Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:na.elf
Analysis ID:1617655
MD5:257418576e8a4e2cd65c16c0b636c2af
SHA1:bb88696ad5eefa960e4710ee42af7292670480d1
SHA256:a261c9fadbee8b5081f7676fb252ae5b28b758cafec5b9d6b85622539b11c82f
Tags:elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai
Score:100
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected Gafgyt
Yara detected Mirai
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Executes the "rm" command used to delete files or directories
Sample and/or dropped files contains symbols with suspicious names
Sample contains strings that are user agent strings indicative of HTTP manipulation
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1617655
Start date and time:2025-02-18 06:38:12 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 6m 10s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:na.elf
Detection:MAL
Classification:mal100.spre.troj.linELF@0/0@0/0
  • VT rate limit hit for: 84.200.154.119:4567
Command:/tmp/na.elf
PID:6244
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
BUILD HERAV1
buf: BUILD HERAV1 HERAV1
BUILD HERAV1

buf: BUILD HERAV1 HERAV1

buf: PING

buf: PING
Standard Error:
  • system is lnxubuntu20
  • dash New Fork (PID: 6216, Parent: 4331)
  • rm (PID: 6216, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.LrpWZolUcH /tmp/tmp.TkEY6nsVgN /tmp/tmp.s8G7a8HMdI
  • dash New Fork (PID: 6217, Parent: 4331)
  • rm (PID: 6217, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.LrpWZolUcH /tmp/tmp.TkEY6nsVgN /tmp/tmp.s8G7a8HMdI
  • na.elf (PID: 6244, Parent: 6149, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/na.elf
    • na.elf New Fork (PID: 6248, Parent: 6244)
      • na.elf New Fork (PID: 6250, Parent: 6248)
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
na.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    na.elfJoeSecurity_Mirai_3Yara detected MiraiJoe Security
      na.elfLinux_Trojan_Gafgyt_fb14e81funknownunknown
      • 0x126b8:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
      SourceRuleDescriptionAuthorStrings
      6248.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmpJoeSecurity_Mirai_3Yara detected MiraiJoe Security
        6248.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmpLinux_Trojan_Gafgyt_fb14e81funknownunknown
        • 0x126b8:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
        6244.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmpJoeSecurity_Mirai_3Yara detected MiraiJoe Security
          6244.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmpLinux_Trojan_Gafgyt_fb14e81funknownunknown
          • 0x126b8:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
          TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
          2025-02-18T06:39:04.688660+010028471801A Network Trojan was detected192.168.2.234763084.200.154.1194567TCP
          2025-02-18T06:39:25.433501+010028471801A Network Trojan was detected192.168.2.234763284.200.154.1194567TCP
          2025-02-18T06:41:24.470129+010028471801A Network Trojan was detected192.168.2.234763484.200.154.1194567TCP

          Click to jump to signature section

          Show All Signature Results

          AV Detection

          barindex
          Source: na.elfAvira: detected
          Source: na.elfMalware Configuration Extractor: Gafgyt {"C2 url": "84.200.154.119:4567"}
          Source: na.elfVirustotal: Detection: 60%Perma Link
          Source: na.elfReversingLabs: Detection: 70%

          Spreading

          barindex
          Source: /tmp/na.elf (PID: 6244)Opens: /proc/net/routeJump to behavior

          Networking

          barindex
          Source: Network trafficSuricata IDS: 2847180 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:47630 -> 84.200.154.119:4567
          Source: Network trafficSuricata IDS: 2847180 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:47632 -> 84.200.154.119:4567
          Source: Network trafficSuricata IDS: 2847180 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:47634 -> 84.200.154.119:4567
          Source: global trafficTCP traffic: 192.168.2.23:47630 -> 84.200.154.119:4567
          Source: global trafficTCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
          Source: global trafficTCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
          Source: global trafficTCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
          Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
          Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
          Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
          Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
          Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: unknownTCP traffic detected without corresponding DNS query: 84.200.154.119
          Source: na.elfString found in binary or memory: http://84.200.154.119/bins.sh;
          Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
          Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443

          System Summary

          barindex
          Source: na.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
          Source: 6248.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
          Source: 6244.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
          Source: na.elfELF static info symbol of initial sample: passwords
          Source: na.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
          Source: 6248.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
          Source: 6244.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
          Source: classification engineClassification label: mal100.spre.troj.linELF@0/0@0/0
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
          Source: na.elfELF static info symbol of initial sample: libc/string/arm/_memcpy.S
          Source: na.elfELF static info symbol of initial sample: libc/string/arm/bcopy.S
          Source: na.elfELF static info symbol of initial sample: libc/string/arm/memcpy.S
          Source: na.elfELF static info symbol of initial sample: libc/string/arm/memmove.S
          Source: na.elfELF static info symbol of initial sample: libc/string/arm/memset.S
          Source: na.elfELF static info symbol of initial sample: libc/string/arm/strcmp.S
          Source: na.elfELF static info symbol of initial sample: libc/string/arm/strlen.S
          Source: na.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
          Source: na.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
          Source: na.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
          Source: na.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S
          Source: na.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/vfork.S
          Source: /usr/bin/dash (PID: 6216)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.LrpWZolUcH /tmp/tmp.TkEY6nsVgN /tmp/tmp.s8G7a8HMdIJump to behavior
          Source: /usr/bin/dash (PID: 6217)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.LrpWZolUcH /tmp/tmp.TkEY6nsVgN /tmp/tmp.s8G7a8HMdIJump to behavior
          Source: /tmp/na.elf (PID: 6244)Queries kernel information via 'uname': Jump to behavior
          Source: na.elf, 6244.1.00007ffd9da01000.00007ffd9da22000.rw-.sdmp, na.elf, 6248.1.00007ffd9da01000.00007ffd9da22000.rw-.sdmpBinary or memory string: /x86_64/usr/bin/qemu-arm/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
          Source: na.elf, 6244.1.000055857b6e2000.000055857b810000.rw-.sdmp, na.elf, 6248.1.000055857b6e2000.000055857b810000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
          Source: na.elf, 6244.1.000055857b6e2000.000055857b810000.rw-.sdmp, na.elf, 6248.1.000055857b6e2000.000055857b810000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
          Source: na.elf, 6244.1.00007ffd9da01000.00007ffd9da22000.rw-.sdmp, na.elf, 6248.1.00007ffd9da01000.00007ffd9da22000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

          Stealing of Sensitive Information

          barindex
          Source: Yara matchFile source: na.elf, type: SAMPLE
          Source: Yara matchFile source: na.elf, type: SAMPLE
          Source: Yara matchFile source: 6248.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 6244.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORY
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285
          Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2
          Source: Initial sampleUser agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
          Source: Initial sampleUser agent string found: Opera/9.80 (Windows NT 5.1; U;) Presto/2.7.62 Version/11.01
          Source: Initial sampleUser agent string found: Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20110517 Firefox/5.0 Fennec/5.0
          Source: Initial sampleUser agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
          Source: Initial sampleUser agent string found: Mozilla/5.0 (compatible; Teleca Q7; Brew 3.1.5; U; en) 480X800 LGE VX11000

          Remote Access Functionality

          barindex
          Source: Yara matchFile source: na.elf, type: SAMPLE
          Source: Yara matchFile source: na.elf, type: SAMPLE
          Source: Yara matchFile source: 6248.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 6244.1.00007fc6d0017000.00007fc6d002b000.r-x.sdmp, type: MEMORY
          ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
          Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
          Masquerading
          OS Credential Dumping11
          Security Software Discovery
          Remote ServicesData from Local System1
          Data Obfuscation
          Exfiltration Over Other Network MediumAbuse Accessibility Features
          CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
          File Deletion
          LSASS Memory1
          Remote System Discovery
          Remote Desktop ProtocolData from Removable Media1
          Encrypted Channel
          Exfiltration Over BluetoothNetwork Denial of Service
          Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
          Non-Standard Port
          Automated ExfiltrationData Encrypted for Impact
          Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
          Application Layer Protocol
          Traffic DuplicationData Destruction
          {
            "C2 url": "84.200.154.119:4567"
          }
          Hide Legend

          Legend:

          • Process
          • Signature
          • Created File
          • DNS/IP Info
          • Is Dropped
          • Number of created Files
          • Is malicious
          • Internet
          behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1617655 Sample: na.elf Startdate: 18/02/2025 Architecture: LINUX Score: 100 17 84.200.154.119, 4567, 47630, 47632 ACCELERATED-ITDE Germany 2->17 19 109.202.202.202, 80 INIT7CH Switzerland 2->19 21 2 other IPs or domains 2->21 23 Suricata IDS alerts for network traffic 2->23 25 Found malware configuration 2->25 27 Malicious sample detected (through community Yara rule) 2->27 29 4 other signatures 2->29 8 dash rm na.elf 2->8         started        11 dash rm 2->11         started        signatures3 process4 signatures5 31 Opens /proc/net/* files useful for finding connected devices and routers 8->31 13 na.elf 8->13         started        process6 process7 15 na.elf 13->15         started       
          SourceDetectionScannerLabelLink
          na.elf60%VirustotalBrowse
          na.elf70%ReversingLabsLinux.Trojan.Gafgyt
          na.elf100%AviraLINUX/Gafgyt.opnd
          No Antivirus matches
          No Antivirus matches
          No Antivirus matches

          Download Network PCAP: filteredfull

          No contacted domains info
          NameMaliciousAntivirus DetectionReputation
          84.200.154.119:4567true
            unknown
            NameSourceMaliciousAntivirus DetectionReputation
            http://84.200.154.119/bins.sh;na.elffalse
              high
              • No. of IPs < 25%
              • 25% < No. of IPs < 50%
              • 50% < No. of IPs < 75%
              • 75% < No. of IPs
              IPDomainCountryFlagASNASN NameMalicious
              84.200.154.119
              unknownGermany
              31400ACCELERATED-ITDEtrue
              109.202.202.202
              unknownSwitzerland
              13030INIT7CHfalse
              91.189.91.43
              unknownUnited Kingdom
              41231CANONICAL-ASGBfalse
              91.189.91.42
              unknownUnited Kingdom
              41231CANONICAL-ASGBfalse
              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
              84.200.154.119wget.elfGet hashmaliciousGafgyt, MiraiBrowse
                sshd.elfGet hashmaliciousGafgyt, MiraiBrowse
                  sh.elfGet hashmaliciousGafgyt, MiraiBrowse
                    ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                      pftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                        bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                          openssh.elfGet hashmaliciousGafgyt, MiraiBrowse
                            ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                              na.elfGet hashmaliciousGafgyt, MiraiBrowse
                                wget.elfGet hashmaliciousGafgyt, MiraiBrowse
                                  109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
                                  • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
                                  91.189.91.43sh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                    ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                      bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                        boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                          ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                            na.elfGet hashmaliciousPrometeiBrowse
                                              boatnet.mips.elfGet hashmaliciousMiraiBrowse
                                                193.32.162.38-boatnet.arm7-2025-02-18T00_55_21.elfGet hashmaliciousMiraiBrowse
                                                  bin.sh.elfGet hashmaliciousMiraiBrowse
                                                    boatnet.sh4.elfGet hashmaliciousMiraiBrowse
                                                      91.189.91.42sh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                        ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                          bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                            boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                                              ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                na.elfGet hashmaliciousPrometeiBrowse
                                                                  boatnet.mips.elfGet hashmaliciousMiraiBrowse
                                                                    193.32.162.38-boatnet.arm7-2025-02-18T00_55_21.elfGet hashmaliciousMiraiBrowse
                                                                      bin.sh.elfGet hashmaliciousMiraiBrowse
                                                                        boatnet.sh4.elfGet hashmaliciousMiraiBrowse
                                                                          No context
                                                                          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                          CANONICAL-ASGBsh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 91.189.91.42
                                                                          boatnet.mips.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          193.32.162.38-boatnet.arm7-2025-02-18T00_55_21.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          bin.sh.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          boatnet.ppc.elfGet hashmaliciousMiraiBrowse
                                                                          • 185.125.190.26
                                                                          CANONICAL-ASGBsh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 91.189.91.42
                                                                          boatnet.mips.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          193.32.162.38-boatnet.arm7-2025-02-18T00_55_21.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          bin.sh.elfGet hashmaliciousMiraiBrowse
                                                                          • 91.189.91.42
                                                                          boatnet.ppc.elfGet hashmaliciousMiraiBrowse
                                                                          • 185.125.190.26
                                                                          INIT7CHsh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 109.202.202.202
                                                                          ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 109.202.202.202
                                                                          bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 109.202.202.202
                                                                          boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                                                          • 109.202.202.202
                                                                          ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 109.202.202.202
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 109.202.202.202
                                                                          boatnet.mips.elfGet hashmaliciousMiraiBrowse
                                                                          • 109.202.202.202
                                                                          193.32.162.38-boatnet.arm7-2025-02-18T00_55_21.elfGet hashmaliciousMiraiBrowse
                                                                          • 109.202.202.202
                                                                          bin.sh.elfGet hashmaliciousMiraiBrowse
                                                                          • 109.202.202.202
                                                                          boatnet.sh4.elfGet hashmaliciousMiraiBrowse
                                                                          • 109.202.202.202
                                                                          ACCELERATED-ITDEwget.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          sshd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          sh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          pftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          bash.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          openssh.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          ntpd.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          na.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          wget.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 84.200.154.119
                                                                          No context
                                                                          No context
                                                                          No created / dropped files found
                                                                          File type:ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
                                                                          Entropy (8bit):5.81699840296379
                                                                          TrID:
                                                                          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                                          File name:na.elf
                                                                          File size:165'606 bytes
                                                                          MD5:257418576e8a4e2cd65c16c0b636c2af
                                                                          SHA1:bb88696ad5eefa960e4710ee42af7292670480d1
                                                                          SHA256:a261c9fadbee8b5081f7676fb252ae5b28b758cafec5b9d6b85622539b11c82f
                                                                          SHA512:8f914595ee4232feea774c76d2ab5c94399cefe877bfb728e14dfe82b4951bfdf28162c050672ee0cfdb20b744e2cd6533b8a22d11eb6f44e5e9c3ce6ee51543
                                                                          SSDEEP:3072:8R2AYPY3B3En760r3m/vW2K2Gpvzzv/sdbSDPYSIdkiQWBkG1mZCwQufizQd17:8LyPckiQWBmZCwQufizQd17
                                                                          TLSH:3BF3400BBD405137FE6349FB5B768A856B68ED61C38E33412854F8638FA197C89372B4
                                                                          File Content Preview:.ELF...a..........(.........4...l.......4. ...(......................>...>...............@...@...@......,...........Q.td..................................-...L."....D..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

                                                                          ELF header

                                                                          Class:ELF32
                                                                          Data:2's complement, little endian
                                                                          Version:1 (current)
                                                                          Machine:ARM
                                                                          Version Number:0x1
                                                                          Type:EXEC (Executable file)
                                                                          OS/ABI:ARM - ABI
                                                                          ABI Version:0
                                                                          Entry Point Address:0x8190
                                                                          Flags:0x202
                                                                          ELF Header Size:52
                                                                          Program Header Offset:52
                                                                          Program Header Size:32
                                                                          Number of Program Headers:3
                                                                          Section Header Offset:137324
                                                                          Section Header Size:40
                                                                          Number of Section Headers:20
                                                                          Header String Table Index:17
                                                                          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                                          NULL0x00x00x00x00x0000
                                                                          .initPROGBITS0x80940x940x180x00x6AX004
                                                                          .textPROGBITS0x80b00xb00x112cc0x00x6AX0016
                                                                          .finiPROGBITS0x1937c0x1137c0x140x00x6AX004
                                                                          .rodataPROGBITS0x193900x113900x2b680x00x2A004
                                                                          .eh_framePROGBITS0x1bef80x13ef80x40x00x2A004
                                                                          .ctorsPROGBITS0x240000x140000x80x00x3WA004
                                                                          .dtorsPROGBITS0x240080x140080x80x00x3WA004
                                                                          .jcrPROGBITS0x240100x140100x40x00x3WA004
                                                                          .dataPROGBITS0x240140x140140xbbac0x00x3WA004
                                                                          .bssNOBITS0x2fbc00x1fbc00x636c0x00x3WA004
                                                                          .commentPROGBITS0x00x1fbc00xb560x00x0001
                                                                          .debug_arangesPROGBITS0x00x207180x1200x00x0008
                                                                          .debug_infoPROGBITS0x00x208380x5780x00x0001
                                                                          .debug_abbrevPROGBITS0x00x20db00xb40x00x0001
                                                                          .debug_linePROGBITS0x00x20e640x8bd0x00x0001
                                                                          .debug_framePROGBITS0x00x217240xa00x00x0004
                                                                          .shstrtabSTRTAB0x00x217c40xa80x00x0001
                                                                          .symtabSYMTAB0x00x21b8c0x46200x100x0196124
                                                                          .strtabSTRTAB0x00x261ac0x253a0x00x0001
                                                                          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                                          LOAD0x00x80000x80000x13efc0x13efc6.01210x5R E0x8000.init .text .fini .rodata .eh_frame
                                                                          LOAD0x140000x240000x240000xbbc00x11f2c3.96490x6RW 0x8000.ctors .dtors .jcr .data .bss
                                                                          GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                                                                          NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                                                          .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          .symtab0x80940SECTION<unknown>DEFAULT1
                                                                          .symtab0x80b00SECTION<unknown>DEFAULT2
                                                                          .symtab0x1937c0SECTION<unknown>DEFAULT3
                                                                          .symtab0x193900SECTION<unknown>DEFAULT4
                                                                          .symtab0x1bef80SECTION<unknown>DEFAULT5
                                                                          .symtab0x240000SECTION<unknown>DEFAULT6
                                                                          .symtab0x240080SECTION<unknown>DEFAULT7
                                                                          .symtab0x240100SECTION<unknown>DEFAULT8
                                                                          .symtab0x240140SECTION<unknown>DEFAULT9
                                                                          .symtab0x2fbc00SECTION<unknown>DEFAULT10
                                                                          .symtab0x00SECTION<unknown>DEFAULT11
                                                                          .symtab0x00SECTION<unknown>DEFAULT12
                                                                          .symtab0x00SECTION<unknown>DEFAULT13
                                                                          .symtab0x00SECTION<unknown>DEFAULT14
                                                                          .symtab0x00SECTION<unknown>DEFAULT15
                                                                          .symtab0x00SECTION<unknown>DEFAULT16
                                                                          .symtab0x00SECTION<unknown>DEFAULT17
                                                                          .symtab0x00SECTION<unknown>DEFAULT18
                                                                          .symtab0x00SECTION<unknown>DEFAULT19
                                                                          $a.symtab0x80940NOTYPE<unknown>DEFAULT1
                                                                          $a.symtab0x1937c0NOTYPE<unknown>DEFAULT3
                                                                          $a.symtab0x80b00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x81280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x193880NOTYPE<unknown>DEFAULT3
                                                                          $a.symtab0x81880NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x80a00NOTYPE<unknown>DEFAULT1
                                                                          $a.symtab0x193400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x193740NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x80a40NOTYPE<unknown>DEFAULT1
                                                                          $a.symtab0x80a80NOTYPE<unknown>DEFAULT1
                                                                          $a.symtab0x1938c0NOTYPE<unknown>DEFAULT3
                                                                          $a.symtab0x81900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x81cc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x82a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x83d80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x8cd00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x8e300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x90b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x923c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x938c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x98300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x99180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x9c8c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xa0a40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xa3a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xa9500NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xa9b00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xafa00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xca240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xd6140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xdd600NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf8100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf9dc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xfcc00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xfcdc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x106f80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x108080NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x108d40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x109b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x109bc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10a100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10a400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10ab40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10b040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10b2c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10b580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10b840NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10bb00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10bdc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10c040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10c300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10c5c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10cac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10cd80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10d440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10d700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10da00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10dcc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10dfc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10e280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10e7c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10ea80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10eb00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10edc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10ef40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10f280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10f340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10f700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10fa40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x110540NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x110c40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x110d40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1118c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x111bc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x112780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1193c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x119d40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11a0c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11ba80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11bf40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x120b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x120ec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x121a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x121b00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x121c00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x122600NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x122800NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x122e00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x123e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x124040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x124bc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1259c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x126940NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x126a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x127900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1279c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x127bc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x128280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x128980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x129240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x129480NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1298c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12d000NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12d2c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12d580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12d880NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12db40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12de00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12e140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12e440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12e700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12ea00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12eb80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12f700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12fdc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x131300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x132200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x132b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x133dc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x135240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x135280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x135a40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x136300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x136c80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x137440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x138040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x138940NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x139600NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13a280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13b600NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13b6c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13b740NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13d0c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13da00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13e340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13fd80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x140440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x140880NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x140e40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x143300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x144140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x144300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x144380NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x144640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x144900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x144bc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x144e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x145140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x145400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1456c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x145c40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x145f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x145fc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1464c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1466c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x147280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x147e40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1491c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x14a200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x14a900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x14ac40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x14c140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x154100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x158a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x158b00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x159ac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x159c40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15ab00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15b240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15b640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15c500NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1645c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1681c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1699c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x169a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x169b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16ae40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16bb00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16ea80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16ed80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16f6c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x170ac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x172900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x173280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x173e00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x174a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x174f80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x175280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x178040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x179680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17bc80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17cb00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17d680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17dc40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17dd80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17eb40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17ee80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x182100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x182740NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x182a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x183d80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x184540NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x184fc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x185c80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x186140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x186700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1869c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x187580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x188980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x18c980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x191c40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x192ec0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x240000NOTYPE<unknown>DEFAULT6
                                                                          $d.symtab0x240080NOTYPE<unknown>DEFAULT7
                                                                          $d.symtab0x2401c0NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x81180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x81740NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x193700NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x240200NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x81c00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x240240NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x82980NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x83cc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x8ccc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x8e2c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x90a80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x92380NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a1780NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x93880NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x98280NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x99100NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x9c840NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xa09c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xa39c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xa94c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xa9ac0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xaf7c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xc9f40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xd60c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xdd440NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf7880NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf9d00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xfcac0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xfcd80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x106bc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x10d400NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x10ef00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x10f240NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2f85c0NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x2f8640NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x10f300NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x10f6c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x110c00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x110d00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1117c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2f86c0NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x1ae900NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x112680NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x119280NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x11ba40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x11be80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x120940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x123e00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x125940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x127880NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x127980NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x128240NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x129200NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x129840NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x12ce40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x12f6c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x131180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2f9a80NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x132080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x135140NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2fab00NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x1358c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x136180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x136b00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1372c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2fac80NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x138000NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x138900NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x139540NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13a240NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1babc0NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x13b540NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13d080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13d840NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2fb7c0NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x13e300NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13fd40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x140340NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x140840NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x140d40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x142fc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2fb940NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x1440c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x145c00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x35e340NOTYPE<unknown>DEFAULT10
                                                                          $d.symtab0x145f80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x153e00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1bb140NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x159a40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x15aa80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x15c4c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x164280NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x166f00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2fb9c0NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x167ac0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x167ec0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x169800NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x16ad40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x16e780NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x16f5c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x170840NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1726c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x173d80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x178000NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x179640NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x17bc00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x17edc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1820c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x182a40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2fbb40NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x183d40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x184500NOTYPE<unknown>DEFAULT2
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          Laligned.symtab0x122a80NOTYPE<unknown>DEFAULT2
                                                                          Llastword.symtab0x122c40NOTYPE<unknown>DEFAULT2
                                                                          Q.symtab0x2fbf416384OBJECT<unknown>DEFAULT10
                                                                          StartTheLelz.symtab0xad788468FUNC<unknown>DEFAULT2
                                                                          _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __CTOR_END__.symtab0x240040OBJECT<unknown>DEFAULT6
                                                                          __CTOR_LIST__.symtab0x240000OBJECT<unknown>DEFAULT6
                                                                          __C_ctype_b.symtab0x2f85c4OBJECT<unknown>DEFAULT9
                                                                          __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __C_ctype_b_data.symtab0x1a890768OBJECT<unknown>DEFAULT4
                                                                          __C_ctype_tolower.symtab0x2fbb44OBJECT<unknown>DEFAULT9
                                                                          __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __C_ctype_tolower_data.symtab0x1bbf8768OBJECT<unknown>DEFAULT4
                                                                          __C_ctype_toupper.symtab0x2f8644OBJECT<unknown>DEFAULT9
                                                                          __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __C_ctype_toupper_data.symtab0x1ab90768OBJECT<unknown>DEFAULT4
                                                                          __DTOR_END__.symtab0x2400c0OBJECT<unknown>DEFAULT7
                                                                          __DTOR_LIST__.symtab0x240080OBJECT<unknown>DEFAULT7
                                                                          __EH_FRAME_BEGIN__.symtab0x1bef80OBJECT<unknown>DEFAULT5
                                                                          __FRAME_END__.symtab0x1bef80OBJECT<unknown>DEFAULT5
                                                                          __GI___C_ctype_b.symtab0x2f85c4OBJECT<unknown>HIDDEN9
                                                                          __GI___C_ctype_b_data.symtab0x1a890768OBJECT<unknown>HIDDEN4
                                                                          __GI___C_ctype_tolower.symtab0x2fbb44OBJECT<unknown>HIDDEN9
                                                                          __GI___C_ctype_tolower_data.symtab0x1bbf8768OBJECT<unknown>HIDDEN4
                                                                          __GI___C_ctype_toupper.symtab0x2f8644OBJECT<unknown>HIDDEN9
                                                                          __GI___C_ctype_toupper_data.symtab0x1ab90768OBJECT<unknown>HIDDEN4
                                                                          __GI___ctype_b.symtab0x2f8604OBJECT<unknown>HIDDEN9
                                                                          __GI___ctype_tolower.symtab0x2fbb84OBJECT<unknown>HIDDEN9
                                                                          __GI___ctype_toupper.symtab0x2f8684OBJECT<unknown>HIDDEN9
                                                                          __GI___errno_location.symtab0x10f2812FUNC<unknown>HIDDEN2
                                                                          __GI___fgetc_unlocked.symtab0x182a8304FUNC<unknown>HIDDEN2
                                                                          __GI___glibc_strerror_r.symtab0x1269420FUNC<unknown>HIDDEN2
                                                                          __GI___h_errno_location.symtab0x145f012FUNC<unknown>HIDDEN2
                                                                          __GI___libc_fcntl.symtab0x10a40116FUNC<unknown>HIDDEN2
                                                                          __GI___libc_fcntl64.symtab0x10ab480FUNC<unknown>HIDDEN2
                                                                          __GI___libc_open.symtab0x10cd892FUNC<unknown>HIDDEN2
                                                                          __GI___uClibc_fini.symtab0x13fd8108FUNC<unknown>HIDDEN2
                                                                          __GI___uClibc_init.symtab0x1408892FUNC<unknown>HIDDEN2
                                                                          __GI___xpg_strerror_r.symtab0x126a8232FUNC<unknown>HIDDEN2
                                                                          __GI__exit.symtab0x10b0440FUNC<unknown>HIDDEN2
                                                                          __GI_abort.symtab0x133dc328FUNC<unknown>HIDDEN2
                                                                          __GI_atoi.symtab0x13b6012FUNC<unknown>HIDDEN2
                                                                          __GI_atol.symtab0x13b6012FUNC<unknown>HIDDEN2
                                                                          __GI_brk.symtab0x167b460FUNC<unknown>HIDDEN2
                                                                          __GI_chdir.symtab0x10b2c44FUNC<unknown>HIDDEN2
                                                                          __GI_close.symtab0x10b5844FUNC<unknown>HIDDEN2
                                                                          __GI_connect.symtab0x12d0044FUNC<unknown>HIDDEN2
                                                                          __GI_dup2.symtab0x10b8444FUNC<unknown>HIDDEN2
                                                                          __GI_errno.symtab0x35e344OBJECT<unknown>HIDDEN10
                                                                          __GI_execl.symtab0x13da0148FUNC<unknown>HIDDEN2
                                                                          __GI_execve.symtab0x1446444FUNC<unknown>HIDDEN2
                                                                          __GI_exit.symtab0x13d0c148FUNC<unknown>HIDDEN2
                                                                          __GI_fclose.symtab0x1681c384FUNC<unknown>HIDDEN2
                                                                          __GI_fcntl.symtab0x10a40116FUNC<unknown>HIDDEN2
                                                                          __GI_fcntl64.symtab0x10ab480FUNC<unknown>HIDDEN2
                                                                          __GI_fflush_unlocked.symtab0x170ac484FUNC<unknown>HIDDEN2
                                                                          __GI_fgetc_unlocked.symtab0x182a8304FUNC<unknown>HIDDEN2
                                                                          __GI_fgets.symtab0x16ed8148FUNC<unknown>HIDDEN2
                                                                          __GI_fgets_unlocked.symtab0x17290152FUNC<unknown>HIDDEN2
                                                                          __GI_fopen.symtab0x1699c12FUNC<unknown>HIDDEN2
                                                                          __GI_fork.symtab0x10bb044FUNC<unknown>HIDDEN2
                                                                          __GI_fputs_unlocked.symtab0x120b852FUNC<unknown>HIDDEN2
                                                                          __GI_fseek.symtab0x169a812FUNC<unknown>HIDDEN2
                                                                          __GI_fseeko64.symtab0x169b4304FUNC<unknown>HIDDEN2
                                                                          __GI_fwrite_unlocked.symtab0x120ec172FUNC<unknown>HIDDEN2
                                                                          __GI_getc_unlocked.symtab0x182a8304FUNC<unknown>HIDDEN2
                                                                          __GI_getdtablesize.symtab0x10bdc40FUNC<unknown>HIDDEN2
                                                                          __GI_getegid.symtab0x1449044FUNC<unknown>HIDDEN2
                                                                          __GI_geteuid.symtab0x144bc44FUNC<unknown>HIDDEN2
                                                                          __GI_getgid.symtab0x144e844FUNC<unknown>HIDDEN2
                                                                          __GI_gethostbyname.symtab0x1294868FUNC<unknown>HIDDEN2
                                                                          __GI_gethostbyname_r.symtab0x1298c884FUNC<unknown>HIDDEN2
                                                                          __GI_getpid.symtab0x10c0444FUNC<unknown>HIDDEN2
                                                                          __GI_getrlimit.symtab0x10c3044FUNC<unknown>HIDDEN2
                                                                          __GI_getsockname.symtab0x12d2c44FUNC<unknown>HIDDEN2
                                                                          __GI_getuid.symtab0x1451444FUNC<unknown>HIDDEN2
                                                                          __GI_h_errno.symtab0x35e384OBJECT<unknown>HIDDEN10
                                                                          __GI_inet_addr.symtab0x1292436FUNC<unknown>HIDDEN2
                                                                          __GI_inet_aton.symtab0x15b64236FUNC<unknown>HIDDEN2
                                                                          __GI_inet_ntoa.symtab0x1291812FUNC<unknown>HIDDEN2
                                                                          __GI_inet_ntoa_r.symtab0x12898128FUNC<unknown>HIDDEN2
                                                                          __GI_inet_ntop.symtab0x17968608FUNC<unknown>HIDDEN2
                                                                          __GI_inet_pton.symtab0x175f4528FUNC<unknown>HIDDEN2
                                                                          __GI_initstate_r.symtab0x13960200FUNC<unknown>HIDDEN2
                                                                          __GI_ioctl.symtab0x10c5c80FUNC<unknown>HIDDEN2
                                                                          __GI_isatty.symtab0x1279c32FUNC<unknown>HIDDEN2
                                                                          __GI_kill.symtab0x10cac44FUNC<unknown>HIDDEN2
                                                                          __GI_lseek64.symtab0x18210100FUNC<unknown>HIDDEN2
                                                                          __GI_memchr.symtab0x158b0252FUNC<unknown>HIDDEN2
                                                                          __GI_memcpy.symtab0x121b04FUNC<unknown>HIDDEN2
                                                                          __GI_memmove.symtab0x158a04FUNC<unknown>HIDDEN2
                                                                          __GI_mempcpy.symtab0x159ac24FUNC<unknown>HIDDEN2
                                                                          __GI_memrchr.symtab0x159c4236FUNC<unknown>HIDDEN2
                                                                          __GI_memset.symtab0x121c0156FUNC<unknown>HIDDEN2
                                                                          __GI_nanosleep.symtab0x1454044FUNC<unknown>HIDDEN2
                                                                          __GI_open.symtab0x10cd892FUNC<unknown>HIDDEN2
                                                                          __GI_pipe.symtab0x10d4444FUNC<unknown>HIDDEN2
                                                                          __GI_poll.symtab0x167f044FUNC<unknown>HIDDEN2
                                                                          __GI_printf.symtab0x10f3460FUNC<unknown>HIDDEN2
                                                                          __GI_raise.symtab0x1677824FUNC<unknown>HIDDEN2
                                                                          __GI_random.symtab0x13528124FUNC<unknown>HIDDEN2
                                                                          __GI_random_r.symtab0x13804144FUNC<unknown>HIDDEN2
                                                                          __GI_rawmemchr.symtab0x17328184FUNC<unknown>HIDDEN2
                                                                          __GI_read.symtab0x10da044FUNC<unknown>HIDDEN2
                                                                          __GI_recv.symtab0x12d8844FUNC<unknown>HIDDEN2
                                                                          __GI_sbrk.symtab0x1456c88FUNC<unknown>HIDDEN2
                                                                          __GI_select.symtab0x10dcc48FUNC<unknown>HIDDEN2
                                                                          __GI_send.symtab0x12db444FUNC<unknown>HIDDEN2
                                                                          __GI_sendto.symtab0x12de052FUNC<unknown>HIDDEN2
                                                                          __GI_setsid.symtab0x10dfc44FUNC<unknown>HIDDEN2
                                                                          __GI_setsockopt.symtab0x12e1448FUNC<unknown>HIDDEN2
                                                                          __GI_setstate_r.symtab0x13744192FUNC<unknown>HIDDEN2
                                                                          __GI_sigaction.symtab0x14330228FUNC<unknown>HIDDEN2
                                                                          __GI_sigaddset.symtab0x12e7048FUNC<unknown>HIDDEN2
                                                                          __GI_sigemptyset.symtab0x12ea024FUNC<unknown>HIDDEN2
                                                                          __GI_signal.symtab0x12eb8184FUNC<unknown>HIDDEN2
                                                                          __GI_sigprocmask.symtab0x10e2884FUNC<unknown>HIDDEN2
                                                                          __GI_sleep.symtab0x13e34420FUNC<unknown>HIDDEN2
                                                                          __GI_socket.symtab0x12e4444FUNC<unknown>HIDDEN2
                                                                          __GI_sprintf.symtab0x10f7052FUNC<unknown>HIDDEN2
                                                                          __GI_srandom_r.symtab0x13894204FUNC<unknown>HIDDEN2
                                                                          __GI_strcasecmp.symtab0x183d8124FUNC<unknown>HIDDEN2
                                                                          __GI_strchr.symtab0x122e0264FUNC<unknown>HIDDEN2
                                                                          __GI_strcmp.symtab0x1226028FUNC<unknown>HIDDEN2
                                                                          __GI_strcoll.symtab0x1226028FUNC<unknown>HIDDEN2
                                                                          __GI_strcpy.symtab0x123e828FUNC<unknown>HIDDEN2
                                                                          __GI_strdup.symtab0x174f848FUNC<unknown>HIDDEN2
                                                                          __GI_strlen.symtab0x1228096FUNC<unknown>HIDDEN2
                                                                          __GI_strncat.symtab0x173e0200FUNC<unknown>HIDDEN2
                                                                          __GI_strncpy.symtab0x12404184FUNC<unknown>HIDDEN2
                                                                          __GI_strnlen.symtab0x124bc224FUNC<unknown>HIDDEN2
                                                                          __GI_strpbrk.symtab0x15b2464FUNC<unknown>HIDDEN2
                                                                          __GI_strspn.symtab0x174a880FUNC<unknown>HIDDEN2
                                                                          __GI_strstr.symtab0x1259c248FUNC<unknown>HIDDEN2
                                                                          __GI_strtok.symtab0x1279012FUNC<unknown>HIDDEN2
                                                                          __GI_strtok_r.symtab0x15ab0116FUNC<unknown>HIDDEN2
                                                                          __GI_strtol.symtab0x13b6c8FUNC<unknown>HIDDEN2
                                                                          __GI_tcgetattr.symtab0x127bc108FUNC<unknown>HIDDEN2
                                                                          __GI_time.symtab0x10e7c44FUNC<unknown>HIDDEN2
                                                                          __GI_tolower.symtab0x1827452FUNC<unknown>HIDDEN2
                                                                          __GI_toupper.symtab0x10ef452FUNC<unknown>HIDDEN2
                                                                          __GI_vfork.symtab0x10a1040FUNC<unknown>HIDDEN2
                                                                          __GI_vfprintf.symtab0x111bc188FUNC<unknown>HIDDEN2
                                                                          __GI_vsnprintf.symtab0x10fa4176FUNC<unknown>HIDDEN2
                                                                          __GI_wait4.symtab0x145c444FUNC<unknown>HIDDEN2
                                                                          __GI_waitpid.symtab0x10ea88FUNC<unknown>HIDDEN2
                                                                          __GI_wcrtomb.symtab0x145fc80FUNC<unknown>HIDDEN2
                                                                          __GI_wcsnrtombs.symtab0x1466c188FUNC<unknown>HIDDEN2
                                                                          __GI_wcsrtombs.symtab0x1464c32FUNC<unknown>HIDDEN2
                                                                          __GI_write.symtab0x10eb044FUNC<unknown>HIDDEN2
                                                                          __JCR_END__.symtab0x240100OBJECT<unknown>DEFAULT8
                                                                          __JCR_LIST__.symtab0x240100OBJECT<unknown>DEFAULT8
                                                                          __adddf3.symtab0x188a4736FUNC<unknown>DEFAULT2
                                                                          __aeabi_cdcmpeq.symtab0x1927420FUNC<unknown>DEFAULT2
                                                                          __aeabi_cdcmple.symtab0x1927420FUNC<unknown>DEFAULT2
                                                                          __aeabi_cdrcmple.symtab0x1925848FUNC<unknown>DEFAULT2
                                                                          __aeabi_d2uiz.symtab0x192ec84FUNC<unknown>DEFAULT2
                                                                          __aeabi_dadd.symtab0x188a4736FUNC<unknown>DEFAULT2
                                                                          __aeabi_dcmpeq.symtab0x1928820FUNC<unknown>DEFAULT2
                                                                          __aeabi_dcmpge.symtab0x192c420FUNC<unknown>DEFAULT2
                                                                          __aeabi_dcmpgt.symtab0x192d820FUNC<unknown>DEFAULT2
                                                                          __aeabi_dcmple.symtab0x192b020FUNC<unknown>DEFAULT2
                                                                          __aeabi_dcmplt.symtab0x1929c20FUNC<unknown>DEFAULT2
                                                                          __aeabi_ddiv.symtab0x18fc0516FUNC<unknown>DEFAULT2
                                                                          __aeabi_dmul.symtab0x18c98808FUNC<unknown>DEFAULT2
                                                                          __aeabi_drsub.symtab0x188980FUNC<unknown>DEFAULT2
                                                                          __aeabi_dsub.symtab0x188a0740FUNC<unknown>DEFAULT2
                                                                          __aeabi_f2d.symtab0x18bd864FUNC<unknown>DEFAULT2
                                                                          __aeabi_i2d.symtab0x18bac44FUNC<unknown>DEFAULT2
                                                                          __aeabi_idiv.symtab0x187580FUNC<unknown>DEFAULT2
                                                                          __aeabi_idiv0.symtab0x109b84FUNC<unknown>DEFAULT2
                                                                          __aeabi_idivmod.symtab0x1888024FUNC<unknown>DEFAULT2
                                                                          __aeabi_l2d.symtab0x18c2c108FUNC<unknown>DEFAULT2
                                                                          __aeabi_ldiv0.symtab0x109b84FUNC<unknown>DEFAULT2
                                                                          __aeabi_ui2d.symtab0x18b8440FUNC<unknown>DEFAULT2
                                                                          __aeabi_uidiv.symtab0x106f80FUNC<unknown>DEFAULT2
                                                                          __aeabi_uidivmod.symtab0x107f024FUNC<unknown>DEFAULT2
                                                                          __aeabi_ul2d.symtab0x18c18128FUNC<unknown>DEFAULT2
                                                                          __app_fini.symtab0x35e284OBJECT<unknown>HIDDEN10
                                                                          __atexit_lock.symtab0x2fb7c24OBJECT<unknown>DEFAULT9
                                                                          __bsd_signal.symtab0x12eb8184FUNC<unknown>HIDDEN2
                                                                          __bss_end__.symtab0x35f2c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __bss_start.symtab0x2fbc00NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __bss_start__.symtab0x2fbc00NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __check_one_fd.symtab0x1405056FUNC<unknown>DEFAULT2
                                                                          __cmpdf2.symtab0x191d4132FUNC<unknown>DEFAULT2
                                                                          __ctype_b.symtab0x2f8604OBJECT<unknown>DEFAULT9
                                                                          __ctype_tolower.symtab0x2fbb84OBJECT<unknown>DEFAULT9
                                                                          __ctype_toupper.symtab0x2f8684OBJECT<unknown>DEFAULT9
                                                                          __curbrk.symtab0x35e584OBJECT<unknown>HIDDEN10
                                                                          __data_start.symtab0x240140NOTYPE<unknown>DEFAULT9
                                                                          __decode_answer.symtab0x17dd8220FUNC<unknown>HIDDEN2
                                                                          __decode_dotted.symtab0x184fc204FUNC<unknown>HIDDEN2
                                                                          __decode_header.symtab0x17cb0184FUNC<unknown>HIDDEN2
                                                                          __default_rt_sa_restorer.symtab0x144340FUNC<unknown>DEFAULT2
                                                                          __default_sa_restorer.symtab0x144300FUNC<unknown>DEFAULT2
                                                                          __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __div0.symtab0x109b84FUNC<unknown>DEFAULT2
                                                                          __divdf3.symtab0x18fc0516FUNC<unknown>DEFAULT2
                                                                          __divsi3.symtab0x18758296FUNC<unknown>DEFAULT2
                                                                          __dns_lookup.symtab0x15c502060FUNC<unknown>HIDDEN2
                                                                          __do_global_ctors_aux.symtab0x193400FUNC<unknown>DEFAULT2
                                                                          __do_global_dtors_aux.symtab0x80b00FUNC<unknown>DEFAULT2
                                                                          __dso_handle.symtab0x240180OBJECT<unknown>HIDDEN9
                                                                          __encode_dotted.symtab0x18454168FUNC<unknown>HIDDEN2
                                                                          __encode_header.symtab0x17bc8232FUNC<unknown>HIDDEN2
                                                                          __encode_question.symtab0x17d6892FUNC<unknown>HIDDEN2
                                                                          __end__.symtab0x35f2c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __environ.symtab0x35e204OBJECT<unknown>DEFAULT10
                                                                          __eqdf2.symtab0x191d4132FUNC<unknown>DEFAULT2
                                                                          __errno_location.symtab0x10f2812FUNC<unknown>DEFAULT2
                                                                          __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __error.symtab0x10a340NOTYPE<unknown>DEFAULT2
                                                                          __exit_cleanup.symtab0x35e184OBJECT<unknown>HIDDEN10
                                                                          __extendsfdf2.symtab0x18bd864FUNC<unknown>DEFAULT2
                                                                          __fgetc_unlocked.symtab0x182a8304FUNC<unknown>DEFAULT2
                                                                          __fini_array_end.symtab0x240000NOTYPE<unknown>HIDDENSHN_ABS
                                                                          __fini_array_start.symtab0x240000NOTYPE<unknown>HIDDENSHN_ABS
                                                                          __fixunsdfsi.symtab0x192ec84FUNC<unknown>DEFAULT2
                                                                          __floatdidf.symtab0x18c2c108FUNC<unknown>DEFAULT2
                                                                          __floatsidf.symtab0x18bac44FUNC<unknown>DEFAULT2
                                                                          __floatundidf.symtab0x18c18128FUNC<unknown>DEFAULT2
                                                                          __floatunsidf.symtab0x18b8440FUNC<unknown>DEFAULT2
                                                                          __gedf2.symtab0x191c4148FUNC<unknown>DEFAULT2
                                                                          __get_hosts_byname_r.symtab0x1673072FUNC<unknown>HIDDEN2
                                                                          __glibc_strerror_r.symtab0x1269420FUNC<unknown>DEFAULT2
                                                                          __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __gtdf2.symtab0x191c4148FUNC<unknown>DEFAULT2
                                                                          __h_errno_location.symtab0x145f012FUNC<unknown>DEFAULT2
                                                                          __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __heap_alloc.symtab0x13220148FUNC<unknown>DEFAULT2
                                                                          __heap_free.symtab0x132e8244FUNC<unknown>DEFAULT2
                                                                          __heap_link_free_area.symtab0x132b432FUNC<unknown>DEFAULT2
                                                                          __heap_link_free_area_after.symtab0x132d420FUNC<unknown>DEFAULT2
                                                                          __init_array_end.symtab0x240000NOTYPE<unknown>HIDDENSHN_ABS
                                                                          __init_array_start.symtab0x240000NOTYPE<unknown>HIDDENSHN_ABS
                                                                          __ledf2.symtab0x191cc140FUNC<unknown>DEFAULT2
                                                                          __length_dotted.symtab0x185c876FUNC<unknown>HIDDEN2
                                                                          __length_question.symtab0x17dc420FUNC<unknown>HIDDEN2
                                                                          __libc_close.symtab0x10b5844FUNC<unknown>DEFAULT2
                                                                          __libc_connect.symtab0x12d0044FUNC<unknown>DEFAULT2
                                                                          __libc_creat.symtab0x10d3416FUNC<unknown>DEFAULT2
                                                                          __libc_fcntl.symtab0x10a40116FUNC<unknown>DEFAULT2
                                                                          __libc_fcntl64.symtab0x10ab480FUNC<unknown>DEFAULT2
                                                                          __libc_fork.symtab0x10bb044FUNC<unknown>DEFAULT2
                                                                          __libc_getpid.symtab0x10c0444FUNC<unknown>DEFAULT2
                                                                          __libc_lseek64.symtab0x18210100FUNC<unknown>DEFAULT2
                                                                          __libc_nanosleep.symtab0x1454044FUNC<unknown>DEFAULT2
                                                                          __libc_open.symtab0x10cd892FUNC<unknown>DEFAULT2
                                                                          __libc_poll.symtab0x167f044FUNC<unknown>DEFAULT2
                                                                          __libc_read.symtab0x10da044FUNC<unknown>DEFAULT2
                                                                          __libc_recv.symtab0x12d8844FUNC<unknown>DEFAULT2
                                                                          __libc_select.symtab0x10dcc48FUNC<unknown>DEFAULT2
                                                                          __libc_send.symtab0x12db444FUNC<unknown>DEFAULT2
                                                                          __libc_sendto.symtab0x12de052FUNC<unknown>DEFAULT2
                                                                          __libc_sigaction.symtab0x14330228FUNC<unknown>DEFAULT2
                                                                          __libc_stack_end.symtab0x35e1c4OBJECT<unknown>DEFAULT10
                                                                          __libc_system.symtab0x13a28312FUNC<unknown>DEFAULT2
                                                                          __libc_waitpid.symtab0x10ea88FUNC<unknown>DEFAULT2
                                                                          __libc_write.symtab0x10eb044FUNC<unknown>DEFAULT2
                                                                          __ltdf2.symtab0x191cc140FUNC<unknown>DEFAULT2
                                                                          __malloc_heap.symtab0x2f9a84OBJECT<unknown>DEFAULT9
                                                                          __malloc_heap_lock.symtab0x35dfc24OBJECT<unknown>DEFAULT10
                                                                          __malloc_sbrk_lock.symtab0x35ee824OBJECT<unknown>DEFAULT10
                                                                          __modsi3.symtab0x108d4228FUNC<unknown>DEFAULT2
                                                                          __muldf3.symtab0x18c98808FUNC<unknown>DEFAULT2
                                                                          __muldi3.symtab0x109bc80FUNC<unknown>DEFAULT2
                                                                          __nameserver.symtab0x35f1012OBJECT<unknown>HIDDEN10
                                                                          __nameservers.symtab0x35f1c4OBJECT<unknown>HIDDEN10
                                                                          __nedf2.symtab0x191d4132FUNC<unknown>DEFAULT2
                                                                          __open_etc_hosts.symtab0x17eb452FUNC<unknown>HIDDEN2
                                                                          __open_nameservers.symtab0x1645c724FUNC<unknown>HIDDEN2
                                                                          __pagesize.symtab0x35e244OBJECT<unknown>DEFAULT10
                                                                          __preinit_array_end.symtab0x240000NOTYPE<unknown>HIDDENSHN_ABS
                                                                          __preinit_array_start.symtab0x240000NOTYPE<unknown>HIDDENSHN_ABS
                                                                          __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __pthread_mutex_init.symtab0x140448FUNC<unknown>DEFAULT2
                                                                          __pthread_mutex_lock.symtab0x140448FUNC<unknown>DEFAULT2
                                                                          __pthread_mutex_trylock.symtab0x140448FUNC<unknown>DEFAULT2
                                                                          __pthread_mutex_unlock.symtab0x140448FUNC<unknown>DEFAULT2
                                                                          __pthread_return_0.symtab0x140448FUNC<unknown>DEFAULT2
                                                                          __pthread_return_void.symtab0x1404c4FUNC<unknown>DEFAULT2
                                                                          __raise.symtab0x1677824FUNC<unknown>HIDDEN2
                                                                          __read_etc_hosts_r.symtab0x17ee8808FUNC<unknown>HIDDEN2
                                                                          __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __resolv_lock.symtab0x2fb9c24OBJECT<unknown>DEFAULT9
                                                                          __rtld_fini.symtab0x35e2c4OBJECT<unknown>HIDDEN10
                                                                          __searchdomain.symtab0x35f0016OBJECT<unknown>HIDDEN10
                                                                          __searchdomains.symtab0x35f204OBJECT<unknown>HIDDEN10
                                                                          __sigaddset.symtab0x12f9436FUNC<unknown>DEFAULT2
                                                                          __sigdelset.symtab0x12fb836FUNC<unknown>DEFAULT2
                                                                          __sigismember.symtab0x12f7036FUNC<unknown>DEFAULT2
                                                                          __stdin.symtab0x2f8784OBJECT<unknown>DEFAULT9
                                                                          __stdio_READ.symtab0x1861492FUNC<unknown>HIDDEN2
                                                                          __stdio_WRITE.symtab0x14728188FUNC<unknown>HIDDEN2
                                                                          __stdio_adjust_position.symtab0x16ae4204FUNC<unknown>HIDDEN2
                                                                          __stdio_fwrite.symtab0x147e4312FUNC<unknown>HIDDEN2
                                                                          __stdio_init_mutex.symtab0x110c416FUNC<unknown>HIDDEN2
                                                                          __stdio_mutex_initializer.3929.symtab0x1ae9024OBJECT<unknown>DEFAULT4
                                                                          __stdio_rfill.symtab0x1867044FUNC<unknown>HIDDEN2
                                                                          __stdio_seek.symtab0x16ea848FUNC<unknown>HIDDEN2
                                                                          __stdio_trans2r_o.symtab0x1869c188FUNC<unknown>HIDDEN2
                                                                          __stdio_trans2w_o.symtab0x1491c260FUNC<unknown>HIDDEN2
                                                                          __stdio_wcommit.symtab0x1118c48FUNC<unknown>HIDDEN2
                                                                          __stdout.symtab0x2f87c4OBJECT<unknown>DEFAULT9
                                                                          __subdf3.symtab0x188a0740FUNC<unknown>DEFAULT2
                                                                          __syscall_error.symtab0x1441428FUNC<unknown>HIDDEN2
                                                                          __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __syscall_fcntl64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __syscall_rt_sigaction.symtab0x1443844FUNC<unknown>HIDDEN2
                                                                          __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __uClibc_fini.symtab0x13fd8108FUNC<unknown>DEFAULT2
                                                                          __uClibc_init.symtab0x1408892FUNC<unknown>DEFAULT2
                                                                          __uClibc_main.symtab0x140e4588FUNC<unknown>DEFAULT2
                                                                          __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __uclibc_progname.symtab0x2fb944OBJECT<unknown>HIDDEN9
                                                                          __udivsi3.symtab0x106f8248FUNC<unknown>DEFAULT2
                                                                          __umodsi3.symtab0x10808204FUNC<unknown>DEFAULT2
                                                                          __vfork.symtab0x10a1040FUNC<unknown>HIDDEN2
                                                                          __xpg_strerror_r.symtab0x126a8232FUNC<unknown>DEFAULT2
                                                                          __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _bss_end__.symtab0x35f2c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          _charpad.symtab0x1127876FUNC<unknown>DEFAULT2
                                                                          _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _dl_aux_init.symtab0x1679036FUNC<unknown>DEFAULT2
                                                                          _dl_phdr.symtab0x35f244OBJECT<unknown>DEFAULT10
                                                                          _dl_phnum.symtab0x35f284OBJECT<unknown>DEFAULT10
                                                                          _edata.symtab0x2fbc00NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          _end.symtab0x35f2c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          _errno.symtab0x35e344OBJECT<unknown>DEFAULT10
                                                                          _exit.symtab0x10b0440FUNC<unknown>DEFAULT2
                                                                          _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _fini.symtab0x1937c4FUNC<unknown>DEFAULT3
                                                                          _fixed_buffers.symtab0x33c088192OBJECT<unknown>DEFAULT10
                                                                          _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _fp_out_narrow.symtab0x112c4132FUNC<unknown>DEFAULT2
                                                                          _fpmaxtostr.symtab0x14c142036FUNC<unknown>HIDDEN2
                                                                          _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _h_errno.symtab0x35e384OBJECT<unknown>DEFAULT10
                                                                          _init.symtab0x80944FUNC<unknown>DEFAULT1
                                                                          _load_inttype.symtab0x14a20112FUNC<unknown>HIDDEN2
                                                                          _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _memcpy.symtab0x154100FUNC<unknown>HIDDEN2
                                                                          _ppfs_init.symtab0x1193c152FUNC<unknown>HIDDEN2
                                                                          _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _ppfs_parsespec.symtab0x11bf41220FUNC<unknown>HIDDEN2
                                                                          _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _ppfs_prepargs.symtab0x119d456FUNC<unknown>HIDDEN2
                                                                          _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _ppfs_setargs.symtab0x11a0c412FUNC<unknown>HIDDEN2
                                                                          _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _promoted_size.symtab0x11ba876FUNC<unknown>DEFAULT2
                                                                          _pthread_cleanup_pop_restore.symtab0x1404c4FUNC<unknown>DEFAULT2
                                                                          _pthread_cleanup_push_defer.symtab0x1404c4FUNC<unknown>DEFAULT2
                                                                          _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _sigintr.symtab0x35e68128OBJECT<unknown>HIDDEN10
                                                                          _start.symtab0x81900FUNC<unknown>DEFAULT2
                                                                          _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _stdio_fopen.symtab0x16bb0760FUNC<unknown>HIDDEN2
                                                                          _stdio_init.symtab0x11054112FUNC<unknown>HIDDEN2
                                                                          _stdio_openlist.symtab0x2f8804OBJECT<unknown>DEFAULT9
                                                                          _stdio_openlist_add_lock.symtab0x2f88424OBJECT<unknown>DEFAULT9
                                                                          _stdio_openlist_dec_use.symtab0x16f6c320FUNC<unknown>DEFAULT2
                                                                          _stdio_openlist_del_count.symtab0x33c044OBJECT<unknown>DEFAULT10
                                                                          _stdio_openlist_del_lock.symtab0x2f89c24OBJECT<unknown>DEFAULT9
                                                                          _stdio_openlist_use_count.symtab0x33c004OBJECT<unknown>DEFAULT10
                                                                          _stdio_streams.symtab0x2f8b8240OBJECT<unknown>DEFAULT9
                                                                          _stdio_term.symtab0x110d4184FUNC<unknown>HIDDEN2
                                                                          _stdio_user_locking.symtab0x2f8b44OBJECT<unknown>DEFAULT9
                                                                          _stdlib_strto_l.symtab0x13b74408FUNC<unknown>HIDDEN2
                                                                          _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _store_inttype.symtab0x14a9052FUNC<unknown>HIDDEN2
                                                                          _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _string_syserrmsgs.symtab0x1af602906OBJECT<unknown>HIDDEN4
                                                                          _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _uintmaxtostr.symtab0x14ac4336FUNC<unknown>HIDDEN2
                                                                          _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _vfprintf_internal.symtab0x113481524FUNC<unknown>HIDDEN2
                                                                          _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          abort.symtab0x133dc328FUNC<unknown>DEFAULT2
                                                                          abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          atoi.symtab0x13b6012FUNC<unknown>DEFAULT2
                                                                          atol.symtab0x13b6012FUNC<unknown>DEFAULT2
                                                                          atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          bcopy.symtab0x121a016FUNC<unknown>DEFAULT2
                                                                          been_there_done_that.symtab0x35e144OBJECT<unknown>DEFAULT10
                                                                          been_there_done_that.2789.symtab0x35e304OBJECT<unknown>DEFAULT10
                                                                          bot.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          brk.symtab0x167b460FUNC<unknown>DEFAULT2
                                                                          brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          bsd_signal.symtab0x12eb8184FUNC<unknown>DEFAULT2
                                                                          buf.2613.symtab0x35c0c16OBJECT<unknown>DEFAULT10
                                                                          buf.4901.symtab0x35c1c460OBJECT<unknown>DEFAULT10
                                                                          c.symtab0x2f8544OBJECT<unknown>DEFAULT9
                                                                          call___do_global_ctors_aux.symtab0x193740FUNC<unknown>DEFAULT2
                                                                          call___do_global_dtors_aux.symtab0x81280FUNC<unknown>DEFAULT2
                                                                          call_frame_dummy.symtab0x81880FUNC<unknown>DEFAULT2
                                                                          chdir.symtab0x10b2c44FUNC<unknown>DEFAULT2
                                                                          chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          close.symtab0x10b5844FUNC<unknown>DEFAULT2
                                                                          close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          commServer.symtab0x240284OBJECT<unknown>DEFAULT9
                                                                          completed.2555.symtab0x2fbc01OBJECT<unknown>DEFAULT10
                                                                          connect.symtab0x12d0044FUNC<unknown>DEFAULT2
                                                                          connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          connectTimeout.symtab0x9c8c640FUNC<unknown>DEFAULT2
                                                                          creat.symtab0x10d3416FUNC<unknown>DEFAULT2
                                                                          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          csum.symtab0xa9b0344FUNC<unknown>DEFAULT2
                                                                          currentServer.symtab0x2f7f04OBJECT<unknown>DEFAULT9
                                                                          data_start.symtab0x240200NOTYPE<unknown>DEFAULT9
                                                                          decodea.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          dup2.symtab0x10b8444FUNC<unknown>DEFAULT2
                                                                          dup2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          environ.symtab0x35e204OBJECT<unknown>DEFAULT10
                                                                          errno.symtab0x35e344OBJECT<unknown>DEFAULT10
                                                                          errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          execl.symtab0x13da0148FUNC<unknown>DEFAULT2
                                                                          execl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          execve.symtab0x1446444FUNC<unknown>DEFAULT2
                                                                          execve.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          exit.symtab0x13d0c148FUNC<unknown>DEFAULT2
                                                                          exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          exp10_table.symtab0x1bb1472OBJECT<unknown>DEFAULT4
                                                                          fclose.symtab0x1681c384FUNC<unknown>DEFAULT2
                                                                          fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fcntl.symtab0x10a40116FUNC<unknown>DEFAULT2
                                                                          fcntl64.symtab0x10ab480FUNC<unknown>DEFAULT2
                                                                          fdgets.symtab0x923c208FUNC<unknown>DEFAULT2
                                                                          fdopen_pids.symtab0x33bf44OBJECT<unknown>DEFAULT10
                                                                          fdpclose.symtab0x90b8388FUNC<unknown>DEFAULT2
                                                                          fdpopen.symtab0x8e30648FUNC<unknown>DEFAULT2
                                                                          fflush_unlocked.symtab0x170ac484FUNC<unknown>DEFAULT2
                                                                          fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fgetc_unlocked.symtab0x182a8304FUNC<unknown>DEFAULT2
                                                                          fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fgets.symtab0x16ed8148FUNC<unknown>DEFAULT2
                                                                          fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fgets_unlocked.symtab0x17290152FUNC<unknown>DEFAULT2
                                                                          fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fmt.symtab0x1bb0020OBJECT<unknown>DEFAULT4
                                                                          fopen.symtab0x1699c12FUNC<unknown>DEFAULT2
                                                                          fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          force_to_data.symtab0x240140OBJECT<unknown>DEFAULT9
                                                                          force_to_data.symtab0x2fbbc0OBJECT<unknown>DEFAULT9
                                                                          fork.symtab0x10bb044FUNC<unknown>DEFAULT2
                                                                          fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fputs_unlocked.symtab0x120b852FUNC<unknown>DEFAULT2
                                                                          fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          frame_dummy.symtab0x81300FUNC<unknown>DEFAULT2
                                                                          free.symtab0x13130240FUNC<unknown>DEFAULT2
                                                                          free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fseek.symtab0x169a812FUNC<unknown>DEFAULT2
                                                                          fseeko.symtab0x169a812FUNC<unknown>DEFAULT2
                                                                          fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fseeko64.symtab0x169b4304FUNC<unknown>DEFAULT2
                                                                          fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          fwrite_unlocked.symtab0x120ec172FUNC<unknown>DEFAULT2
                                                                          fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getBogos.symtab0x95f0576FUNC<unknown>DEFAULT2
                                                                          getBuild.symtab0xfcc028FUNC<unknown>DEFAULT2
                                                                          getCores.symtab0x9830232FUNC<unknown>DEFAULT2
                                                                          getHost.symtab0x9534100FUNC<unknown>DEFAULT2
                                                                          getOurIP.symtab0xf9dc740FUNC<unknown>DEFAULT2
                                                                          getRandomIP.symtab0xa95096FUNC<unknown>DEFAULT2
                                                                          getRandomPublicIP.symtab0xa644780FUNC<unknown>DEFAULT2
                                                                          get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getc_unlocked.symtab0x182a8304FUNC<unknown>DEFAULT2
                                                                          getdtablesize.symtab0x10bdc40FUNC<unknown>DEFAULT2
                                                                          getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getegid.symtab0x1449044FUNC<unknown>DEFAULT2
                                                                          getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          geteuid.symtab0x144bc44FUNC<unknown>DEFAULT2
                                                                          geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getgid.symtab0x144e844FUNC<unknown>DEFAULT2
                                                                          getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          gethostbyname.symtab0x1294868FUNC<unknown>DEFAULT2
                                                                          gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          gethostbyname_r.symtab0x1298c884FUNC<unknown>DEFAULT2
                                                                          gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getpid.symtab0x10c0444FUNC<unknown>DEFAULT2
                                                                          getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getrlimit.symtab0x10c3044FUNC<unknown>DEFAULT2
                                                                          getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getsockname.symtab0x12d2c44FUNC<unknown>DEFAULT2
                                                                          getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getsockopt.symtab0x12d5848FUNC<unknown>DEFAULT2
                                                                          getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          getuid.symtab0x1451444FUNC<unknown>DEFAULT2
                                                                          getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          gotIP.symtab0x2fbe04OBJECT<unknown>DEFAULT10
                                                                          h.4900.symtab0x35de820OBJECT<unknown>DEFAULT10
                                                                          h_errno.symtab0x35e384OBJECT<unknown>DEFAULT10
                                                                          heap_alloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          heap_free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          hextable.symtab0x1a1781024OBJECT<unknown>DEFAULT4
                                                                          htonl.symtab0x1286036FUNC<unknown>DEFAULT2
                                                                          htons.symtab0x1288420FUNC<unknown>DEFAULT2
                                                                          i.4136.symtab0x2f8584OBJECT<unknown>DEFAULT9
                                                                          index.symtab0x122e0264FUNC<unknown>DEFAULT2
                                                                          inet_addr.symtab0x1292436FUNC<unknown>DEFAULT2
                                                                          inet_aton.symtab0x15b64236FUNC<unknown>DEFAULT2
                                                                          inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          inet_ntoa.symtab0x1291812FUNC<unknown>DEFAULT2
                                                                          inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          inet_ntoa_r.symtab0x12898128FUNC<unknown>DEFAULT2
                                                                          inet_ntop.symtab0x17968608FUNC<unknown>DEFAULT2
                                                                          inet_ntop4.symtab0x17804356FUNC<unknown>DEFAULT2
                                                                          inet_pton.symtab0x175f4528FUNC<unknown>DEFAULT2
                                                                          inet_pton4.symtab0x17528204FUNC<unknown>DEFAULT2
                                                                          infectline.symtab0x240244OBJECT<unknown>DEFAULT9
                                                                          initConnection.symtab0xf810460FUNC<unknown>DEFAULT2
                                                                          init_rand.symtab0x81cc212FUNC<unknown>DEFAULT2
                                                                          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          initial_fa.symtab0x2f9ac260OBJECT<unknown>DEFAULT9
                                                                          initstate.symtab0x13630152FUNC<unknown>DEFAULT2
                                                                          initstate_r.symtab0x13960200FUNC<unknown>DEFAULT2
                                                                          ioctl.symtab0x10c5c80FUNC<unknown>DEFAULT2
                                                                          ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          ipState.symtab0x33bf85OBJECT<unknown>DEFAULT10
                                                                          isatty.symtab0x1279c32FUNC<unknown>DEFAULT2
                                                                          isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          isspace.symtab0x10edc24FUNC<unknown>DEFAULT2
                                                                          isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          kill.symtab0x10cac44FUNC<unknown>DEFAULT2
                                                                          kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          lengthd.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          lengthq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/string/arm/_memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/string/arm/bcopy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/string/arm/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/string/arm/memmove.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/string/arm/memset.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/string/arm/strcmp.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/string/arm/strlen.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/sysdeps/linux/arm/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/sysdeps/linux/arm/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/sysdeps/linux/arm/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/sysdeps/linux/arm/sigrestorer.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libc/sysdeps/linux/arm/vfork.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          libgcc2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          listFork.symtab0x9f0c408FUNC<unknown>DEFAULT2
                                                                          llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          lseek64.symtab0x18210100FUNC<unknown>DEFAULT2
                                                                          macAddress.symtab0x2fbec6OBJECT<unknown>DEFAULT10
                                                                          main.symtab0xfcdc2588FUNC<unknown>DEFAULT2
                                                                          mainCommSock.symtab0x2fbdc4OBJECT<unknown>DEFAULT10
                                                                          makeIPPacket.symtab0xac18276FUNC<unknown>DEFAULT2
                                                                          makeRandomStr.symtab0x9918136FUNC<unknown>DEFAULT2
                                                                          malloc.symtab0x12fdc340FUNC<unknown>DEFAULT2
                                                                          malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          matchPrompt.symtab0xa230368FUNC<unknown>DEFAULT2
                                                                          memchr.symtab0x158b0252FUNC<unknown>DEFAULT2
                                                                          memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          memcpy.symtab0x121b04FUNC<unknown>DEFAULT2
                                                                          memmove.symtab0x158a04FUNC<unknown>DEFAULT2
                                                                          mempcpy.symtab0x159ac24FUNC<unknown>DEFAULT2
                                                                          mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          memrchr.symtab0x159c4236FUNC<unknown>DEFAULT2
                                                                          memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          memset.symtab0x121c0156FUNC<unknown>DEFAULT2
                                                                          mylock.symtab0x2fab024OBJECT<unknown>DEFAULT9
                                                                          mylock.symtab0x2fac824OBJECT<unknown>DEFAULT9
                                                                          mylock.symtab0x35e3c24OBJECT<unknown>DEFAULT10
                                                                          nanosleep.symtab0x1454044FUNC<unknown>DEFAULT2
                                                                          nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          negotiate.symtab0xa0a4396FUNC<unknown>DEFAULT2
                                                                          next_start.1066.symtab0x35c084OBJECT<unknown>DEFAULT10
                                                                          ntohl.symtab0x1282836FUNC<unknown>DEFAULT2
                                                                          ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          ntohs.symtab0x1284c20FUNC<unknown>DEFAULT2
                                                                          ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          numpids.symtab0x2fbe48OBJECT<unknown>DEFAULT10
                                                                          object.2636.symtab0x2fbc424OBJECT<unknown>DEFAULT10
                                                                          open.symtab0x10cd892FUNC<unknown>DEFAULT2
                                                                          open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          opennameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          ourIP.symtab0x35e5c4OBJECT<unknown>DEFAULT10
                                                                          p.2553.symtab0x2401c0OBJECT<unknown>DEFAULT9
                                                                          parseHex.symtab0x930c128FUNC<unknown>DEFAULT2
                                                                          passwords.symtab0x2f81464OBJECT<unknown>DEFAULT9
                                                                          pids.symtab0x35e644OBJECT<unknown>DEFAULT10
                                                                          pipe.symtab0x10d4444FUNC<unknown>DEFAULT2
                                                                          pipe.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          poll.symtab0x167f044FUNC<unknown>DEFAULT2
                                                                          poll.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          prctl.symtab0x10d7048FUNC<unknown>DEFAULT2
                                                                          prctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          prefix.4141.symtab0x1aeb812OBJECT<unknown>DEFAULT4
                                                                          print.symtab0x88e01008FUNC<unknown>DEFAULT2
                                                                          printchar.symtab0x8508108FUNC<unknown>DEFAULT2
                                                                          printf.symtab0x10f3460FUNC<unknown>DEFAULT2
                                                                          printf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          printi.symtab0x86f8488FUNC<unknown>DEFAULT2
                                                                          prints.symtab0x8574388FUNC<unknown>DEFAULT2
                                                                          processCmd.symtab0xe8384056FUNC<unknown>DEFAULT2
                                                                          qual_chars.4147.symtab0x1aecc20OBJECT<unknown>DEFAULT4
                                                                          raise.symtab0x1677824FUNC<unknown>DEFAULT2
                                                                          raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          rand.symtab0x135244FUNC<unknown>DEFAULT2
                                                                          rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          rand_cmwc.symtab0x82a0312FUNC<unknown>DEFAULT2
                                                                          random.symtab0x13528124FUNC<unknown>DEFAULT2
                                                                          random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          random_poly_info.symtab0x1babc40OBJECT<unknown>DEFAULT4
                                                                          random_r.symtab0x13804144FUNC<unknown>DEFAULT2
                                                                          random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          randtbl.symtab0x2fafc128OBJECT<unknown>DEFAULT9
                                                                          rawmemchr.symtab0x17328184FUNC<unknown>DEFAULT2
                                                                          rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          read.symtab0x10da044FUNC<unknown>DEFAULT2
                                                                          read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          readUntil.symtab0xa3a0676FUNC<unknown>DEFAULT2
                                                                          read_etc_hosts_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          recv.symtab0x12d8844FUNC<unknown>DEFAULT2
                                                                          recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          recvLine.symtab0x99a0748FUNC<unknown>DEFAULT2
                                                                          sbrk.symtab0x1456c88FUNC<unknown>DEFAULT2
                                                                          sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          scanPid.symtab0x35e604OBJECT<unknown>DEFAULT10
                                                                          sclose.symtab0xad2c76FUNC<unknown>DEFAULT2
                                                                          select.symtab0x10dcc48FUNC<unknown>DEFAULT2
                                                                          select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          send.symtab0x12db444FUNC<unknown>DEFAULT2
                                                                          send.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          sendCNC.symtab0xd614220FUNC<unknown>DEFAULT2
                                                                          sendHOLD.symtab0xe2781472FUNC<unknown>DEFAULT2
                                                                          sendHTTP.symtab0xd4a4368FUNC<unknown>DEFAULT2
                                                                          sendJUNK.symtab0xdd601304FUNC<unknown>DEFAULT2
                                                                          sendTCP.symtab0xd6f01648FUNC<unknown>DEFAULT2
                                                                          sendUDP.symtab0xce8c1228FUNC<unknown>DEFAULT2
                                                                          sendto.symtab0x12de052FUNC<unknown>DEFAULT2
                                                                          sendto.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          setsid.symtab0x10dfc44FUNC<unknown>DEFAULT2
                                                                          setsid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          setsockopt.symtab0x12e1448FUNC<unknown>DEFAULT2
                                                                          setsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          setstate.symtab0x135a4140FUNC<unknown>DEFAULT2
                                                                          setstate_r.symtab0x13744192FUNC<unknown>DEFAULT2
                                                                          sigaction.symtab0x14330228FUNC<unknown>DEFAULT2
                                                                          sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          sigaddset.symtab0x12e7048FUNC<unknown>DEFAULT2
                                                                          sigaddset.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          sigempty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS

                                                                          Download Network PCAP: filteredfull

                                                                          TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                                                          2025-02-18T06:39:04.688660+01002847180ETPRO MALWARE ELF/BASHLITE Variant CnC Activity1192.168.2.234763084.200.154.1194567TCP
                                                                          2025-02-18T06:39:25.433501+01002847180ETPRO MALWARE ELF/BASHLITE Variant CnC Activity1192.168.2.234763284.200.154.1194567TCP
                                                                          2025-02-18T06:41:24.470129+01002847180ETPRO MALWARE ELF/BASHLITE Variant CnC Activity1192.168.2.234763484.200.154.1194567TCP
                                                                          • Total Packets: 99
                                                                          • 4567 undefined
                                                                          • 443 (HTTPS)
                                                                          • 80 (HTTP)
                                                                          TimestampSource PortDest PortSource IPDest IP
                                                                          Feb 18, 2025 06:39:02.692295074 CET43928443192.168.2.2391.189.91.42
                                                                          Feb 18, 2025 06:39:04.503457069 CET476304567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:04.508439064 CET45674763084.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:39:04.508513927 CET476304567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:04.688659906 CET476304567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:04.693510056 CET45674763084.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:39:08.067658901 CET42836443192.168.2.2391.189.91.43
                                                                          Feb 18, 2025 06:39:09.603460073 CET4251680192.168.2.23109.202.202.202
                                                                          Feb 18, 2025 06:39:23.937309027 CET43928443192.168.2.2391.189.91.42
                                                                          Feb 18, 2025 06:39:24.371309996 CET45674763084.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:39:24.371810913 CET476304567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:24.372987032 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:24.378349066 CET45674763084.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:39:24.379620075 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:39:24.379713058 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:25.377146006 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:25.382246017 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:39:25.382353067 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:25.433501005 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:25.438918114 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:39:34.175956964 CET42836443192.168.2.2391.189.91.43
                                                                          Feb 18, 2025 06:39:40.319081068 CET4251680192.168.2.23109.202.202.202
                                                                          Feb 18, 2025 06:39:55.471230030 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:39:55.476320982 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:40:04.891629934 CET43928443192.168.2.2391.189.91.42
                                                                          Feb 18, 2025 06:40:25.368835926 CET42836443192.168.2.2391.189.91.43
                                                                          Feb 18, 2025 06:40:25.513302088 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:40:25.518311024 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:40:55.549429893 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:40:55.554395914 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:24.433952093 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:24.434525967 CET476324567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:24.435726881 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:24.439460039 CET45674763284.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:24.440731049 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:24.440913916 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:24.470129013 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:24.475004911 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:25.520963907 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:25.521204948 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:26.530947924 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:26.531115055 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:27.521904945 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:27.522033930 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:28.522634983 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:28.522834063 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:29.523284912 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:29.523540974 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:30.524106979 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:30.524420977 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:31.524274111 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:31.524545908 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:32.526016951 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:32.526249886 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:33.525952101 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:33.526207924 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:34.526469946 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:34.526684999 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:35.526966095 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:35.527177095 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:36.528491020 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:36.528804064 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:37.528167009 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:37.528441906 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:38.528264999 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:38.528506041 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:39.528647900 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:39.528915882 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:40.529287100 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:40.529524088 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:41.530179024 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:41.530386925 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:42.530512094 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:42.530795097 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:43.530865908 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:43.531219959 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:44.531132936 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:44.531415939 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:45.531301975 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:45.531610012 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:46.532010078 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:46.532285929 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:47.532864094 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:47.533121109 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:48.532339096 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:48.532526016 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:49.533236980 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:49.533559084 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:50.701385021 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:50.701555967 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:51.534230947 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:51.534382105 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:52.534982920 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:52.535141945 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:53.535177946 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:53.535445929 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:54.535407066 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:54.535517931 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:55.535696983 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:55.535835981 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:56.536312103 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:56.536540031 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:57.536950111 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:57.537166119 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:58.537807941 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:58.538034916 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:41:59.538803101 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:41:59.538974047 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:00.539211035 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:00.539498091 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:01.539982080 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:01.540271044 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:02.541234970 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:02.541656017 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:03.541028023 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:03.541399002 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:04.542062044 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:04.542471886 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:05.545661926 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:05.546015978 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:06.542727947 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:06.543143034 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:07.545731068 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:07.546170950 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:08.545901060 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:08.546350956 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:09.543639898 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:09.544055939 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:10.543683052 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:10.543977022 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:11.544095993 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:11.544593096 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:12.544769049 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:12.545133114 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:13.545450926 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:13.545926094 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:14.545984030 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:14.546194077 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:15.546473980 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:15.546809912 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:16.546936035 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:16.547288895 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:17.547806978 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:17.548058033 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:18.548724890 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:18.549170971 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:19.549297094 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:19.549711943 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:20.550230026 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:20.550533056 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:21.550498009 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:21.550934076 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:22.550410986 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:22.550777912 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:23.550870895 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:23.551264048 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:24.551192045 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:24.551580906 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:25.551537037 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:25.551939964 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:26.551493883 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:26.551799059 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:27.552017927 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:27.552345037 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:28.552550077 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:28.552846909 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:29.552687883 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:29.552963972 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:30.552985907 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:30.553190947 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:31.553366899 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:31.553567886 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:32.554040909 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:32.554150105 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:33.554332972 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:33.554588079 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:34.554663897 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:34.554872990 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:35.555522919 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:35.555809975 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:36.555346966 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:36.555800915 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:37.556382895 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:37.556502104 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:38.556236982 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:38.556443930 CET476344567192.168.2.2384.200.154.119
                                                                          Feb 18, 2025 06:42:39.556612015 CET45674763484.200.154.119192.168.2.23
                                                                          Feb 18, 2025 06:42:39.556751966 CET476344567192.168.2.2384.200.154.119

                                                                          System Behavior

                                                                          Start time (UTC):05:38:57
                                                                          Start date (UTC):18/02/2025
                                                                          Path:/usr/bin/dash
                                                                          Arguments:-
                                                                          File size:129816 bytes
                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                          Start time (UTC):05:38:57
                                                                          Start date (UTC):18/02/2025
                                                                          Path:/usr/bin/rm
                                                                          Arguments:rm -f /tmp/tmp.LrpWZolUcH /tmp/tmp.TkEY6nsVgN /tmp/tmp.s8G7a8HMdI
                                                                          File size:72056 bytes
                                                                          MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                                                                          Start time (UTC):05:38:57
                                                                          Start date (UTC):18/02/2025
                                                                          Path:/usr/bin/dash
                                                                          Arguments:-
                                                                          File size:129816 bytes
                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                          Start time (UTC):05:38:57
                                                                          Start date (UTC):18/02/2025
                                                                          Path:/usr/bin/rm
                                                                          Arguments:rm -f /tmp/tmp.LrpWZolUcH /tmp/tmp.TkEY6nsVgN /tmp/tmp.s8G7a8HMdI
                                                                          File size:72056 bytes
                                                                          MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                                                                          Start time (UTC):05:39:02
                                                                          Start date (UTC):18/02/2025
                                                                          Path:/tmp/na.elf
                                                                          Arguments:/tmp/na.elf
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                          Start time (UTC):05:39:03
                                                                          Start date (UTC):18/02/2025
                                                                          Path:/tmp/na.elf
                                                                          Arguments:-
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                          Start time (UTC):05:39:03
                                                                          Start date (UTC):18/02/2025
                                                                          Path:/tmp/na.elf
                                                                          Arguments:-
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1