEN2
                    __GI___glibc_strerror_r.symtab0xe29c24FUNC<unknown>HIDDEN2
                    __GI___h_errno_location.symtab0x1155028FUNC<unknown>HIDDEN2
                    __GI___libc_fcntl.symtab0xc880108FUNC<unknown>HIDDEN2
                    __GI___sigaddset.symtab0xe93c36FUNC<unknown>HIDDEN2
                    __GI___sigdelset.symtab0xe96036FUNC<unknown>HIDDEN2
                    __GI___sigismember.symtab0xe91836FUNC<unknown>HIDDEN2
                    __GI___uClibc_fini.symtab0x109f4124FUNC<unknown>HIDDEN2
                    __GI___uClibc_init.symtab0x10ac4108FUNC<unknown>HIDDEN2
                    __GI___xpg_strerror_r.symtab0xe350256FUNC<unknown>HIDDEN2
                    __GI__exit.symtab0xca1444FUNC<unknown>HIDDEN2
                    __GI_abort.symtab0xf7fc296FUNC<unknown>HIDDEN2
                    __GI_atoi.symtab0xff2c32FUNC<unknown>HIDDEN2
                    __GI_brk.symtab0x1453076FUNC<unknown>HIDDEN2
                    __GI_chdir.symtab0xc7b052FUNC<unknown>HIDDEN2
                    __GI_clock_getres.symtab0x10f7c52FUNC<unknown>HIDDEN2
                    __GI_close.symtab0xca4052FUNC<unknown>HIDDEN2
                    __GI_closedir.symtab0x11158248FUNC<unknown>HIDDEN2
                    __GI_config_close.symtab0x1189452FUNC<unknown>HIDDEN2
                    __GI_config_open.symtab0x118c872FUNC<unknown>HIDDEN2
                    __GI_config_read.symtab0x1156c808FUNC<unknown>HIDDEN2
                    __GI_connect.symtab0xe6a456FUNC<unknown>HIDDEN2
                    __GI_errno.symtab0x2a6384OBJECT<unknown>HIDDEN13
                    __GI_exit.symtab0x10128184FUNC<unknown>HIDDEN2
                    __GI_fclose.symtab0x11a38436FUNC<unknown>HIDDEN2
                    __GI_fcntl.symtab0xc880108FUNC<unknown>HIDDEN2
                    __GI_fflush_unlocked.symtab0x12ee4524FUNC<unknown>HIDDEN2
                    __GI_fgetc.symtab0x12bc4220FUNC<unknown>HIDDEN2
                    __GI_fgetc_unlocked.symtab0x130f0300FUNC<unknown>HIDDEN2
                    __GI_fgets.symtab0x12ca0188FUNC<unknown>HIDDEN2
                    __GI_fgets_unlocked.symtab0x1321c160FUNC<unknown>HIDDEN2
                    __GI_fopen.symtab0x11bec32FUNC<unknown>HIDDEN2
                    __GI_fork.symtab0xc72052FUNC<unknown>HIDDEN2
                    __GI_fputs_unlocked.symtab0xdd8856FUNC<unknown>HIDDEN2
                    __GI_fseek.symtab0x149c836FUNC<unknown>HIDDEN2
                    __GI_fseeko64.symtab0x149ec336FUNC<unknown>HIDDEN2
                    __GI_fstat.symtab0x145bc88FUNC<unknown>HIDDEN2
                    __GI_fwrite_unlocked.symtab0xddc0176FUNC<unknown>HIDDEN2
                    __GI_getc_unlocked.symtab0x130f0300FUNC<unknown>HIDDEN2
                    __GI_getdtablesize.symtab0x1105844FUNC<unknown>HIDDEN2
                    __GI_getegid.symtab0x10fb020FUNC<unknown>HIDDEN2
                    __GI_geteuid.symtab0x10fc420FUNC<unknown>HIDDEN2
                    __GI_getgid.symtab0x1104420FUNC<unknown>HIDDEN2
                    __GI_gethostbyname.symtab0xe62028FUNC<unknown>HIDDEN2
                    __GI_gethostbyname2.symtab0xe63c104FUNC<unknown>HIDDEN2
                    __GI_gethostbyname2_r.symtab0x13d70672FUNC<unknown>HIDDEN2
                    __GI_gethostbyname_r.symtab0x16398760FUNC<unknown>HIDDEN2
                    __GI_gethostname.symtab0x166c4120FUNC<unknown>HIDDEN2
                    __GI_getpagesize.symtab0x10f4040FUNC<unknown>HIDDEN2
                    __GI_getpid.symtab0xc6dc20FUNC<unknown>HIDDEN2
                    __GI_getrlimit.symtab0x1458852FUNC<unknown>HIDDEN2
                    __GI_getsockname.symtab0xe6dc56FUNC<unknown>HIDDEN2
                    __GI_gettimeofday.symtab0xc84c52FUNC<unknown>HIDDEN2
                    __GI_getuid.symtab0x10f6820FUNC<unknown>HIDDEN2
                    __GI_h_errno.symtab0x2a63c4OBJECT<unknown>HIDDEN13
                    __GI_htonl.symtab0xe50032FUNC<unknown>HIDDEN2
                    __GI_htons.symtab0xe4f016FUNC<unknown>HIDDEN2
                    __GI_inet_addr.symtab0xe5f840FUNC<unknown>HIDDEN2
                    __GI_inet_aton.symtab0x13c78248FUNC<unknown>HIDDEN2
                    __GI_inet_ntoa.symtab0xe5dc28FUNC<unknown>HIDDEN2
                    __GI_inet_ntoa_r.symtab0xe550140FUNC<unknown>HIDDEN2
                    __GI_inet_ntop.symtab0x15248644FUNC<unknown>HIDDEN2
                    __GI_inet_pton.symtab0x14ee8540FUNC<unknown>HIDDEN2
                    __GI_initstate_r.symtab0xfe48228FUNC<unknown>HIDDEN2
                    __GI_ioctl.symtab0xc9c084FUNC<unknown>HIDDEN2
                    __GI_isatty.symtab0xe45036FUNC<unknown>HIDDEN2
                    __GI_isspace.symtab0xca7440FUNC<unknown>HIDDEN2
                    __GI_kill.symtab0xc81852FUNC<unknown>HIDDEN2
                    __GI_lseek64.symtab0x16794100FUNC<unknown>HIDDEN2
                    __GI_memchr.symtab0x13750240FUNC<unknown>HIDDEN2
                    __GI_memcpy.symtab0xdfa04FUNC<unknown>HIDDEN2
                    __GI_memmove.symtab0x168004FUNC<unknown>HIDDEN2
                    __GI_mempcpy.symtab0x13b2836FUNC<unknown>HIDDEN2
                    __GI_memrchr.symtab0x139ac224FUNC<unknown>HIDDEN2
                    __GI_memset.symtab0xde70156FUNC<unknown>HIDDEN2
                    __GI_mmap.symtab0x10e04104FUNC<unknown>HIDDEN2
                    __GI_mremap.symtab0x1484464FUNC<unknown>HIDDEN2
                    __GI_munmap.symtab0x1108452FUNC<unknown>HIDDEN2
                    __GI_nanosleep.symtab0x110b852FUNC<unknown>HIDDEN2
                    __GI_ntohl.symtab0xe53032FUNC<unknown>HIDDEN2
                    __GI_ntohs.symtab0xe52016FUNC<unknown>HIDDEN2
                    __GI_open.symtab0xc67c96FUNC<unknown>HIDDEN2
                    __GI_opendir.symtab0x11320172FUNC<unknown>HIDDEN2
                    __GI_poll.symtab0x1669052FUNC<unknown>HIDDEN2
                    __GI_raise.symtab0xe84428FUNC<unknown>HIDDEN2
                    __GI_random.symtab0xf93c164FUNC<unknown>HIDDEN2
                    __GI_random_r.symtab0xfce0144FUNC<unknown>HIDDEN2
                    __GI_rawmemchr.symtab0x138fc176FUNC<unknown>HIDDEN2
                    __GI_read.symtab0xc7e452FUNC<unknown>HIDDEN2
                    __GI_readdir64.symtab0x11464236FUNC<unknown>HIDDEN2
                    __GI_recv.symtab0xe75856FUNC<unknown>HIDDEN2
                    __GI_sbrk.symtab0x10fd8108FUNC<unknown>HIDDEN2
                    __GI_select.symtab0xc77064FUNC<unknown>HIDDEN2
                    __GI_send.symtab0xe79056FUNC<unknown>HIDDEN2
                    __GI_setsid.symtab0xc98c52FUNC<unknown>HIDDEN2
                    __GI_setsockopt.symtab0xe7c868FUNC<unknown>HIDDEN2
                    __GI_setstate_r.symtab0xfbfc228FUNC<unknown>HIDDEN2
                    __GI_sigaction.symtab0x10e6c136FUNC<unknown>HIDDEN2
                    __GI_signal.symtab0xe860184FUNC<unknown>HIDDEN2
                    __GI_sigprocmask.symtab0x1112056FUNC<unknown>HIDDEN2
                    __GI_sleep.symtab0x101e0172FUNC<unknown>HIDDEN2
                    __GI_socket.symtab0xe80c56FUNC<unknown>HIDDEN2
                    __GI_sprintf.symtab0xcae852FUNC<unknown>HIDDEN2
                    __GI_srandom_r.symtab0xfd70216FUNC<unknown>HIDDEN2
                    __GI_stat.symtab0x1673c88FUNC<unknown>HIDDEN2
                    __GI_strcasecmp.symtab0xe2e4108FUNC<unknown>HIDDEN2
                    __GI_strchr.symtab0xe1ac240FUNC<unknown>HIDDEN2
                    __GI_strchrnul.symtab0x13b4c236FUNC<unknown>HIDDEN2
                    __GI_strcmp.symtab0xdf8028FUNC<unknown>HIDDEN2
                    __GI_strcoll.symtab0xdf8028FUNC<unknown>HIDDEN2
                    __GI_strcpy.symtab0xe18836FUNC<unknown>HIDDEN2
                    __GI_strcspn.symtab0x138b868FUNC<unknown>HIDDEN2
                    __GI_strdup.symtab0x1681052FUNC<unknown>HIDDEN2
                    __GI_strlen.symtab0xdf1096FUNC<unknown>HIDDEN2
                    __GI_strncpy.symtab0x14d5c188FUNC<unknown>HIDDEN2
                    __GI_strnlen.symtab0xe0bc204FUNC<unknown>HIDDEN2
                    __GI_strpbrk.symtab0x13c3864FUNC<unknown>HIDDEN2
                    __GI_strrchr.symtab0x13ad880FUNC<unknown>HIDDEN2
                    __GI_strspn.symtab0x13a8c76FUNC<unknown>HIDDEN2
                    __GI_strstr.symtab0xdfc0252FUNC<unknown>HIDDEN2
                    __GI_strtok.symtab0xe2b448FUNC<unknown>HIDDEN2
                    __GI_strtok_r.symtab0x13840120FUNC<unknown>HIDDEN2
                    __GI_strtol.symtab0xff4c28FUNC<unknown>HIDDEN2
                    __GI_sysconf.symtab0x103d81496FUNC<unknown>HIDDEN2
                    __GI_tcgetattr.symtab0xe474124FUNC<unknown>HIDDEN2
                    __GI_time.symtab0xc6f048FUNC<unknown>HIDDEN2
                    __GI_toupper.symtab0xca9c48FUNC<unknown>HIDDEN2
                    __GI_uname.symtab0x16c7852FUNC<unknown>HIDDEN2
                    __GI_vsnprintf.symtab0xcb1c180FUNC<unknown>HIDDEN2
                    __GI_wait4.symtab0x10f0c52FUNC<unknown>HIDDEN2
                    __GI_waitpid.symtab0xc75428FUNC<unknown>HIDDEN2
                    __GI_wcrtomb.symtab0x1191084FUNC<unknown>HIDDEN2
                    __GI_wcsnrtombs.symtab0x11988176FUNC<unknown>HIDDEN2
                    __GI_wcsrtombs.symtab0x1196436FUNC<unknown>HIDDEN2
                    __GI_write.symtab0xc95852FUNC<unknown>HIDDEN2
                    __JCR_END__.symtab0x2400c0OBJECT<unknown>DEFAULT10
                    __JCR_LIST__.symtab0x2400c0OBJECT<unknown>DEFAULT10
                    __adddf3.symtab0x16ea8784FUNC<unknown>HIDDEN2
                    __aeabi_cdcmpeq.symtab0x1780424FUNC<unknown>HIDDEN2
                    __aeabi_cdcmple.symtab0x1780424FUNC<unknown>HIDDEN2
                    __aeabi_cdrcmple.symtab0x177e852FUNC<unknown>HIDDEN2
                    __aeabi_d2uiz.symtab0x1789484FUNC<unknown>HIDDEN2
                    __aeabi_dadd.symtab0x16ea8784FUNC<unknown>HIDDEN2
                    __aeabi_dcmpeq.symtab0x1781c24FUNC<unknown>HIDDEN2
                    __aeabi_dcmpge.symtab0x1786424FUNC<unknown>HIDDEN2
                    __aeabi_dcmpgt.symtab0x1787c24FUNC<unknown>HIDDEN2
                    __aeabi_dcmple.symtab0x1784c24FUNC<unknown>HIDDEN2
                    __aeabi_dcmplt.symtab0x1783424FUNC<unknown>HIDDEN2
                    __aeabi_ddiv.symtab0x17548524FUNC<unknown>HIDDEN2
                    __aeabi_dmul.symtab0x172b8656FUNC<unknown>HIDDEN2
                    __aeabi_drsub.symtab0x16e9c0FUNC<unknown>HIDDEN2
                    __aeabi_dsub.symtab0x16ea4788FUNC<unknown>HIDDEN2
                    __aeabi_f2d.symtab0x1720464FUNC<unknown>HIDDEN2
                    __aeabi_i2d.symtab0x171dc40FUNC<unknown>HIDDEN2
                    __aeabi_idiv.symtab0x16d580FUNC<unknown>HIDDEN2
                    __aeabi_idivmod.symtab0x16e8424FUNC<unknown>HIDDEN2
                    __aeabi_l2d.symtab0x1725896FUNC<unknown>HIDDEN2
                    __aeabi_ui2d.symtab0x171b836FUNC<unknown>HIDDEN2
                    __aeabi_uidiv.symtab0xc5540FUNC<unknown>HIDDEN2
                    __aeabi_uidivmod.symtab0xc65024FUNC<unknown>HIDDEN2
                    __aeabi_ul2d.symtab0x17244116FUNC<unknown>HIDDEN2
                    __aeabi_unwind_cpp_pr0.symtab0x1457c4FUNC<unknown>DEFAULT2
                    __aeabi_unwind_cpp_pr1.symtab0x145804FUNC<unknown>DEFAULT2
                    __aeabi_unwind_cpp_pr2.symtab0x145844FUNC<unknown>DEFAULT2
                    __app_fini.symtab0x2a6304OBJECT<unknown>HIDDEN13
                    __atexit_lock.symtab0x243bc24OBJECT<unknown>DEFAULT12
                    __bss_end__.symtab0x2aa580NOTYPE<unknown>DEFAULTSHN_ABS
                    __bss_start.symtab0x243ec0NOTYPE<unknown>DEFAULTSHN_ABS
                    __bss_start__.symtab0x243ec0NOTYPE<unknown>DEFAULTSHN_ABS
                    __check_one_fd.symtab0x10a7084FUNC<unknown>DEFAULT2
                    __close_nameservers.symtab0x162b4152FUNC<unknown>HIDDEN2
                    __cmpdf2.symtab0x17764132FUNC<unknown>HIDDEN2
                    __ctype_b.symtab0x241944OBJECT<unknown>DEFAULT12
                    __ctype_tolower.symtab0x243e44OBJECT<unknown>DEFAULT12
                    __ctype_toupper.symtab0x2419c4OBJECT<unknown>DEFAULT12
                    __curbrk.symtab0x2a6404OBJECT<unknown>HIDDEN13
                    __data_start.symtab0x240880NOTYPE<unknown>DEFAULT12
                    __decode_dotted.symtab0x154cc248FUNC<unknown>HIDDEN2
                    __decode_header.symtab0x16930180FUNC<unknown>HIDDEN2
                    __default_rt_sa_restorer.symtab0x10f040FUNC<unknown>DEFAULT2
                    __default_sa_restorer.symtab0x10ef80FUNC<unknown>DEFAULT2
                    __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __div0.symtab0xc66820FUNC<unknown>HIDDEN2
                    __divdf3.symtab0x17548524FUNC<unknown>HIDDEN2
                    __divsi3.symtab0x16d58300FUNC<unknown>HIDDEN2
                    __dns_lookup.symtab0x155c42024FUNC<unknown>HIDDEN2
                    __do_global_dtors_aux.symtab0x810c0FUNC<unknown>DEFAULT2
                    __do_global_dtors_aux_fini_array_entry.symtab0x240080OBJECT<unknown>DEFAULT9
                    __dso_handle.symtab0x240880OBJECT<unknown>HIDDEN12
                    __encode_dotted.symtab0x16cac172FUNC<unknown>HIDDEN2
                    __encode_header.symtab0x16844236FUNC<unknown>HIDDEN2
                    __encode_question.symtab0x169e496FUNC<unknown>HIDDEN2
                    __end__.symtab0x2aa580NOTYPE<unknown>DEFAULTSHN_ABS
                    __environ.symtab0x2a6284OBJECT<unknown>DEFAULT13
                    __eqdf2.symtab0x17764132FUNC<unknown>HIDDEN2
                    __errno_location.symtab0xcacc28FUNC<unknown>DEFAULT2
                    __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __exidx_end.symtab0x1b9d40NOTYPE<unknown>DEFAULTSHN_ABS
                    __exidx_start.symtab0x1b9c40NOTYPE<unknown>DEFAULTSHN_ABS
                    __exit_cleanup.symtab0x2a6204OBJECT<unknown>HIDDEN13
                    __extendsfdf2.symtab0x1720464FUNC<unknown>HIDDEN2
                    __fcntl_nocancel.symtab0xc8ec108FUNC<unknown>DEFAULT2
                    __fgetc_unlocked.symtab0x130f0300FUNC<unknown>DEFAULT2
                    __fini_array_end.symtab0x2400c0NOTYPE<unknown>HIDDEN9
                    __fini_array_start.symtab0x240080NOTYPE<unknown>HIDDEN9
                    __fixunsdfsi.symtab0x1789484FUNC<unknown>HIDDEN2
                    __floatdidf.symtab0x1725896FUNC<unknown>HIDDEN2
                    __floatsidf.symtab0x171dc40FUNC<unknown>HIDDEN2
                    __floatundidf.symtab0x17244116FUNC<unknown>HIDDEN2
                    __floatunsidf.symtab0x171b836FUNC<unknown>HIDDEN2
                    __frame_dummy_init_array_entry.symtab0x240040OBJECT<unknown>DEFAULT8
                    __gedf2.symtab0x17754148FUNC<unknown>HIDDEN2
                    __get_hosts_byname_r.symtab0x1634c76FUNC<unknown>HIDDEN2
                    __getdents64.symtab0x14884324FUNC<unknown>HIDDEN2
                    __getpagesize.symtab0x10f4040FUNC<unknown>DEFAULT2
                    __glibc_strerror_r.symtab0xe29c24FUNC<unknown>DEFAULT2
                    __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __gtdf2.symtab0x17754148FUNC<unknown>HIDDEN2
                    __h_errno_location.symtab0x1155028FUNC<unknown>DEFAULT2
                    __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __init_array_end.symtab0x240080NOTYPE<unknown>HIDDEN8
                    __init_array_start.symtab0x240040NOTYPE<unknown>HIDDEN8
                    __ledf2.symtab0x1775c140FUNC<unknown>HIDDEN2
                    __libc_close.symtab0xca4052FUNC<unknown>DEFAULT2
                    __libc_connect.symtab0xe6a456FUNC<unknown>DEFAULT2
                    __libc_fcntl.symtab0xc880108FUNC<unknown>DEFAULT2
                    __libc_fork.symtab0xc72052FUNC<unknown>DEFAULT2
                    __libc_lseek64.symtab0x16794100FUNC<unknown>DEFAULT2
                    __libc_nanosleep.symtab0x110b852FUNC<unknown>DEFAULT2
                    __libc_open.symtab0xc67c96FUNC<unknown>DEFAULT2
                    __libc_read.symtab0xc7e452FUNC<unknown>DEFAULT2
                    __libc_recv.symtab0xe75856FUNC<unknown>DEFAULT2
                    __libc_select.symtab0xc77064FUNC<unknown>DEFAULT2
                    __libc_send.symtab0xe79056FUNC<unknown>DEFAULT2
                    __libc_sigaction.symtab0x10e6c136FUNC<unknown>DEFAULT2
                    __libc_stack_end.symtab0x2a6244OBJECT<unknown>DEFAULT13
                    __libc_waitpid.symtab0xc75428FUNC<unknown>DEFAULT2
                    __libc_write.symtab0xc95852FUNC<unknown>DEFAULT2
                    __local_nameserver.symtab0x1b98c16OBJECT<unknown>HIDDEN4
                    __ltdf2.symtab0x1775c140FUNC<unknown>HIDDEN2
                    __malloc_consolidate.symtab0xf3cc436FUNC<unknown>HIDDEN2
                    __malloc_largebin_index.symtab0xe984120FUNC<unknown>DEFAULT2
                    __malloc_lock.symtab0x242e024OBJECT<unknown>DEFAULT12
                    __malloc_state.symtab0x2a6c4888OBJECT<unknown>DEFAULT13
                    __malloc_trim.symtab0xf31c176FUNC<unknown>DEFAULT2
                    __muldf3.symtab0x172b8656FUNC<unknown>HIDDEN2
                    __nameserver.symtab0x2aa4c4OBJECT<unknown>HIDDEN13
                    __nameservers.symtab0x2aa504OBJECT<unknown>HIDDEN13
                    __nedf2.symtab0x17764132FUNC<unknown>HIDDEN2
                    __open_etc_hosts.symtab0x16a4448FUNC<unknown>HIDDEN2
                    __open_nameservers.symtab0x15e581116FUNC<unknown>HIDDEN2
                    __pagesize.symtab0x2a62c4OBJECT<unknown>DEFAULT13
                    __preinit_array_end.symtab0x240040NOTYPE<unknown>HIDDENSHN_ABS
                    __preinit_array_start.symtab0x240040NOTYPE<unknown>HIDDENSHN_ABS
                    __progname.symtab0x243d84OBJECT<unknown>DEFAULT12
                    __progname_full.symtab0x243dc4OBJECT<unknown>DEFAULT12
                    __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __pthread_mutex_init.symtab0x109b88FUNC<unknown>DEFAULT2
                    __pthread_mutex_lock.symtab0x109b08FUNC<unknown>DEFAULT2
                    __pthread_mutex_trylock.symtab0x109b08FUNC<unknown>DEFAULT2
                    __pthread_mutex_unlock.symtab0x109b08FUNC<unknown>DEFAULT2
                    __pthread_return_0.symtab0x109b08FUNC<unknown>DEFAULT2
                    __read_etc_hosts_r.symtab0x16a74516FUNC<unknown>HIDDEN2
                    __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __res_sync.symtab0x2aa444OBJECT<unknown>HIDDEN13
                    __resolv_attempts.symtab0x243eb1OBJECT<unknown>HIDDEN12
                    __resolv_lock.symtab0x2a64824OBJECT<unknown>DEFAULT13
                    __resolv_timeout.symtab0x243ea1OBJECT<unknown>HIDDEN12
                    __rtld_fini.symtab0x2a6344OBJECT<unknown>HIDDEN13
                    __searchdomain.symtab0x2aa484OBJECT<unknown>HIDDEN13
                    __searchdomains.symtab0x2aa544OBJECT<unknown>HIDDEN13
                    __sigaddset.symtab0xe93c36FUNC<unknown>DEFAULT2
                    __sigdelset.symtab0xe96036FUNC<unknown>DEFAULT2
                    __sigismember.symtab0xe91836FUNC<unknown>DEFAULT2
                    __stdin.symtab0x241e04OBJECT<unknown>DEFAULT12
                    __stdio_READ.symtab0x14b3c88FUNC<unknown>HIDDEN2
                    __stdio_WRITE.symtab0x11c0c180FUNC<unknown>HIDDEN2
                    __stdio_adjust_position.symtab0x14b94196FUNC<unknown>HIDDEN2
                    __stdio_fwrite.symtab0x11fc8320FUNC<unknown>HIDDEN2
                    __stdio_init_mutex.symtab0xcc3852FUNC<unknown>HIDDEN2
                    __stdio_mutex_initializer.4636.symtab0x1a90824OBJECT<unknown>DEFAULT4
                    __stdio_rfill.symtab0x14c5848FUNC<unknown>HIDDEN2
                    __stdio_seek.symtab0x14d2060FUNC<unknown>HIDDEN2
                    __stdio_trans2r_o.symtab0x14c88152FUNC<unknown>HIDDEN2
                    __stdio_trans2w_o.symtab0x12108208FUNC<unknown>HIDDEN2
                    __stdio_wcommit.symtab0xcd4048FUNC<unknown>HIDDEN2
                    __stdout.symtab0x241e44OBJECT<unknown>DEFAULT12
                    __subdf3.symtab0x16ea4788FUNC<unknown>HIDDEN2
                    __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __syscall_rt_sigaction.symtab0x110ec52FUNC<unknown>DEFAULT2
                    __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __uClibc_fini.symtab0x109f4124FUNC<unknown>DEFAULT2
                    __uClibc_init.symtab0x10ac4108FUNC<unknown>DEFAULT2
                    __uClibc_main.symtab0x10b30724FUNC<unknown>DEFAULT2
                    __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __uclibc_progname.symtab0x243d44OBJECT<unknown>HIDDEN12
                    __udivsi3.symtab0xc554252FUNC<unknown>HIDDEN2
                    __xpg_strerror_r.symtab0xe350256FUNC<unknown>DEFAULT2
                    __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __xstat32_conv.symtab0x146e0172FUNC<unknown>HIDDEN2
                    __xstat64_conv.symtab0x14614204FUNC<unknown>HIDDEN2
                    __xstat_conv.symtab0x1478c184FUNC<unknown>HIDDEN2
                    _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _bss_custom_printf_spec.symtab0x2a43010OBJECT<unknown>DEFAULT13
                    _bss_end__.symtab0x2aa580NOTYPE<unknown>DEFAULTSHN_ABS
                    _call_via_fp.symtab0x80fd4FUNC<unknown>HIDDEN2
                    _call_via_ip.symtab0x81014FUNC<unknown>HIDDEN2
                    _call_via_lr.symtab0x81094FUNC<unknown>HIDDEN2
                    _call_via_r0.symtab0x80d14FUNC<unknown>HIDDEN2
                    _call_via_r1.symtab0x80d54FUNC<unknown>HIDDEN2
                    _call_via_r2.symtab0x80d94FUNC<unknown>HIDDEN2
                    _call_via_r3.symtab0x80dd4FUNC<unknown>HIDDEN2
                    _call_via_r4.symtab0x80e14FUNC<unknown>HIDDEN2
                    _call_via_r5.symtab0x80e54FUNC<unknown>HIDDEN2
                    _call_via_r6.symtab0x80e94FUNC<unknown>HIDDEN2
                    _call_via_r7.symtab0x80ed4FUNC<unknown>HIDDEN2
                    _call_via_r8.symtab0x80f14FUNC<unknown>HIDDEN2
                    _call_via_r9.symtab0x80f54FUNC<unknown>HIDDEN2
                    _call_via_sl.symtab0x80f94FUNC<unknown>HIDDEN2
                    _call_via_sp.symtab0x81054FUNC<unknown>HIDDEN2
                    _charpad.symtab0xcd7084FUNC<unknown>DEFAULT2
                    _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _custom_printf_arginfo.symtab0x2a66c40OBJECT<unknown>HIDDEN13
                    _custom_printf_handler.symtab0x2a69440OBJECT<unknown>HIDDEN13
                    _custom_printf_spec.symtab0x242dc4OBJECT<unknown>HIDDEN12
                    _dl_aux_init.symtab0x144f856FUNC<unknown>DEFAULT2
                    _dl_phdr.symtab0x2aa3c4OBJECT<unknown>DEFAULT13
                    _dl_phnum.symtab0x2aa404OBJECT<unknown>DEFAULT13
                    _edata.symtab0x243ec0NOTYPE<unknown>DEFAULTSHN_ABS
                    _end.symtab0x2aa580NOTYPE<unknown>DEFAULTSHN_ABS
                    _errno.symtab0x2a6384OBJECT<unknown>DEFAULT13
                    _exit.symtab0xca1444FUNC<unknown>DEFAULT2
                    _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _fini.symtab0x178e80FUNC<unknown>DEFAULT3
                    _fixed_buffers.symtab0x284308192OBJECT<unknown>DEFAULT13
                    _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _fp_out_narrow.symtab0xcdc4132FUNC<unknown>DEFAULT2
                    _fpmaxtostr.symtab0x123d02036FUNC<unknown>HIDDEN2
                    _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _h_errno.symtab0x2a63c4OBJECT<unknown>DEFAULT13
                    _init.symtab0x80b40FUNC<unknown>DEFAULT1
                    _load_inttype.symtab0x121d8112FUNC<unknown>HIDDEN2
                    _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _memcpy.symtab0x132c00FUNC<unknown>HIDDEN2
                    _ppfs_init.symtab0xd530160FUNC<unknown>HIDDEN2
                    _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _ppfs_parsespec.symtab0xd8181392FUNC<unknown>HIDDEN2
                    _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _ppfs_prepargs.symtab0xd5d068FUNC<unknown>HIDDEN2
                    _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _ppfs_setargs.symtab0xd614432FUNC<unknown>HIDDEN2
                    _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _promoted_size.symtab0xd7c484FUNC<unknown>DEFAULT2
                    _pthread_cleanup_pop_restore.symtab0x109c844FUNC<unknown>DEFAULT2
                    _pthread_cleanup_push_defer.symtab0x109c08FUNC<unknown>DEFAULT2
                    _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _sigintr.symtab0x2a6bc8OBJECT<unknown>HIDDEN13
                    _start.symtab0x81b00FUNC<unknown>DEFAULT2
                    _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _stdio_fopen.symtab0x11cc0776FUNC<unknown>HIDDEN2
                    _stdio_init.symtab0xcbd0104FUNC<unknown>HIDDEN2
                    _stdio_openlist.symtab0x241e84OBJECT<unknown>DEFAULT12
                    _stdio_openlist_add_lock.symtab0x241a024OBJECT<unknown>DEFAULT12
                    _stdio_openlist_dec_use.symtab0x12d5c392FUNC<unknown>HIDDEN2
                    _stdio_openlist_del_count.symtab0x2842c4OBJECT<unknown>DEFAULT13
                    _stdio_openlist_del_lock.symtab0x241b824OBJECT<unknown>DEFAULT12
                    _stdio_openlist_use_count.symtab0x284284OBJECT<unknown>DEFAULT13
                    _stdio_streams.symtab0x241ec240OBJECT<unknown>DEFAULT12
                    _stdio_term.symtab0xcc6c212FUNC<unknown>HIDDEN2
                    _stdio_user_locking.symtab0x241d04OBJECT<unknown>DEFAULT12
                    _stdlib_strto_l.symtab0xff68448FUNC<unknown>HIDDEN2
                    _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _store_inttype.symtab0x1224844FUNC<unknown>HIDDEN2
                    _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _string_syserrmsgs.symtab0x1a9d82906OBJECT<unknown>HIDDEN4
                    _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _uintmaxtostr.symtab0x12274348FUNC<unknown>HIDDEN2
                    _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _vfprintf_internal.symtab0xce481768FUNC<unknown>HIDDEN2
                    _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    abort.symtab0xf7fc296FUNC<unknown>DEFAULT2
                    abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    aeabi_unwind_cpp_pr1.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    atoi.symtab0xff2c32FUNC<unknown>DEFAULT2
                    atol.symtab0xff2c32FUNC<unknown>DEFAULT2
                    atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    bcopy.symtab0xdf7016FUNC<unknown>DEFAULT2
                    been_there_done_that.symtab0x2a61c4OBJECT<unknown>DEFAULT13
                    bot.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    brk.symtab0x1453076FUNC<unknown>DEFAULT2
                    brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    bsd_signal.symtab0xe860184FUNC<unknown>DEFAULT2
                    buf.2975.symtab0x2a44016OBJECT<unknown>DEFAULT13
                    buf.5444.symtab0x2a450440OBJECT<unknown>DEFAULT13
                    bzero.symtab0xdfb012FUNC<unknown>DEFAULT2
                    c.symtab0x241884OBJECT<unknown>DEFAULT12
                    calloc.symtab0x14010308FUNC<unknown>DEFAULT2
                    calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    chdir.symtab0xc7b052FUNC<unknown>DEFAULT2
                    chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    clock_getres.symtab0x10f7c52FUNC<unknown>DEFAULT2
                    clock_getres.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    close.symtab0xca4052FUNC<unknown>DEFAULT2
                    close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    closedir.symtab0x11158248FUNC<unknown>DEFAULT2
                    closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    closenameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    commServer.symtab0x240904OBJECT<unknown>DEFAULT12
                    completed.4959.symtab0x243f01OBJECT<unknown>DEFAULT13
                    connect.symtab0xe6a456FUNC<unknown>DEFAULT2
                    connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    connectTimeout.symtab0x951c628FUNC<unknown>DEFAULT2
                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    currentServer.symtab0x241844OBJECT<unknown>DEFAULT12
                    data_start.symtab0x2408c0NOTYPE<unknown>DEFAULT12
                    decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    dns.symtab0x240944OBJECT<unknown>DEFAULT12
                    dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    environ.symtab0x2a6284OBJECT<unknown>DEFAULT13
                    errno.symtab0x2a6384OBJECT<unknown>DEFAULT13
                    errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    exit.symtab0x10128184FUNC<unknown>DEFAULT2
                    exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    exp10_table.symtab0x1b8e072OBJECT<unknown>DEFAULT4
                    fclose.symtab0x11a38436FUNC<unknown>DEFAULT2
                    fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fcntl.symtab0xc880108FUNC<unknown>DEFAULT2
                    fd_to_DIR.symtab0x11250208FUNC<unknown>DEFAULT2
                    fdgets.symtab0x846c212FUNC<unknown>DEFAULT2
                    fdopendir.symtab0x113cc152FUNC<unknown>DEFAULT2
                    fflush_unlocked.symtab0x12ee4524FUNC<unknown>DEFAULT2
                    fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgetc.symtab0x12bc4220FUNC<unknown>DEFAULT2
                    fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgetc_unlocked.symtab0x130f0300FUNC<unknown>DEFAULT2
                    fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgets.symtab0x12ca0188FUNC<unknown>DEFAULT2
                    fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fgets_unlocked.symtab0x1321c160FUNC<unknown>DEFAULT2
                    fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fmt.symtab0x1b8c820OBJECT<unknown>DEFAULT4
                    fopen.symtab0x11bec32FUNC<unknown>DEFAULT2
                    fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fork.symtab0xc72052FUNC<unknown>DEFAULT2
                    fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fputs_unlocked.symtab0xdd8856FUNC<unknown>DEFAULT2
                    fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    frame_dummy.symtab0x81500FUNC<unknown>DEFAULT2
                    free.symtab0xf580572FUNC<unknown>DEFAULT2
                    free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fseek.symtab0x149c836FUNC<unknown>DEFAULT2
                    fseeko.symtab0x149c836FUNC<unknown>DEFAULT2
                    fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fseeko64.symtab0x149ec336FUNC<unknown>DEFAULT2
                    fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fstat.symtab0x145bc88FUNC<unknown>DEFAULT2
                    fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    fwrite_unlocked.symtab0xddc0176FUNC<unknown>DEFAULT2
                    fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getArch.symtab0xb1d436FUNC<unknown>DEFAULT2
                    getHost.symtab0x91dc104FUNC<unknown>DEFAULT2
                    getOurIP.symtab0x8540708FUNC<unknown>DEFAULT2
                    getRandomIP.symtab0x8408100FUNC<unknown>DEFAULT2
                    get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getc.symtab0x12bc4220FUNC<unknown>DEFAULT2
                    getc_unlocked.symtab0x130f0300FUNC<unknown>DEFAULT2
                    getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getdtablesize.symtab0x1105844FUNC<unknown>DEFAULT2
                    getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getegid.symtab0x10fb020FUNC<unknown>DEFAULT2
                    getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    geteuid.symtab0x10fc420FUNC<unknown>DEFAULT2
                    geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getgid.symtab0x1104420FUNC<unknown>DEFAULT2
                    getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname.symtab0xe62028FUNC<unknown>DEFAULT2
                    gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname2.symtab0xe63c104FUNC<unknown>DEFAULT2
                    gethostbyname2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname2_r.symtab0x13d70672FUNC<unknown>DEFAULT2
                    gethostbyname2_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostbyname_r.symtab0x16398760FUNC<unknown>DEFAULT2
                    gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gethostname.symtab0x166c4120FUNC<unknown>DEFAULT2
                    gethostname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getpagesize.symtab0x10f4040FUNC<unknown>DEFAULT2
                    getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getpid.symtab0xc6dc20FUNC<unknown>DEFAULT2
                    getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getrlimit.symtab0x1458852FUNC<unknown>DEFAULT2
                    getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getsockname.symtab0xe6dc56FUNC<unknown>DEFAULT2
                    getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getsockopt.symtab0xe71468FUNC<unknown>DEFAULT2
                    getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    gettimeofday.symtab0xc84c52FUNC<unknown>DEFAULT2
                    gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    getuid.symtab0x10f6820FUNC<unknown>DEFAULT2
                    getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    h_errno.symtab0x2a63c4OBJECT<unknown>DEFAULT13
                    hoste.5443.symtab0x2a60820OBJECT<unknown>DEFAULT13
                    htonl.symtab0xe50032FUNC<unknown>DEFAULT2
                    htons.symtab0xe4f016FUNC<unknown>DEFAULT2
                    i.4585.symtab0x2418c4OBJECT<unknown>DEFAULT12
                    index.symtab0xe1ac240FUNC<unknown>DEFAULT2
                    inet_addr.symtab0xe5f840FUNC<unknown>DEFAULT2
                    inet_aton.symtab0x13c78248FUNC<unknown>DEFAULT2
                    inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    inet_ntoa.symtab0xe5dc28FUNC<unknown>DEFAULT2
                    inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    inet_ntoa_r.symtab0xe550140FUNC<unknown>DEFAULT2
                    inet_ntop.symtab0x15248644FUNC<unknown>DEFAULT2
                    inet_ntop4.symtab0x15104324FUNC<unknown>DEFAULT2
                    inet_pton.symtab0x14ee8540FUNC<unknown>DEFAULT2
                    inet_pton4.symtab0x14e18208FUNC<unknown>DEFAULT2
                    initConnection.symtab0xbb94400FUNC<unknown>DEFAULT2
                    init_rand.symtab0x81ec216FUNC<unknown>DEFAULT2
                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    initstate.symtab0xfa98192FUNC<unknown>DEFAULT2
                    initstate_r.symtab0xfe48228FUNC<unknown>DEFAULT2
                    ioctl.symtab0xc9c084FUNC<unknown>DEFAULT2
                    ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    isatty.symtab0xe45036FUNC<unknown>DEFAULT2
                    isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    isspace.symtab0xca7440FUNC<unknown>DEFAULT2
                    isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    kill.symtab0xc81852FUNC<unknown>DEFAULT2
                    kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    last_id.5501.symtab0x243e82OBJECT<unknown>DEFAULT12
                    last_ns_num.5500.symtab0x2a6444OBJECT<unknown>DEFAULT13
                    libc/string/arm/_memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/string/arm/bcopy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/string/arm/bzero.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/string/arm/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/string/arm/memmove.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/string/arm/memset.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/string/arm/strcmp.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/string/arm/strlen.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/sysdeps/linux/arm/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/sysdeps/linux/arm/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/sysdeps/linux/arm/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    libc/sysdeps/linux/arm/sigrestorer.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    listFork.symtab0x9790424FUNC<unknown>DEFAULT2
                    llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    lseek64.symtab0x16794100FUNC<unknown>DEFAULT2
                    macAddress.symtab0x244206OBJECT<unknown>DEFAULT13
                    main.symtab0xbd242096FUNC<unknown>DEFAULT2
                    mainCommSock.symtab0x244104OBJECT<unknown>DEFAULT13
                    malloc.symtab0xe9fc2336FUNC<unknown>DEFAULT2
                    malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    malloc_trim.symtab0xf7bc64FUNC<unknown>DEFAULT2
                    memchr.symtab0x13750240FUNC<unknown>DEFAULT2
                    memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    memcpy.symtab0xdfa04FUNC<unknown>DEFAULT2
                    memmove.symtab0x168004FUNC<unknown>DEFAULT2
                    mempcpy.symtab0x13b2836FUNC<unknown>DEFAULT2
                    mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    memrchr.symtab0x139ac224FUNC<unknown>DEFAULT2
                    memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    memset.symtab0xde70156FUNC<unknown>DEFAULT2
                    mmap.symtab0x10e04104FUNC<unknown>DEFAULT2
                    mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    mremap.symtab0x1484464FUNC<unknown>DEFAULT2
                    mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    munmap.symtab0x1108452FUNC<unknown>DEFAULT2
                    munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    mylock.symtab0x242f824OBJECT<unknown>DEFAULT12
                    mylock.symtab0x2431024OBJECT<unknown>DEFAULT12
                    nanosleep.symtab0x110b852FUNC<unknown>DEFAULT2
                    nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    next_start.1358.symtab0x2a43c4OBJECT<unknown>DEFAULT13
                    nprocessors_onln.symtab0x1028c332FUNC<unknown>DEFAULT2
                    ntohl.symtab0xe53032FUNC<unknown>DEFAULT2
                    ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    ntohs.symtab0xe52016FUNC<unknown>DEFAULT2
                    ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    numpids.symtab0x244188OBJECT<unknown>DEFAULT13
                    object.4967.symtab0x243f424OBJECT<unknown>DEFAULT13
                    open.symtab0xc67c96FUNC<unknown>DEFAULT2
                    open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    opendir.symtab0x11320172FUNC<unknown>DEFAULT2
                    opendir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    opennameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    ourIP.symtab0x2a6644OBJECT<unknown>DEFAULT13
                    ovhl7.symtab0xa09c3460FUNC<unknown>DEFAULT2
                    parse_config.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    pids.symtab0x2a6684OBJECT<unknown>DEFAULT13
                    poll.symtab0x1669052FUNC<unknown>DEFAULT2
                    poll.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    prefix.4856.symtab0x1a93012OBJECT<unknown>DEFAULT4
                    print.symtab0x8d1c1012FUNC<unknown>DEFAULT2
                    printchar.symtab0x8938112FUNC<unknown>DEFAULT2
                    printi.symtab0x8b30492FUNC<unknown>DEFAULT2
                    prints.symtab0x89a8392FUNC<unknown>DEFAULT2
                    processCmd.symtab0xb1f82460FUNC<unknown>DEFAULT2
                    program_invocation_name.symtab0x243dc4OBJECT<unknown>DEFAULT12
                    program_invocation_short_name.symtab0x243d84OBJECT<unknown>DEFAULT12
                    qual_chars.4865.symtab0x1a94420OBJECT<unknown>DEFAULT4
                    raise.symtab0xe84428FUNC<unknown>DEFAULT2
                    raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    rand.symtab0xf92424FUNC<unknown>DEFAULT2
                    rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    rand_cmwc.symtab0x82c4324FUNC<unknown>DEFAULT2

                    Network Behavior

                    Network Port Distribution

                    TCP Packets

                    TimestampSource PortDest PortSource IPDest IP
                    Jan 21, 2022 08:18:14.136399984 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:18:14.156573057 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:18:14.156656027 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:18:14.618750095 CET42836443192.168.2.2391.189.91.43
                    Jan 21, 2022 08:18:15.162839890 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:18:15.183412075 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:18:15.183650017 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:18:15.186245918 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:18:15.206607103 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:18:15.386823893 CET4251680192.168.2.23109.202.202.202
                    Jan 21, 2022 08:18:29.008555889 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:18:29.008943081 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:18:29.028954029 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:18:29.029248953 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:18:29.722263098 CET43928443192.168.2.2391.189.91.42
                    Jan 21, 2022 08:18:42.009977102 CET42836443192.168.2.2391.189.91.43
                    Jan 21, 2022 08:18:46.105781078 CET4251680192.168.2.23109.202.202.202
                    Jan 21, 2022 08:19:10.681031942 CET43928443192.168.2.2391.189.91.42
                    Jan 21, 2022 08:19:29.013185024 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:19:29.013367891 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:19:29.033216000 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:19:29.033335924 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:20:29.016444921 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:20:29.016993999 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:20:29.037117958 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:20:29.037364006 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:21:29.024648905 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:21:29.024938107 CET530784258192.168.2.2378.47.230.250
                    Jan 21, 2022 08:21:29.044936895 CET42585307878.47.230.250192.168.2.23
                    Jan 21, 2022 08:21:29.045164108 CET530784258192.168.2.2378.47.230.250

                    System Behavior

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/cat
                    Arguments:cat /tmp/tmp.zZSir0SvNh
                    File size:43416 bytes
                    MD5 hash:7e9d213e404ad3bb82e4ebb2e1f2c1b3

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/head
                    Arguments:head -n 10
                    File size:47480 bytes
                    MD5 hash:fd96a67145172477dd57131396fc9608

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/tr
                    Arguments:tr -d \\000-\\011\\013\\014\\016-\\037
                    File size:51544 bytes
                    MD5 hash:fbd1402dd9f72d8ebfff00ce7c3a7bb5

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/cut
                    Arguments:cut -c -80
                    File size:47480 bytes
                    MD5 hash:d8ed0ea8f22c0de0f8692d4d9f1759d3

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/cat
                    Arguments:cat /tmp/tmp.zZSir0SvNh
                    File size:43416 bytes
                    MD5 hash:7e9d213e404ad3bb82e4ebb2e1f2c1b3

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/head
                    Arguments:head -n 10
                    File size:47480 bytes
                    MD5 hash:fd96a67145172477dd57131396fc9608

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/tr
                    Arguments:tr -d \\000-\\011\\013\\014\\016-\\037
                    File size:51544 bytes
                    MD5 hash:fbd1402dd9f72d8ebfff00ce7c3a7bb5

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/cut
                    Arguments:cut -c -80
                    File size:47480 bytes
                    MD5 hash:d8ed0ea8f22c0de0f8692d4d9f1759d3

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/dash
                    Arguments:n/a
                    File size:129816 bytes
                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                    General

                    Start time:08:18:11
                    Start date:21/01/2022
                    Path:/usr/bin/rm
                    Arguments:rm -f /tmp/tmp.zZSir0SvNh /tmp/tmp.zhdUhR0yq7 /tmp/tmp.WcqJlHVoEF
                    File size:72056 bytes
                    MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                    General

                    Start time:08:18:12
                    Start date:21/01/2022
                    Path:/tmp/fuckjewishpeople.arm6
                    Arguments:/tmp/fuckjewishpeople.arm6
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    General

                    Start time:08:18:13
                    Start date:21/01/2022
                    Path:/tmp/fuckjewishpeople.arm6
                    Arguments:n/a
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    General

                    Start time:08:18:13
                    Start date:21/01/2022
                    Path:/tmp/fuckjewishpeople.arm6
                    Arguments:n/a
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1