Joe Sandbox Cloud Basic Analysis Report
Edit tour

Linux Analysis Report
tftp.elf

Overview

General Information

Sample name:tftp.elf
Analysis ID:1645501
MD5:9fe5056acb70426d1f0eb15a63397340
SHA1:b09cd43077e35b133043f0e85b7d61bde04c5b8a
SHA256:aa9d451571a928f1a21e9bee1b737d7ec8f942ee11bd214ef5df47169f01257d
Tags:elfuser-abuse_ch
Infos:

Detection

Gafgyt
Score:84
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Gafgyt
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Sample and/or dropped files contains symbols with suspicious names
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1645501
Start date and time:2025-03-21 20:56:33 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 1s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:tftp.elf
Detection:MAL
Classification:mal84.spre.troj.linELF@0/0@2/0
  • VT rate limit hit for: 93.115.172.234:6667

Runtime Messages

Command:/tmp/tftp.elf
PID:5452
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
MAC: EC:F4:BB:61:AE:2F
Standard Error:

Process Tree

  • system is lnxubuntu20
  • tftp.elf (PID: 5452, Parent: 5376, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/tftp.elf
    • tftp.elf New Fork (PID: 5454, Parent: 5452)
      • tftp.elf New Fork (PID: 5456, Parent: 5454)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
tftp.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    tftp.elfLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x14fe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    tftp.elfLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x140e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
    tftp.elfLinux_Trojan_Gafgyt_fb14e81funknownunknown
    • 0xfebc:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

    Memory Dumps

    SourceRuleDescriptionAuthorStrings
    5452.1.00007f748c017000.00007f748c028000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x14fe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    5452.1.00007f748c017000.00007f748c028000.r-x.sdmpLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x140e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
    5452.1.00007f748c017000.00007f748c028000.r-x.sdmpLinux_Trojan_Gafgyt_fb14e81funknownunknown
    • 0xfebc:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
    5454.1.00007f748c017000.00007f748c028000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x14fe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    5454.1.00007f748c017000.00007f748c028000.r-x.sdmpLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x140e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
    Click to see the 1 entries

    Suricata Signatures

    ⊘No Suricata rule has matched

    Joe Sandbox Signatures

    • • AV Detection
    • • Spreading
    • • Networking
    • • System Summary
    • • Malware Analysis System Evasion
    • • Stealing of Sensitive Information
    • • Remote Access Functionality

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Source: tftp.elfAvira: detected
    Source: tftp.elfMalware Configuration Extractor: Gafgyt {"C2 url": "93.115.172.234:6667"}
    Source: tftp.elfVirustotal: Detection: 64%Perma Link
    Source: tftp.elfReversingLabs: Detection: 72%

    Spreading

    barindex
    Source: /tmp/tftp.elf (PID: 5452)Opens: /proc/net/routeJump to behavior
    Source: global trafficTCP traffic: 192.168.2.13:60880 -> 93.115.172.234:6667
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownTCP traffic detected without corresponding DNS query: 93.115.172.234
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

    System Summary

    barindex
    Source: tftp.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: tftp.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: tftp.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
    Source: 5452.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5452.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5452.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
    Source: 5454.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5454.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5454.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
    Source: tftp.elfELF static info symbol of initial sample: passwords
    Source: tftp.elfELF static info symbol of initial sample: usernames
    Source: Initial sampleString containing 'busybox' found: /bin/busybox;echo -e '\147\141\171\146\147\164'
    Source: tftp.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: tftp.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: tftp.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
    Source: 5452.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5452.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5452.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
    Source: 5454.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5454.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5454.1.00007f748c017000.00007f748c028000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
    Source: classification engineClassification label: mal84.spre.troj.linELF@0/0@2/0
    Source: tftp.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: tftp.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: tftp.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: tftp.elfELF static info symbol of initial sample: libc/string/arm/_memcpy.S
    Source: tftp.elfELF static info symbol of initial sample: libc/string/arm/memcpy.S
    Source: tftp.elfELF static info symbol of initial sample: libc/string/arm/memset.S
    Source: tftp.elfELF static info symbol of initial sample: libc/string/arm/strcmp.S
    Source: tftp.elfELF static info symbol of initial sample: libc/string/arm/strlen.S
    Source: tftp.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
    Source: tftp.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
    Source: tftp.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
    Source: tftp.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S
    Source: tftp.elfELF static info symbol of initial sample: libc/sysdeps/linux/arm/vfork.S
    Source: /tmp/tftp.elf (PID: 5452)Queries kernel information via 'uname': Jump to behavior
    Source: tftp.elf, 5452.1.000055ddabe3a000.000055ddabf68000.rw-.sdmp, tftp.elf, 5454.1.000055ddabe3a000.000055ddabf68000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
    Source: tftp.elf, 5452.1.00007ffd944cb000.00007ffd944ec000.rw-.sdmp, tftp.elf, 5454.1.00007ffd944cb000.00007ffd944ec000.rw-.sdmpBinary or memory string: `^x86_64/usr/bin/qemu-arm/tmp/tftp.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/tftp.elf
    Source: tftp.elf, 5452.1.000055ddabe3a000.000055ddabf68000.rw-.sdmp, tftp.elf, 5454.1.000055ddabe3a000.000055ddabf68000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
    Source: tftp.elf, 5452.1.00007ffd944cb000.00007ffd944ec000.rw-.sdmp, tftp.elf, 5454.1.00007ffd944cb000.00007ffd944ec000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

    Stealing of Sensitive Information

    barindex
    Source: Yara matchFile source: tftp.elf, type: SAMPLE

    Remote Access Functionality

    barindex
    Source: Yara matchFile source: tftp.elf, type: SAMPLE

    Mitre Att&ck Matrix

    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
    Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
    Masquerading    		OS Credential Dumping11
    Security Software Discovery    		Remote ServicesData from Local System1
    Non-Standard Port    		Exfiltration Over Other Network MediumAbuse Accessibility Features
    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
    Remote System Discovery    		Remote Desktop ProtocolData from Removable Media1
    Non-Application Layer Protocol    		Exfiltration Over BluetoothNetwork Denial of Service
    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
    Application Layer Protocol    		Automated ExfiltrationData Encrypted for Impact

    Malware Configuration

    Threatname: Gafgyt

    {
  "C2 url": "93.115.172.234:6667"
}

    Behavior Graph

    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Number of created Files
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1645501 Sample: tftp.elf Startdate: 21/03/2025 Architecture: LINUX Score: 84 15 93.115.172.234, 60880, 60882, 60884 ALTER-NET-ASZorilorNr11SfGheorgheRO Romania 2->15 17 daisy.ubuntu.com 2->17 19 Found malware configuration 2->19 21 Malicious sample detected (through community Yara rule) 2->21 23 Antivirus / Scanner detection for submitted sample 2->23 25 2 other signatures 2->25 8 tftp.elf 2->8         started        signatures3 process4 signatures5 27 Opens /proc/net/* files useful for finding connected devices and routers 8->27 11 tftp.elf 8->11         started        process6 process7 13 tftp.elf 11->13         started       

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    tftp.elf65%VirustotalBrowse
    tftp.elf72%ReversingLabsLinux.Trojan.Gafgyt
    tftp.elf100%AviraLINUX/Gafgyt.opnd

    Dropped Files

    ⊘No Antivirus matches

    Domains

    ⊘No Antivirus matches

    URLs

    ⊘No Antivirus matches

    Domains and IPs

    Download Network PCAP: filtered – full

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    daisy.ubuntu.com
    		162.213.35.24
    		truefalse
      		high

      Contacted URLs

      NameMaliciousAntivirus DetectionReputation
      93.115.172.234:6667true
        		unknown

        World Map of Contacted IPs

        • No. of IPs < 25%
        • 25% < No. of IPs < 50%
        • 50% < No. of IPs < 75%
        • 75% < No. of IPs

        Public IPs

        IPDomainCountryFlagASNASN NameMalicious
        93.115.172.234
        		unknownRomania
        		39531ALTER-NET-ASZorilorNr11SfGheorgheROtrue

        Joe Sandbox View / Context

        IPs

        ⊘No context

        Domains

        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
        daisy.ubuntu.comjwyt4py98x.ppc.elfGet hashmaliciousMiraiBrowse
        • 162.213.35.25
        .main.elfGet hashmaliciousXmrigBrowse
        • 162.213.35.25
        jwyt4py98x.arm6.elfGet hashmaliciousMiraiBrowse
        • 162.213.35.25
        jwyt4py98x.mpsl.elfGet hashmaliciousMiraiBrowse
        • 162.213.35.25
        jwyt4py98x.arm.elfGet hashmaliciousMiraiBrowse
        • 162.213.35.25
        jwyt4py98x.x86.elfGet hashmaliciousMiraiBrowse
        • 162.213.35.24
        i.elfGet hashmaliciousUnknownBrowse
        • 162.213.35.25
        miner.elfGet hashmaliciousUnknownBrowse
        • 162.213.35.25
        ht-jupit.elfGet hashmaliciousPoseidonBrowse
        • 162.213.35.25
        main_x86.elfGet hashmaliciousUnknownBrowse
        • 162.213.35.24

        ASNs

        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
        ALTER-NET-ASZorilorNr11SfGheorgheRORavateb.pdf.exeGet hashmaliciousUnknownBrowse
        • 89.46.233.239
        pp.dd.exeGet hashmaliciousUnknownBrowse
        • 93.115.172.125
        RPV.exeGet hashmaliciousI2PRATBrowse
        • 93.115.172.125
        pTVKHqys2h.exeGet hashmaliciousXmrigBrowse
        • 93.115.172.41
        pXlV6TKi3E.exeGet hashmaliciousSalityBrowse
        • 89.46.234.189
        boatnet.x86Get hashmaliciousMiraiBrowse
        • 89.46.238.151
        jRBdJBRpyaGet hashmaliciousMiraiBrowse
        • 89.46.234.98

        JA3 Fingerprints

        ⊘No context

        Dropped Files

        ⊘No context

        Created / dropped Files

        ⊘No created / dropped files found

        Static File Info

        General

        File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
        Entropy (8bit):5.83036450236307
        TrID:
        • ELF Executable and Linkable format (generic) (4004/1) 100.00%
        File name:tftp.elf
        File size:96'577 bytes
        MD5:9fe5056acb70426d1f0eb15a63397340
        SHA1:b09cd43077e35b133043f0e85b7d61bde04c5b8a
        SHA256:aa9d451571a928f1a21e9bee1b737d7ec8f942ee11bd214ef5df47169f01257d
        SHA512:df57c66133260745600e740fea79ed9bfec7ed50d94f30134c36dbd2f9569c84ded658021d6d89797a87c7de335794d62d7ebe3003da46e3abf568ef8a1c1442
        SSDEEP:1536:fWnPOnjwPPw0dXvzH3I3Ru9PwGWY5lA3e64BvprM4e2cFERXDpr9O30JZpaiQClV:gw0dXvzH3I3Ru9PwGWY5m3e64BvprM4v
        TLSH:7993E909D9605337D2D23BBEF79A82CE73361E946B97331186287AF41BE17DD1939022
        File Content Preview:.ELF..............(.........4...........4. ...(........p`...`...`...................................p...p...............p...p...p...<...Xg..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

        Static ELF Info

        ELF header

        Class:ELF32
        Data:2's complement, little endian
        Version:1 (current)
        Machine:ARM
        Version Number:0x1
        Type:EXEC (Executable file)
        OS/ABI:UNIX - System V
        ABI Version:0
        Entry Point Address:0x81b0
        Flags:0x4000002
        ELF Header Size:52
        Program Header Offset:52
        Program Header Size:32
        Number of Program Headers:4
        Section Header Offset:72196
        Section Header Size:40
        Number of Section Headers:24
        Header String Table Index:21

        Sections

        NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
        NULL0x00x00x00x00x0000
        .initPROGBITS0x80b40xb40x100x00x6AX004
        .textPROGBITS0x80d00xd00xf7b00x00x6AX0016
        .finiPROGBITS0x178800xf8800x100x00x6AX004
        .rodataPROGBITS0x178900xf8900xeb80x00x2A004
        .ARM.extabPROGBITS0x187480x107480x180x00x2A004
        .ARM.exidxARM_EXIDX0x187600x107600x100x00x82AL204
        .eh_framePROGBITS0x207700x107700x40x00x3WA004
        .init_arrayINIT_ARRAY0x207740x107740x40x00x3WA004
        .fini_arrayFINI_ARRAY0x207780x107780x40x00x3WA004
        .jcrPROGBITS0x2077c0x1077c0x40x00x3WA004
        .gotPROGBITS0x207800x107800x780x40x3WA004
        .dataPROGBITS0x207f80x107f80x2b40x00x3WA004
        .bssNOBITS0x20ab00x10aac0x64180x00x3WA008
        .commentPROGBITS0x00x10aac0x9940x00x0001
        .debug_arangesPROGBITS0x00x114400x600x00x0008
        .debug_infoPROGBITS0x00x114a00x2040x00x0001
        .debug_abbrevPROGBITS0x00x116a40x3c0x00x0001
        .debug_linePROGBITS0x00x116e00x1da0x00x0001
        .debug_framePROGBITS0x00x118bc0x580x00x0004
        .ARM.attributesARM_ATTRIBUTES0x00x119140x100x00x0001
        .shstrtabSTRTAB0x00x119240xdd0x00x0001
        .symtabSYMTAB0x00x11dc40x3c800x100x0235174
        .strtabSTRTAB0x00x15a440x1efd0x00x0001

        Program Segments

        TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
        EXIDX0x107600x187600x187600x100x102.40560x4R 0x4.ARM.exidx
        LOAD0x00x80000x80000x107700x107705.80090x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
        LOAD0x107700x207700x207700x33c0x67583.82190x6RW 0x8000.eh_frame .init_array .fini_array .jcr .got .data .bss
        GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

        Symbols

        NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
        .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
        .symtab0x80b40SECTION<unknown>DEFAULT1
        .symtab0x80d00SECTION<unknown>DEFAULT2
        .symtab0x178800SECTION<unknown>DEFAULT3
        .symtab0x178900SECTION<unknown>DEFAULT4
        .symtab0x187480SECTION<unknown>DEFAULT5
        .symtab0x187600SECTION<unknown>DEFAULT6
        .symtab0x207700SECTION<unknown>DEFAULT7
        .symtab0x207740SECTION<unknown>DEFAULT8
        .symtab0x207780SECTION<unknown>DEFAULT9
        .symtab0x2077c0SECTION<unknown>DEFAULT10
        .symtab0x207800SECTION<unknown>DEFAULT11
        .symtab0x207f80SECTION<unknown>DEFAULT12
        .symtab0x20ab00SECTION<unknown>DEFAULT13
        .symtab0x00SECTION<unknown>DEFAULT14
        .symtab0x00SECTION<unknown>DEFAULT15
        .symtab0x00SECTION<unknown>DEFAULT16
        .symtab0x00SECTION<unknown>DEFAULT17
        .symtab0x00SECTION<unknown>DEFAULT18
        .symtab0x00SECTION<unknown>DEFAULT19
        .symtab0x00SECTION<unknown>DEFAULT20
        .symtab0x00SECTION<unknown>DEFAULT21
        .symtab0x00SECTION<unknown>DEFAULT22
        .symtab0x00SECTION<unknown>DEFAULT23
        $a.symtab0x80b40NOTYPE<unknown>DEFAULT1
        $a.symtab0x178800NOTYPE<unknown>DEFAULT3
        $a.symtab0x80c00NOTYPE<unknown>DEFAULT1
        $a.symtab0x1788c0NOTYPE<unknown>DEFAULT3
        $a.symtab0x810c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x81500NOTYPE<unknown>DEFAULT2
        $a.symtab0x81b00NOTYPE<unknown>DEFAULT2
        $a.symtab0x81ec0NOTYPE<unknown>DEFAULT2
        $a.symtab0x82c40NOTYPE<unknown>DEFAULT2
        $a.symtab0x84080NOTYPE<unknown>DEFAULT2
        $a.symtab0x8d140NOTYPE<unknown>DEFAULT2
        $a.symtab0x8e800NOTYPE<unknown>DEFAULT2
        $a.symtab0x91080NOTYPE<unknown>DEFAULT2
        $a.symtab0x92900NOTYPE<unknown>DEFAULT2
        $a.symtab0x93e80NOTYPE<unknown>DEFAULT2
        $a.symtab0x98940NOTYPE<unknown>DEFAULT2
        $a.symtab0x99800NOTYPE<unknown>DEFAULT2
        $a.symtab0x9a380NOTYPE<unknown>DEFAULT2
        $a.symtab0x9d3c0NOTYPE<unknown>DEFAULT2
        $a.symtab0xa1580NOTYPE<unknown>DEFAULT2
        $a.symtab0xa45c0NOTYPE<unknown>DEFAULT2
        $a.symtab0xac380NOTYPE<unknown>DEFAULT2
        $a.symtab0xac9c0NOTYPE<unknown>DEFAULT2
        $a.symtab0xb3900NOTYPE<unknown>DEFAULT2
        $a.symtab0xccf40NOTYPE<unknown>DEFAULT2
        $a.symtab0xdd140NOTYPE<unknown>DEFAULT2
        $a.symtab0xe4280NOTYPE<unknown>DEFAULT2
        $a.symtab0xfc440NOTYPE<unknown>DEFAULT2
        $a.symtab0xfdd40NOTYPE<unknown>DEFAULT2
        $a.symtab0x100900NOTYPE<unknown>DEFAULT2
        $a.symtab0x100b40NOTYPE<unknown>DEFAULT2
        $a.symtab0x10b080NOTYPE<unknown>DEFAULT2
        $a.symtab0x10c1c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x10c300NOTYPE<unknown>DEFAULT2
        $a.symtab0x10c700NOTYPE<unknown>DEFAULT2
        $a.symtab0x10ca40NOTYPE<unknown>DEFAULT2
        $a.symtab0x10d040NOTYPE<unknown>DEFAULT2
        $a.symtab0x10d380NOTYPE<unknown>DEFAULT2
        $a.symtab0x10d4c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x10d7c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x10db00NOTYPE<unknown>DEFAULT2
        $a.symtab0x10dcc0NOTYPE<unknown>DEFAULT2
        $a.symtab0x10e0c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x10e400NOTYPE<unknown>DEFAULT2
        $a.symtab0x10e740NOTYPE<unknown>DEFAULT2
        $a.symtab0x10ea00NOTYPE<unknown>DEFAULT2
        $a.symtab0x10ed40NOTYPE<unknown>DEFAULT2
        $a.symtab0x10f080NOTYPE<unknown>DEFAULT2
        $a.symtab0x10fe00NOTYPE<unknown>DEFAULT2
        $a.symtab0x110140NOTYPE<unknown>DEFAULT2
        $a.symtab0x110480NOTYPE<unknown>DEFAULT2
        $a.symtab0x1109c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x110c80NOTYPE<unknown>DEFAULT2
        $a.symtab0x111000NOTYPE<unknown>DEFAULT2
        $a.symtab0x111340NOTYPE<unknown>DEFAULT2
        $a.symtab0x1115c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x1118c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x111a80NOTYPE<unknown>DEFAULT2
        $a.symtab0x112880NOTYPE<unknown>DEFAULT2
        $a.symtab0x112f00NOTYPE<unknown>DEFAULT2
        $a.symtab0x113240NOTYPE<unknown>DEFAULT2
        $a.symtab0x113f80NOTYPE<unknown>DEFAULT2
        $a.symtab0x114280NOTYPE<unknown>DEFAULT2
        $a.symtab0x115300NOTYPE<unknown>DEFAULT2
        $a.symtab0x115680NOTYPE<unknown>DEFAULT2
        $a.symtab0x116200NOTYPE<unknown>DEFAULT2
        $a.symtab0x116c00NOTYPE<unknown>DEFAULT2
        $a.symtab0x117200NOTYPE<unknown>DEFAULT2
        $a.symtab0x117400NOTYPE<unknown>DEFAULT2
        $a.symtab0x117500NOTYPE<unknown>DEFAULT2
        $a.symtab0x1184c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x118700NOTYPE<unknown>DEFAULT2
        $a.symtab0x119600NOTYPE<unknown>DEFAULT2
        $a.symtab0x119900NOTYPE<unknown>DEFAULT2
        $a.symtab0x119b40NOTYPE<unknown>DEFAULT2
        $a.symtab0x11a300NOTYPE<unknown>DEFAULT2
        $a.symtab0x11a900NOTYPE<unknown>DEFAULT2
        $a.symtab0x11b380NOTYPE<unknown>DEFAULT2
        $a.symtab0x11b600NOTYPE<unknown>DEFAULT2
        $a.symtab0x11b980NOTYPE<unknown>DEFAULT2
        $a.symtab0x11bd00NOTYPE<unknown>DEFAULT2
        $a.symtab0x11c140NOTYPE<unknown>DEFAULT2
        $a.symtab0x11c4c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x11c840NOTYPE<unknown>DEFAULT2
        $a.symtab0x11cc40NOTYPE<unknown>DEFAULT2
        $a.symtab0x11d080NOTYPE<unknown>DEFAULT2
        $a.symtab0x11d400NOTYPE<unknown>DEFAULT2
        $a.symtab0x11d5c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x11da00NOTYPE<unknown>DEFAULT2
        $a.symtab0x11db40NOTYPE<unknown>DEFAULT2
        $a.symtab0x11e6c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x11ed80NOTYPE<unknown>DEFAULT2
        $a.symtab0x128700NOTYPE<unknown>DEFAULT2
        $a.symtab0x12d100NOTYPE<unknown>DEFAULT2
        $a.symtab0x12d500NOTYPE<unknown>DEFAULT2
        $a.symtab0x12e780NOTYPE<unknown>DEFAULT2
        $a.symtab0x12e900NOTYPE<unknown>DEFAULT2
        $a.symtab0x12f340NOTYPE<unknown>DEFAULT2
        $a.symtab0x12fec0NOTYPE<unknown>DEFAULT2
        $a.symtab0x130ac0NOTYPE<unknown>DEFAULT2
        $a.symtab0x131500NOTYPE<unknown>DEFAULT2
        $a.symtab0x132340NOTYPE<unknown>DEFAULT2
        $a.symtab0x132c40NOTYPE<unknown>DEFAULT2
        $a.symtab0x1339c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x134800NOTYPE<unknown>DEFAULT2
        $a.symtab0x134a00NOTYPE<unknown>DEFAULT2
        $a.symtab0x134bc0NOTYPE<unknown>DEFAULT2
        $a.symtab0x1367c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x137340NOTYPE<unknown>DEFAULT2
        $a.symtab0x137e00NOTYPE<unknown>DEFAULT2
        $a.symtab0x1392c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x13f040NOTYPE<unknown>DEFAULT2
        $a.symtab0x13fb00NOTYPE<unknown>DEFAULT2
        $a.symtab0x140700NOTYPE<unknown>DEFAULT2
        $a.symtab0x140c40NOTYPE<unknown>DEFAULT2
        $a.symtab0x141300NOTYPE<unknown>DEFAULT2
        $a.symtab0x144040NOTYPE<unknown>DEFAULT2
        $a.symtab0x1446c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x1448c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x145140NOTYPE<unknown>DEFAULT2
        $a.symtab0x145200NOTYPE<unknown>DEFAULT2
        $a.symtab0x1452c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x145600NOTYPE<unknown>DEFAULT2
        $a.symtab0x145940NOTYPE<unknown>DEFAULT2
        $a.symtab0x145bc0NOTYPE<unknown>DEFAULT2
        $a.symtab0x145d00NOTYPE<unknown>DEFAULT2
        $a.symtab0x146040NOTYPE<unknown>DEFAULT2
        $a.symtab0x146380NOTYPE<unknown>DEFAULT2
        $a.symtab0x1464c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x146600NOTYPE<unknown>DEFAULT2
        $a.symtab0x146cc0NOTYPE<unknown>DEFAULT2
        $a.symtab0x146e00NOTYPE<unknown>DEFAULT2
        $a.symtab0x147140NOTYPE<unknown>DEFAULT2
        $a.symtab0x147480NOTYPE<unknown>DEFAULT2
        $a.symtab0x1477c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x148740NOTYPE<unknown>DEFAULT2
        $a.symtab0x149440NOTYPE<unknown>DEFAULT2
        $a.symtab0x149f00NOTYPE<unknown>DEFAULT2
        $a.symtab0x14a880NOTYPE<unknown>DEFAULT2
        $a.symtab0x14b740NOTYPE<unknown>DEFAULT2
        $a.symtab0x14f180NOTYPE<unknown>DEFAULT2
        $a.symtab0x150cc0NOTYPE<unknown>DEFAULT2
        $a.symtab0x150ec0NOTYPE<unknown>DEFAULT2
        $a.symtab0x151a00NOTYPE<unknown>DEFAULT2
        $a.symtab0x154a80NOTYPE<unknown>DEFAULT2
        $a.symtab0x155e80NOTYPE<unknown>DEFAULT2
        $a.symtab0x156b80NOTYPE<unknown>DEFAULT2
        $a.symtab0x158140NOTYPE<unknown>DEFAULT2
        $a.symtab0x158f00NOTYPE<unknown>DEFAULT2
        $a.symtab0x159ac0NOTYPE<unknown>DEFAULT2
        $a.symtab0x15b340NOTYPE<unknown>DEFAULT2
        $a.symtab0x15d400NOTYPE<unknown>DEFAULT2
        $a.symtab0x15e6c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x15f100NOTYPE<unknown>DEFAULT2
        $a.symtab0x163a00NOTYPE<unknown>DEFAULT2
        $a.symtab0x164900NOTYPE<unknown>DEFAULT2
        $a.symtab0x165080NOTYPE<unknown>DEFAULT2
        $a.symtab0x1654c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x165fc0NOTYPE<unknown>DEFAULT2
        $a.symtab0x166dc0NOTYPE<unknown>DEFAULT2
        $a.symtab0x167280NOTYPE<unknown>DEFAULT2
        $a.symtab0x167780NOTYPE<unknown>DEFAULT2
        $a.symtab0x1679c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x168880NOTYPE<unknown>DEFAULT2
        $a.symtab0x168c80NOTYPE<unknown>DEFAULT2
        $a.symtab0x169c00NOTYPE<unknown>DEFAULT2
        $a.symtab0x16af40NOTYPE<unknown>DEFAULT2
        $a.symtab0x16ea80NOTYPE<unknown>DEFAULT2
        $a.symtab0x16ee00NOTYPE<unknown>DEFAULT2
        $a.symtab0x16f2c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x16f380NOTYPE<unknown>DEFAULT2
        $a.symtab0x16f900NOTYPE<unknown>DEFAULT2
        $a.symtab0x171c00NOTYPE<unknown>DEFAULT2
        $a.symtab0x172000NOTYPE<unknown>DEFAULT2
        $a.symtab0x173440NOTYPE<unknown>DEFAULT2
        $a.symtab0x173680NOTYPE<unknown>DEFAULT2
        $a.symtab0x174b80NOTYPE<unknown>DEFAULT2
        $a.symtab0x175100NOTYPE<unknown>DEFAULT2
        $a.symtab0x175d40NOTYPE<unknown>DEFAULT2
        $a.symtab0x176040NOTYPE<unknown>DEFAULT2
        $a.symtab0x1769c0NOTYPE<unknown>DEFAULT2
        $a.symtab0x176d80NOTYPE<unknown>DEFAULT2
        $a.symtab0x1773c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x81440NOTYPE<unknown>DEFAULT2
        $d.symtab0x207780NOTYPE<unknown>DEFAULT9
        $d.symtab0x819c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x207740NOTYPE<unknown>DEFAULT8
        $d.symtab0x207fc0NOTYPE<unknown>DEFAULT12
        $d.symtab0x81e00NOTYPE<unknown>DEFAULT2
        $d.symtab0x208000NOTYPE<unknown>DEFAULT12
        $d.symtab0x82bc0NOTYPE<unknown>DEFAULT2
        $d.symtab0x83fc0NOTYPE<unknown>DEFAULT2
        $d.symtab0x8d100NOTYPE<unknown>DEFAULT2
        $d.symtab0x8e7c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x90f80NOTYPE<unknown>DEFAULT2
        $d.symtab0x928c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x179400NOTYPE<unknown>DEFAULT4
        $d.symtab0x93e40NOTYPE<unknown>DEFAULT2
        $d.symtab0x988c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x99780NOTYPE<unknown>DEFAULT2
        $d.symtab0x9a340NOTYPE<unknown>DEFAULT2
        $d.symtab0x9d300NOTYPE<unknown>DEFAULT2
        $d.symtab0xa1500NOTYPE<unknown>DEFAULT2
        $d.symtab0xa4580NOTYPE<unknown>DEFAULT2
        $d.symtab0xac280NOTYPE<unknown>DEFAULT2
        $d.symtab0xac980NOTYPE<unknown>DEFAULT2
        $d.symtab0xb1f40NOTYPE<unknown>DEFAULT2
        $d.symtab0xccc00NOTYPE<unknown>DEFAULT2
        $d.symtab0xdd080NOTYPE<unknown>DEFAULT2
        $d.symtab0xe3fc0NOTYPE<unknown>DEFAULT2
        $d.symtab0xfbd80NOTYPE<unknown>DEFAULT2
        $d.symtab0xfdc80NOTYPE<unknown>DEFAULT2
        $d.symtab0x1007c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x100b00NOTYPE<unknown>DEFAULT2
        $d.symtab0x10ac00NOTYPE<unknown>DEFAULT2
        $d.symtab0x111540NOTYPE<unknown>DEFAULT2
        $d.symtab0x111840NOTYPE<unknown>DEFAULT2
        $d.symtab0x208600NOTYPE<unknown>DEFAULT12
        $d.symtab0x208680NOTYPE<unknown>DEFAULT12
        $d.symtab0x111a00NOTYPE<unknown>DEFAULT2
        $d.symtab0x112700NOTYPE<unknown>DEFAULT2
        $d.symtab0x112e80NOTYPE<unknown>DEFAULT2
        $d.symtab0x1131c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x113e40NOTYPE<unknown>DEFAULT2
        $d.symtab0x208a40NOTYPE<unknown>DEFAULT12
        $d.symtab0x208700NOTYPE<unknown>DEFAULT12
        $d.symtab0x186980NOTYPE<unknown>DEFAULT4
        $d.symtab0x119580NOTYPE<unknown>DEFAULT2
        $d.symtab0x119880NOTYPE<unknown>DEFAULT2
        $d.symtab0x11a2c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x11b300NOTYPE<unknown>DEFAULT2
        $d.symtab0x11b940NOTYPE<unknown>DEFAULT2
        $d.symtab0x11bcc0NOTYPE<unknown>DEFAULT2
        $d.symtab0x11c100NOTYPE<unknown>DEFAULT2
        $d.symtab0x11c480NOTYPE<unknown>DEFAULT2
        $d.symtab0x11c800NOTYPE<unknown>DEFAULT2
        $d.symtab0x11cc00NOTYPE<unknown>DEFAULT2
        $d.symtab0x11d040NOTYPE<unknown>DEFAULT2
        $d.symtab0x11d3c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x11e640NOTYPE<unknown>DEFAULT2
        $d.symtab0x128540NOTYPE<unknown>DEFAULT2
        $d.symtab0x209ac0NOTYPE<unknown>DEFAULT12
        $d.symtab0x12cf40NOTYPE<unknown>DEFAULT2
        $d.symtab0x12d480NOTYPE<unknown>DEFAULT2
        $d.symtab0x12e640NOTYPE<unknown>DEFAULT2
        $d.symtab0x209c40NOTYPE<unknown>DEFAULT12
        $d.symtab0x12f180NOTYPE<unknown>DEFAULT2
        $d.symtab0x12fd00NOTYPE<unknown>DEFAULT2
        $d.symtab0x130900NOTYPE<unknown>DEFAULT2
        $d.symtab0x131340NOTYPE<unknown>DEFAULT2
        $d.symtab0x209dc0NOTYPE<unknown>DEFAULT12
        $d.symtab0x20a740NOTYPE<unknown>DEFAULT12
        $d.symtab0x1322c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x132c00NOTYPE<unknown>DEFAULT2
        $d.symtab0x133900NOTYPE<unknown>DEFAULT2
        $d.symtab0x134780NOTYPE<unknown>DEFAULT2
        $d.symtab0x186b00NOTYPE<unknown>DEFAULT4
        $d.symtab0x136740NOTYPE<unknown>DEFAULT2
        $d.symtab0x137140NOTYPE<unknown>DEFAULT2
        $d.symtab0x20a880NOTYPE<unknown>DEFAULT12
        $d.symtab0x137dc0NOTYPE<unknown>DEFAULT2
        $d.symtab0x139080NOTYPE<unknown>DEFAULT2
        $d.symtab0x13ee00NOTYPE<unknown>DEFAULT2
        $d.symtab0x13fa80NOTYPE<unknown>DEFAULT2
        $d.symtab0x1405c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x140bc0NOTYPE<unknown>DEFAULT2
        $d.symtab0x141200NOTYPE<unknown>DEFAULT2
        $d.symtab0x143c40NOTYPE<unknown>DEFAULT2
        $d.symtab0x20aa00NOTYPE<unknown>DEFAULT12
        $d.symtab0x145080NOTYPE<unknown>DEFAULT2
        $d.symtab0x145b40NOTYPE<unknown>DEFAULT2
        $d.symtab0x146c40NOTYPE<unknown>DEFAULT2
        $d.symtab0x148600NOTYPE<unknown>DEFAULT2
        $d.symtab0x1493c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x149ec0NOTYPE<unknown>DEFAULT2
        $d.symtab0x187300NOTYPE<unknown>DEFAULT4
        $d.symtab0x14b600NOTYPE<unknown>DEFAULT2
        $d.symtab0x26b280NOTYPE<unknown>DEFAULT13
        $d.symtab0x14f100NOTYPE<unknown>DEFAULT2
        $d.symtab0x150ac0NOTYPE<unknown>DEFAULT2
        $d.symtab0x154740NOTYPE<unknown>DEFAULT2
        $d.symtab0x158dc0NOTYPE<unknown>DEFAULT2
        $d.symtab0x159980NOTYPE<unknown>DEFAULT2
        $d.symtab0x15b080NOTYPE<unknown>DEFAULT2
        $d.symtab0x15d1c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x15e640NOTYPE<unknown>DEFAULT2
        $d.symtab0x164880NOTYPE<unknown>DEFAULT2
        $d.symtab0x165f40NOTYPE<unknown>DEFAULT2
        $d.symtab0x166d40NOTYPE<unknown>DEFAULT2
        $d.symtab0x168800NOTYPE<unknown>DEFAULT2
        $d.symtab0x169b80NOTYPE<unknown>DEFAULT2
        $d.symtab0x16adc0NOTYPE<unknown>DEFAULT2
        $d.symtab0x16e8c0NOTYPE<unknown>DEFAULT2
        $d.symtab0x16ed40NOTYPE<unknown>DEFAULT2
        $d.symtab0x16f240NOTYPE<unknown>DEFAULT2
        $d.symtab0x174a40NOTYPE<unknown>DEFAULT2
        $t.symtab0x80d00NOTYPE<unknown>DEFAULT2
        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        C.1.3506.symtab0x1873024OBJECT<unknown>DEFAULT4
        Laligned.symtab0x116e80NOTYPE<unknown>DEFAULT2
        Llastword.symtab0x117040NOTYPE<unknown>DEFAULT2
        Q.symtab0x20aec16384OBJECT<unknown>DEFAULT13
        StartTheLelz.symtab0xb01410016FUNC<unknown>DEFAULT2
        _Exit.symtab0x1109c44FUNC<unknown>DEFAULT2
        _GLOBAL_OFFSET_TABLE_.symtab0x207800OBJECT<unknown>HIDDEN11
        _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
        _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __C_ctype_b.symtab0x208604OBJECT<unknown>DEFAULT12
        __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __C_ctype_b_data.symtab0x18098768OBJECT<unknown>DEFAULT4
        __C_ctype_toupper.symtab0x208684OBJECT<unknown>DEFAULT12
        __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __C_ctype_toupper_data.symtab0x18398768OBJECT<unknown>DEFAULT4
        __EH_FRAME_BEGIN__.symtab0x207700OBJECT<unknown>DEFAULT7
        __FRAME_END__.symtab0x207700OBJECT<unknown>DEFAULT7
        __GI___C_ctype_b.symtab0x208604OBJECT<unknown>HIDDEN12
        __GI___C_ctype_toupper.symtab0x208684OBJECT<unknown>HIDDEN12
        __GI___ctype_b.symtab0x208644OBJECT<unknown>HIDDEN12
        __GI___ctype_toupper.symtab0x2086c4OBJECT<unknown>HIDDEN12
        __GI___errno_location.symtab0x1118c28FUNC<unknown>HIDDEN2
        __GI___fcntl_nocancel.symtab0x10f74108FUNC<unknown>HIDDEN2
        __GI___fgetc_unlocked.symtab0x15d40300FUNC<unknown>HIDDEN2
        __GI___fputc_unlocked.symtab0x11428264FUNC<unknown>HIDDEN2
        __GI___libc_fcntl.symtab0x10f08108FUNC<unknown>HIDDEN2
        __GI___sigaddset.symtab0x11e9036FUNC<unknown>HIDDEN2
        __GI___sigdelset.symtab0x11eb436FUNC<unknown>HIDDEN2
        __GI___sigismember.symtab0x11e6c36FUNC<unknown>HIDDEN2
        __GI___uClibc_fini.symtab0x13ff4124FUNC<unknown>HIDDEN2
        __GI___uClibc_init.symtab0x140c4108FUNC<unknown>HIDDEN2
        __GI__exit.symtab0x1109c44FUNC<unknown>HIDDEN2
        __GI_abort.symtab0x12d50296FUNC<unknown>HIDDEN2
        __GI_atoi.symtab0x1348032FUNC<unknown>HIDDEN2
        __GI_brk.symtab0x16ee076FUNC<unknown>HIDDEN2
        __GI_chdir.symtab0x10e0c52FUNC<unknown>HIDDEN2
        __GI_clock_getres.symtab0x145d052FUNC<unknown>HIDDEN2
        __GI_close.symtab0x1110052FUNC<unknown>HIDDEN2
        __GI_closedir.symtab0x1477c248FUNC<unknown>HIDDEN2
        __GI_config_close.symtab0x14e9c52FUNC<unknown>HIDDEN2
        __GI_config_open.symtab0x14ed072FUNC<unknown>HIDDEN2
        __GI_config_read.symtab0x14b74808FUNC<unknown>HIDDEN2
        __GI_connect.symtab0x11b6056FUNC<unknown>HIDDEN2
        __GI_dup2.symtab0x10c7052FUNC<unknown>HIDDEN2
        __GI_errno.symtab0x26b284OBJECT<unknown>HIDDEN13
        __GI_execl.symtab0x13f04172FUNC<unknown>HIDDEN2
        __GI_execve.symtab0x1456052FUNC<unknown>HIDDEN2
        __GI_exit.symtab0x1367c184FUNC<unknown>HIDDEN2
        __GI_fclose.symtab0x14f18436FUNC<unknown>HIDDEN2
        __GI_fcntl.symtab0x10f08108FUNC<unknown>HIDDEN2
        __GI_fflush_unlocked.symtab0x15b34524FUNC<unknown>HIDDEN2
        __GI_fgetc.symtab0x15814220FUNC<unknown>HIDDEN2
        __GI_fgetc_unlocked.symtab0x15d40300FUNC<unknown>HIDDEN2
        __GI_fgets.symtab0x158f0188FUNC<unknown>HIDDEN2
        __GI_fgets_unlocked.symtab0x15e6c160FUNC<unknown>HIDDEN2
        __GI_fopen.symtab0x150cc32FUNC<unknown>HIDDEN2
        __GI_fork.symtab0x10d7c52FUNC<unknown>HIDDEN2
        __GI_fputc_unlocked.symtab0x11428264FUNC<unknown>HIDDEN2
        __GI_fputs_unlocked.symtab0x1153056FUNC<unknown>HIDDEN2
        __GI_fseek.symtab0x1734436FUNC<unknown>HIDDEN2
        __GI_fseeko64.symtab0x17368336FUNC<unknown>HIDDEN2
        __GI_fstat.symtab0x16f3888FUNC<unknown>HIDDEN2
        __GI_fwrite_unlocked.symtab0x11568176FUNC<unknown>HIDDEN2
        __GI_getc_unlocked.symtab0x15d40300FUNC<unknown>HIDDEN2
        __GI_getdtablesize.symtab0x10e7444FUNC<unknown>HIDDEN2
        __GI_getegid.symtab0x1463820FUNC<unknown>HIDDEN2
        __GI_geteuid.symtab0x1464c20FUNC<unknown>HIDDEN2
        __GI_getgid.symtab0x146cc20FUNC<unknown>HIDDEN2
        __GI_getpagesize.symtab0x1459440FUNC<unknown>HIDDEN2
        __GI_getpid.symtab0x10d3820FUNC<unknown>HIDDEN2
        __GI_getrlimit.symtab0x1460452FUNC<unknown>HIDDEN2
        __GI_getsockname.symtab0x11b9856FUNC<unknown>HIDDEN2
        __GI_gettimeofday.symtab0x10ed452FUNC<unknown>HIDDEN2
        __GI_getuid.symtab0x145bc20FUNC<unknown>HIDDEN2
        __GI_h_errno.symtab0x26b2c4OBJECT<unknown>HIDDEN13
        __GI_htonl.symtab0x11a4032FUNC<unknown>HIDDEN2
        __GI_htons.symtab0x11a3016FUNC<unknown>HIDDEN2
        __GI_inet_addr.symtab0x11b3840FUNC<unknown>HIDDEN2
        __GI_inet_aton.symtab0x168c8248FUNC<unknown>HIDDEN2
        __GI_inet_ntoa.symtab0x11b1c28FUNC<unknown>HIDDEN2
        __GI_inet_ntoa_r.symtab0x11a90140FUNC<unknown>HIDDEN2
        __GI_initstate_r.symtab0x1339c228FUNC<unknown>HIDDEN2
        __GI_ioctl.symtab0x1104884FUNC<unknown>HIDDEN2
        __GI_isatty.symtab0x1199036FUNC<unknown>HIDDEN2
        __GI_isspace.symtab0x1113440FUNC<unknown>HIDDEN2
        __GI_kill.symtab0x10ea052FUNC<unknown>HIDDEN2
        __GI_lseek64.symtab0x176d8100FUNC<unknown>HIDDEN2
        __GI_memchr.symtab0x163a0240FUNC<unknown>HIDDEN2
        __GI_memcpy.symtab0x117404FUNC<unknown>HIDDEN2
        __GI_mempcpy.symtab0x1677836FUNC<unknown>HIDDEN2
        __GI_memrchr.symtab0x165fc224FUNC<unknown>HIDDEN2
        __GI_memset.symtab0x11620156FUNC<unknown>HIDDEN2
        __GI_mmap.symtab0x14404104FUNC<unknown>HIDDEN2
        __GI_mremap.symtab0x171c064FUNC<unknown>HIDDEN2
        __GI_munmap.symtab0x146e052FUNC<unknown>HIDDEN2
        __GI_nanosleep.symtab0x1471452FUNC<unknown>HIDDEN2
        __GI_ntohl.symtab0x11a7032FUNC<unknown>HIDDEN2
        __GI_ntohs.symtab0x11a6016FUNC<unknown>HIDDEN2
        __GI_open.symtab0x10ca496FUNC<unknown>HIDDEN2
        __GI_opendir.symtab0x14944172FUNC<unknown>HIDDEN2
        __GI_pipe.symtab0x10d0452FUNC<unknown>HIDDEN2
        __GI_putc_unlocked.symtab0x11428264FUNC<unknown>HIDDEN2
        __GI_raise.symtab0x11d4028FUNC<unknown>HIDDEN2
        __GI_random.symtab0x12e90164FUNC<unknown>HIDDEN2
        __GI_random_r.symtab0x13234144FUNC<unknown>HIDDEN2
        __GI_rawmemchr.symtab0x1654c176FUNC<unknown>HIDDEN2
        __GI_read.symtab0x10e4052FUNC<unknown>HIDDEN2
        __GI_readdir64.symtab0x14a88236FUNC<unknown>HIDDEN2
        __GI_recv.symtab0x11c1456FUNC<unknown>HIDDEN2
        __GI_sbrk.symtab0x14660108FUNC<unknown>HIDDEN2
        __GI_select.symtab0x10dcc64FUNC<unknown>HIDDEN2
        __GI_send.symtab0x11c4c56FUNC<unknown>HIDDEN2
        __GI_sendto.symtab0x11c8464FUNC<unknown>HIDDEN2
        __GI_setsid.symtab0x1101452FUNC<unknown>HIDDEN2
        __GI_setsockopt.symtab0x11cc468FUNC<unknown>HIDDEN2
        __GI_setstate_r.symtab0x13150228FUNC<unknown>HIDDEN2
        __GI_sigaction.symtab0x1448c136FUNC<unknown>HIDDEN2
        __GI_sigaddset.symtab0x11d5c68FUNC<unknown>HIDDEN2
        __GI_sigemptyset.symtab0x11da020FUNC<unknown>HIDDEN2
        __GI_signal.symtab0x11db4184FUNC<unknown>HIDDEN2
        __GI_sigprocmask.symtab0x110c856FUNC<unknown>HIDDEN2
        __GI_sleep.symtab0x13734172FUNC<unknown>HIDDEN2
        __GI_socket.symtab0x11d0856FUNC<unknown>HIDDEN2
        __GI_srandom_r.symtab0x132c4216FUNC<unknown>HIDDEN2
        __GI_strchr.symtab0x11870240FUNC<unknown>HIDDEN2
        __GI_strchrnul.symtab0x1679c236FUNC<unknown>HIDDEN2
        __GI_strcmp.symtab0x1172028FUNC<unknown>HIDDEN2
        __GI_strcoll.symtab0x1172028FUNC<unknown>HIDDEN2
        __GI_strcpy.symtab0x1184c36FUNC<unknown>HIDDEN2
        __GI_strcspn.symtab0x1650868FUNC<unknown>HIDDEN2
        __GI_strlen.symtab0x116c096FUNC<unknown>HIDDEN2
        __GI_strpbrk.symtab0x1688864FUNC<unknown>HIDDEN2
        __GI_strrchr.symtab0x1672880FUNC<unknown>HIDDEN2
        __GI_strspn.symtab0x166dc76FUNC<unknown>HIDDEN2
        __GI_strstr.symtab0x11750252FUNC<unknown>HIDDEN2
        __GI_strtok.symtab0x1196048FUNC<unknown>HIDDEN2
        __GI_strtok_r.symtab0x16490120FUNC<unknown>HIDDEN2
        __GI_strtol.symtab0x134a028FUNC<unknown>HIDDEN2
        __GI_sysconf.symtab0x1392c1496FUNC<unknown>HIDDEN2
        __GI_tcgetattr.symtab0x119b4124FUNC<unknown>HIDDEN2
        __GI_time.symtab0x10d4c48FUNC<unknown>HIDDEN2
        __GI_toupper.symtab0x1115c48FUNC<unknown>HIDDEN2
        __GI_vfork.symtab0x10c3064FUNC<unknown>HIDDEN2
        __GI_wait4.symtab0x1452c52FUNC<unknown>HIDDEN2
        __GI_waitpid.symtab0x10db028FUNC<unknown>HIDDEN2
        __GI_write.symtab0x10fe052FUNC<unknown>HIDDEN2
        __JCR_END__.symtab0x2077c0OBJECT<unknown>DEFAULT10
        __JCR_LIST__.symtab0x2077c0OBJECT<unknown>DEFAULT10
        __aeabi_idiv.symtab0x1773c0FUNC<unknown>HIDDEN2
        __aeabi_idivmod.symtab0x1786824FUNC<unknown>HIDDEN2
        __aeabi_uidiv.symtab0x10b080FUNC<unknown>HIDDEN2
        __aeabi_uidivmod.symtab0x10c0424FUNC<unknown>HIDDEN2
        __aeabi_unwind_cpp_pr0.symtab0x16f2c4FUNC<unknown>DEFAULT2
        __aeabi_unwind_cpp_pr1.symtab0x16f304FUNC<unknown>DEFAULT2
        __aeabi_unwind_cpp_pr2.symtab0x16f344FUNC<unknown>DEFAULT2
        __app_fini.symtab0x26b204OBJECT<unknown>HIDDEN13
        __atexit_lock.symtab0x20a8824OBJECT<unknown>DEFAULT12
        __bss_end__.symtab0x26ec80NOTYPE<unknown>DEFAULTSHN_ABS
        __bss_start.symtab0x20aac0NOTYPE<unknown>DEFAULTSHN_ABS
        __bss_start__.symtab0x20aac0NOTYPE<unknown>DEFAULTSHN_ABS
        __check_one_fd.symtab0x1407084FUNC<unknown>DEFAULT2
        __ctype_b.symtab0x208644OBJECT<unknown>DEFAULT12
        __ctype_toupper.symtab0x2086c4OBJECT<unknown>DEFAULT12
        __curbrk.symtab0x26b304OBJECT<unknown>HIDDEN13
        __data_start.symtab0x207f80NOTYPE<unknown>DEFAULT12
        __default_rt_sa_restorer.symtab0x145240FUNC<unknown>DEFAULT2
        __default_sa_restorer.symtab0x145180FUNC<unknown>DEFAULT2
        __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
        __div0.symtab0x10c1c20FUNC<unknown>HIDDEN2
        __divsi3.symtab0x1773c300FUNC<unknown>HIDDEN2
        __do_global_dtors_aux.symtab0x810c0FUNC<unknown>DEFAULT2
        __do_global_dtors_aux_fini_array_entry.symtab0x207780OBJECT<unknown>DEFAULT9
        __dso_handle.symtab0x207f80OBJECT<unknown>HIDDEN12
        __end__.symtab0x26ec80NOTYPE<unknown>DEFAULTSHN_ABS
        __environ.symtab0x26b184OBJECT<unknown>DEFAULT13
        __errno_location.symtab0x1118c28FUNC<unknown>DEFAULT2
        __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __error.symtab0x10c6c0NOTYPE<unknown>DEFAULT2
        __exidx_end.symtab0x187700NOTYPE<unknown>DEFAULTSHN_ABS
        __exidx_start.symtab0x187600NOTYPE<unknown>DEFAULTSHN_ABS
        __exit_cleanup.symtab0x26b104OBJECT<unknown>HIDDEN13
        __fcntl_nocancel.symtab0x10f74108FUNC<unknown>DEFAULT2
        __fgetc_unlocked.symtab0x15d40300FUNC<unknown>DEFAULT2
        __fini_array_end.symtab0x2077c0NOTYPE<unknown>HIDDEN9
        __fini_array_start.symtab0x207780NOTYPE<unknown>HIDDEN9
        __fputc_unlocked.symtab0x11428264FUNC<unknown>DEFAULT2
        __frame_dummy_init_array_entry.symtab0x207740OBJECT<unknown>DEFAULT8
        __getdents64.symtab0x17200324FUNC<unknown>HIDDEN2
        __getpagesize.symtab0x1459440FUNC<unknown>DEFAULT2
        __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
        __init_array_end.symtab0x207780NOTYPE<unknown>HIDDEN8
        __init_array_start.symtab0x207740NOTYPE<unknown>HIDDEN8
        __libc_close.symtab0x1110052FUNC<unknown>DEFAULT2
        __libc_connect.symtab0x11b6056FUNC<unknown>DEFAULT2
        __libc_fcntl.symtab0x10f08108FUNC<unknown>DEFAULT2
        __libc_fork.symtab0x10d7c52FUNC<unknown>DEFAULT2
        __libc_lseek64.symtab0x176d8100FUNC<unknown>DEFAULT2
        __libc_nanosleep.symtab0x1471452FUNC<unknown>DEFAULT2
        __libc_open.symtab0x10ca496FUNC<unknown>DEFAULT2
        __libc_read.symtab0x10e4052FUNC<unknown>DEFAULT2
        __libc_recv.symtab0x11c1456FUNC<unknown>DEFAULT2
        __libc_select.symtab0x10dcc64FUNC<unknown>DEFAULT2
        __libc_send.symtab0x11c4c56FUNC<unknown>DEFAULT2
        __libc_sendto.symtab0x11c8464FUNC<unknown>DEFAULT2
        __libc_sigaction.symtab0x1448c136FUNC<unknown>DEFAULT2
        __libc_stack_end.symtab0x26b144OBJECT<unknown>DEFAULT13
        __libc_waitpid.symtab0x10db028FUNC<unknown>DEFAULT2
        __libc_write.symtab0x10fe052FUNC<unknown>DEFAULT2
        __malloc_consolidate.symtab0x12920436FUNC<unknown>HIDDEN2
        __malloc_largebin_index.symtab0x11ed8120FUNC<unknown>DEFAULT2
        __malloc_lock.symtab0x209ac24OBJECT<unknown>DEFAULT12
        __malloc_state.symtab0x26b48888OBJECT<unknown>DEFAULT13
        __malloc_trim.symtab0x12870176FUNC<unknown>DEFAULT2
        __pagesize.symtab0x26b1c4OBJECT<unknown>DEFAULT13
        __preinit_array_end.symtab0x207740NOTYPE<unknown>HIDDENSHN_ABS
        __preinit_array_start.symtab0x207740NOTYPE<unknown>HIDDENSHN_ABS
        __progname.symtab0x20aa44OBJECT<unknown>DEFAULT12
        __progname_full.symtab0x20aa84OBJECT<unknown>DEFAULT12
        __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
        __pthread_mutex_init.symtab0x13fb88FUNC<unknown>DEFAULT2
        __pthread_mutex_lock.symtab0x13fb08FUNC<unknown>DEFAULT2
        __pthread_mutex_trylock.symtab0x13fb08FUNC<unknown>DEFAULT2
        __pthread_mutex_unlock.symtab0x13fb08FUNC<unknown>DEFAULT2
        __pthread_return_0.symtab0x13fb08FUNC<unknown>DEFAULT2
        __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
        __rtld_fini.symtab0x26b244OBJECT<unknown>HIDDEN13
        __sigaddset.symtab0x11e9036FUNC<unknown>DEFAULT2
        __sigdelset.symtab0x11eb436FUNC<unknown>DEFAULT2
        __sigismember.symtab0x11e6c36FUNC<unknown>DEFAULT2
        __stdin.symtab0x208b04OBJECT<unknown>DEFAULT12
        __stdio_READ.symtab0x174b888FUNC<unknown>HIDDEN2
        __stdio_WRITE.symtab0x150ec180FUNC<unknown>HIDDEN2
        __stdio_adjust_position.symtab0x17510196FUNC<unknown>HIDDEN2
        __stdio_fwrite.symtab0x154a8320FUNC<unknown>HIDDEN2
        __stdio_init_mutex.symtab0x112f052FUNC<unknown>HIDDEN2
        __stdio_mutex_initializer.4636.symtab0x1869824OBJECT<unknown>DEFAULT4
        __stdio_rfill.symtab0x175d448FUNC<unknown>HIDDEN2
        __stdio_seek.symtab0x1769c60FUNC<unknown>HIDDEN2
        __stdio_trans2r_o.symtab0x17604152FUNC<unknown>HIDDEN2
        __stdio_trans2w_o.symtab0x155e8208FUNC<unknown>HIDDEN2
        __stdio_wcommit.symtab0x113f848FUNC<unknown>HIDDEN2
        __stdout.symtab0x208b44OBJECT<unknown>DEFAULT12
        __syscall_error.symtab0x1446c32FUNC<unknown>HIDDEN2
        __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __syscall_rt_sigaction.symtab0x1474852FUNC<unknown>DEFAULT2
        __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __uClibc_fini.symtab0x13ff4124FUNC<unknown>DEFAULT2
        __uClibc_init.symtab0x140c4108FUNC<unknown>DEFAULT2
        __uClibc_main.symtab0x14130724FUNC<unknown>DEFAULT2
        __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        __uclibc_progname.symtab0x20aa04OBJECT<unknown>HIDDEN12
        __udivsi3.symtab0x10b08252FUNC<unknown>HIDDEN2
        __vfork.symtab0x10c3064FUNC<unknown>HIDDEN2
        __xstat32_conv.symtab0x1705c172FUNC<unknown>HIDDEN2
        __xstat64_conv.symtab0x16f90204FUNC<unknown>HIDDEN2
        __xstat_conv.symtab0x17108184FUNC<unknown>HIDDEN2
        _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _bss_end__.symtab0x26ec80NOTYPE<unknown>DEFAULTSHN_ABS
        _call_via_fp.symtab0x80fd4FUNC<unknown>HIDDEN2
        _call_via_ip.symtab0x81014FUNC<unknown>HIDDEN2
        _call_via_lr.symtab0x81094FUNC<unknown>HIDDEN2
        _call_via_r0.symtab0x80d14FUNC<unknown>HIDDEN2
        _call_via_r1.symtab0x80d54FUNC<unknown>HIDDEN2
        _call_via_r2.symtab0x80d94FUNC<unknown>HIDDEN2
        _call_via_r3.symtab0x80dd4FUNC<unknown>HIDDEN2
        _call_via_r4.symtab0x80e14FUNC<unknown>HIDDEN2
        _call_via_r5.symtab0x80e54FUNC<unknown>HIDDEN2
        _call_via_r6.symtab0x80e94FUNC<unknown>HIDDEN2
        _call_via_r7.symtab0x80ed4FUNC<unknown>HIDDEN2
        _call_via_r8.symtab0x80f14FUNC<unknown>HIDDEN2
        _call_via_r9.symtab0x80f54FUNC<unknown>HIDDEN2
        _call_via_sl.symtab0x80f94FUNC<unknown>HIDDEN2
        _call_via_sp.symtab0x81054FUNC<unknown>HIDDEN2
        _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _dl_aux_init.symtab0x16ea856FUNC<unknown>DEFAULT2
        _dl_phdr.symtab0x26ec04OBJECT<unknown>DEFAULT13
        _dl_phnum.symtab0x26ec44OBJECT<unknown>DEFAULT13
        _edata.symtab0x20aac0NOTYPE<unknown>DEFAULTSHN_ABS
        _end.symtab0x26ec80NOTYPE<unknown>DEFAULTSHN_ABS
        _errno.symtab0x26b284OBJECT<unknown>DEFAULT13
        _exit.symtab0x1109c44FUNC<unknown>DEFAULT2
        _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _fini.symtab0x178800FUNC<unknown>DEFAULT3
        _fixed_buffers.symtab0x24af88192OBJECT<unknown>DEFAULT13
        _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _h_errno.symtab0x26b2c4OBJECT<unknown>DEFAULT13
        _init.symtab0x80b40FUNC<unknown>DEFAULT1
        _memcpy.symtab0x15f100FUNC<unknown>HIDDEN2
        _pthread_cleanup_pop_restore.symtab0x13fc844FUNC<unknown>DEFAULT2
        _pthread_cleanup_push_defer.symtab0x13fc08FUNC<unknown>DEFAULT2
        _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _sigintr.symtab0x26b408OBJECT<unknown>HIDDEN13
        _start.symtab0x81b00FUNC<unknown>DEFAULT2
        _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _stdio_fopen.symtab0x151a0776FUNC<unknown>HIDDEN2
        _stdio_init.symtab0x11288104FUNC<unknown>HIDDEN2
        _stdio_openlist.symtab0x208b84OBJECT<unknown>DEFAULT12
        _stdio_openlist_add_lock.symtab0x2087024OBJECT<unknown>DEFAULT12
        _stdio_openlist_dec_use.symtab0x159ac392FUNC<unknown>HIDDEN2
        _stdio_openlist_del_count.symtab0x24af44OBJECT<unknown>DEFAULT13
        _stdio_openlist_del_lock.symtab0x2088824OBJECT<unknown>DEFAULT12
        _stdio_openlist_use_count.symtab0x24af04OBJECT<unknown>DEFAULT13
        _stdio_streams.symtab0x208bc240OBJECT<unknown>DEFAULT12
        _stdio_term.symtab0x11324212FUNC<unknown>HIDDEN2
        _stdio_user_locking.symtab0x208a04OBJECT<unknown>DEFAULT12
        _stdlib_strto_l.symtab0x134bc448FUNC<unknown>HIDDEN2
        _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _uintmaxtostr.symtab0x156b8348FUNC<unknown>HIDDEN2
        _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        abort.symtab0x12d50296FUNC<unknown>DEFAULT2
        abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        aeabi_unwind_cpp_pr1.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        atoi.symtab0x1348032FUNC<unknown>DEFAULT2
        atol.symtab0x1348032FUNC<unknown>DEFAULT2
        atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        been_there_done_that.symtab0x26b0c4OBJECT<unknown>DEFAULT13
        brk.symtab0x16ee076FUNC<unknown>DEFAULT2
        brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        bsd_signal.symtab0x11db4184FUNC<unknown>DEFAULT2
        buf.2975.symtab0x26afc16OBJECT<unknown>DEFAULT13
        c.symtab0x208584OBJECT<unknown>DEFAULT12
        calloc.symtab0x169c0308FUNC<unknown>DEFAULT2
        calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        chdir.symtab0x10e0c52FUNC<unknown>DEFAULT2
        chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        client.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        clock_getres.symtab0x145d052FUNC<unknown>DEFAULT2
        clock_getres.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        close.symtab0x1110052FUNC<unknown>DEFAULT2
        close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        closedir.symtab0x1477c248FUNC<unknown>DEFAULT2
        closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        commServer.symtab0x208004OBJECT<unknown>DEFAULT12
        completed.4959.symtab0x20ab01OBJECT<unknown>DEFAULT13
        connect.symtab0x11b6056FUNC<unknown>DEFAULT2
        connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        connectTimeout.symtab0x9d3c628FUNC<unknown>DEFAULT2
        crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        csum.symtab0xac9c340FUNC<unknown>DEFAULT2
        currentServer.symtab0x208044OBJECT<unknown>DEFAULT12
        data_start.symtab0x207fc0NOTYPE<unknown>DEFAULT12
        dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        dup2.symtab0x10c7052FUNC<unknown>DEFAULT2
        dup2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        environ.symtab0x26b184OBJECT<unknown>DEFAULT13
        errno.symtab0x26b284OBJECT<unknown>DEFAULT13
        errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        execl.symtab0x13f04172FUNC<unknown>DEFAULT2
        execl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        execve.symtab0x1456052FUNC<unknown>DEFAULT2
        execve.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        exit.symtab0x1367c184FUNC<unknown>DEFAULT2
        exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fclose.symtab0x14f18436FUNC<unknown>DEFAULT2
        fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fcntl.symtab0x10f08108FUNC<unknown>DEFAULT2
        fd_to_DIR.symtab0x14874208FUNC<unknown>DEFAULT2
        fdgets.symtab0x9290212FUNC<unknown>DEFAULT2
        fdopen_pids.symtab0x24aec4OBJECT<unknown>DEFAULT13
        fdopendir.symtab0x149f0152FUNC<unknown>DEFAULT2
        fdpclose.symtab0x9108392FUNC<unknown>DEFAULT2
        fdpopen.symtab0x8e80648FUNC<unknown>DEFAULT2
        fflush_unlocked.symtab0x15b34524FUNC<unknown>DEFAULT2
        fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fgetc.symtab0x15814220FUNC<unknown>DEFAULT2
        fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fgetc_unlocked.symtab0x15d40300FUNC<unknown>DEFAULT2
        fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fgets.symtab0x158f0188FUNC<unknown>DEFAULT2
        fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fgets_unlocked.symtab0x15e6c160FUNC<unknown>DEFAULT2
        fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fopen.symtab0x150cc32FUNC<unknown>DEFAULT2
        fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fork.symtab0x10d7c52FUNC<unknown>DEFAULT2
        fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fputc_unlocked.symtab0x11428264FUNC<unknown>DEFAULT2
        fputc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fputs_unlocked.symtab0x1153056FUNC<unknown>DEFAULT2
        fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        frame_dummy.symtab0x81500FUNC<unknown>DEFAULT2
        free.symtab0x12ad4572FUNC<unknown>DEFAULT2
        free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fseek.symtab0x1734436FUNC<unknown>DEFAULT2
        fseeko.symtab0x1734436FUNC<unknown>DEFAULT2
        fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fseeko64.symtab0x17368336FUNC<unknown>DEFAULT2
        fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fstat.symtab0x16f3888FUNC<unknown>DEFAULT2
        fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        fwrite_unlocked.symtab0x11568176FUNC<unknown>DEFAULT2
        fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getBogos.symtab0x965c568FUNC<unknown>DEFAULT2
        getBuild.symtab0x1009036FUNC<unknown>DEFAULT2
        getCores.symtab0x9894236FUNC<unknown>DEFAULT2
        getHost.symtab0x9594104FUNC<unknown>DEFAULT2
        getOurIP.symtab0xfdd4700FUNC<unknown>DEFAULT2
        getRandomIP.symtab0xac38100FUNC<unknown>DEFAULT2
        getRandomPublicIP.symtab0xa7041332FUNC<unknown>DEFAULT2
        getc.symtab0x15814220FUNC<unknown>DEFAULT2
        getc_unlocked.symtab0x15d40300FUNC<unknown>DEFAULT2
        getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getdtablesize.symtab0x10e7444FUNC<unknown>DEFAULT2
        getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getegid.symtab0x1463820FUNC<unknown>DEFAULT2
        getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        geteuid.symtab0x1464c20FUNC<unknown>DEFAULT2
        geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getgid.symtab0x146cc20FUNC<unknown>DEFAULT2
        getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getpagesize.symtab0x1459440FUNC<unknown>DEFAULT2
        getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getpid.symtab0x10d3820FUNC<unknown>DEFAULT2
        getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getrlimit.symtab0x1460452FUNC<unknown>DEFAULT2
        getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getsockname.symtab0x11b9856FUNC<unknown>DEFAULT2
        getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getsockopt.symtab0x11bd068FUNC<unknown>DEFAULT2
        getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        gettimeofday.symtab0x10ed452FUNC<unknown>DEFAULT2
        gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        getuid.symtab0x145bc20FUNC<unknown>DEFAULT2
        getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        gotIP.symtab0x20ad44OBJECT<unknown>DEFAULT13
        h_errno.symtab0x26b2c4OBJECT<unknown>DEFAULT13
        hextable.symtab0x179401024OBJECT<unknown>DEFAULT4
        htonl.symtab0x11a4032FUNC<unknown>DEFAULT2
        htons.symtab0x11a3016FUNC<unknown>DEFAULT2
        i.4596.symtab0x2085c4OBJECT<unknown>DEFAULT12
        index.symtab0x11870240FUNC<unknown>DEFAULT2
        inet_addr.symtab0x11b3840FUNC<unknown>DEFAULT2
        inet_aton.symtab0x168c8248FUNC<unknown>DEFAULT2
        inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        inet_ntoa.symtab0x11b1c28FUNC<unknown>DEFAULT2
        inet_ntoa.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        inet_ntoa_r.symtab0x11a90140FUNC<unknown>DEFAULT2
        initConnection.symtab0xfc44400FUNC<unknown>DEFAULT2
        init_rand.symtab0x81ec216FUNC<unknown>DEFAULT2
        initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        initstate.symtab0x12fec192FUNC<unknown>DEFAULT2
        initstate_r.symtab0x1339c228FUNC<unknown>DEFAULT2
        ioctl.symtab0x1104884FUNC<unknown>DEFAULT2
        ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        ipState.symtab0x20ae65OBJECT<unknown>DEFAULT13
        isatty.symtab0x1199036FUNC<unknown>DEFAULT2
        isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        isspace.symtab0x1113440FUNC<unknown>DEFAULT2
        isspace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        kill.symtab0x10ea052FUNC<unknown>DEFAULT2
        kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/string/arm/_memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/string/arm/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/string/arm/memset.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/string/arm/strcmp.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/string/arm/strlen.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/sysdeps/linux/arm/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/sysdeps/linux/arm/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/sysdeps/linux/arm/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/sysdeps/linux/arm/sigrestorer.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        libc/sysdeps/linux/arm/vfork.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        listFork.symtab0x9fb0424FUNC<unknown>DEFAULT2
        llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        lseek64.symtab0x176d8100FUNC<unknown>DEFAULT2
        macAddress.symtab0x20ae06OBJECT<unknown>DEFAULT13
        main.symtab0x100b42644FUNC<unknown>DEFAULT2
        mainCommSock.symtab0x20ad04OBJECT<unknown>DEFAULT13
        makeIPPacket.symtab0xaec4256FUNC<unknown>DEFAULT2
        makeRandomStr.symtab0x9980184FUNC<unknown>DEFAULT2
        malloc.symtab0x11f502336FUNC<unknown>DEFAULT2
        malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        malloc_trim.symtab0x12d1064FUNC<unknown>DEFAULT2
        matchPrompt.symtab0xa2e8372FUNC<unknown>DEFAULT2
        memchr.symtab0x163a0240FUNC<unknown>DEFAULT2
        memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        memcpy.symtab0x117404FUNC<unknown>DEFAULT2
        mempcpy.symtab0x1677836FUNC<unknown>DEFAULT2
        mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        memrchr.symtab0x165fc224FUNC<unknown>DEFAULT2
        memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        memset.symtab0x11620156FUNC<unknown>DEFAULT2
        mmap.symtab0x14404104FUNC<unknown>DEFAULT2
        mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        mremap.symtab0x171c064FUNC<unknown>DEFAULT2
        mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        munmap.symtab0x146e052FUNC<unknown>DEFAULT2
        munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        mylock.symtab0x209c424OBJECT<unknown>DEFAULT12
        mylock.symtab0x209dc24OBJECT<unknown>DEFAULT12
        nanosleep.symtab0x1471452FUNC<unknown>DEFAULT2
        nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        negotiate.symtab0xa158400FUNC<unknown>DEFAULT2
        next_start.1358.symtab0x26af84OBJECT<unknown>DEFAULT13
        nprocessors_onln.symtab0x137e0332FUNC<unknown>DEFAULT2
        ntohl.symtab0x11a7032FUNC<unknown>DEFAULT2
        ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        ntohs.symtab0x11a6016FUNC<unknown>DEFAULT2
        numpids.symtab0x20ad88OBJECT<unknown>DEFAULT13
        object.4967.symtab0x20ab424OBJECT<unknown>DEFAULT13
        open.symtab0x10ca496FUNC<unknown>DEFAULT2
        open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        opendir.symtab0x14944172FUNC<unknown>DEFAULT2
        opendir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        ourIP.symtab0x26b344OBJECT<unknown>DEFAULT13
        parseHex.symtab0x9364132FUNC<unknown>DEFAULT2
        parse_config.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        passwords.symtab0x2082056OBJECT<unknown>DEFAULT12
        pids.symtab0x26b3c4OBJECT<unknown>DEFAULT13
        pipe.symtab0x10d0452FUNC<unknown>DEFAULT2
        pipe.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        print.symtab0x89201012FUNC<unknown>DEFAULT2
        printchar.symtab0x853c112FUNC<unknown>DEFAULT2
        printi.symtab0x8734492FUNC<unknown>DEFAULT2
        prints.symtab0x85ac392FUNC<unknown>DEFAULT2
        processCmd.symtab0xeed83436FUNC<unknown>DEFAULT2
        program_invocation_name.symtab0x20aa84OBJECT<unknown>DEFAULT12
        program_invocation_short_name.symtab0x20aa44OBJECT<unknown>DEFAULT12
        putc_unlocked.symtab0x11428264FUNC<unknown>DEFAULT2
        puts.symtab0x111a8224FUNC<unknown>DEFAULT2
        puts.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        raise.symtab0x11d4028FUNC<unknown>DEFAULT2
        raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        rand.symtab0x12e7824FUNC<unknown>DEFAULT2
        rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        rand_cmwc.symtab0x82c4324FUNC<unknown>DEFAULT2
        random.symtab0x12e90164FUNC<unknown>DEFAULT2
        random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        random_poly_info.symtab0x186b040OBJECT<unknown>DEFAULT4
        random_r.symtab0x13234144FUNC<unknown>DEFAULT2
        random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        randtbl.symtab0x209f4128OBJECT<unknown>DEFAULT12
        rawmemchr.symtab0x1654c176FUNC<unknown>DEFAULT2
        rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        read.symtab0x10e4052FUNC<unknown>DEFAULT2
        read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        readUntil.symtab0xa45c680FUNC<unknown>DEFAULT2
        readdir64.symtab0x14a88236FUNC<unknown>DEFAULT2
        readdir64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        realloc.symtab0x16af4948FUNC<unknown>DEFAULT2
        realloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        recv.symtab0x11c1456FUNC<unknown>DEFAULT2
        recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        recvLine.symtab0x9a38772FUNC<unknown>DEFAULT2
        rindex.symtab0x1672880FUNC<unknown>DEFAULT2
        sbrk.symtab0x14660108FUNC<unknown>DEFAULT2
        sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        scanPid.symtab0x26b384OBJECT<unknown>DEFAULT13
        sclose.symtab0xafc480FUNC<unknown>DEFAULT2
        select.symtab0x10dcc64FUNC<unknown>DEFAULT2
        select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        send.symtab0x11c4c56FUNC<unknown>DEFAULT2
        send.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sendHOLD.symtab0xe92c1452FUNC<unknown>DEFAULT2
        sendJUNK.symtab0xe4281284FUNC<unknown>DEFAULT2
        sendTCP.symtab0xdd141812FUNC<unknown>DEFAULT2
        sendUDP.symtab0xd7341504FUNC<unknown>DEFAULT2
        sendto.symtab0x11c8464FUNC<unknown>DEFAULT2
        sendto.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        setsid.symtab0x1101452FUNC<unknown>DEFAULT2
        setsid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        setsockopt.symtab0x11cc468FUNC<unknown>DEFAULT2
        setsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        setstate.symtab0x12f34184FUNC<unknown>DEFAULT2
        setstate_r.symtab0x13150228FUNC<unknown>DEFAULT2
        sigaction.symtab0x1448c136FUNC<unknown>DEFAULT2
        sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sigaddset.symtab0x11d5c68FUNC<unknown>DEFAULT2
        sigaddset.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sigempty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sigemptyset.symtab0x11da020FUNC<unknown>DEFAULT2
        signal.symtab0x11db4184FUNC<unknown>DEFAULT2
        signal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sigprocmask.symtab0x110c856FUNC<unknown>DEFAULT2
        sigprocmask.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sigsetops.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sleep.symtab0x13734172FUNC<unknown>DEFAULT2
        sleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        socket.symtab0x11d0856FUNC<unknown>DEFAULT2
        socket.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sockprintf.symtab0x8da0224FUNC<unknown>DEFAULT2
        srand.symtab0x130ac164FUNC<unknown>DEFAULT2
        srandom.symtab0x130ac164FUNC<unknown>DEFAULT2
        srandom_r.symtab0x132c4216FUNC<unknown>DEFAULT2
        stderr.symtab0x208ac4OBJECT<unknown>DEFAULT12
        stdin.symtab0x208a44OBJECT<unknown>DEFAULT12
        stdout.symtab0x208a84OBJECT<unknown>DEFAULT12
        strchr.symtab0x11870240FUNC<unknown>DEFAULT2
        strchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strchrnul.symtab0x1679c236FUNC<unknown>DEFAULT2
        strchrnul.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strcmp.symtab0x1172028FUNC<unknown>DEFAULT2
        strcoll.symtab0x1172028FUNC<unknown>DEFAULT2
        strcpy.symtab0x1184c36FUNC<unknown>DEFAULT2
        strcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strcspn.symtab0x1650868FUNC<unknown>DEFAULT2
        strcspn.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strlen.symtab0x116c096FUNC<unknown>DEFAULT2
        strpbrk.symtab0x1688864FUNC<unknown>DEFAULT2
        strpbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strrchr.symtab0x1672880FUNC<unknown>DEFAULT2
        strrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strspn.symtab0x166dc76FUNC<unknown>DEFAULT2
        strspn.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strstr.symtab0x11750252FUNC<unknown>DEFAULT2
        strstr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strtok.symtab0x1196048FUNC<unknown>DEFAULT2
        strtok.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strtok_r.symtab0x16490120FUNC<unknown>DEFAULT2
        strtok_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        strtol.symtab0x134a028FUNC<unknown>DEFAULT2
        strtol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        sysconf.symtab0x1392c1496FUNC<unknown>DEFAULT2
        sysconf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        szprintf.symtab0x8d5872FUNC<unknown>DEFAULT2
        tcgetattr.symtab0x119b4124FUNC<unknown>DEFAULT2
        tcgetattr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        tcpcsum.symtab0xadf0212FUNC<unknown>DEFAULT2
        time.symtab0x10d4c48FUNC<unknown>DEFAULT2
        time.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        toupper.symtab0x1115c48FUNC<unknown>DEFAULT2
        toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        trim.symtab0x8408308FUNC<unknown>DEFAULT2
        unsafe_state.symtab0x20a7420OBJECT<unknown>DEFAULT12
        uppercase.symtab0x95fc96FUNC<unknown>DEFAULT2
        usernames.symtab0x2080824OBJECT<unknown>DEFAULT12
        vfork.symtab0x10c3064FUNC<unknown>DEFAULT2
        wait4.symtab0x1452c52FUNC<unknown>DEFAULT2
        wait4.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        waitpid.symtab0x10db028FUNC<unknown>DEFAULT2
        waitpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        wildString.symtab0x93e8428FUNC<unknown>DEFAULT2
        write.symtab0x10fe052FUNC<unknown>DEFAULT2
        write.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        xstatconv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
        zprintf.symtab0x8d1468FUNC<unknown>DEFAULT2

        Network Behavior

        Download Network PCAP: filtered – full

        Network Port Distribution

        • Total Packets: 44
        • • 6667 undefined
        • • 53 (DNS)
        TimestampSource PortDest PortSource IPDest IP
        Mar 21, 2025 20:57:21.023807049 CET608806667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:21.192569971 CET66676088093.115.172.234192.168.2.13
        Mar 21, 2025 20:57:26.206912041 CET608826667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:26.379806042 CET66676088293.115.172.234192.168.2.13
        Mar 21, 2025 20:57:31.382560015 CET608846667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:31.555273056 CET66676088493.115.172.234192.168.2.13
        Mar 21, 2025 20:57:36.557365894 CET608866667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:36.729260921 CET66676088693.115.172.234192.168.2.13
        Mar 21, 2025 20:57:41.732743025 CET608886667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:41.907232046 CET66676088893.115.172.234192.168.2.13
        Mar 21, 2025 20:57:46.910756111 CET608906667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:47.082019091 CET66676089093.115.172.234192.168.2.13
        Mar 21, 2025 20:57:52.084589005 CET608926667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:52.269903898 CET66676089293.115.172.234192.168.2.13
        Mar 21, 2025 20:57:57.272228956 CET608946667192.168.2.1393.115.172.234
        Mar 21, 2025 20:57:57.450227022 CET66676089493.115.172.234192.168.2.13
        Mar 21, 2025 20:58:02.452886105 CET608966667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:02.623938084 CET66676089693.115.172.234192.168.2.13
        Mar 21, 2025 20:58:07.626287937 CET608986667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:07.808231115 CET66676089893.115.172.234192.168.2.13
        Mar 21, 2025 20:58:12.810008049 CET609006667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:12.987426996 CET66676090093.115.172.234192.168.2.13
        Mar 21, 2025 20:58:17.989825010 CET609026667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:18.164113045 CET66676090293.115.172.234192.168.2.13
        Mar 21, 2025 20:58:23.166183949 CET609046667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:23.341981888 CET66676090493.115.172.234192.168.2.13
        Mar 21, 2025 20:58:28.344240904 CET609066667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:28.510101080 CET66676090693.115.172.234192.168.2.13
        Mar 21, 2025 20:58:33.512358904 CET609086667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:33.688711882 CET66676090893.115.172.234192.168.2.13
        Mar 21, 2025 20:58:38.691061020 CET609106667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:38.861892939 CET66676091093.115.172.234192.168.2.13
        Mar 21, 2025 20:58:43.864233971 CET609126667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:44.036026955 CET66676091293.115.172.234192.168.2.13
        Mar 21, 2025 20:58:49.038434029 CET609146667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:49.202791929 CET66676091493.115.172.234192.168.2.13
        Mar 21, 2025 20:58:54.204530001 CET609166667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:54.372087955 CET66676091693.115.172.234192.168.2.13
        Mar 21, 2025 20:58:59.374233961 CET609186667192.168.2.1393.115.172.234
        Mar 21, 2025 20:58:59.548728943 CET66676091893.115.172.234192.168.2.13
        Mar 21, 2025 20:59:04.551585913 CET609206667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:04.718465090 CET66676092093.115.172.234192.168.2.13
        Mar 21, 2025 20:59:09.721205950 CET609226667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:09.893937111 CET66676092293.115.172.234192.168.2.13
        Mar 21, 2025 20:59:14.895924091 CET609246667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:15.067588091 CET66676092493.115.172.234192.168.2.13
        Mar 21, 2025 20:59:20.069655895 CET609266667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:20.236783028 CET66676092693.115.172.234192.168.2.13
        Mar 21, 2025 20:59:25.238867044 CET609286667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:25.420809031 CET66676092893.115.172.234192.168.2.13
        Mar 21, 2025 20:59:30.423063993 CET609306667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:30.594305992 CET66676093093.115.172.234192.168.2.13
        Mar 21, 2025 20:59:35.596297026 CET609326667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:35.762451887 CET66676093293.115.172.234192.168.2.13
        Mar 21, 2025 20:59:40.764615059 CET609346667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:40.937818050 CET66676093493.115.172.234192.168.2.13
        Mar 21, 2025 20:59:45.940330029 CET609366667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:46.112924099 CET66676093693.115.172.234192.168.2.13
        Mar 21, 2025 20:59:51.115799904 CET609386667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:51.294210911 CET66676093893.115.172.234192.168.2.13
        Mar 21, 2025 20:59:56.296329021 CET609406667192.168.2.1393.115.172.234
        Mar 21, 2025 20:59:56.464704037 CET66676094093.115.172.234192.168.2.13
        Mar 21, 2025 21:00:01.467223883 CET609426667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:01.639763117 CET66676094293.115.172.234192.168.2.13
        Mar 21, 2025 21:00:06.642622948 CET609446667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:06.811832905 CET66676094493.115.172.234192.168.2.13
        Mar 21, 2025 21:00:11.813958883 CET609466667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:11.988461018 CET66676094693.115.172.234192.168.2.13
        Mar 21, 2025 21:00:16.990274906 CET609486667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:17.159485102 CET66676094893.115.172.234192.168.2.13
        Mar 21, 2025 21:00:22.161854029 CET609506667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:22.340918064 CET66676095093.115.172.234192.168.2.13
        Mar 21, 2025 21:00:27.343139887 CET609526667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:27.510817051 CET66676095293.115.172.234192.168.2.13
        Mar 21, 2025 21:00:32.513633013 CET609546667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:32.688950062 CET66676095493.115.172.234192.168.2.13
        Mar 21, 2025 21:00:37.691692114 CET609566667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:37.858850002 CET66676095693.115.172.234192.168.2.13
        Mar 21, 2025 21:00:42.861469030 CET609586667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:43.025501966 CET66676095893.115.172.234192.168.2.13
        Mar 21, 2025 21:00:48.027432919 CET609606667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:48.194242001 CET66676096093.115.172.234192.168.2.13
        Mar 21, 2025 21:00:53.196989059 CET609626667192.168.2.1393.115.172.234
        Mar 21, 2025 21:00:53.368001938 CET66676096293.115.172.234192.168.2.13
        TimestampSource PortDest PortSource IPDest IP
        Mar 21, 2025 21:00:04.968163967 CET5537453192.168.2.131.1.1.1
        Mar 21, 2025 21:00:04.968239069 CET3735053192.168.2.131.1.1.1
        Mar 21, 2025 21:00:05.075577021 CET53553741.1.1.1192.168.2.13
        Mar 21, 2025 21:00:05.076172113 CET53373501.1.1.1192.168.2.13

        DNS Queries

        TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
        Mar 21, 2025 21:00:04.968163967 CET192.168.2.131.1.1.10x1a3dStandard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
        Mar 21, 2025 21:00:04.968239069 CET192.168.2.131.1.1.10xbbddStandard query (0)daisy.ubuntu.com28IN (0x0001)false

        DNS Answers

        TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
        Mar 21, 2025 21:00:05.075577021 CET1.1.1.1192.168.2.130x1a3dNo error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
        Mar 21, 2025 21:00:05.075577021 CET1.1.1.1192.168.2.130x1a3dNo error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

        System Behavior

        General

        Start time (UTC):19:57:20
        Start date (UTC):21/03/2025
        Path:/tmp/tftp.elf
        Arguments:/tmp/tftp.elf
        File size:4956856 bytes
        MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

        File Activities

        Process Activities

        System Activities

        Network Activities


        General

        Start time (UTC):19:57:20
        Start date (UTC):21/03/2025
        Path:/tmp/tftp.elf
        Arguments:-
        File size:4956856 bytes
        MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

        Process Activities


        General

        Start time (UTC):19:57:20
        Start date (UTC):21/03/2025
        Path:/tmp/tftp.elf
        Arguments:-
        File size:4956856 bytes
        MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

        Process Activities

        Network Activities