Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
qqyt33.ppc.elf

Overview

General Information

Sample name:qqyt33.ppc.elf
Analysis ID:1448460
MD5:a0d73f6b8a2e00c766f7be2ba067d492
SHA1:7acd839f623c98af4f2f16df6fdbaf746a82431d
SHA256:833f1dbb8bdb468b5b61ada182ece04233b8d285e2d63ad54053fb33ab116cb3
Infos:

Detection

Gafgyt, Mirai
Score:92
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Gafgyt
Yara detected Mirai
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Sample contains strings that are user agent strings indicative of HTTP manipulation
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

Joe Sandbox version:40.0.0 Tourmaline
Analysis ID:1448460
Start date and time:2024-05-28 10:49:33 +02:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 4s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:qqyt33.ppc.elf
Detection:MAL
Classification:mal92.spre.troj.linELF@0/0@2/0
Command:/tmp/qqyt33.ppc.elf
PID:5415
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:
  • system is lnxubuntu20
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
qqyt33.ppc.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    qqyt33.ppc.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      qqyt33.ppc.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
      • 0x10dbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10dd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10de4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10df8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10e98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10eac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10ec0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10ed4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10ee8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10efc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x10f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      qqyt33.ppc.elfLinux_Trojan_Gafgyt_ea92cca8unknownunknown
      • 0x10d6c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
      SourceRuleDescriptionAuthorStrings
      5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security
        5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmpJoeSecurity_GafgytYara detected GafgytJoe Security
          5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
            5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
              5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
              • 0x10dbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10dd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10de4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10df8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10e98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10eac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10ec0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10ed4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10ee8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10efc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10f10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10f24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10f38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              • 0x10f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
              Click to see the 9 entries
              No Snort rule has matched

              Click to jump to signature section

              Show All Signature Results

              AV Detection

              barindex
              Source: qqyt33.ppc.elfAvira: detected
              Source: qqyt33.ppc.elfMalware Configuration Extractor: Gafgyt {"C2 url": "80.253.246.4:777"}
              Source: qqyt33.ppc.elfVirustotal: Detection: 63%Perma Link
              Source: qqyt33.ppc.elfReversingLabs: Detection: 68%

              Spreading

              barindex
              Source: /tmp/qqyt33.ppc.elf (PID: 5415)Opens: /proc/net/routeJump to behavior
              Source: global trafficTCP traffic: 192.168.2.13:39394 -> 80.253.246.4:777
              Source: unknownTCP traffic detected without corresponding DNS query: 80.253.246.4
              Source: unknownTCP traffic detected without corresponding DNS query: 80.253.246.4
              Source: unknownTCP traffic detected without corresponding DNS query: 80.253.246.4
              Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com
              Source: qqyt33.ppc.elfString found in binary or memory: http://fast.no/support/crawler.asp)
              Source: qqyt33.ppc.elfString found in binary or memory: http://feedback.redkolibri.com/
              Source: qqyt33.ppc.elfString found in binary or memory: http://www.baidu.com/search/spider.htm)
              Source: qqyt33.ppc.elfString found in binary or memory: http://www.baidu.com/search/spider.html)
              Source: qqyt33.ppc.elfString found in binary or memory: http://www.billybobbot.com/crawler/)

              System Summary

              barindex
              Source: qqyt33.ppc.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
              Source: qqyt33.ppc.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
              Source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
              Source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
              Source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
              Source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5415, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5415, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5417, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5417, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
              Source: qqyt33.ppc.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
              Source: qqyt33.ppc.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
              Source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
              Source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
              Source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
              Source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5415, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5415, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5417, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
              Source: Process Memory Space: qqyt33.ppc.elf PID: 5417, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
              Source: classification engineClassification label: mal92.spre.troj.linELF@0/0@2/0
              Source: /tmp/qqyt33.ppc.elf (PID: 5415)Queries kernel information via 'uname': Jump to behavior
              Source: qqyt33.ppc.elf, 5415.1.00007ffee9792000.00007ffee97b3000.rw-.sdmp, qqyt33.ppc.elf, 5417.1.00007ffee9792000.00007ffee97b3000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/qqyt33.ppc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/qqyt33.ppc.elf
              Source: qqyt33.ppc.elf, 5415.1.00005636b6eac000.00005636b6fda000.rw-.sdmp, qqyt33.ppc.elf, 5417.1.00005636b6eac000.00005636b6fda000.rw-.sdmpBinary or memory string: 6V!/etc/qemu-binfmt/arm
              Source: qqyt33.ppc.elf, 5415.1.00005636b6eac000.00005636b6fda000.rw-.sdmp, qqyt33.ppc.elf, 5417.1.00005636b6eac000.00005636b6fda000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
              Source: qqyt33.ppc.elf, 5415.1.00007ffee9792000.00007ffee97b3000.rw-.sdmp, qqyt33.ppc.elf, 5417.1.00007ffee9792000.00007ffee97b3000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

              Stealing of Sensitive Information

              barindex
              Source: Yara matchFile source: qqyt33.ppc.elf, type: SAMPLE
              Source: Yara matchFile source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: qqyt33.ppc.elf, type: SAMPLE
              Source: Yara matchFile source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: Process Memory Space: qqyt33.ppc.elf PID: 5415, type: MEMORYSTR
              Source: Yara matchFile source: Process Memory Space: qqyt33.ppc.elf PID: 5417, type: MEMORYSTR
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
              Source: Initial sampleUser agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
              Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
              Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
              Source: Initial sampleUser agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
              Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
              Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
              Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

              Remote Access Functionality

              barindex
              Source: Yara matchFile source: qqyt33.ppc.elf, type: SAMPLE
              Source: Yara matchFile source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: qqyt33.ppc.elf, type: SAMPLE
              Source: Yara matchFile source: 5415.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 5417.1.00007f6b50017000.00007f6b5002b000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: Process Memory Space: qqyt33.ppc.elf PID: 5415, type: MEMORYSTR
              Source: Yara matchFile source: Process Memory Space: qqyt33.ppc.elf PID: 5417, type: MEMORYSTR
              ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
              Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume AccessOS Credential Dumping11
              Security Software Discovery
              Remote ServicesData from Local System1
              Data Obfuscation
              Exfiltration Over Other Network MediumAbuse Accessibility Features
              CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
              Remote System Discovery
              Remote Desktop ProtocolData from Removable Media1
              Non-Standard Port
              Exfiltration Over BluetoothNetwork Denial of Service
              Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
              Non-Application Layer Protocol
              Automated ExfiltrationData Encrypted for Impact
              Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
              Application Layer Protocol
              Traffic DuplicationData Destruction
              {"C2 url": "80.253.246.4:777"}
              Hide Legend

              Legend:

              • Process
              • Signature
              • Created File
              • DNS/IP Info
              • Is Dropped
              • Number of created Files
              • Is malicious
              • Internet
              SourceDetectionScannerLabelLink
              qqyt33.ppc.elf64%VirustotalBrowse
              qqyt33.ppc.elf68%ReversingLabsLinux.Trojan.Gafgyt
              qqyt33.ppc.elf100%AviraLINUX/Gafgyt.opnd
              No Antivirus matches
              SourceDetectionScannerLabelLink
              daisy.ubuntu.com0%VirustotalBrowse
              SourceDetectionScannerLabelLink
              http://www.billybobbot.com/crawler/)100%URL Reputationphishing
              http://www.billybobbot.com/crawler/)100%URL Reputationphishing
              http://fast.no/support/crawler.asp)0%URL Reputationsafe
              http://feedback.redkolibri.com/0%URL Reputationsafe
              NameIPActiveMaliciousAntivirus DetectionReputation
              daisy.ubuntu.com
              162.213.35.24
              truefalseunknown
              NameMaliciousAntivirus DetectionReputation
              80.253.246.4:777true
                unknown
                NameSourceMaliciousAntivirus DetectionReputation
                http://www.baidu.com/search/spider.html)qqyt33.ppc.elffalse
                  unknown
                  http://www.billybobbot.com/crawler/)qqyt33.ppc.elftrue
                  • URL Reputation: phishing
                  • URL Reputation: phishing
                  unknown
                  http://fast.no/support/crawler.asp)qqyt33.ppc.elffalse
                  • URL Reputation: safe
                  unknown
                  http://feedback.redkolibri.com/qqyt33.ppc.elffalse
                  • URL Reputation: safe
                  unknown
                  http://www.baidu.com/search/spider.htm)qqyt33.ppc.elffalse
                    unknown
                    • No. of IPs < 25%
                    • 25% < No. of IPs < 50%
                    • 50% < No. of IPs < 75%
                    • 75% < No. of IPs
                    IPDomainCountryFlagASNASN NameMalicious
                    80.253.246.4
                    unknownTurkey
                    202505ONLINENETTRtrue
                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                    80.253.246.4qqyt33.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                      qqyt33.x32.elfGet hashmaliciousMirai, GafgytBrowse
                        qqyt33.x86.elfGet hashmaliciousMirai, GafgytBrowse
                          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                          daisy.ubuntu.comqqyt33.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                          • 162.213.35.25
                          qqyt33.x32.elfGet hashmaliciousMirai, GafgytBrowse
                          • 162.213.35.25
                          qqyt33.x86.elfGet hashmaliciousMirai, GafgytBrowse
                          • 162.213.35.24
                          3VNm34zbc7.elfGet hashmaliciousMiraiBrowse
                          • 162.213.35.24
                          w3VAiTmVg0.elfGet hashmaliciousMiraiBrowse
                          • 162.213.35.25
                          o4GYRPqvvO.elfGet hashmaliciousMiraiBrowse
                          • 162.213.35.25
                          NOvCwMdIKO.elfGet hashmaliciousMiraiBrowse
                          • 162.213.35.25
                          1gy1Nce0Kj.elfGet hashmaliciousMiraiBrowse
                          • 162.213.35.24
                          n7VzBE8J78.elfGet hashmaliciousMiraiBrowse
                          • 162.213.35.25
                          vOgT7Ozf3x.elfGet hashmaliciousMirai, OkiruBrowse
                          • 162.213.35.25
                          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                          ONLINENETTRqqyt33.sh4.elfGet hashmaliciousGafgyt, MiraiBrowse
                          • 80.253.246.4
                          qqyt33.x32.elfGet hashmaliciousMirai, GafgytBrowse
                          • 80.253.246.4
                          qqyt33.x86.elfGet hashmaliciousMirai, GafgytBrowse
                          • 80.253.246.4
                          W0hcKR4emh.exeGet hashmaliciousAsyncRAT, Luna Logger, zgRATBrowse
                          • 80.253.246.12
                          Neue_Ordnung_20220712.exeGet hashmaliciousFormBookBrowse
                          • 2.59.119.2
                          Outstanding SOA.exeGet hashmaliciousFormBookBrowse
                          • 2.59.119.2
                          Linux_amd64Get hashmaliciousUnknownBrowse
                          • 2.59.119.2
                          mTUrqv2ZdZ.exeGet hashmaliciousAsyncRATBrowse
                          • 2.59.119.84
                          http://meta-helpteams.com/case/9875154231408/Get hashmaliciousUnknownBrowse
                          • 2.59.119.21
                          https://notifications.google.com/g/p/APNL1TirmAeCyygwQxqQ4cYrz-vlkxJqotX4ApGvOIhnf5plw8E2q_X2gwM8OxvaJt_wwRTzdZzH9ToK3dqRiUwObbj835EZayDFX0Y1N7t8dgIKvjKAGet hashmaliciousUnknownBrowse
                          • 2.59.119.21
                          No context
                          No context
                          No created / dropped files found
                          File type:ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
                          Entropy (8bit):6.053427273847861
                          TrID:
                          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                          File name:qqyt33.ppc.elf
                          File size:115'173 bytes
                          MD5:a0d73f6b8a2e00c766f7be2ba067d492
                          SHA1:7acd839f623c98af4f2f16df6fdbaf746a82431d
                          SHA256:833f1dbb8bdb468b5b61ada182ece04233b8d285e2d63ad54053fb33ab116cb3
                          SHA512:f80da517860f17799862f1104cb43440f2c4cfc05d2efc4d5547fbe418a40df1bb1eb1fba46be59fa97d93f1c036e28c555f61e014961cd018e06ee73546427e
                          SSDEEP:3072:4oJvbZqjF+I5+HJGZ4d1Mv5hrTrooDmhQxu1bXWIn:4IvV0YJGZ4PMv5hrTrPDmhQxu1rWIn
                          TLSH:8AB33805F9148613C1C32B7AB79B434937226BE997DB33156638BFF43BC27991D26A80
                          File Content Preview:.ELF...a..........(.........4...\S......4. ...(.....................\0..\0..............\0..\0..\0.......i..........Q.td..................................-...L."....<..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

                          ELF header

                          Class:ELF32
                          Data:2's complement, little endian
                          Version:1 (current)
                          Machine:ARM
                          Version Number:0x1
                          Type:EXEC (Executable file)
                          OS/ABI:ARM - ABI
                          ABI Version:0
                          Entry Point Address:0x8190
                          Flags:0x202
                          ELF Header Size:52
                          Program Header Offset:52
                          Program Header Size:32
                          Number of Program Headers:3
                          Section Header Offset:86876
                          Section Header Size:40
                          Number of Section Headers:21
                          Header String Table Index:18
                          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                          NULL0x00x00x00x00x0000
                          .initPROGBITS0x80940x940x180x00x6AX004
                          .textPROGBITS0x80b00xb00xf0880x00x6AX0016
                          .finiPROGBITS0x171380xf1380x140x00x6AX004
                          .rodataPROGBITS0x1714c0xf14c0x3f100x00x2A004
                          .eh_framePROGBITS0x2305c0x1305c0x40x00x3WA004
                          .ctorsPROGBITS0x230600x130600x80x00x3WA004
                          .dtorsPROGBITS0x230680x130680x80x00x3WA004
                          .jcrPROGBITS0x230700x130700x40x00x3WA004
                          .dataPROGBITS0x230740x130740x3700x00x3WA004
                          .bssNOBITS0x233e40x133e40x66600x00x3WA004
                          .commentPROGBITS0x00x133e40xbb00x00x0001
                          .debug_arangesPROGBITS0x00x13f980x1200x00x0008
                          .debug_infoPROGBITS0x00x140b80x70d0x00x0001
                          .debug_abbrevPROGBITS0x00x147c50xb40x00x0001
                          .debug_linePROGBITS0x00x148790x9780x00x0001
                          .debug_framePROGBITS0x00x151f40xa00x00x0004
                          .ARM.attributesARM_ATTRIBUTES0x00x152940x100x00x0001
                          .shstrtabSTRTAB0x00x152a40xb80x00x0001
                          .symtabSYMTAB0x00x156a40x46a00x100x0206224
                          .strtabSTRTAB0x00x19d440x24a10x00x0001
                          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                          LOAD0x00x80000x80000x1305c0x1305c6.23340x5R E0x8000.init .text .fini .rodata
                          LOAD0x1305c0x2305c0x2305c0x3880x69e84.04820x6RW 0x8000.eh_frame .ctors .dtors .jcr .data .bss
                          GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                          NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                          .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                          .symtab0x80940SECTION<unknown>DEFAULT1
                          .symtab0x80b00SECTION<unknown>DEFAULT2
                          .symtab0x171380SECTION<unknown>DEFAULT3
                          .symtab0x1714c0SECTION<unknown>DEFAULT4
                          .symtab0x2305c0SECTION<unknown>DEFAULT5
                          .symtab0x230600SECTION<unknown>DEFAULT6
                          .symtab0x230680SECTION<unknown>DEFAULT7
                          .symtab0x230700SECTION<unknown>DEFAULT8
                          .symtab0x230740SECTION<unknown>DEFAULT9
                          .symtab0x233e40SECTION<unknown>DEFAULT10
                          .symtab0x00SECTION<unknown>DEFAULT11
                          .symtab0x00SECTION<unknown>DEFAULT12
                          .symtab0x00SECTION<unknown>DEFAULT13
                          .symtab0x00SECTION<unknown>DEFAULT14
                          .symtab0x00SECTION<unknown>DEFAULT15
                          .symtab0x00SECTION<unknown>DEFAULT16
                          .symtab0x00SECTION<unknown>DEFAULT17
                          $a.symtab0x80940NOTYPE<unknown>DEFAULT1
                          $a.symtab0x171380NOTYPE<unknown>DEFAULT3
                          $a.symtab0x80b00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x81280NOTYPE<unknown>DEFAULT2
                          $a.symtab0x171440NOTYPE<unknown>DEFAULT3
                          $a.symtab0x81880NOTYPE<unknown>DEFAULT2
                          $a.symtab0x80a00NOTYPE<unknown>DEFAULT1
                          $a.symtab0x170fc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x171300NOTYPE<unknown>DEFAULT2
                          $a.symtab0x80a40NOTYPE<unknown>DEFAULT1
                          $a.symtab0x80a80NOTYPE<unknown>DEFAULT1
                          $a.symtab0x171480NOTYPE<unknown>DEFAULT3
                          $a.symtab0x81900NOTYPE<unknown>DEFAULT2
                          $a.symtab0x81cc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x82a00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x83d80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x84380NOTYPE<unknown>DEFAULT2
                          $a.symtab0x87d80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x90d00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x94d00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x98f40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x9be00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x9d400NOTYPE<unknown>DEFAULT2
                          $a.symtab0x9ea00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xa05c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xade40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xae000NOTYPE<unknown>DEFAULT2
                          $a.symtab0xb9900NOTYPE<unknown>DEFAULT2
                          $a.symtab0xbb1c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc3100NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc4200NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc4ec0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc4f00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc5380NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc6000NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc6280NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc6540NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc6800NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc6ac0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc6b40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc7040NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc7300NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc78c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc7b80NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc7e80NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc8140NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc81c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc8240NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc8500NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc8680NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc89c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc8a80NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc8dc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xc9900NOTYPE<unknown>DEFAULT2
                          $a.symtab0xca0c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xca1c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xcad40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xcb000NOTYPE<unknown>DEFAULT2
                          $a.symtab0xd22c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xd2c40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xd2fc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xd4980NOTYPE<unknown>DEFAULT2
                          $a.symtab0xd4e40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xda240NOTYPE<unknown>DEFAULT2
                          $a.symtab0xda580NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdb100NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdb200NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdb300NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdb400NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdbe00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdc000NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdc600NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdd4c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdd700NOTYPE<unknown>DEFAULT2
                          $a.symtab0xde480NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdf400NOTYPE<unknown>DEFAULT2
                          $a.symtab0xdf540NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe03c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe0480NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe0680NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe0e00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe1480NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe1d80NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe1fc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe2040NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe2540NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe2800NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe2ac0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe2dc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe3080NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe3340NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe3640NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe3900NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe4340NOTYPE<unknown>DEFAULT2
                          $a.symtab0xe4a00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xed5c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf1b00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf1d80NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf2d80NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf2dc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf3580NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf3e40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf47c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf4f80NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf5c00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf64c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf72c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf7f40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf8000NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf8080NOTYPE<unknown>DEFAULT2
                          $a.symtab0xf9a00NOTYPE<unknown>DEFAULT2
                          $a.symtab0xfa3c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xfae40NOTYPE<unknown>DEFAULT2
                          $a.symtab0xfbfc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0xffd40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x101f40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x102980NOTYPE<unknown>DEFAULT2
                          $a.symtab0x102d00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1031c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x105bc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1061c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x106900NOTYPE<unknown>DEFAULT2
                          $a.symtab0x106980NOTYPE<unknown>DEFAULT2
                          $a.symtab0x106c40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x106f00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107180NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107200NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107280NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107300NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107480NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107740NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1077c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107a80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x107d40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1082c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1085c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x108880NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1095c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x10a180NOTYPE<unknown>DEFAULT2
                          $a.symtab0x10ab40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x10b480NOTYPE<unknown>DEFAULT2
                          $a.symtab0x10c1c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x10c280NOTYPE<unknown>DEFAULT2
                          $a.symtab0x10fb00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x110000NOTYPE<unknown>DEFAULT2
                          $a.symtab0x110200NOTYPE<unknown>DEFAULT2
                          $a.symtab0x110cc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1123c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x112480NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1131c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x116080NOTYPE<unknown>DEFAULT2
                          $a.symtab0x117400NOTYPE<unknown>DEFAULT2
                          $a.symtab0x118440NOTYPE<unknown>DEFAULT2
                          $a.symtab0x118b80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x118f80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x11a4c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x121ec0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x122a80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x123440NOTYPE<unknown>DEFAULT2
                          $a.symtab0x124840NOTYPE<unknown>DEFAULT2
                          $a.symtab0x126540NOTYPE<unknown>DEFAULT2
                          $a.symtab0x127840NOTYPE<unknown>DEFAULT2
                          $a.symtab0x128200NOTYPE<unknown>DEFAULT2
                          $a.symtab0x12cb00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x12da40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x12dbc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x12e980NOTYPE<unknown>DEFAULT2
                          $a.symtab0x12f800NOTYPE<unknown>DEFAULT2
                          $a.symtab0x12fc00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x130040NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1304c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x130c00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x131000NOTYPE<unknown>DEFAULT2
                          $a.symtab0x131f00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x134880NOTYPE<unknown>DEFAULT2
                          $a.symtab0x134a00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x135ac0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x139140NOTYPE<unknown>DEFAULT2
                          $a.symtab0x139380NOTYPE<unknown>DEFAULT2
                          $a.symtab0x139700NOTYPE<unknown>DEFAULT2
                          $a.symtab0x139c00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x139f00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x13fd80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x141380NOTYPE<unknown>DEFAULT2
                          $a.symtab0x141440NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1427c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x142d80NOTYPE<unknown>DEFAULT2
                          $a.symtab0x143980NOTYPE<unknown>DEFAULT2
                          $a.symtab0x143c40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x144800NOTYPE<unknown>DEFAULT2
                          $a.symtab0x144b00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x145600NOTYPE<unknown>DEFAULT2
                          $a.symtab0x146180NOTYPE<unknown>DEFAULT2
                          $a.symtab0x148e40NOTYPE<unknown>DEFAULT2
                          $a.symtab0x14c900NOTYPE<unknown>DEFAULT2
                          $a.symtab0x14d840NOTYPE<unknown>DEFAULT2
                          $a.symtab0x155140NOTYPE<unknown>DEFAULT2
                          $a.symtab0x155540NOTYPE<unknown>DEFAULT2
                          $a.symtab0x155940NOTYPE<unknown>DEFAULT2
                          $a.symtab0x159a00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15a1c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15a640NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15d600NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15dd00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15dfc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15e4c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15e780NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15ee00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15ef00NOTYPE<unknown>DEFAULT2
                          $a.symtab0x15f200NOTYPE<unknown>DEFAULT2
                          $a.symtab0x160080NOTYPE<unknown>DEFAULT2
                          $a.symtab0x160bc0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x161180NOTYPE<unknown>DEFAULT2
                          $a.symtab0x161240NOTYPE<unknown>DEFAULT2
                          $a.symtab0x1630c0NOTYPE<unknown>DEFAULT2
                          $a.symtab0x163880NOTYPE<unknown>DEFAULT2
                          $a.symtab0x164300NOTYPE<unknown>DEFAULT2
                          $a.symtab0x165700NOTYPE<unknown>DEFAULT2
                          $a.symtab0x166540NOTYPE<unknown>DEFAULT2
                          $a.symtab0x16a540NOTYPE<unknown>DEFAULT2
                          $a.symtab0x16f800NOTYPE<unknown>DEFAULT2
                          $a.symtab0x170a80NOTYPE<unknown>DEFAULT2
                          $d.symtab0x230600NOTYPE<unknown>DEFAULT6
                          $d.symtab0x230680NOTYPE<unknown>DEFAULT7
                          $d.symtab0x81180NOTYPE<unknown>DEFAULT2
                          $d.symtab0x81740NOTYPE<unknown>DEFAULT2
                          $d.symtab0x2307c0NOTYPE<unknown>DEFAULT9
                          $d.symtab0x1712c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x230800NOTYPE<unknown>DEFAULT9
                          $d.symtab0x81c00NOTYPE<unknown>DEFAULT2
                          $d.symtab0x230840NOTYPE<unknown>DEFAULT9
                          $d.symtab0x82980NOTYPE<unknown>DEFAULT2
                          $d.symtab0x83cc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x84340NOTYPE<unknown>DEFAULT2
                          $d.symtab0x87c40NOTYPE<unknown>DEFAULT2
                          $d.symtab0x90cc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x94cc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x98ec0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x188140NOTYPE<unknown>DEFAULT4
                          $d.symtab0x9bdc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x9d3c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x9e9c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xa0580NOTYPE<unknown>DEFAULT2
                          $d.symtab0xa9dc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xadfc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xb9600NOTYPE<unknown>DEFAULT2
                          $d.symtab0xbb100NOTYPE<unknown>DEFAULT2
                          $d.symtab0xc2f40NOTYPE<unknown>DEFAULT2
                          $d.symtab0x00NOTYPE<unknown>DEFAULT16
                          $d.symtab0x200NOTYPE<unknown>DEFAULT16
                          $d.symtab0x280NOTYPE<unknown>DEFAULT16
                          $d.symtab0x480NOTYPE<unknown>DEFAULT16
                          $d.symtab0xc8640NOTYPE<unknown>DEFAULT2
                          $d.symtab0xc8980NOTYPE<unknown>DEFAULT2
                          $d.symtab0x231840NOTYPE<unknown>DEFAULT9
                          $d.symtab0x199bc0NOTYPE<unknown>DEFAULT4
                          $d.symtab0x2318c0NOTYPE<unknown>DEFAULT9
                          $d.symtab0x19cbc0NOTYPE<unknown>DEFAULT4
                          $d.symtab0xc8a40NOTYPE<unknown>DEFAULT2
                          $d.symtab0xca080NOTYPE<unknown>DEFAULT2
                          $d.symtab0xca180NOTYPE<unknown>DEFAULT2
                          $d.symtab0xcac40NOTYPE<unknown>DEFAULT2
                          $d.symtab0x231940NOTYPE<unknown>DEFAULT9
                          $d.symtab0x19fbc0NOTYPE<unknown>DEFAULT4
                          $d.symtab0xd2100NOTYPE<unknown>DEFAULT2
                          $d.symtab0x19ff00NOTYPE<unknown>DEFAULT4
                          $d.symtab0xd4940NOTYPE<unknown>DEFAULT2
                          $d.symtab0xd4d80NOTYPE<unknown>DEFAULT2
                          $d.symtab0xd9f40NOTYPE<unknown>DEFAULT2
                          $d.symtab0x232d00NOTYPE<unknown>DEFAULT9
                          $d.symtab0x19ff80NOTYPE<unknown>DEFAULT4
                          $d.symtab0xdd440NOTYPE<unknown>DEFAULT2
                          $d.symtab0xde400NOTYPE<unknown>DEFAULT2
                          $d.symtab0xe0340NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1a07c0NOTYPE<unknown>DEFAULT4
                          $d.symtab0xe0440NOTYPE<unknown>DEFAULT2
                          $d.symtab0xe0dc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xe1d40NOTYPE<unknown>DEFAULT2
                          $d.symtab0xe24c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xe4300NOTYPE<unknown>DEFAULT2
                          $d.symtab0xed3c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x232d40NOTYPE<unknown>DEFAULT9
                          $d.symtab0xf1900NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf1d40NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf2c80NOTYPE<unknown>DEFAULT2
                          $d.symtab0x232ec0NOTYPE<unknown>DEFAULT9
                          $d.symtab0xf3400NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf3cc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf4640NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf4e00NOTYPE<unknown>DEFAULT2
                          $d.symtab0x233040NOTYPE<unknown>DEFAULT9
                          $d.symtab0xf5bc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf6480NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf7200NOTYPE<unknown>DEFAULT2
                          $d.symtab0xf7f00NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1abe80NOTYPE<unknown>DEFAULT4
                          $d.symtab0xf99c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xfa200NOTYPE<unknown>DEFAULT2
                          $d.symtab0x233b00NOTYPE<unknown>DEFAULT9
                          $d.symtab0xfae00NOTYPE<unknown>DEFAULT2
                          $d.symtab0xfbdc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0xfc100NOTYPE<unknown>DEFAULT2
                          $d.symtab0x101d40NOTYPE<unknown>DEFAULT2
                          $d.symtab0x102880NOTYPE<unknown>DEFAULT2
                          $d.symtab0x102cc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x103100NOTYPE<unknown>DEFAULT2
                          $d.symtab0x105800NOTYPE<unknown>DEFAULT2
                          $d.symtab0x233c80NOTYPE<unknown>DEFAULT9
                          $d.symtab0x106880NOTYPE<unknown>DEFAULT2
                          $d.symtab0x107440NOTYPE<unknown>DEFAULT2
                          $d.symtab0x108280NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1094c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x10a140NOTYPE<unknown>DEFAULT2
                          $d.symtab0x10ab00NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1ac640NOTYPE<unknown>DEFAULT4
                          $d.symtab0x10c0c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x296240NOTYPE<unknown>DEFAULT10
                          $d.symtab0x10c240NOTYPE<unknown>DEFAULT2
                          $d.symtab0x10fac0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x112200NOTYPE<unknown>DEFAULT2
                          $d.symtab0x115d80NOTYPE<unknown>DEFAULT2
                          $d.symtab0x121c80NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1ac900NOTYPE<unknown>DEFAULT4
                          $d.symtab0x122980NOTYPE<unknown>DEFAULT2
                          $d.symtab0x123340NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1245c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x126340NOTYPE<unknown>DEFAULT2
                          $d.symtab0x127800NOTYPE<unknown>DEFAULT2
                          $d.symtab0x12d9c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x12e900NOTYPE<unknown>DEFAULT2
                          $d.symtab0x12f780NOTYPE<unknown>DEFAULT2
                          $d.symtab0x131ec0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x135980NOTYPE<unknown>DEFAULT2
                          $d.symtab0x138fc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x139300NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1396c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1426c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x145580NOTYPE<unknown>DEFAULT2
                          $d.symtab0x148dc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x14c880NOTYPE<unknown>DEFAULT2
                          $d.symtab0x154dc0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x233d40NOTYPE<unknown>DEFAULT9
                          $d.symtab0x155500NOTYPE<unknown>DEFAULT2
                          $d.symtab0x155900NOTYPE<unknown>DEFAULT2
                          $d.symtab0x1595c0NOTYPE<unknown>DEFAULT2
                          $d.symtab0x233d60NOTYPE<unknown>DEFAULT9
                          $d.symtab0x1ad3c0NOTYPE<unknown>DEFAULT4
                          $d.symtab0x15a080NOTYPE<unknown>DEFAULT2
                          $d.symtab0x161200NOTYPE<unknown>DEFAULT2
                          $d.symtab0x163040NOTYPE<unknown>DEFAULT2
                          $d.symtab0x163840NOTYPE<unknown>DEFAULT2
                          $d.symtab0x233d80NOTYPE<unknown>DEFAULT9
                          $d.symtab0x1ad5c0NOTYPE<unknown>DEFAULT4
                          $d.symtab0x500NOTYPE<unknown>DEFAULT16
                          $d.symtab0x700NOTYPE<unknown>DEFAULT16
                          $d.symtab0x780NOTYPE<unknown>DEFAULT16
                          $d.symtab0x980NOTYPE<unknown>DEFAULT16
                          C.1.3461.symtab0x1ac6424OBJECT<unknown>DEFAULT4
                          C.70.5136.symtab0x18814104OBJECT<unknown>DEFAULT4
                          C.77.5235.symtab0x194a81128OBJECT<unknown>DEFAULT4
                          Laligned.symtab0xdc280NOTYPE<unknown>DEFAULT2
                          Llastword.symtab0xdc440NOTYPE<unknown>DEFAULT2
                          Q.symtab0x2341416384OBJECT<unknown>DEFAULT10
                          Randhex.symtab0x9ea0444FUNC<unknown>DEFAULT2
                          SendSTD.symtab0x9a40416FUNC<unknown>DEFAULT2
                          UDPRAW.symtab0x9d40352FUNC<unknown>DEFAULT2
                          _Exit.symtab0xc60040FUNC<unknown>DEFAULT2
                          _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                          _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __CTOR_END__.symtab0x230640OBJECT<unknown>DEFAULT6
                          __CTOR_LIST__.symtab0x230600OBJECT<unknown>DEFAULT6
                          __C_ctype_b.symtab0x231844OBJECT<unknown>DEFAULT9
                          __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __C_ctype_b_data.symtab0x199bc768OBJECT<unknown>DEFAULT4
                          __C_ctype_tolower.symtab0x233d84OBJECT<unknown>DEFAULT9
                          __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __C_ctype_tolower_data.symtab0x1ad5c768OBJECT<unknown>DEFAULT4
                          __C_ctype_toupper.symtab0x2318c4OBJECT<unknown>DEFAULT9
                          __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __C_ctype_toupper_data.symtab0x19cbc768OBJECT<unknown>DEFAULT4
                          __DTOR_END__.symtab0x2306c0OBJECT<unknown>DEFAULT7
                          __DTOR_LIST__.symtab0x230680OBJECT<unknown>DEFAULT7
                          __EH_FRAME_BEGIN__.symtab0x2305c0OBJECT<unknown>DEFAULT5
                          __FRAME_END__.symtab0x2305c0OBJECT<unknown>DEFAULT5
                          __GI___C_ctype_b.symtab0x231844OBJECT<unknown>HIDDEN9
                          __GI___C_ctype_tolower.symtab0x233d84OBJECT<unknown>HIDDEN9
                          __GI___C_ctype_toupper.symtab0x2318c4OBJECT<unknown>HIDDEN9
                          __GI___ctype_b.symtab0x231884OBJECT<unknown>HIDDEN9
                          __GI___ctype_tolower.symtab0x233dc4OBJECT<unknown>HIDDEN9
                          __GI___ctype_toupper.symtab0x231904OBJECT<unknown>HIDDEN9
                          __GI___errno_location.symtab0xc89c12FUNC<unknown>HIDDEN2
                          __GI___fcntl_nocancel.symtab0xc59c100FUNC<unknown>HIDDEN2
                          __GI___fgetc_unlocked.symtab0x12654304FUNC<unknown>HIDDEN2
                          __GI___glibc_strerror_r.symtab0xdf4020FUNC<unknown>HIDDEN2
                          __GI___h_errno_location.symtab0x10c1c12FUNC<unknown>HIDDEN2
                          __GI___libc_fcntl.symtab0xc538100FUNC<unknown>HIDDEN2
                          __GI___sigaddset.symtab0xe45836FUNC<unknown>HIDDEN2
                          __GI___sigdelset.symtab0xe47c36FUNC<unknown>HIDDEN2
                          __GI___sigismember.symtab0xe43436FUNC<unknown>HIDDEN2
                          __GI___uClibc_fini.symtab0x1022c108FUNC<unknown>HIDDEN2
                          __GI___uClibc_init.symtab0x102d076FUNC<unknown>HIDDEN2
                          __GI___xpg_strerror_r.symtab0xdf54232FUNC<unknown>HIDDEN2
                          __GI__exit.symtab0xc60040FUNC<unknown>HIDDEN2
                          __GI_abort.symtab0xf1d8256FUNC<unknown>HIDDEN2
                          __GI_atoi.symtab0xf7f412FUNC<unknown>HIDDEN2
                          __GI_brk.symtab0x1393856FUNC<unknown>HIDDEN2
                          __GI_chdir.symtab0xc62844FUNC<unknown>HIDDEN2
                          __GI_clock_getres.symtab0x106c444FUNC<unknown>HIDDEN2
                          __GI_close.symtab0xc65444FUNC<unknown>HIDDEN2
                          __GI_closedir.symtab0x10888212FUNC<unknown>HIDDEN2
                          __GI_config_close.symtab0x10f4c48FUNC<unknown>HIDDEN2
                          __GI_config_open.symtab0x10f7c52FUNC<unknown>HIDDEN2
                          __GI_config_read.symtab0x10c28804FUNC<unknown>HIDDEN2
                          __GI_connect.symtab0xe25444FUNC<unknown>HIDDEN2
                          __GI_errno.symtab0x296244OBJECT<unknown>HIDDEN10
                          __GI_exit.symtab0xf9a0156FUNC<unknown>HIDDEN2
                          __GI_fclose.symtab0x110cc368FUNC<unknown>HIDDEN2
                          __GI_fcntl.symtab0xc538100FUNC<unknown>HIDDEN2
                          __GI_fflush_unlocked.symtab0x12484464FUNC<unknown>HIDDEN2
                          __GI_fgetc.symtab0x121ec188FUNC<unknown>HIDDEN2
                          __GI_fgetc_unlocked.symtab0x12654304FUNC<unknown>HIDDEN2
                          __GI_fgets.symtab0x122a8156FUNC<unknown>HIDDEN2
                          __GI_fgets_unlocked.symtab0x12784148FUNC<unknown>HIDDEN2
                          __GI_fopen.symtab0x1123c12FUNC<unknown>HIDDEN2
                          __GI_fork.symtab0xc68044FUNC<unknown>HIDDEN2
                          __GI_fputs_unlocked.symtab0xda2452FUNC<unknown>HIDDEN2
                          __GI_fseek.symtab0x1413812FUNC<unknown>HIDDEN2
                          __GI_fseeko64.symtab0x14144312FUNC<unknown>HIDDEN2
                          __GI_fstat.symtab0x1397080FUNC<unknown>HIDDEN2
                          __GI_fwrite_unlocked.symtab0xda58172FUNC<unknown>HIDDEN2
                          __GI_getc_unlocked.symtab0x12654304FUNC<unknown>HIDDEN2
                          __GI_getdtablesize.symtab0x106f040FUNC<unknown>HIDDEN2
                          __GI_getegid.symtab0x107188FUNC<unknown>HIDDEN2
                          __GI_geteuid.symtab0x107208FUNC<unknown>HIDDEN2
                          __GI_getgid.symtab0x107288FUNC<unknown>HIDDEN2
                          __GI_gethostbyname.symtab0xe1fc8FUNC<unknown>HIDDEN2
                          __GI_gethostbyname2.symtab0xe20480FUNC<unknown>HIDDEN2
                          __GI_gethostbyname2_r.symtab0x131f0664FUNC<unknown>HIDDEN2
                          __GI_gethostbyname_r.symtab0x15a64764FUNC<unknown>HIDDEN2
                          __GI_gethostname.symtab0x15d60112FUNC<unknown>HIDDEN2
                          __GI_getpagesize.symtab0x1073024FUNC<unknown>HIDDEN2
                          __GI_getpid.symtab0xc6ac8FUNC<unknown>HIDDEN2
                          __GI_getrlimit.symtab0x1074844FUNC<unknown>HIDDEN2
                          __GI_getsockname.symtab0xe28044FUNC<unknown>HIDDEN2
                          __GI_getuid.symtab0x107748FUNC<unknown>HIDDEN2
                          __GI_h_errno.symtab0x296284OBJECT<unknown>HIDDEN10
                          __GI_htonl.symtab0xe0f432FUNC<unknown>HIDDEN2
                          __GI_htons.symtab0xe0e020FUNC<unknown>HIDDEN2
                          __GI_inet_addr.symtab0xe1d836FUNC<unknown>HIDDEN2
                          __GI_inet_aton.symtab0x13100240FUNC<unknown>HIDDEN2
                          __GI_inet_ntoa.symtab0xe1cc12FUNC<unknown>HIDDEN2
                          __GI_inet_ntoa_r.symtab0xe148132FUNC<unknown>HIDDEN2
                          __GI_inet_ntop.symtab0x14a24620FUNC<unknown>HIDDEN2
                          __GI_inet_pton.symtab0x146e4512FUNC<unknown>HIDDEN2
                          __GI_initstate_r.symtab0xf72c200FUNC<unknown>HIDDEN2
                          __GI_ioctl.symtab0xc6b480FUNC<unknown>HIDDEN2
                          __GI_isatty.symtab0xe04832FUNC<unknown>HIDDEN2
                          __GI_isspace.symtab0xc85024FUNC<unknown>HIDDEN2
                          __GI_kill.symtab0xc70444FUNC<unknown>HIDDEN2
                          __GI_lseek64.symtab0x15e78100FUNC<unknown>HIDDEN2
                          __GI_memchr.symtab0x12cb0244FUNC<unknown>HIDDEN2
                          __GI_memcpy.symtab0xdb304FUNC<unknown>HIDDEN2
                          __GI_memmove.symtab0x15ee04FUNC<unknown>HIDDEN2
                          __GI_mempcpy.symtab0x12da424FUNC<unknown>HIDDEN2
                          __GI_memrchr.symtab0x12dbc220FUNC<unknown>HIDDEN2
                          __GI_memset.symtab0xdb40156FUNC<unknown>HIDDEN2
                          __GI_mmap.symtab0x105bc96FUNC<unknown>HIDDEN2
                          __GI_mremap.symtab0x139c048FUNC<unknown>HIDDEN2
                          __GI_munmap.symtab0x1077c44FUNC<unknown>HIDDEN2
                          __GI_nanosleep.symtab0x107a844FUNC<unknown>HIDDEN2
                          __GI_ntohl.symtab0xe12832FUNC<unknown>HIDDEN2
                          __GI_ntohs.symtab0xe11420FUNC<unknown>HIDDEN2
                          __GI_open.symtab0xc73092FUNC<unknown>HIDDEN2
                          __GI_opendir.symtab0x10a18156FUNC<unknown>HIDDEN2
                          __GI_poll.symtab0x15dd044FUNC<unknown>HIDDEN2
                          __GI_raise.symtab0x1348824FUNC<unknown>HIDDEN2
                          __GI_random.symtab0xf2dc124FUNC<unknown>HIDDEN2
                          __GI_random_r.symtab0xf5c0140FUNC<unknown>HIDDEN2
                          __GI_rawmemchr.symtab0x144b0176FUNC<unknown>HIDDEN2
                          __GI_read.symtab0xc78c44FUNC<unknown>HIDDEN2
                          __GI_readdir64.symtab0x10b48212FUNC<unknown>HIDDEN2
                          __GI_recv.symtab0xe2dc44FUNC<unknown>HIDDEN2
                          __GI_sbrk.symtab0x107d488FUNC<unknown>HIDDEN2
                          __GI_select.symtab0xc7b848FUNC<unknown>HIDDEN2
                          __GI_send.symtab0xe30844FUNC<unknown>HIDDEN2
                          __GI_setsid.symtab0xc7e844FUNC<unknown>HIDDEN2
                          __GI_setsockopt.symtab0xe33448FUNC<unknown>HIDDEN2
                          __GI_setstate_r.symtab0xf4f8200FUNC<unknown>HIDDEN2
                          __GI_sigaction.symtab0x1061c116FUNC<unknown>HIDDEN2
                          __GI_signal.symtab0xe390164FUNC<unknown>HIDDEN2
                          __GI_sigprocmask.symtab0x1082c48FUNC<unknown>HIDDEN2
                          __GI_sleep.symtab0xfa3c168FUNC<unknown>HIDDEN2
                          __GI_socket.symtab0xe36444FUNC<unknown>HIDDEN2
                          __GI_sprintf.symtab0xc8a852FUNC<unknown>HIDDEN2
                          __GI_srandom_r.symtab0xf64c224FUNC<unknown>HIDDEN2
                          __GI_stat.symtab0x15dfc80FUNC<unknown>HIDDEN2
                          __GI_strcasecmp.symtab0x1630c124FUNC<unknown>HIDDEN2
                          __GI_strchr.symtab0xdc60236FUNC<unknown>HIDDEN2
                          __GI_strchrnul.symtab0x12e98232FUNC<unknown>HIDDEN2
                          __GI_strcmp.symtab0xdbe028FUNC<unknown>HIDDEN2
                          __GI_strcoll.symtab0xdbe028FUNC<unknown>HIDDEN2
                          __GI_strcpy.symtab0xdd4c36FUNC<unknown>HIDDEN2
                          __GI_strcspn.symtab0x12f8064FUNC<unknown>HIDDEN2
                          __GI_strdup.symtab0x15ef048FUNC<unknown>HIDDEN2
                          __GI_strlen.symtab0xdc0096FUNC<unknown>HIDDEN2
                          __GI_strncpy.symtab0x14560184FUNC<unknown>HIDDEN2
                          __GI_strnlen.symtab0xdd70216FUNC<unknown>HIDDEN2
                          __GI_strpbrk.symtab0x130c064FUNC<unknown>HIDDEN2
                          __GI_strrchr.symtab0x12fc068FUNC<unknown>HIDDEN2
                          __GI_strspn.symtab0x1300472FUNC<unknown>HIDDEN2
                          __GI_strstr.symtab0xde48248FUNC<unknown>HIDDEN2
                          __GI_strtok.symtab0xe03c12FUNC<unknown>HIDDEN2
                          __GI_strtok_r.symtab0x1304c116FUNC<unknown>HIDDEN2
                          __GI_strtol.symtab0xf8008FUNC<unknown>HIDDEN2
                          __GI_sysconf.symtab0xfbfc1528FUNC<unknown>HIDDEN2
                          __GI_tcgetattr.symtab0xe068120FUNC<unknown>HIDDEN2
                          __GI_time.symtab0xc8148FUNC<unknown>HIDDEN2
                          __GI_toupper.symtab0xc86852FUNC<unknown>HIDDEN2
                          __GI_uname.symtab0x15e4c44FUNC<unknown>HIDDEN2
                          __GI_vsnprintf.symtab0xc8dc180FUNC<unknown>HIDDEN2
                          __GI_wait4.symtab0x1085c44FUNC<unknown>HIDDEN2
                          __GI_waitpid.symtab0xc81c8FUNC<unknown>HIDDEN2
                          __GI_wcrtomb.symtab0x10fb080FUNC<unknown>HIDDEN2
                          __GI_wcsnrtombs.symtab0x11020172FUNC<unknown>HIDDEN2
                          __GI_wcsrtombs.symtab0x1100032FUNC<unknown>HIDDEN2
                          __GI_write.symtab0xc82444FUNC<unknown>HIDDEN2
                          __JCR_END__.symtab0x230700OBJECT<unknown>DEFAULT8
                          __JCR_LIST__.symtab0x230700OBJECT<unknown>DEFAULT8
                          __adddf3.symtab0x16660736FUNC<unknown>HIDDEN2
                          __aeabi_cdcmpeq.symtab0x1703020FUNC<unknown>HIDDEN2
                          __aeabi_cdcmple.symtab0x1703020FUNC<unknown>HIDDEN2
                          __aeabi_cdrcmple.symtab0x1701448FUNC<unknown>HIDDEN2
                          __aeabi_d2uiz.symtab0x170a884FUNC<unknown>HIDDEN2
                          __aeabi_dadd.symtab0x16660736FUNC<unknown>HIDDEN2
                          __aeabi_dcmpeq.symtab0x1704420FUNC<unknown>HIDDEN2
                          __aeabi_dcmpge.symtab0x1708020FUNC<unknown>HIDDEN2
                          __aeabi_dcmpgt.symtab0x1709420FUNC<unknown>HIDDEN2
                          __aeabi_dcmple.symtab0x1706c20FUNC<unknown>HIDDEN2
                          __aeabi_dcmplt.symtab0x1705820FUNC<unknown>HIDDEN2
                          __aeabi_ddiv.symtab0x16d7c516FUNC<unknown>HIDDEN2
                          __aeabi_dmul.symtab0x16a54808FUNC<unknown>HIDDEN2
                          __aeabi_drsub.symtab0x166540FUNC<unknown>HIDDEN2
                          __aeabi_dsub.symtab0x1665c740FUNC<unknown>HIDDEN2
                          __aeabi_f2d.symtab0x1699464FUNC<unknown>HIDDEN2
                          __aeabi_i2d.symtab0x1696844FUNC<unknown>HIDDEN2
                          __aeabi_idiv.symtab0x164300FUNC<unknown>HIDDEN2
                          __aeabi_idiv0.symtab0xc4ec4FUNC<unknown>HIDDEN2
                          __aeabi_idivmod.symtab0x1655824FUNC<unknown>HIDDEN2
                          __aeabi_l2d.symtab0x169e8108FUNC<unknown>HIDDEN2
                          __aeabi_ldiv0.symtab0xc4ec4FUNC<unknown>HIDDEN2
                          __aeabi_ui2d.symtab0x1694040FUNC<unknown>HIDDEN2
                          __aeabi_uidiv.symtab0xc3100FUNC<unknown>HIDDEN2
                          __aeabi_uidivmod.symtab0xc40824FUNC<unknown>HIDDEN2
                          __aeabi_ul2d.symtab0x169d4128FUNC<unknown>HIDDEN2
                          __app_fini.symtab0x2961c4OBJECT<unknown>HIDDEN10
                          __atexit_lock.symtab0x233b024OBJECT<unknown>DEFAULT9
                          __bss_end__.symtab0x29a440NOTYPE<unknown>DEFAULTSHN_ABS
                          __bss_start.symtab0x233e40NOTYPE<unknown>DEFAULTSHN_ABS
                          __bss_start__.symtab0x233e40NOTYPE<unknown>DEFAULTSHN_ABS
                          __check_one_fd.symtab0x1029856FUNC<unknown>DEFAULT2
                          __close_nameservers.symtab0x159a0124FUNC<unknown>HIDDEN2
                          __cmpdf2.symtab0x16f90132FUNC<unknown>HIDDEN2
                          __ctype_b.symtab0x231884OBJECT<unknown>DEFAULT9
                          __ctype_tolower.symtab0x233dc4OBJECT<unknown>DEFAULT9
                          __ctype_toupper.symtab0x231904OBJECT<unknown>DEFAULT9
                          __curbrk.symtab0x2962c4OBJECT<unknown>HIDDEN10
                          __data_start.symtab0x230740NOTYPE<unknown>DEFAULT9
                          __decode_dotted.symtab0x14c90244FUNC<unknown>HIDDEN2
                          __decode_header.symtab0x16008180FUNC<unknown>HIDDEN2
                          __default_rt_sa_restorer.symtab0x106940FUNC<unknown>DEFAULT2
                          __default_sa_restorer.symtab0x106900FUNC<unknown>DEFAULT2
                          __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                          __div0.symtab0xc4ec4FUNC<unknown>HIDDEN2
                          __divdf3.symtab0x16d7c516FUNC<unknown>HIDDEN2
                          __divsi3.symtab0x16430296FUNC<unknown>HIDDEN2
                          __dns_lookup.symtab0x14d841936FUNC<unknown>HIDDEN2
                          __do_global_ctors_aux.symtab0x170fc0FUNC<unknown>DEFAULT2
                          __do_global_dtors_aux.symtab0x80b00FUNC<unknown>DEFAULT2
                          __dso_handle.symtab0x230780OBJECT<unknown>HIDDEN9
                          __encode_dotted.symtab0x16388168FUNC<unknown>HIDDEN2
                          __encode_header.symtab0x15f20232FUNC<unknown>HIDDEN2
                          __encode_question.symtab0x160bc92FUNC<unknown>HIDDEN2
                          __end__.symtab0x29a440NOTYPE<unknown>DEFAULTSHN_ABS
                          __environ.symtab0x296144OBJECT<unknown>DEFAULT10
                          __eqdf2.symtab0x16f90132FUNC<unknown>HIDDEN2
                          __errno_location.symtab0xc89c12FUNC<unknown>DEFAULT2
                          __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __exit_cleanup.symtab0x2960c4OBJECT<unknown>HIDDEN10
                          __extendsfdf2.symtab0x1699464FUNC<unknown>HIDDEN2
                          __fcntl_nocancel.symtab0xc59c100FUNC<unknown>DEFAULT2
                          __fgetc_unlocked.symtab0x12654304FUNC<unknown>DEFAULT2
                          __fini_array_end.symtab0x230600NOTYPE<unknown>HIDDEN6
                          __fini_array_start.symtab0x230600NOTYPE<unknown>HIDDEN6
                          __fixunsdfsi.symtab0x170a884FUNC<unknown>HIDDEN2
                          __floatdidf.symtab0x169e8108FUNC<unknown>HIDDEN2
                          __floatsidf.symtab0x1696844FUNC<unknown>HIDDEN2
                          __floatundidf.symtab0x169d4128FUNC<unknown>HIDDEN2
                          __floatunsidf.symtab0x1694040FUNC<unknown>HIDDEN2
                          __gedf2.symtab0x16f80148FUNC<unknown>HIDDEN2
                          __get_hosts_byname_r.symtab0x15a1c72FUNC<unknown>HIDDEN2
                          __getdents64.symtab0x13fd8352FUNC<unknown>HIDDEN2
                          __getpagesize.symtab0x1073024FUNC<unknown>DEFAULT2
                          __glibc_strerror_r.symtab0xdf4020FUNC<unknown>DEFAULT2
                          __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __gtdf2.symtab0x16f80148FUNC<unknown>HIDDEN2
                          __h_errno_location.symtab0x10c1c12FUNC<unknown>DEFAULT2
                          __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __init_array_end.symtab0x230600NOTYPE<unknown>HIDDEN6
                          __init_array_start.symtab0x230600NOTYPE<unknown>HIDDEN6
                          __ledf2.symtab0x16f88140FUNC<unknown>HIDDEN2
                          __libc_close.symtab0xc65444FUNC<unknown>DEFAULT2
                          __libc_connect.symtab0xe25444FUNC<unknown>DEFAULT2
                          __libc_fcntl.symtab0xc538100FUNC<unknown>DEFAULT2
                          __libc_fork.symtab0xc68044FUNC<unknown>DEFAULT2
                          __libc_lseek64.symtab0x15e78100FUNC<unknown>DEFAULT2
                          __libc_nanosleep.symtab0x107a844FUNC<unknown>DEFAULT2
                          __libc_open.symtab0xc73092FUNC<unknown>DEFAULT2
                          __libc_read.symtab0xc78c44FUNC<unknown>DEFAULT2
                          __libc_recv.symtab0xe2dc44FUNC<unknown>DEFAULT2
                          __libc_select.symtab0xc7b848FUNC<unknown>DEFAULT2
                          __libc_send.symtab0xe30844FUNC<unknown>DEFAULT2
                          __libc_sigaction.symtab0x1061c116FUNC<unknown>DEFAULT2
                          __libc_stack_end.symtab0x296104OBJECT<unknown>DEFAULT10
                          __libc_waitpid.symtab0xc81c8FUNC<unknown>DEFAULT2
                          __libc_write.symtab0xc82444FUNC<unknown>DEFAULT2
                          __local_nameserver.symtab0x1ad3c16OBJECT<unknown>HIDDEN4
                          __ltdf2.symtab0x16f88140FUNC<unknown>HIDDEN2
                          __malloc_consolidate.symtab0xee00424FUNC<unknown>HIDDEN2
                          __malloc_largebin_index.symtab0xe4a0120FUNC<unknown>DEFAULT2
                          __malloc_lock.symtab0x232d424OBJECT<unknown>DEFAULT9
                          __malloc_state.symtab0x296b0888OBJECT<unknown>DEFAULT10
                          __malloc_trim.symtab0xed5c164FUNC<unknown>DEFAULT2
                          __modsi3.symtab0x16570228FUNC<unknown>HIDDEN2
                          __muldf3.symtab0x16a54808FUNC<unknown>HIDDEN2
                          __muldi3.symtab0xc4f072FUNC<unknown>HIDDEN2
                          __nameserver.symtab0x29a384OBJECT<unknown>HIDDEN10
                          __nameservers.symtab0x29a3c4OBJECT<unknown>HIDDEN10
                          __nedf2.symtab0x16f90132FUNC<unknown>HIDDEN2
                          __open_etc_hosts.symtab0x1611812FUNC<unknown>HIDDEN2
                          __open_nameservers.symtab0x155941036FUNC<unknown>HIDDEN2
                          __pagesize.symtab0x296184OBJECT<unknown>DEFAULT10
                          __preinit_array_end.symtab0x230600NOTYPE<unknown>HIDDEN6
                          __preinit_array_start.symtab0x230600NOTYPE<unknown>HIDDEN6
                          __progname.symtab0x233cc4OBJECT<unknown>DEFAULT9
                          __progname_full.symtab0x233d04OBJECT<unknown>DEFAULT9
                          __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                          __pthread_mutex_init.symtab0x101fc8FUNC<unknown>DEFAULT2
                          __pthread_mutex_lock.symtab0x101f48FUNC<unknown>DEFAULT2
                          __pthread_mutex_trylock.symtab0x101f48FUNC<unknown>DEFAULT2
                          __pthread_mutex_unlock.symtab0x101f48FUNC<unknown>DEFAULT2
                          __pthread_return_0.symtab0x101f48FUNC<unknown>DEFAULT2
                          __read_etc_hosts_r.symtab0x16124488FUNC<unknown>HIDDEN2
                          __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                          __res_sync.symtab0x29a304OBJECT<unknown>HIDDEN10
                          __resolv_attempts.symtab0x233d71OBJECT<unknown>HIDDEN9
                          __resolv_lock.symtab0x2963424OBJECT<unknown>DEFAULT10
                          __resolv_timeout.symtab0x233d61OBJECT<unknown>HIDDEN9
                          __rtld_fini.symtab0x296204OBJECT<unknown>HIDDEN10
                          __searchdomain.symtab0x29a344OBJECT<unknown>HIDDEN10
                          __searchdomains.symtab0x29a404OBJECT<unknown>HIDDEN10
                          __sigaddset.symtab0xe45836FUNC<unknown>DEFAULT2
                          __sigdelset.symtab0xe47c36FUNC<unknown>DEFAULT2
                          __sigismember.symtab0xe43436FUNC<unknown>DEFAULT2
                          __stdin.symtab0x231a04OBJECT<unknown>DEFAULT9
                          __stdio_READ.symtab0x1427c92FUNC<unknown>HIDDEN2
                          __stdio_WRITE.symtab0x11248212FUNC<unknown>HIDDEN2
                          __stdio_adjust_position.symtab0x142d8192FUNC<unknown>HIDDEN2
                          __stdio_fwrite.symtab0x11608312FUNC<unknown>HIDDEN2
                          __stdio_init_mutex.symtab0xca0c16FUNC<unknown>HIDDEN2
                          __stdio_mutex_initializer.4591.symtab0x19fbc24OBJECT<unknown>DEFAULT4
                          __stdio_rfill.symtab0x1439844FUNC<unknown>HIDDEN2
                          __stdio_seek.symtab0x1448048FUNC<unknown>HIDDEN2
                          __stdio_trans2r_o.symtab0x143c4188FUNC<unknown>HIDDEN2
                          __stdio_trans2w_o.symtab0x11740260FUNC<unknown>HIDDEN2
                          __stdio_wcommit.symtab0xcad444FUNC<unknown>HIDDEN2
                          __stdout.symtab0x231a44OBJECT<unknown>DEFAULT9
                          __subdf3.symtab0x1665c740FUNC<unknown>HIDDEN2
                          __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __syscall_rt_sigaction.symtab0x1069844FUNC<unknown>DEFAULT2
                          __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __uClibc_fini.symtab0x1022c108FUNC<unknown>DEFAULT2
                          __uClibc_init.symtab0x102d076FUNC<unknown>DEFAULT2
                          __uClibc_main.symtab0x1031c672FUNC<unknown>DEFAULT2
                          __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __uclibc_progname.symtab0x233c84OBJECT<unknown>HIDDEN9
                          __udivsi3.symtab0xc310248FUNC<unknown>HIDDEN2
                          __umodsi3.symtab0xc420204FUNC<unknown>HIDDEN2
                          __xpg_strerror_r.symtab0xdf54232FUNC<unknown>DEFAULT2
                          __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          __xstat32_conv.symtab0x13d00728FUNC<unknown>HIDDEN2
                          __xstat64_conv.symtab0x139f0784FUNC<unknown>HIDDEN2
                          _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _bss_custom_printf_spec.symtab0x2941c10OBJECT<unknown>DEFAULT10
                          _bss_end__.symtab0x29a440NOTYPE<unknown>DEFAULTSHN_ABS
                          _charpad.symtab0xcb0080FUNC<unknown>DEFAULT2
                          _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _custom_printf_arginfo.symtab0x2965840OBJECT<unknown>HIDDEN10
                          _custom_printf_handler.symtab0x2968040OBJECT<unknown>HIDDEN10
                          _custom_printf_spec.symtab0x232d04OBJECT<unknown>HIDDEN9
                          _dl_aux_init.symtab0x1391436FUNC<unknown>DEFAULT2
                          _dl_phdr.symtab0x29a284OBJECT<unknown>DEFAULT10
                          _dl_phnum.symtab0x29a2c4OBJECT<unknown>DEFAULT10
                          _edata.symtab0x233e40NOTYPE<unknown>DEFAULTSHN_ABS
                          _end.symtab0x29a440NOTYPE<unknown>DEFAULTSHN_ABS
                          _errno.symtab0x296244OBJECT<unknown>DEFAULT10
                          _exit.symtab0xc60040FUNC<unknown>DEFAULT2
                          _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _fini.symtab0x171380FUNC<unknown>DEFAULT3
                          _fixed_buffers.symtab0x2741c8192OBJECT<unknown>DEFAULT10
                          _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _fp_out_narrow.symtab0xcb50128FUNC<unknown>DEFAULT2
                          _fpmaxtostr.symtab0x11a4c1952FUNC<unknown>HIDDEN2
                          _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _h_errno.symtab0x296284OBJECT<unknown>DEFAULT10
                          _init.symtab0x80940FUNC<unknown>DEFAULT1
                          _load_inttype.symtab0x11844116FUNC<unknown>HIDDEN2
                          _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _memcpy.symtab0x128200FUNC<unknown>HIDDEN2
                          _ppfs_init.symtab0xd22c152FUNC<unknown>HIDDEN2
                          _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _ppfs_parsespec.symtab0xd4e41344FUNC<unknown>HIDDEN2
                          _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _ppfs_prepargs.symtab0xd2c456FUNC<unknown>HIDDEN2
                          _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _ppfs_setargs.symtab0xd2fc412FUNC<unknown>HIDDEN2
                          _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _promoted_size.symtab0xd49876FUNC<unknown>DEFAULT2
                          _pthread_cleanup_pop_restore.symtab0x1020c32FUNC<unknown>DEFAULT2
                          _pthread_cleanup_push_defer.symtab0x102048FUNC<unknown>DEFAULT2
                          _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _sigintr.symtab0x296a88OBJECT<unknown>HIDDEN10
                          _start.symtab0x81900FUNC<unknown>DEFAULT2
                          _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _stdio_fopen.symtab0x1131c748FUNC<unknown>HIDDEN2
                          _stdio_init.symtab0xc990124FUNC<unknown>HIDDEN2
                          _stdio_openlist.symtab0x231a84OBJECT<unknown>DEFAULT9
                          _stdio_openlist_add_lock.symtab0x231ac24OBJECT<unknown>DEFAULT9
                          _stdio_openlist_dec_use.symtab0x12344320FUNC<unknown>HIDDEN2
                          _stdio_openlist_del_count.symtab0x274184OBJECT<unknown>DEFAULT10
                          _stdio_openlist_del_lock.symtab0x231c424OBJECT<unknown>DEFAULT9
                          _stdio_openlist_use_count.symtab0x274144OBJECT<unknown>DEFAULT10
                          _stdio_streams.symtab0x231e0240OBJECT<unknown>DEFAULT9
                          _stdio_term.symtab0xca1c184FUNC<unknown>HIDDEN2
                          _stdio_user_locking.symtab0x231dc4OBJECT<unknown>DEFAULT9
                          _stdlib_strto_l.symtab0xf808408FUNC<unknown>HIDDEN2
                          _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _store_inttype.symtab0x118b864FUNC<unknown>HIDDEN2
                          _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _string_syserrmsgs.symtab0x1a08c2906OBJECT<unknown>HIDDEN4
                          _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _uintmaxtostr.symtab0x118f8340FUNC<unknown>HIDDEN2
                          _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _vfprintf_internal.symtab0xcbd01628FUNC<unknown>HIDDEN2
                          _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          abort.symtab0xf1d8256FUNC<unknown>DEFAULT2
                          abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          atoi.symtab0xf7f412FUNC<unknown>DEFAULT2
                          atol.symtab0xf7f412FUNC<unknown>DEFAULT2
                          atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          bcopy.symtab0xdb1016FUNC<unknown>DEFAULT2
                          been_there_done_that.symtab0x296084OBJECT<unknown>DEFAULT10
                          bot.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          brk.symtab0x1393856FUNC<unknown>DEFAULT2
                          brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          bsd_signal.symtab0xe390164FUNC<unknown>DEFAULT2
                          buf.2915.symtab0x2942c16OBJECT<unknown>DEFAULT10
                          buf.5468.symtab0x2943c440OBJECT<unknown>DEFAULT10
                          bzero.symtab0xdb2012FUNC<unknown>DEFAULT2
                          c.symtab0x2317c4OBJECT<unknown>DEFAULT9
                          call___do_global_ctors_aux.symtab0x171300FUNC<unknown>DEFAULT2
                          call___do_global_dtors_aux.symtab0x81280FUNC<unknown>DEFAULT2
                          call_frame_dummy.symtab0x81880FUNC<unknown>DEFAULT2
                          calloc.symtab0x134a0268FUNC<unknown>DEFAULT2
                          calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          chdir.symtab0xc62844FUNC<unknown>DEFAULT2
                          chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          clock_getres.symtab0x106c444FUNC<unknown>DEFAULT2
                          clock_getres.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          close.symtab0xc65444FUNC<unknown>DEFAULT2
                          close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          closedir.symtab0x10888212FUNC<unknown>DEFAULT2
                          closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          closenameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          commServer.symtab0x230844OBJECT<unknown>DEFAULT9
                          completed.4916.symtab0x233e41OBJECT<unknown>DEFAULT10
                          connect.symtab0xe25444FUNC<unknown>DEFAULT2
                          connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          connectTimeout.symtab0x94d0640FUNC<unknown>DEFAULT2
                          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          currentServer.symtab0x231784OBJECT<unknown>DEFAULT9
                          data_start.symtab0x230800NOTYPE<unknown>DEFAULT9
                          decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          dns.symtab0x230884OBJECT<unknown>DEFAULT9
                          dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          environ.symtab0x296144OBJECT<unknown>DEFAULT10
                          errno.symtab0x296244OBJECT<unknown>DEFAULT10
                          errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          exit.symtab0xf9a0156FUNC<unknown>DEFAULT2
                          exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          exp10_table.symtab0x1ac9072OBJECT<unknown>DEFAULT4
                          fclose.symtab0x110cc368FUNC<unknown>DEFAULT2
                          fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fcntl.symtab0xc538100FUNC<unknown>DEFAULT2
                          fd_to_DIR.symtab0x1095c188FUNC<unknown>DEFAULT2
                          fdgets.symtab0x8438208FUNC<unknown>DEFAULT2
                          fdopendir.symtab0x10ab4148FUNC<unknown>DEFAULT2
                          fflush_unlocked.symtab0x12484464FUNC<unknown>DEFAULT2
                          fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fgetc.symtab0x121ec188FUNC<unknown>DEFAULT2
                          fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fgetc_unlocked.symtab0x12654304FUNC<unknown>DEFAULT2
                          fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fgets.symtab0x122a8156FUNC<unknown>DEFAULT2
                          fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fgets_unlocked.symtab0x12784148FUNC<unknown>DEFAULT2
                          fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fmt.symtab0x1ac7c20OBJECT<unknown>DEFAULT4
                          fopen.symtab0x1123c12FUNC<unknown>DEFAULT2
                          fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          force_to_data.symtab0x230740OBJECT<unknown>DEFAULT9
                          force_to_data.symtab0x233e00OBJECT<unknown>DEFAULT9
                          fork.symtab0xc68044FUNC<unknown>DEFAULT2
                          fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fputs_unlocked.symtab0xda2452FUNC<unknown>DEFAULT2
                          fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          frame_dummy.symtab0x81300FUNC<unknown>DEFAULT2
                          free.symtab0xefa8520FUNC<unknown>DEFAULT2
                          free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fseek.symtab0x1413812FUNC<unknown>DEFAULT2
                          fseeko.symtab0x1413812FUNC<unknown>DEFAULT2
                          fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fseeko64.symtab0x14144312FUNC<unknown>DEFAULT2
                          fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fstat.symtab0x1397080FUNC<unknown>DEFAULT2
                          fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          fwrite_unlocked.symtab0xda58172FUNC<unknown>DEFAULT2
                          fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getArch.symtab0xade428FUNC<unknown>DEFAULT2
                          getHost.symtab0x9198100FUNC<unknown>DEFAULT2
                          getOurIP.symtab0x8508720FUNC<unknown>DEFAULT2
                          getRandomIP.symtab0x83d896FUNC<unknown>DEFAULT2
                          get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getc.symtab0x121ec188FUNC<unknown>DEFAULT2
                          getc_unlocked.symtab0x12654304FUNC<unknown>DEFAULT2
                          getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getdtablesize.symtab0x106f040FUNC<unknown>DEFAULT2
                          getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getegid.symtab0x107188FUNC<unknown>DEFAULT2
                          getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          geteuid.symtab0x107208FUNC<unknown>DEFAULT2
                          geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getgid.symtab0x107288FUNC<unknown>DEFAULT2
                          getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          gethostbyname.symtab0xe1fc8FUNC<unknown>DEFAULT2
                          gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          gethostbyname2.symtab0xe20480FUNC<unknown>DEFAULT2
                          gethostbyname2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          gethostbyname2_r.symtab0x131f0664FUNC<unknown>DEFAULT2
                          gethostbyname2_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          gethostbyname_r.symtab0x15a64764FUNC<unknown>DEFAULT2
                          gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          gethostname.symtab0x15d60112FUNC<unknown>DEFAULT2
                          gethostname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getpagesize.symtab0x1073024FUNC<unknown>DEFAULT2
                          getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getpid.symtab0xc6ac8FUNC<unknown>DEFAULT2
                          getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getrlimit.symtab0x1074844FUNC<unknown>DEFAULT2
                          getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getsockname.symtab0xe28044FUNC<unknown>DEFAULT2
                          getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getsockopt.symtab0xe2ac48FUNC<unknown>DEFAULT2
                          getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          getuid.symtab0x107748FUNC<unknown>DEFAULT2
                          getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          h_errno.symtab0x296284OBJECT<unknown>DEFAULT10
                          hoste.5467.symtab0x295f420OBJECT<unknown>DEFAULT10
                          htonl.symtab0xe0f432FUNC<unknown>DEFAULT2
                          htons.symtab0xe0e020FUNC<unknown>DEFAULT2
                          i.4537.symtab0x231804OBJECT<unknown>DEFAULT9
                          index.symtab0xdc60236FUNC<unknown>DEFAULT2
                          inet_addr.symtab0xe1d836FUNC<unknown>DEFAULT2
                          inet_aton.symtab0x13100240FUNC<unknown>DEFAULT2
                          inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          inet_ntoa.symtab0xe1cc12FUNC<unknown>DEFAULT2
                          inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          inet_ntoa_r.symtab0xe148132FUNC<unknown>DEFAULT2
                          inet_ntop.symtab0x14a24620FUNC<unknown>DEFAULT2
                          inet_ntop4.symtab0x148e4320FUNC<unknown>DEFAULT2
                          inet_pton.symtab0x146e4512FUNC<unknown>DEFAULT2
                          inet_pton4.symtab0x14618204FUNC<unknown>DEFAULT2
                          initConnection.symtab0xb990396FUNC<unknown>DEFAULT2
                          init_rand.symtab0x81cc212FUNC<unknown>DEFAULT2
                          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          initstate.symtab0xf3e4152FUNC<unknown>DEFAULT2
                          initstate_r.symtab0xf72c200FUNC<unknown>DEFAULT2
                          ioctl.symtab0xc6b480FUNC<unknown>DEFAULT2
                          ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          isatty.symtab0xe04832FUNC<unknown>DEFAULT2
                          isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          isspace.symtab0xc85024FUNC<unknown>DEFAULT2
                          isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          kill.symtab0xc70444FUNC<unknown>DEFAULT2
                          kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          last_id.5525.symtab0x233d42OBJECT<unknown>DEFAULT9
                          last_ns_num.5524.symtab0x296304OBJECT<unknown>DEFAULT10
                          libgcc2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          listFork.symtab0x9750420FUNC<unknown>DEFAULT2
                          llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          lseek64.symtab0x15e78100FUNC<unknown>DEFAULT2
                          macAddress.symtab0x2340c6OBJECT<unknown>DEFAULT10
                          main.symtab0xbb1c2036FUNC<unknown>DEFAULT2
                          mainCommSock.symtab0x234004OBJECT<unknown>DEFAULT10
                          malloc.symtab0xe5182116FUNC<unknown>DEFAULT2
                          malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          malloc_trim.symtab0xf1b040FUNC<unknown>DEFAULT2
                          memchr.symtab0x12cb0244FUNC<unknown>DEFAULT2
                          memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          memcpy.symtab0xdb304FUNC<unknown>DEFAULT2
                          memmove.symtab0x15ee04FUNC<unknown>DEFAULT2
                          mempcpy.symtab0x12da424FUNC<unknown>DEFAULT2
                          mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          memrchr.symtab0x12dbc220FUNC<unknown>DEFAULT2
                          memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          memset.symtab0xdb40156FUNC<unknown>DEFAULT2
                          mmap.symtab0x105bc96FUNC<unknown>DEFAULT2
                          mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          mremap.symtab0x139c048FUNC<unknown>DEFAULT2
                          mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          munmap.symtab0x1077c44FUNC<unknown>DEFAULT2
                          munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          mylock.symtab0x232ec24OBJECT<unknown>DEFAULT9
                          mylock.symtab0x2330424OBJECT<unknown>DEFAULT9
                          nanosleep.symtab0x107a844FUNC<unknown>DEFAULT2
                          nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          next_start.1304.symtab0x294284OBJECT<unknown>DEFAULT10
                          nprocessors_onln.symtab0xfae4280FUNC<unknown>DEFAULT2
                          ntohl.symtab0xe12832FUNC<unknown>DEFAULT2
                          ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          ntohs.symtab0xe11420FUNC<unknown>DEFAULT2
                          ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          numpids.symtab0x234048OBJECT<unknown>DEFAULT10
                          object.4931.symtab0x233e824OBJECT<unknown>DEFAULT10
                          open.symtab0xc73092FUNC<unknown>DEFAULT2
                          open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          opendir.symtab0x10a18156FUNC<unknown>DEFAULT2
                          opendir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          opennameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          ourIP.symtab0x296504OBJECT<unknown>DEFAULT10
                          ovhl7.symtab0xa05c3464FUNC<unknown>DEFAULT2
                          p.4914.symtab0x2307c0OBJECT<unknown>DEFAULT9
                          parse_config.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          pids.symtab0x296544OBJECT<unknown>DEFAULT10
                          poll.symtab0x15dd044FUNC<unknown>DEFAULT2
                          poll.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          prefix.4811.symtab0x19fe412OBJECT<unknown>DEFAULT4
                          print.symtab0x8ce01008FUNC<unknown>DEFAULT2
                          printchar.symtab0x8908108FUNC<unknown>DEFAULT2
                          printi.symtab0x8af8488FUNC<unknown>DEFAULT2
                          prints.symtab0x8974388FUNC<unknown>DEFAULT2
                          processCmd.symtab0xae002960FUNC<unknown>DEFAULT2
                          program_invocation_name.symtab0x233d04OBJECT<unknown>DEFAULT9
                          program_invocation_short_name.symtab0x233cc4OBJECT<unknown>DEFAULT9
                          qual_chars.4820.symtab0x19ff820OBJECT<unknown>DEFAULT4
                          raise.symtab0x1348824FUNC<unknown>DEFAULT2
                          raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          rand.symtab0xf2d84FUNC<unknown>DEFAULT2
                          rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          rand_cmwc.symtab0x82a0312FUNC<unknown>DEFAULT2
                          random.symtab0xf2dc124FUNC<unknown>DEFAULT2
                          random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          random_poly_info.symtab0x1abe840OBJECT<unknown>DEFAULT4
                          random_r.symtab0xf5c0140FUNC<unknown>DEFAULT2
                          random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          randtbl.symtab0x23330128OBJECT<unknown>DEFAULT9
                          rawmemchr.symtab0x144b0176FUNC<unknown>DEFAULT2
                          rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          read.symtab0xc78c44FUNC<unknown>DEFAULT2
                          read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          read_etc_hosts_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          readdir64.symtab0x10b48212FUNC<unknown>DEFAULT2
                          readdir64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          realloc.symtab0x135ac872FUNC<unknown>DEFAULT2
                          realloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          recv.symtab0xe2dc44FUNC<unknown>DEFAULT2
                          recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          recvLine.symtab0x91fc724FUNC<unknown>DEFAULT2
                          resolv_conf_mtime.5510.symtab0x2964c4OBJECT<unknown>DEFAULT10
                          rindex.symtab0x12fc068FUNC<unknown>DEFAULT2
                          sbrk.symtab0x107d488FUNC<unknown>DEFAULT2
                          sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          select.symtab0xc7b848FUNC<unknown>DEFAULT2
                          select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                          TimestampSource PortDest PortSource IPDest IP
                          May 28, 2024 10:50:19.640002012 CEST39394777192.168.2.1380.253.246.4
                          May 28, 2024 10:50:19.645000935 CEST7773939480.253.246.4192.168.2.13
                          May 28, 2024 10:50:19.645060062 CEST39394777192.168.2.1380.253.246.4
                          May 28, 2024 10:50:19.646042109 CEST39394777192.168.2.1380.253.246.4
                          May 28, 2024 10:50:19.650983095 CEST7773939480.253.246.4192.168.2.13
                          TimestampSource PortDest PortSource IPDest IP
                          May 28, 2024 10:53:03.752186060 CEST5258953192.168.2.138.8.8.8
                          May 28, 2024 10:53:03.752252102 CEST6012053192.168.2.138.8.8.8
                          May 28, 2024 10:53:03.758697987 CEST53525898.8.8.8192.168.2.13
                          May 28, 2024 10:53:03.758985043 CEST53601208.8.8.8192.168.2.13
                          TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                          May 28, 2024 10:53:03.752186060 CEST192.168.2.138.8.8.80xb633Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                          May 28, 2024 10:53:03.752252102 CEST192.168.2.138.8.8.80x1d43Standard query (0)daisy.ubuntu.com28IN (0x0001)false
                          TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                          May 28, 2024 10:53:03.758697987 CEST8.8.8.8192.168.2.130xb633No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
                          May 28, 2024 10:53:03.758697987 CEST8.8.8.8192.168.2.130xb633No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

                          System Behavior

                          Start time (UTC):08:50:18
                          Start date (UTC):28/05/2024
                          Path:/tmp/qqyt33.ppc.elf
                          Arguments:/tmp/qqyt33.ppc.elf
                          File size:4956856 bytes
                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                          Start time (UTC):08:50:18
                          Start date (UTC):28/05/2024
                          Path:/tmp/qqyt33.ppc.elf
                          Arguments:-
                          File size:4956856 bytes
                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                          Start time (UTC):08:50:18
                          Start date (UTC):28/05/2024
                          Path:/tmp/qqyt33.ppc.elf
                          Arguments:-
                          File size:4956856 bytes
                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1