Edit tour

Linux Analysis Report
arm7.elf

Overview

General Information

Sample name:arm7.elf
Analysis ID:1646006
MD5:a4f6cf4e6edb03734e3fd5d250dfa63b
SHA1:1297b2b89a27d8c3615548099cd38cbab48dc406
SHA256:5cc8e494a701a2f510cff13ec26bc59ef4c8f0812685a1ff7752a1c613f52f31
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:68
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Contains symbols with names commonly found in malware
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes the "rm" command used to delete files or directories
Sample and/or dropped files contains symbols with suspicious names
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1646006
Start date and time:2025-03-23 04:11:25 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 52s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:arm7.elf
Detection:MAL
Classification:mal68.troj.linELF@0/1@0/0
Command:/tmp/arm7.elf
PID:6246
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:

Standard Error:
  • system is lnxubuntu20
  • arm7.elf (PID: 6246, Parent: 6168, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/arm7.elf
    • arm7.elf New Fork (PID: 6248, Parent: 6246)
      • arm7.elf New Fork (PID: 6250, Parent: 6248)
      • arm7.elf New Fork (PID: 6251, Parent: 6248)
  • dash New Fork (PID: 6309, Parent: 4331)
  • rm (PID: 6309, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.V9EYqCQmt0 /tmp/tmp.gHS5r2SPW4 /tmp/tmp.CFXahaDIZi
  • dash New Fork (PID: 6310, Parent: 4331)
  • rm (PID: 6310, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.V9EYqCQmt0 /tmp/tmp.gHS5r2SPW4 /tmp/tmp.CFXahaDIZi
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
arm7.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
    SourceRuleDescriptionAuthorStrings
    6246.1.00007f482c017000.00007f482c02d000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      6250.1.00007f482c017000.00007f482c02d000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
        No Suricata rule has matched

        Click to jump to signature section

        Show All Signature Results

        AV Detection

        barindex
        Source: arm7.elfAvira: detected
        Source: arm7.elfVirustotal: Detection: 48%Perma Link
        Source: arm7.elfReversingLabs: Detection: 63%
        Source: global trafficTCP traffic: 192.168.2.23:53658 -> 157.245.211.199:5555
        Source: /tmp/arm7.elf (PID: 6246)Socket: 127.0.0.1:20905Jump to behavior
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
        Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
        Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
        Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
        Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownTCP traffic detected without corresponding DNS query: 157.245.211.199
        Source: unknownNetwork traffic detected: HTTP traffic on port 39246 -> 443
        Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
        Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 39246
        Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443

        System Summary

        barindex
        Source: ELF static info symbol of initial sampleName: attack.c
        Source: ELF static info symbol of initial sampleName: attack_get_opt_int
        Source: ELF static info symbol of initial sampleName: attack_get_opt_ip
        Source: ELF static info symbol of initial sampleName: attack_get_opt_str
        Source: ELF static info symbol of initial sampleName: attack_init
        Source: ELF static info symbol of initial sampleName: attack_method.c
        Source: ELF static info symbol of initial sampleName: attack_method_greip
        Source: ELF static info symbol of initial sampleName: attack_method_httpnull
        Source: ELF static info symbol of initial sampleName: attack_method_std
        Source: ELF static info symbol of initial sampleName: attack_method_tcpack
        Source: arm7.elfELF static info symbol of initial sample: __gnu_unwind_execute
        Source: arm7.elfELF static info symbol of initial sample: asus_scanner_init
        Source: arm7.elfELF static info symbol of initial sample: comtrend_scanner
        Source: arm7.elfELF static info symbol of initial sample: dlink_scanner.c
        Source: arm7.elfELF static info symbol of initial sample: gpon443_scanner
        Source: arm7.elfELF static info symbol of initial sample: gpon80_scanner
        Source: arm7.elfELF static info symbol of initial sample: gpon80_scanner.c
        Source: arm7.elfELF static info symbol of initial sample: hnap_scanner.c
        Source: arm7.elfELF static info symbol of initial sample: linksys_scanner_init
        Source: /tmp/arm7.elf (PID: 6251)SIGKILL sent: pid: 847, result: successfulJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)SIGKILL sent: pid: 6079, result: successfulJump to behavior
        Source: classification engineClassification label: mal68.troj.linELF@0/1@0/0
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/6230/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/6198/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4331/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/6079/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1582/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2033/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2275/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/3088/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/6190/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1612/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1579/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1699/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1335/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1698/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2028/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1334/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1576/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2302/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/3236/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2025/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2146/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/910/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4444/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4445/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/912/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4446/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/6229/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/517/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/759/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4447/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2307/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/918/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1594/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2285/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2281/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1349/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1623/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/761/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1622/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/884/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1983/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2038/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1344/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1465/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1586/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1860/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1463/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2156/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/800/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/801/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1629/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1627/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1900/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/3021/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/491/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2294/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2050/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1877/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/772/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1633/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1599/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1632/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/774/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1477/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/654/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/896/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1476/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1872/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2048/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/655/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1475/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2289/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/656/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/777/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/657/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/658/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/6248/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4501/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/6008/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/419/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/936/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1639/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1638/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2208/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2180/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1809/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1494/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1890/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2063/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2062/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1888/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1886/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/420/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1489/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/785/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1642/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/788/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/667/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/789/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4510/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/1648/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/4496/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2078/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2077/mapsJump to behavior
        Source: /tmp/arm7.elf (PID: 6251)File opened: /proc/2074/mapsJump to behavior
        Source: /usr/bin/dash (PID: 6309)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.V9EYqCQmt0 /tmp/tmp.gHS5r2SPW4 /tmp/tmp.CFXahaDIZiJump to behavior
        Source: /usr/bin/dash (PID: 6310)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.V9EYqCQmt0 /tmp/tmp.gHS5r2SPW4 /tmp/tmp.CFXahaDIZiJump to behavior
        Source: /tmp/arm7.elf (PID: 6246)Queries kernel information via 'uname': Jump to behavior
        Source: arm7.elf, 6246.1.000055e22e61b000.000055e22e749000.rw-.sdmp, arm7.elf, 6250.1.000055e22e61b000.000055e22e749000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
        Source: arm7.elf, 6246.1.000055e22e61b000.000055e22e749000.rw-.sdmp, arm7.elf, 6250.1.000055e22e61b000.000055e22e749000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
        Source: arm7.elf, 6246.1.00007ffdf9ed0000.00007ffdf9ef1000.rw-.sdmp, arm7.elf, 6250.1.00007ffdf9ed0000.00007ffdf9ef1000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
        Source: arm7.elf, 6246.1.00007ffdf9ed0000.00007ffdf9ef1000.rw-.sdmp, arm7.elf, 6250.1.00007ffdf9ed0000.00007ffdf9ef1000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/arm7.elf

        Stealing of Sensitive Information

        barindex
        Source: Yara matchFile source: arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 6246.1.00007f482c017000.00007f482c02d000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: 6250.1.00007f482c017000.00007f482c02d000.r-x.sdmp, type: MEMORY

        Remote Access Functionality

        barindex
        Source: Yara matchFile source: arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 6246.1.00007f482c017000.00007f482c02d000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: 6250.1.00007f482c017000.00007f482c02d000.r-x.sdmp, type: MEMORY
        ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
        Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
        Masquerading
        1
        OS Credential Dumping
        11
        Security Software Discovery
        Remote ServicesData from Local System1
        Encrypted Channel
        Exfiltration Over Other Network MediumAbuse Accessibility Features
        CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
        File Deletion
        LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
        Non-Standard Port
        Exfiltration Over BluetoothNetwork Denial of Service
        Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
        Application Layer Protocol
        Automated ExfiltrationData Encrypted for Impact
        No configs have been found
        Hide Legend

        Legend:

        • Process
        • Signature
        • Created File
        • DNS/IP Info
        • Is Dropped
        • Number of created Files
        • Is malicious
        • Internet
        behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1646006 Sample: arm7.elf Startdate: 23/03/2025 Architecture: LINUX Score: 68 20 109.202.202.202, 80 INIT7CH Switzerland 2->20 22 157.245.211.199, 53658, 5555 DIGITALOCEAN-ASNUS United States 2->22 24 3 other IPs or domains 2->24 26 Antivirus / Scanner detection for submitted sample 2->26 28 Multi AV Scanner detection for submitted file 2->28 30 Yara detected Mirai 2->30 32 Contains symbols with names commonly found in malware 2->32 8 arm7.elf 2->8         started        10 dash rm 2->10         started        12 dash rm 2->12         started        signatures3 process4 process5 14 arm7.elf 8->14         started        process6 16 arm7.elf 14->16         started        18 arm7.elf 14->18         started       

        This section contains all screenshots as thumbnails, including those not shown in the slideshow.


        windows-stand
        SourceDetectionScannerLabelLink
        arm7.elf49%VirustotalBrowse
        arm7.elf64%ReversingLabsLinux.Trojan.Mirai
        arm7.elf100%AviraEXP/ELF.Gafgyt.Z.H
        No Antivirus matches
        No Antivirus matches
        No Antivirus matches

        Download Network PCAP: filteredfull

        No contacted domains info
        • No. of IPs < 25%
        • 25% < No. of IPs < 50%
        • 50% < No. of IPs < 75%
        • 75% < No. of IPs
        IPDomainCountryFlagASNASN NameMalicious
        34.249.145.219
        unknownUnited States
        16509AMAZON-02USfalse
        109.202.202.202
        unknownSwitzerland
        13030INIT7CHfalse
        91.189.91.43
        unknownUnited Kingdom
        41231CANONICAL-ASGBfalse
        91.189.91.42
        unknownUnited Kingdom
        41231CANONICAL-ASGBfalse
        157.245.211.199
        unknownUnited States
        14061DIGITALOCEAN-ASNUSfalse
        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
        34.249.145.219morte.ppc.elfGet hashmaliciousUnknownBrowse
          morte.mpsl.elfGet hashmaliciousUnknownBrowse
            sync.powerpc.elfGet hashmaliciousUnknownBrowse
              na.elfGet hashmaliciousPrometeiBrowse
                sync.x86.elfGet hashmaliciousUnknownBrowse
                  na.elfGet hashmaliciousPrometeiBrowse
                    ftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                      na.elfGet hashmaliciousPrometeiBrowse
                        linux_mips64_softfloat.elfGet hashmaliciousChaosBrowse
                          na.elfGet hashmaliciousPrometeiBrowse
                            109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
                            • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
                            91.189.91.43arc.elfGet hashmaliciousUnknownBrowse
                              na.elfGet hashmaliciousPrometeiBrowse
                                morte.ppc.elfGet hashmaliciousUnknownBrowse
                                  na.elfGet hashmaliciousPrometeiBrowse
                                    morte.mpsl.elfGet hashmaliciousUnknownBrowse
                                      .i.elfGet hashmaliciousUnknownBrowse
                                        na.elfGet hashmaliciousPrometeiBrowse
                                          morte.spc.elfGet hashmaliciousUnknownBrowse
                                            sync.powerpc.elfGet hashmaliciousUnknownBrowse
                                              na.elfGet hashmaliciousPrometeiBrowse
                                                91.189.91.42arc.elfGet hashmaliciousUnknownBrowse
                                                  na.elfGet hashmaliciousPrometeiBrowse
                                                    morte.ppc.elfGet hashmaliciousUnknownBrowse
                                                      na.elfGet hashmaliciousPrometeiBrowse
                                                        morte.mpsl.elfGet hashmaliciousUnknownBrowse
                                                          .i.elfGet hashmaliciousUnknownBrowse
                                                            na.elfGet hashmaliciousPrometeiBrowse
                                                              morte.spc.elfGet hashmaliciousUnknownBrowse
                                                                sync.powerpc.elfGet hashmaliciousUnknownBrowse
                                                                  na.elfGet hashmaliciousPrometeiBrowse
                                                                    No context
                                                                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                    CANONICAL-ASGBarc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    arm.elfGet hashmaliciousMiraiBrowse
                                                                    • 185.125.190.26
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 91.189.91.42
                                                                    morte.ppc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 91.189.91.42
                                                                    morte.mpsl.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    .i.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 91.189.91.42
                                                                    morte.spc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    sync.powerpc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    CANONICAL-ASGBarc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    arm.elfGet hashmaliciousMiraiBrowse
                                                                    • 185.125.190.26
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 91.189.91.42
                                                                    morte.ppc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 91.189.91.42
                                                                    morte.mpsl.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    .i.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 91.189.91.42
                                                                    morte.spc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    sync.powerpc.elfGet hashmaliciousUnknownBrowse
                                                                    • 91.189.91.42
                                                                    INIT7CHarc.elfGet hashmaliciousUnknownBrowse
                                                                    • 109.202.202.202
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 109.202.202.202
                                                                    morte.ppc.elfGet hashmaliciousUnknownBrowse
                                                                    • 109.202.202.202
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 109.202.202.202
                                                                    morte.mpsl.elfGet hashmaliciousUnknownBrowse
                                                                    • 109.202.202.202
                                                                    .i.elfGet hashmaliciousUnknownBrowse
                                                                    • 109.202.202.202
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 109.202.202.202
                                                                    morte.spc.elfGet hashmaliciousUnknownBrowse
                                                                    • 109.202.202.202
                                                                    sync.powerpc.elfGet hashmaliciousUnknownBrowse
                                                                    • 109.202.202.202
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 109.202.202.202
                                                                    AMAZON-02USmips.elfGet hashmaliciousMiraiBrowse
                                                                    • 54.171.230.55
                                                                    morte.ppc.elfGet hashmaliciousUnknownBrowse
                                                                    • 34.249.145.219
                                                                    morte.mpsl.elfGet hashmaliciousUnknownBrowse
                                                                    • 34.249.145.219
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 52.212.150.54
                                                                    loligang.x86.elfGet hashmaliciousMiraiBrowse
                                                                    • 54.103.225.25
                                                                    loligang.arm7.elfGet hashmaliciousMiraiBrowse
                                                                    • 65.1.39.230
                                                                    sync.powerpc.elfGet hashmaliciousUnknownBrowse
                                                                    • 34.249.145.219
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 52.212.150.54
                                                                    na.elfGet hashmaliciousPrometeiBrowse
                                                                    • 52.212.150.54
                                                                    sync.x86.elfGet hashmaliciousUnknownBrowse
                                                                    • 34.249.145.219
                                                                    No context
                                                                    No context
                                                                    Process:/tmp/arm7.elf
                                                                    File Type:ASCII text
                                                                    Category:dropped
                                                                    Size (bytes):262
                                                                    Entropy (8bit):3.421966381776338
                                                                    Encrypted:false
                                                                    SSDEEP:6:GYgDFxBRY/VUAaDFx1XT/VjmsVot/VOArB/VH:+1vNZXyl
                                                                    MD5:AA928762AA74699715DC9CC0647C1086
                                                                    SHA1:3FAE175EFB737AA2580B8D28FCA7E10311D27A00
                                                                    SHA-256:0033FC55F2F75594D1EE424D5F2440BA01028EDFB9A6BF6DF780868451C690CD
                                                                    SHA-512:AE5C42EC06834D602090C9A384BA4B11D4BEE0003221387E8DE6F241F93AB4C3955108E61685DD68AA43173D4CAC4E3DA6399D55EDCF490304DE58DC72214F64
                                                                    Malicious:false
                                                                    Reputation:low
                                                                    Preview:8000-1e000 r-xp 00000000 fd:00 531606 /tmp/arm7.elf.25000-26000 rw-p 00015000 fd:00 531606 /tmp/arm7.elf.26000-2b000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].
                                                                    File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                                                                    Entropy (8bit):5.997775085011211
                                                                    TrID:
                                                                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                                    File name:arm7.elf
                                                                    File size:144'319 bytes
                                                                    MD5:a4f6cf4e6edb03734e3fd5d250dfa63b
                                                                    SHA1:1297b2b89a27d8c3615548099cd38cbab48dc406
                                                                    SHA256:5cc8e494a701a2f510cff13ec26bc59ef4c8f0812685a1ff7752a1c613f52f31
                                                                    SHA512:5e1828b4cf29b04a553895af4299a46d83de01f59142737b1a66d121047404636d7c38b4052319fc6c5d5be100af82d7c9c54f4c41f5aa80bc3d423e70e8eb78
                                                                    SSDEEP:3072:KTg0ts0CbhXBazV4WLZIdiv9cBBXB45M/9t1Ng:WruVbZBazV4W9IYOBXBaM/9tE
                                                                    TLSH:CEE34A46EA408B03C4D61775BAAF424A3323AB55E3DB73068D18AFF43F8679E4E27505
                                                                    File Content Preview:.ELF..............(.........4... .......4. ...(........p.P...........................................Q...Q...............Q...Q...Q.......3...............Q...Q...Q..................Q.td..................................-...L..................@-.,@...0....S

                                                                    ELF header

                                                                    Class:ELF32
                                                                    Data:2's complement, little endian
                                                                    Version:1 (current)
                                                                    Machine:ARM
                                                                    Version Number:0x1
                                                                    Type:EXEC (Executable file)
                                                                    OS/ABI:UNIX - System V
                                                                    ABI Version:0
                                                                    Entry Point Address:0x8194
                                                                    Flags:0x4000002
                                                                    ELF Header Size:52
                                                                    Program Header Offset:52
                                                                    Program Header Size:32
                                                                    Number of Program Headers:5
                                                                    Section Header Offset:113696
                                                                    Section Header Size:40
                                                                    Number of Section Headers:29
                                                                    Header String Table Index:26
                                                                    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                                    NULL0x00x00x00x00x0000
                                                                    .initPROGBITS0x80d40xd40x100x00x6AX004
                                                                    .textPROGBITS0x80f00xf00x13a480x00x6AX0016
                                                                    .finiPROGBITS0x1bb380x13b380x100x00x6AX004
                                                                    .rodataPROGBITS0x1bb480x13b480x15780x00x2A008
                                                                    .ARM.extabPROGBITS0x1d0c00x150c00x180x00x2A004
                                                                    .ARM.exidxARM_EXIDX0x1d0d80x150d80x1180x00x82AL204
                                                                    .eh_framePROGBITS0x251f00x151f00x40x00x3WA004
                                                                    .tbssNOBITS0x251f40x151f40x80x00x403WAT004
                                                                    .init_arrayINIT_ARRAY0x251f40x151f40x40x00x3WA004
                                                                    .fini_arrayFINI_ARRAY0x251f80x151f80x40x00x3WA004
                                                                    .jcrPROGBITS0x251fc0x151fc0x40x00x3WA004
                                                                    .gotPROGBITS0x252000x152000xac0x40x3WA004
                                                                    .dataPROGBITS0x252ac0x152ac0x15c0x00x3WA004
                                                                    .bssNOBITS0x254080x154080x31a00x00x3WA004
                                                                    .commentPROGBITS0x00x154080xb8c0x00x0001
                                                                    .debug_arangesPROGBITS0x00x15f980x1400x00x0008
                                                                    .debug_pubnamesPROGBITS0x00x160d80x2130x00x0001
                                                                    .debug_infoPROGBITS0x00x162eb0x20430x00x0001
                                                                    .debug_abbrevPROGBITS0x00x1832e0x6e20x00x0001
                                                                    .debug_linePROGBITS0x00x18a100xe760x00x0001
                                                                    .debug_framePROGBITS0x00x198880x2b80x00x0004
                                                                    .debug_strPROGBITS0x00x19b400x8ca0x10x30MS001
                                                                    .debug_locPROGBITS0x00x1a40a0x118f0x00x0001
                                                                    .debug_rangesPROGBITS0x00x1b5990x5580x00x0001
                                                                    .ARM.attributesARM_ATTRIBUTES0x00x1baf10x160x00x0001
                                                                    .shstrtabSTRTAB0x00x1bb070x1170x00x0001
                                                                    .symtabSYMTAB0x00x1c0a80x4b700x100x0286864
                                                                    .strtabSTRTAB0x00x20c180x27a70x00x0001
                                                                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                                    EXIDX0x150d80x1d0d80x1d0d80x1180x1184.54230x4R 0x4.ARM.exidx
                                                                    LOAD0x00x80000x80000x151f00x151f06.13180x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                                                                    LOAD0x151f00x251f00x251f00x2180x33b82.68500x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                                                                    TLS0x151f40x251f40x251f40x00x80.00000x4R 0x4.tbss
                                                                    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                                                                    NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                                                    .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    .symtab0x80d40SECTION<unknown>DEFAULT1
                                                                    .symtab0x80f00SECTION<unknown>DEFAULT2
                                                                    .symtab0x1bb380SECTION<unknown>DEFAULT3
                                                                    .symtab0x1bb480SECTION<unknown>DEFAULT4
                                                                    .symtab0x1d0c00SECTION<unknown>DEFAULT5
                                                                    .symtab0x1d0d80SECTION<unknown>DEFAULT6
                                                                    .symtab0x251f00SECTION<unknown>DEFAULT7
                                                                    .symtab0x251f40SECTION<unknown>DEFAULT8
                                                                    .symtab0x251f40SECTION<unknown>DEFAULT9
                                                                    .symtab0x251f80SECTION<unknown>DEFAULT10
                                                                    .symtab0x251fc0SECTION<unknown>DEFAULT11
                                                                    .symtab0x252000SECTION<unknown>DEFAULT12
                                                                    .symtab0x252ac0SECTION<unknown>DEFAULT13
                                                                    .symtab0x254080SECTION<unknown>DEFAULT14
                                                                    .symtab0x00SECTION<unknown>DEFAULT15
                                                                    .symtab0x00SECTION<unknown>DEFAULT16
                                                                    .symtab0x00SECTION<unknown>DEFAULT17
                                                                    .symtab0x00SECTION<unknown>DEFAULT18
                                                                    .symtab0x00SECTION<unknown>DEFAULT19
                                                                    .symtab0x00SECTION<unknown>DEFAULT20
                                                                    .symtab0x00SECTION<unknown>DEFAULT21
                                                                    .symtab0x00SECTION<unknown>DEFAULT22
                                                                    .symtab0x00SECTION<unknown>DEFAULT23
                                                                    .symtab0x00SECTION<unknown>DEFAULT24
                                                                    .symtab0x00SECTION<unknown>DEFAULT25
                                                                    $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                                                                    $a.symtab0x1bb380NOTYPE<unknown>DEFAULT3
                                                                    $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                                                                    $a.symtab0x1bb440NOTYPE<unknown>DEFAULT3
                                                                    $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x81340NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x81940NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x822c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x83280NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x85440NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x85b00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x86200NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x88c40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x8c300NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x97880NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xa9440NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xad7c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xb01c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xb5080NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xbb280NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xbdc80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xc4c00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xcb700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xcbc00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xcc640NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xd1e00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xe1980NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xe2640NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xe27c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xe3e00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xe4280NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xe5780NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xec700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xeccc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xed340NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xee700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xef4c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xef700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xf0100NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xf0b00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xfd240NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xfd4c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xfd940NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xfdb80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xfddc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xfe480NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xff840NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0xffe00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x100740NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x101040NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x101840NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x102180NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x103140NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x104280NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1056c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x105800NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x106180NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1070c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x107200NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x108000NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x108380NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1087c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x108bc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x109000NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x109840NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x109c40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10a500NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10a800NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10b900NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10c600NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10d240NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10dd40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10ebc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10edc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10f100NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10f5c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x10fdc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x111400NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x111700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x112b40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x11a800NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x11b200NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x11b640NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x11d140NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x11d680NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x122d80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x123100NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x123d00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x123e00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x123f00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x124900NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x124f00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x125bc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x125d40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x126e00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x127040NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x127800NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x127a80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x127ec0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x128300NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x128a40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x128e80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x129300NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x129700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x129b40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12a240NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12a680NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12ad80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12b240NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12bac0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12bf40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12c380NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12c880NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12c9c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12d600NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x12dcc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1377c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x138bc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x13c7c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1411c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1415c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x142840NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x143480NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x144940NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x14ab80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x14b080NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x14ed40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x14f6c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x14fb40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x150a40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x151d40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1522c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x152340NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x152640NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x152bc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x152c40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x152f40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1534c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x153540NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x153800NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x154080NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x154e40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x155a40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x155f80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x156500NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15a3c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15ab80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15ae40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15b6c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15b740NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15b800NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15b900NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15ba00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15be00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15c480NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15cac0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15d4c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15d780NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15d8c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15da00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15db40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15ddc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15e140NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15e540NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15e680NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15eac0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15eec0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15f2c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15f8c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x15ff80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1600c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x161840NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x162700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x166140NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x166680NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1668c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x167480NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x16a780NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x16a980NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x16b740NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x16fd40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x171140NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x171f00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x172640NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x172900NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x173ec0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x17be00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x17d240NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x17e400NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x180f00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1849c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x185c80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x186700NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18b000NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18b200NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18c100NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18c340NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18d140NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18e040NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18ef00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18f340NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18f840NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x18fd00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x190d40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1912c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x191340NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x191600NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x191d80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x192400NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x194940NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x194a00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x194d80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x195300NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x195880NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x195940NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x196dc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x197000NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x198c00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x199180NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x199e00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x19a100NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x19ab40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x19af00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x19b300NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x19ba00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x19fbc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a4580NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a5980NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a5ec0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a6380NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a6840NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a68c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a6900NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a6bc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a6c80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a6d40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1a8f40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1aa440NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1aa600NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1aac00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1ab2c0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1abe40NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1ac040NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1ad480NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1b2900NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1b2980NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1b2a00NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1b2a80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1b3640NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1b3a80NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1babc0NOTYPE<unknown>DEFAULT2
                                                                    $a.symtab0x1bb040NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x81280NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x251f80NOTYPE<unknown>DEFAULT10
                                                                    $d.symtab0x81800NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x251f40NOTYPE<unknown>DEFAULT9
                                                                    $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x83200NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x889c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x8be00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x97440NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xad780NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xb5040NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xbb240NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xc4bc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xcb6c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xd1dc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xe1900NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xe2740NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xe3d40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xe4240NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xe5740NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xec400NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x252ac0NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x252b00NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x252b40NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x252b80NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0xecbc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xed240NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xee580NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xef3c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xef6c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xf0080NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xf0a80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0xfbf00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x252bc0NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x00NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0x200NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0x260NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0x530NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0x106100NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x106fc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x107f00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x108340NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x108780NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x108b80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x108fc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1097c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x109c00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10a4c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10b740NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10c580NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10d180NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10dcc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1c0980NOTYPE<unknown>DEFAULT4
                                                                    $d.symtab0x10ea80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10ed80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10f0c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10f540NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x10fcc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x111240NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x252c40NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x252c00NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x11a5c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1c0f00NOTYPE<unknown>DEFAULT4
                                                                    $d.symtab0x11d100NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x11d5c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x122a80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x253a80NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x1c0f80NOTYPE<unknown>DEFAULT4
                                                                    $d.symtab0x123c80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x125b40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x126d00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1c17c0NOTYPE<unknown>DEFAULT4
                                                                    $d.symtab0x1277c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x127e40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x128280NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1289c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x128e00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x129280NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1296c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x129ac0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12a1c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12a600NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12ad00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12b1c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12ba40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12bec0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12c300NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12c840NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x12d540NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x137580NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x253ac0NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x138a00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x13c5c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x141000NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x141540NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x142700NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x253c40NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x143280NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x253dc0NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x144700NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x14a8c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x14b040NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x14eac0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x150980NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x151c40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x151d00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x152600NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x152f00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x154dc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x155900NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x155f00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x156440NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x159f00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x253f40NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x15ab00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15ae00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15b600NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15bdc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15c400NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15ca80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15d480NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15dd40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15e100NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15e500NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15ea80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15ee80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15f280NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15f840NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x15ff00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1625c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1660c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x167440NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x16a680NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x16b700NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x16fa00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x171ec0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x17bc00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1d0780NOTYPE<unknown>DEFAULT4
                                                                    $d.symtab0x180d40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x184840NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x185c00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x18c080NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x18d0c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x18dfc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x18ee80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x190c00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x190d00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x191c00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x192300NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1946c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x194cc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1957c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x196d40NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x198bc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x199dc0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x19ab00NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x19b9c0NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1a8d80NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x1b2800NOTYPE<unknown>DEFAULT2
                                                                    $d.symtab0x580NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0x00NOTYPE<unknown>DEFAULT23
                                                                    $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
                                                                    $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                                                                    $d.symtab0x254000NOTYPE<unknown>DEFAULT13
                                                                    $d.symtab0x1cd4e0NOTYPE<unknown>DEFAULT4
                                                                    C.11.5548.symtab0x1cd2c12OBJECT<unknown>DEFAULT4
                                                                    C.5.5083.symtab0x1c09824OBJECT<unknown>DEFAULT4
                                                                    C.7.5370.symtab0x1cd3812OBJECT<unknown>DEFAULT4
                                                                    C.7.6109.symtab0x1c0c812OBJECT<unknown>DEFAULT4
                                                                    C.7.6182.symtab0x1d05012OBJECT<unknown>DEFAULT4
                                                                    C.8.6110.symtab0x1c0bc12OBJECT<unknown>DEFAULT4
                                                                    C.9.6119.symtab0x1c0b012OBJECT<unknown>DEFAULT4
                                                                    LOCAL_ADDR.symtab0x27f184OBJECT<unknown>DEFAULT14
                                                                    Laligned.symtab0x124b80NOTYPE<unknown>DEFAULT2
                                                                    Llastword.symtab0x124d40NOTYPE<unknown>DEFAULT2
                                                                    _Exit.symtab0x15be0104FUNC<unknown>DEFAULT2
                                                                    _GLOBAL_OFFSET_TABLE_.symtab0x252000OBJECT<unknown>HIDDEN12
                                                                    _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _Unwind_Complete.symtab0x1a68c4FUNC<unknown>HIDDEN2
                                                                    _Unwind_DeleteException.symtab0x1a69044FUNC<unknown>HIDDEN2
                                                                    _Unwind_ForcedUnwind.symtab0x1b34036FUNC<unknown>HIDDEN2
                                                                    _Unwind_GetCFA.symtab0x1a6848FUNC<unknown>HIDDEN2
                                                                    _Unwind_GetDataRelBase.symtab0x1a6c812FUNC<unknown>HIDDEN2
                                                                    _Unwind_GetLanguageSpecificData.symtab0x1b36468FUNC<unknown>HIDDEN2
                                                                    _Unwind_GetRegionStart.symtab0x1bb0452FUNC<unknown>HIDDEN2
                                                                    _Unwind_GetTextRelBase.symtab0x1a6bc12FUNC<unknown>HIDDEN2
                                                                    _Unwind_RaiseException.symtab0x1b2d436FUNC<unknown>HIDDEN2
                                                                    _Unwind_Resume.symtab0x1b2f836FUNC<unknown>HIDDEN2
                                                                    _Unwind_Resume_or_Rethrow.symtab0x1b31c36FUNC<unknown>HIDDEN2
                                                                    _Unwind_VRS_Get.symtab0x1a5ec76FUNC<unknown>HIDDEN2
                                                                    _Unwind_VRS_Pop.symtab0x1ac04324FUNC<unknown>HIDDEN2
                                                                    _Unwind_VRS_Set.symtab0x1a63876FUNC<unknown>HIDDEN2
                                                                    _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __C_ctype_b.symtab0x254004OBJECT<unknown>DEFAULT13
                                                                    __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __C_ctype_b_data.symtab0x1cd4e768OBJECT<unknown>DEFAULT4
                                                                    __EH_FRAME_BEGIN__.symtab0x251f00OBJECT<unknown>DEFAULT7
                                                                    __FRAME_END__.symtab0x251f00OBJECT<unknown>DEFAULT7
                                                                    __GI___C_ctype_b.symtab0x254004OBJECT<unknown>HIDDEN13
                                                                    __GI___close.symtab0x151f0100FUNC<unknown>HIDDEN2
                                                                    __GI___close_nocancel.symtab0x151d424FUNC<unknown>HIDDEN2
                                                                    __GI___ctype_b.symtab0x254044OBJECT<unknown>HIDDEN13
                                                                    __GI___errno_location.symtab0x10ebc32FUNC<unknown>HIDDEN2
                                                                    __GI___fcntl_nocancel.symtab0x10580152FUNC<unknown>HIDDEN2
                                                                    __GI___fgetc_unlocked.symtab0x1849c300FUNC<unknown>HIDDEN2
                                                                    __GI___glibc_strerror_r.symtab0x125bc24FUNC<unknown>HIDDEN2
                                                                    __GI___libc_close.symtab0x151f0100FUNC<unknown>HIDDEN2
                                                                    __GI___libc_fcntl.symtab0x10618244FUNC<unknown>HIDDEN2
                                                                    __GI___libc_open.symtab0x15280100FUNC<unknown>HIDDEN2
                                                                    __GI___libc_read.symtab0x15310100FUNC<unknown>HIDDEN2
                                                                    __GI___libc_write.symtab0x190f0100FUNC<unknown>HIDDEN2
                                                                    __GI___open.symtab0x15280100FUNC<unknown>HIDDEN2
                                                                    __GI___open_nocancel.symtab0x1526424FUNC<unknown>HIDDEN2
                                                                    __GI___read.symtab0x15310100FUNC<unknown>HIDDEN2
                                                                    __GI___read_nocancel.symtab0x152f424FUNC<unknown>HIDDEN2
                                                                    __GI___sigaddset.symtab0x12d8436FUNC<unknown>HIDDEN2
                                                                    __GI___sigdelset.symtab0x12da836FUNC<unknown>HIDDEN2
                                                                    __GI___sigismember.symtab0x12d6036FUNC<unknown>HIDDEN2
                                                                    __GI___uClibc_fini.symtab0x15528124FUNC<unknown>HIDDEN2
                                                                    __GI___uClibc_init.symtab0x155f888FUNC<unknown>HIDDEN2
                                                                    __GI___write.symtab0x190f0100FUNC<unknown>HIDDEN2
                                                                    __GI___write_nocancel.symtab0x190d424FUNC<unknown>HIDDEN2
                                                                    __GI___xpg_strerror_r.symtab0x125d4268FUNC<unknown>HIDDEN2
                                                                    __GI__exit.symtab0x15be0104FUNC<unknown>HIDDEN2
                                                                    __GI_abort.symtab0x1415c296FUNC<unknown>HIDDEN2
                                                                    __GI_bind.symtab0x127a868FUNC<unknown>HIDDEN2
                                                                    __GI_brk.symtab0x1953088FUNC<unknown>HIDDEN2
                                                                    __GI_close.symtab0x151f0100FUNC<unknown>HIDDEN2
                                                                    __GI_closedir.symtab0x10a80272FUNC<unknown>HIDDEN2
                                                                    __GI_config_close.symtab0x1659852FUNC<unknown>HIDDEN2
                                                                    __GI_config_open.symtab0x165cc72FUNC<unknown>HIDDEN2
                                                                    __GI_config_read.symtab0x16270808FUNC<unknown>HIDDEN2
                                                                    __GI_connect.symtab0x12830116FUNC<unknown>HIDDEN2
                                                                    __GI_exit.symtab0x14284196FUNC<unknown>HIDDEN2
                                                                    __GI_fclose.symtab0x16748816FUNC<unknown>HIDDEN2
                                                                    __GI_fcntl.symtab0x10618244FUNC<unknown>HIDDEN2
                                                                    __GI_fflush_unlocked.symtab0x180f0940FUNC<unknown>HIDDEN2
                                                                    __GI_fgetc.symtab0x17be0324FUNC<unknown>HIDDEN2
                                                                    __GI_fgetc_unlocked.symtab0x1849c300FUNC<unknown>HIDDEN2
                                                                    __GI_fgets.symtab0x17d24284FUNC<unknown>HIDDEN2
                                                                    __GI_fgets_unlocked.symtab0x185c8160FUNC<unknown>HIDDEN2
                                                                    __GI_fopen.symtab0x16a7832FUNC<unknown>HIDDEN2
                                                                    __GI_fork.symtab0x14b08972FUNC<unknown>HIDDEN2
                                                                    __GI_fputs_unlocked.symtab0x122d856FUNC<unknown>HIDDEN2
                                                                    __GI_fseek.symtab0x196dc36FUNC<unknown>HIDDEN2
                                                                    __GI_fseeko64.symtab0x19700448FUNC<unknown>HIDDEN2
                                                                    __GI_fstat.symtab0x15c48100FUNC<unknown>HIDDEN2
                                                                    __GI_fwrite_unlocked.symtab0x12310188FUNC<unknown>HIDDEN2
                                                                    __GI_getc_unlocked.symtab0x1849c300FUNC<unknown>HIDDEN2
                                                                    __GI_getdtablesize.symtab0x15d4c44FUNC<unknown>HIDDEN2
                                                                    __GI_getegid.symtab0x15d7820FUNC<unknown>HIDDEN2
                                                                    __GI_geteuid.symtab0x15d8c20FUNC<unknown>HIDDEN2
                                                                    __GI_getgid.symtab0x15da020FUNC<unknown>HIDDEN2
                                                                    __GI_getpagesize.symtab0x15db440FUNC<unknown>HIDDEN2
                                                                    __GI_getpid.symtab0x14f6c72FUNC<unknown>HIDDEN2
                                                                    __GI_getrlimit.symtab0x15ddc56FUNC<unknown>HIDDEN2
                                                                    __GI_getsockname.symtab0x128a468FUNC<unknown>HIDDEN2
                                                                    __GI_gettimeofday.symtab0x15e1464FUNC<unknown>HIDDEN2
                                                                    __GI_getuid.symtab0x15e5420FUNC<unknown>HIDDEN2
                                                                    __GI_inet_addr.symtab0x1278040FUNC<unknown>HIDDEN2
                                                                    __GI_inet_aton.symtab0x18fd0248FUNC<unknown>HIDDEN2
                                                                    __GI_ioctl.symtab0x10720224FUNC<unknown>HIDDEN2
                                                                    __GI_isatty.symtab0x126e036FUNC<unknown>HIDDEN2
                                                                    __GI_kill.symtab0x1080056FUNC<unknown>HIDDEN2
                                                                    __GI_listen.symtab0x1293064FUNC<unknown>HIDDEN2
                                                                    __GI_lseek64.symtab0x19b30112FUNC<unknown>HIDDEN2
                                                                    __GI_memchr.symtab0x18b20240FUNC<unknown>HIDDEN2
                                                                    __GI_memcpy.symtab0x123d04FUNC<unknown>HIDDEN2
                                                                    __GI_memmove.symtab0x123e04FUNC<unknown>HIDDEN2
                                                                    __GI_mempcpy.symtab0x18c1036FUNC<unknown>HIDDEN2
                                                                    __GI_memrchr.symtab0x18c34224FUNC<unknown>HIDDEN2
                                                                    __GI_memset.symtab0x123f0156FUNC<unknown>HIDDEN2
                                                                    __GI_mmap.symtab0x15a3c124FUNC<unknown>HIDDEN2
                                                                    __GI_mremap.symtab0x15e6868FUNC<unknown>HIDDEN2
                                                                    __GI_munmap.symtab0x15eac64FUNC<unknown>HIDDEN2
                                                                    __GI_nanosleep.symtab0x15f2c96FUNC<unknown>HIDDEN2
                                                                    __GI_open.symtab0x15280100FUNC<unknown>HIDDEN2
                                                                    __GI_opendir.symtab0x10c60196FUNC<unknown>HIDDEN2
                                                                    __GI_printf.symtab0x10f1076FUNC<unknown>HIDDEN2
                                                                    __GI_raise.symtab0x14fb4240FUNC<unknown>HIDDEN2
                                                                    __GI_read.symtab0x15310100FUNC<unknown>HIDDEN2
                                                                    __GI_readdir.symtab0x10dd4232FUNC<unknown>HIDDEN2
                                                                    __GI_readdir64.symtab0x16184236FUNC<unknown>HIDDEN2
                                                                    __GI_readlink.symtab0x1087c64FUNC<unknown>HIDDEN2
                                                                    __GI_recv.symtab0x129b4112FUNC<unknown>HIDDEN2
                                                                    __GI_sbrk.symtab0x15f8c108FUNC<unknown>HIDDEN2
                                                                    __GI_select.symtab0x10900132FUNC<unknown>HIDDEN2
                                                                    __GI_send.symtab0x12a68112FUNC<unknown>HIDDEN2
                                                                    __GI_sendto.symtab0x12b24136FUNC<unknown>HIDDEN2
                                                                    __GI_setsid.symtab0x1098464FUNC<unknown>HIDDEN2
                                                                    __GI_setsockopt.symtab0x12bac72FUNC<unknown>HIDDEN2
                                                                    __GI_sigaction.symtab0x15ae4136FUNC<unknown>HIDDEN2
                                                                    __GI_sigaddset.symtab0x12c3880FUNC<unknown>HIDDEN2
                                                                    __GI_sigemptyset.symtab0x12c8820FUNC<unknown>HIDDEN2
                                                                    __GI_signal.symtab0x12c9c196FUNC<unknown>HIDDEN2
                                                                    __GI_sigprocmask.symtab0x109c4140FUNC<unknown>HIDDEN2
                                                                    __GI_sleep.symtab0x150a4300FUNC<unknown>HIDDEN2
                                                                    __GI_socket.symtab0x12bf468FUNC<unknown>HIDDEN2
                                                                    __GI_strchr.symtab0x18d14240FUNC<unknown>HIDDEN2
                                                                    __GI_strchrnul.symtab0x18e04236FUNC<unknown>HIDDEN2
                                                                    __GI_strcmp.symtab0x18b0028FUNC<unknown>HIDDEN2
                                                                    __GI_strcoll.symtab0x18b0028FUNC<unknown>HIDDEN2
                                                                    __GI_strcspn.symtab0x18ef068FUNC<unknown>HIDDEN2
                                                                    __GI_strlen.symtab0x1249096FUNC<unknown>HIDDEN2
                                                                    __GI_strnlen.symtab0x124f0204FUNC<unknown>HIDDEN2
                                                                    __GI_strrchr.symtab0x18f3480FUNC<unknown>HIDDEN2
                                                                    __GI_strspn.symtab0x18f8476FUNC<unknown>HIDDEN2
                                                                    __GI_sysconf.symtab0x144941572FUNC<unknown>HIDDEN2
                                                                    __GI_tcgetattr.symtab0x12704124FUNC<unknown>HIDDEN2
                                                                    __GI_time.symtab0x10a5048FUNC<unknown>HIDDEN2
                                                                    __GI_times.symtab0x15ff820FUNC<unknown>HIDDEN2
                                                                    __GI_vfprintf.symtab0x11170324FUNC<unknown>HIDDEN2
                                                                    __GI_wcrtomb.symtab0x1661484FUNC<unknown>HIDDEN2
                                                                    __GI_wcsnrtombs.symtab0x1668c188FUNC<unknown>HIDDEN2
                                                                    __GI_wcsrtombs.symtab0x1666836FUNC<unknown>HIDDEN2
                                                                    __GI_write.symtab0x190f0100FUNC<unknown>HIDDEN2
                                                                    __JCR_END__.symtab0x251fc0OBJECT<unknown>DEFAULT11
                                                                    __JCR_LIST__.symtab0x251fc0OBJECT<unknown>DEFAULT11
                                                                    ___Unwind_ForcedUnwind.symtab0x1b34036FUNC<unknown>HIDDEN2
                                                                    ___Unwind_RaiseException.symtab0x1b2d436FUNC<unknown>HIDDEN2
                                                                    ___Unwind_Resume.symtab0x1b2f836FUNC<unknown>HIDDEN2
                                                                    ___Unwind_Resume_or_Rethrow.symtab0x1b31c36FUNC<unknown>HIDDEN2
                                                                    __adddf3.symtab0x19bac784FUNC<unknown>HIDDEN2
                                                                    __aeabi_cdcmpeq.symtab0x1a50824FUNC<unknown>HIDDEN2
                                                                    __aeabi_cdcmple.symtab0x1a50824FUNC<unknown>HIDDEN2
                                                                    __aeabi_cdrcmple.symtab0x1a4ec52FUNC<unknown>HIDDEN2
                                                                    __aeabi_d2uiz.symtab0x1a59884FUNC<unknown>HIDDEN2
                                                                    __aeabi_dadd.symtab0x19bac784FUNC<unknown>HIDDEN2
                                                                    __aeabi_dcmpeq.symtab0x1a52024FUNC<unknown>HIDDEN2
                                                                    __aeabi_dcmpge.symtab0x1a56824FUNC<unknown>HIDDEN2
                                                                    __aeabi_dcmpgt.symtab0x1a58024FUNC<unknown>HIDDEN2
                                                                    __aeabi_dcmple.symtab0x1a55024FUNC<unknown>HIDDEN2
                                                                    __aeabi_dcmplt.symtab0x1a53824FUNC<unknown>HIDDEN2
                                                                    __aeabi_ddiv.symtab0x1a24c524FUNC<unknown>HIDDEN2
                                                                    __aeabi_dmul.symtab0x19fbc656FUNC<unknown>HIDDEN2
                                                                    __aeabi_drsub.symtab0x19ba00FUNC<unknown>HIDDEN2
                                                                    __aeabi_dsub.symtab0x19ba8788FUNC<unknown>HIDDEN2
                                                                    __aeabi_f2d.symtab0x19f0864FUNC<unknown>HIDDEN2
                                                                    __aeabi_i2d.symtab0x19ee040FUNC<unknown>HIDDEN2
                                                                    __aeabi_idiv.symtab0x104280FUNC<unknown>HIDDEN2
                                                                    __aeabi_idivmod.symtab0x1055424FUNC<unknown>HIDDEN2
                                                                    __aeabi_l2d.symtab0x19f5c96FUNC<unknown>HIDDEN2
                                                                    __aeabi_read_tp.symtab0x15b908FUNC<unknown>DEFAULT2
                                                                    __aeabi_ui2d.symtab0x19ebc36FUNC<unknown>HIDDEN2
                                                                    __aeabi_uidiv.symtab0x103140FUNC<unknown>HIDDEN2
                                                                    __aeabi_uidivmod.symtab0x1041024FUNC<unknown>HIDDEN2
                                                                    __aeabi_ul2d.symtab0x19f48116FUNC<unknown>HIDDEN2
                                                                    __aeabi_unwind_cpp_pr0.symtab0x1b2a08FUNC<unknown>HIDDEN2
                                                                    __aeabi_unwind_cpp_pr1.symtab0x1b2988FUNC<unknown>HIDDEN2
                                                                    __aeabi_unwind_cpp_pr2.symtab0x1b2908FUNC<unknown>HIDDEN2
                                                                    __app_fini.symtab0x279d04OBJECT<unknown>HIDDEN14
                                                                    __atexit_lock.symtab0x253dc24OBJECT<unknown>DEFAULT13
                                                                    __bss_end__.symtab0x285a80NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    __bss_start.symtab0x254080NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    __bss_start__.symtab0x254080NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    __check_one_fd.symtab0x155a484FUNC<unknown>DEFAULT2
                                                                    __close.symtab0x151f0100FUNC<unknown>DEFAULT2
                                                                    __close_nocancel.symtab0x151d424FUNC<unknown>DEFAULT2
                                                                    __cmpdf2.symtab0x1a468132FUNC<unknown>HIDDEN2
                                                                    __ctype_b.symtab0x254044OBJECT<unknown>DEFAULT13
                                                                    __curbrk.symtab0x27f144OBJECT<unknown>HIDDEN14
                                                                    __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __data_start.symtab0x252ac0NOTYPE<unknown>DEFAULT13
                                                                    __default_rt_sa_restorer.symtab0x15b840FUNC<unknown>DEFAULT2
                                                                    __default_sa_restorer.symtab0x15b780FUNC<unknown>DEFAULT2
                                                                    __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __div0.symtab0x1056c20FUNC<unknown>HIDDEN2
                                                                    __divdf3.symtab0x1a24c524FUNC<unknown>HIDDEN2
                                                                    __divsi3.symtab0x10428300FUNC<unknown>HIDDEN2
                                                                    __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
                                                                    __do_global_dtors_aux_fini_array_entry.symtab0x251f80OBJECT<unknown>DEFAULT10
                                                                    __end__.symtab0x285a80NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    __environ.symtab0x279c84OBJECT<unknown>DEFAULT14
                                                                    __eqdf2.symtab0x1a468132FUNC<unknown>HIDDEN2
                                                                    __errno_location.symtab0x10ebc32FUNC<unknown>DEFAULT2
                                                                    __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __exidx_end.symtab0x1d1f00NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    __exidx_start.symtab0x1d0d80NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    __exit_cleanup.symtab0x274784OBJECT<unknown>HIDDEN14
                                                                    __extendsfdf2.symtab0x19f0864FUNC<unknown>HIDDEN2
                                                                    __fcntl_nocancel.symtab0x10580152FUNC<unknown>DEFAULT2
                                                                    __fgetc_unlocked.symtab0x1849c300FUNC<unknown>DEFAULT2
                                                                    __fini_array_end.symtab0x251fc0NOTYPE<unknown>HIDDEN10
                                                                    __fini_array_start.symtab0x251f80NOTYPE<unknown>HIDDEN10
                                                                    __fixunsdfsi.symtab0x1a59884FUNC<unknown>HIDDEN2
                                                                    __floatdidf.symtab0x19f5c96FUNC<unknown>HIDDEN2
                                                                    __floatsidf.symtab0x19ee040FUNC<unknown>HIDDEN2
                                                                    __floatundidf.symtab0x19f48116FUNC<unknown>HIDDEN2
                                                                    __floatunsidf.symtab0x19ebc36FUNC<unknown>HIDDEN2
                                                                    __fork.symtab0x14b08972FUNC<unknown>DEFAULT2
                                                                    __fork_generation_pointer.symtab0x285744OBJECT<unknown>HIDDEN14
                                                                    __fork_handlers.symtab0x285784OBJECT<unknown>HIDDEN14
                                                                    __fork_lock.symtab0x2747c4OBJECT<unknown>HIDDEN14
                                                                    __frame_dummy_init_array_entry.symtab0x251f40OBJECT<unknown>DEFAULT9
                                                                    __gedf2.symtab0x1a458148FUNC<unknown>HIDDEN2
                                                                    __getdents.symtab0x15cac160FUNC<unknown>HIDDEN2
                                                                    __getdents64.symtab0x19594328FUNC<unknown>HIDDEN2
                                                                    __getpagesize.symtab0x15db440FUNC<unknown>DEFAULT2
                                                                    __getpid.symtab0x14f6c72FUNC<unknown>DEFAULT2
                                                                    __glibc_strerror_r.symtab0x125bc24FUNC<unknown>DEFAULT2
                                                                    __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __gnu_Unwind_ForcedUnwind.symtab0x1aa4428FUNC<unknown>HIDDEN2
                                                                    __gnu_Unwind_RaiseException.symtab0x1ab2c184FUNC<unknown>HIDDEN2
                                                                    __gnu_Unwind_Restore_VFP.symtab0x1b2c40FUNC<unknown>HIDDEN2
                                                                    __gnu_Unwind_Resume.symtab0x1aac0108FUNC<unknown>HIDDEN2
                                                                    __gnu_Unwind_Resume_or_Rethrow.symtab0x1abe432FUNC<unknown>HIDDEN2
                                                                    __gnu_Unwind_Save_VFP.symtab0x1b2cc0FUNC<unknown>HIDDEN2
                                                                    __gnu_unwind_execute.symtab0x1b3a81812FUNC<unknown>HIDDEN2
                                                                    __gnu_unwind_frame.symtab0x1babc72FUNC<unknown>HIDDEN2
                                                                    __gnu_unwind_pr_common.symtab0x1ad481352FUNC<unknown>DEFAULT2
                                                                    __gtdf2.symtab0x1a458148FUNC<unknown>HIDDEN2
                                                                    __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __init_array_end.symtab0x251f80NOTYPE<unknown>HIDDEN9
                                                                    __init_array_start.symtab0x251f40NOTYPE<unknown>HIDDEN9
                                                                    __ledf2.symtab0x1a460140FUNC<unknown>HIDDEN2
                                                                    __libc_close.symtab0x151f0100FUNC<unknown>DEFAULT2
                                                                    __libc_connect.symtab0x12830116FUNC<unknown>DEFAULT2
                                                                    __libc_disable_asynccancel.symtab0x15380136FUNC<unknown>HIDDEN2
                                                                    __libc_enable_asynccancel.symtab0x15408220FUNC<unknown>HIDDEN2
                                                                    __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                                                                    __libc_fcntl.symtab0x10618244FUNC<unknown>DEFAULT2
                                                                    __libc_fork.symtab0x14b08972FUNC<unknown>DEFAULT2
                                                                    __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                                                                    __libc_multiple_threads.symtab0x2857c4OBJECT<unknown>HIDDEN14
                                                                    __libc_nanosleep.symtab0x15f2c96FUNC<unknown>DEFAULT2
                                                                    __libc_open.symtab0x15280100FUNC<unknown>DEFAULT2
                                                                    __libc_read.symtab0x15310100FUNC<unknown>DEFAULT2
                                                                    __libc_recv.symtab0x129b4112FUNC<unknown>DEFAULT2
                                                                    __libc_select.symtab0x10900132FUNC<unknown>DEFAULT2
                                                                    __libc_send.symtab0x12a68112FUNC<unknown>DEFAULT2
                                                                    __libc_sendto.symtab0x12b24136FUNC<unknown>DEFAULT2
                                                                    __libc_setup_tls.symtab0x19264560FUNC<unknown>DEFAULT2
                                                                    __libc_sigaction.symtab0x15ae4136FUNC<unknown>DEFAULT2
                                                                    __libc_stack_end.symtab0x279c44OBJECT<unknown>DEFAULT14
                                                                    __libc_write.symtab0x190f0100FUNC<unknown>DEFAULT2
                                                                    __lll_lock_wait_private.symtab0x14ed4152FUNC<unknown>HIDDEN2
                                                                    __ltdf2.symtab0x1a460140FUNC<unknown>HIDDEN2
                                                                    __malloc_consolidate.symtab0x13d2c436FUNC<unknown>HIDDEN2
                                                                    __malloc_largebin_index.symtab0x12dcc120FUNC<unknown>DEFAULT2
                                                                    __malloc_lock.symtab0x253ac24OBJECT<unknown>DEFAULT13
                                                                    __malloc_state.symtab0x281fc888OBJECT<unknown>DEFAULT14
                                                                    __malloc_trim.symtab0x13c7c176FUNC<unknown>DEFAULT2
                                                                    __muldf3.symtab0x19fbc656FUNC<unknown>HIDDEN2
                                                                    __nedf2.symtab0x1a468132FUNC<unknown>HIDDEN2
                                                                    __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __open.symtab0x15280100FUNC<unknown>DEFAULT2
                                                                    __open_nocancel.symtab0x1526424FUNC<unknown>DEFAULT2
                                                                    __pagesize.symtab0x279cc4OBJECT<unknown>DEFAULT14
                                                                    __preinit_array_end.symtab0x251f40NOTYPE<unknown>HIDDEN8
                                                                    __preinit_array_start.symtab0x251f40NOTYPE<unknown>HIDDEN8
                                                                    __progname.symtab0x253f84OBJECT<unknown>DEFAULT13
                                                                    __progname_full.symtab0x253fc4OBJECT<unknown>DEFAULT13
                                                                    __pthread_initialize_minimal.symtab0x1949412FUNC<unknown>DEFAULT2
                                                                    __pthread_mutex_init.symtab0x154ec8FUNC<unknown>DEFAULT2
                                                                    __pthread_mutex_lock.symtab0x154e48FUNC<unknown>DEFAULT2
                                                                    __pthread_mutex_trylock.symtab0x154e48FUNC<unknown>DEFAULT2
                                                                    __pthread_mutex_unlock.symtab0x154e48FUNC<unknown>DEFAULT2
                                                                    __pthread_return_0.symtab0x154e48FUNC<unknown>DEFAULT2
                                                                    __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __read.symtab0x15310100FUNC<unknown>DEFAULT2
                                                                    __read_nocancel.symtab0x152f424FUNC<unknown>DEFAULT2
                                                                    __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    __restore_core_regs.symtab0x1b2a828FUNC<unknown>HIDDEN2
                                                                    __rtld_fini.symtab0x279d44OBJECT<unknown>HIDDEN14
                                                                    __sigaddset.symtab0x12d8436FUNC<unknown>DEFAULT2
                                                                    __sigdelset.symtab0x12da836FUNC<unknown>DEFAULT2
                                                                    __sigismember.symtab0x12d6036FUNC<unknown>DEFAULT2
                                                                    __sigjmp_save.symtab0x19af064FUNC<unknown>HIDDEN2
                                                                    __sigsetjmp.symtab0x1958812FUNC<unknown>DEFAULT2
                                                                    __stdin.symtab0x252d04OBJECT<unknown>DEFAULT13
                                                                    __stdio_READ.symtab0x198c088FUNC<unknown>HIDDEN2
                                                                    __stdio_WRITE.symtab0x16a98220FUNC<unknown>HIDDEN2
                                                                    __stdio_adjust_position.symtab0x19918200FUNC<unknown>HIDDEN2
                                                                    __stdio_fwrite.symtab0x16fd4320FUNC<unknown>HIDDEN2
                                                                    __stdio_rfill.symtab0x199e048FUNC<unknown>HIDDEN2
                                                                    __stdio_seek.symtab0x19ab460FUNC<unknown>HIDDEN2
                                                                    __stdio_trans2r_o.symtab0x19a10164FUNC<unknown>HIDDEN2
                                                                    __stdio_trans2w_o.symtab0x17114220FUNC<unknown>HIDDEN2
                                                                    __stdio_wcommit.symtab0x1114048FUNC<unknown>HIDDEN2
                                                                    __stdout.symtab0x252d44OBJECT<unknown>DEFAULT13
                                                                    __subdf3.symtab0x19ba8788FUNC<unknown>HIDDEN2
                                                                    __sys_connect.symtab0x127ec68FUNC<unknown>DEFAULT2
                                                                    __sys_recv.symtab0x1297068FUNC<unknown>DEFAULT2
                                                                    __sys_send.symtab0x12a2468FUNC<unknown>DEFAULT2
                                                                    __sys_sendto.symtab0x12ad876FUNC<unknown>DEFAULT2
                                                                    __syscall_error.symtab0x15ab844FUNC<unknown>HIDDEN2
                                                                    __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __syscall_nanosleep.symtab0x15eec64FUNC<unknown>DEFAULT2
                                                                    __syscall_rt_sigaction.symtab0x15ba064FUNC<unknown>DEFAULT2
                                                                    __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __syscall_select.symtab0x108bc68FUNC<unknown>DEFAULT2
                                                                    __tls_get_addr.symtab0x1924036FUNC<unknown>DEFAULT2
                                                                    __uClibc_fini.symtab0x15528124FUNC<unknown>DEFAULT2
                                                                    __uClibc_init.symtab0x155f888FUNC<unknown>DEFAULT2
                                                                    __uClibc_main.symtab0x156501004FUNC<unknown>DEFAULT2
                                                                    __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __uclibc_progname.symtab0x253f44OBJECT<unknown>HIDDEN13
                                                                    __udivsi3.symtab0x10314252FUNC<unknown>HIDDEN2
                                                                    __write.symtab0x190f0100FUNC<unknown>DEFAULT2
                                                                    __write_nocancel.symtab0x190d424FUNC<unknown>DEFAULT2
                                                                    __xpg_strerror_r.symtab0x125d4268FUNC<unknown>DEFAULT2
                                                                    __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    __xstat32_conv.symtab0x160d8172FUNC<unknown>HIDDEN2
                                                                    __xstat64_conv.symtab0x1600c204FUNC<unknown>HIDDEN2
                                                                    _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _bss_custom_printf_spec.symtab0x2746810OBJECT<unknown>DEFAULT14
                                                                    _bss_end__.symtab0x285a80NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    _charpad.symtab0x112b484FUNC<unknown>DEFAULT2
                                                                    _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _custom_printf_arginfo.symtab0x281a440OBJECT<unknown>HIDDEN14
                                                                    _custom_printf_handler.symtab0x281cc40OBJECT<unknown>HIDDEN14
                                                                    _custom_printf_spec.symtab0x253a84OBJECT<unknown>HIDDEN13
                                                                    _dl_aux_init.symtab0x194a056FUNC<unknown>DEFAULT2
                                                                    _dl_nothread_init_static_tls.symtab0x194d888FUNC<unknown>HIDDEN2
                                                                    _dl_phdr.symtab0x285a04OBJECT<unknown>DEFAULT14
                                                                    _dl_phnum.symtab0x285a44OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_dtv_gaps.symtab0x285941OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_dtv_slotinfo_list.symtab0x285904OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_generation.symtab0x285984OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_max_dtv_idx.symtab0x285884OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_setup.symtab0x191d8104FUNC<unknown>DEFAULT2
                                                                    _dl_tls_static_align.symtab0x285844OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_static_nelem.symtab0x2859c4OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_static_size.symtab0x2858c4OBJECT<unknown>DEFAULT14
                                                                    _dl_tls_static_used.symtab0x285804OBJECT<unknown>DEFAULT14
                                                                    _edata.symtab0x254080NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    _end.symtab0x285a80NOTYPE<unknown>DEFAULTSHN_ABS
                                                                    _exit.symtab0x15be0104FUNC<unknown>DEFAULT2
                                                                    _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _fini.symtab0x1bb380FUNC<unknown>DEFAULT3
                                                                    _fixed_buffers.symtab0x254688192OBJECT<unknown>DEFAULT14
                                                                    _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _fp_out_narrow.symtab0x11308132FUNC<unknown>DEFAULT2
                                                                    _fpmaxtostr.symtab0x173ec2036FUNC<unknown>HIDDEN2
                                                                    _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _init.symtab0x80d40FUNC<unknown>DEFAULT1
                                                                    _load_inttype.symtab0x171f0116FUNC<unknown>HIDDEN2
                                                                    _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _memcpy.symtab0x186700FUNC<unknown>HIDDEN2
                                                                    _ppfs_init.symtab0x11a80160FUNC<unknown>HIDDEN2
                                                                    _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _ppfs_parsespec.symtab0x11d681392FUNC<unknown>HIDDEN2
                                                                    _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _ppfs_prepargs.symtab0x11b2068FUNC<unknown>HIDDEN2
                                                                    _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _ppfs_setargs.symtab0x11b64432FUNC<unknown>HIDDEN2
                                                                    _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _promoted_size.symtab0x11d1484FUNC<unknown>DEFAULT2
                                                                    _pthread_cleanup_pop_restore.symtab0x154fc44FUNC<unknown>DEFAULT2
                                                                    _pthread_cleanup_push_defer.symtab0x154f48FUNC<unknown>DEFAULT2
                                                                    _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _setjmp.symtab0x15b6c8FUNC<unknown>DEFAULT2
                                                                    _sigintr.symtab0x281f48OBJECT<unknown>HIDDEN14
                                                                    _start.symtab0x81940FUNC<unknown>DEFAULT2
                                                                    _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _stdio_fopen.symtab0x16b741120FUNC<unknown>HIDDEN2
                                                                    _stdio_init.symtab0x10f5c128FUNC<unknown>HIDDEN2
                                                                    _stdio_openlist.symtab0x252d84OBJECT<unknown>DEFAULT13
                                                                    _stdio_openlist_add_lock.symtab0x2544812OBJECT<unknown>DEFAULT14
                                                                    _stdio_openlist_dec_use.symtab0x17e40688FUNC<unknown>HIDDEN2
                                                                    _stdio_openlist_del_count.symtab0x254644OBJECT<unknown>DEFAULT14
                                                                    _stdio_openlist_del_lock.symtab0x2545412OBJECT<unknown>DEFAULT14
                                                                    _stdio_openlist_use_count.symtab0x254604OBJECT<unknown>DEFAULT14
                                                                    _stdio_streams.symtab0x252dc204OBJECT<unknown>DEFAULT13
                                                                    _stdio_term.symtab0x10fdc356FUNC<unknown>HIDDEN2
                                                                    _stdio_user_locking.symtab0x252c04OBJECT<unknown>DEFAULT13
                                                                    _store_inttype.symtab0x1726444FUNC<unknown>HIDDEN2
                                                                    _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _string_syserrmsgs.symtab0x1c18c2906OBJECT<unknown>HIDDEN4
                                                                    _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _uintmaxtostr.symtab0x17290348FUNC<unknown>HIDDEN2
                                                                    _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _vfprintf_internal.symtab0x1138c1780FUNC<unknown>HIDDEN2
                                                                    _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    abort.symtab0x1415c296FUNC<unknown>DEFAULT2
                                                                    abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    anti_gdb_entry.symtab0xe26424FUNC<unknown>DEFAULT2
                                                                    asus.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    asus_scanner_init.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    attack.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    attack_get_opt_int.symtab0x85b0112FUNC<unknown>DEFAULT2
                                                                    attack_get_opt_ip.symtab0x8544108FUNC<unknown>DEFAULT2
                                                                    attack_get_opt_str.symtab0x81d092FUNC<unknown>DEFAULT2
                                                                    attack_init.symtab0x8620676FUNC<unknown>DEFAULT2
                                                                    attack_method.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    attack_method_greip.symtab0xb5081568FUNC<unknown>DEFAULT2
                                                                    attack_method_httpnull.symtab0x88c48320FUNC<unknown>DEFAULT2
                                                                    attack_method_std.symtab0xbb28672FUNC<unknown>DEFAULT2
                                                                    attack_method_tcpack.symtab0xbdc81784FUNC<unknown>DEFAULT2
                                                                    attack_method_tcpsyn.symtab0xc4c01712FUNC<unknown>DEFAULT2
                                                                    attack_method_udpgeneric.symtab0xb01c1260FUNC<unknown>DEFAULT2
                                                                    attack_method_udpplain.symtab0xad7c672FUNC<unknown>DEFAULT2
                                                                    attack_method_udpvse.symtab0xa9441080FUNC<unknown>DEFAULT2
                                                                    attack_parse.symtab0x8328540FUNC<unknown>DEFAULT2
                                                                    attack_start.symtab0x822c252FUNC<unknown>DEFAULT2
                                                                    been_there_done_that.symtab0x274744OBJECT<unknown>DEFAULT14
                                                                    bind.symtab0x127a868FUNC<unknown>DEFAULT2
                                                                    bind.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    brk.symtab0x1953088FUNC<unknown>DEFAULT2
                                                                    brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    bsd_signal.symtab0x12c9c196FUNC<unknown>DEFAULT2
                                                                    calloc.symtab0x1377c320FUNC<unknown>DEFAULT2
                                                                    calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    checksum_generic.symtab0xcb7080FUNC<unknown>DEFAULT2
                                                                    checksum_tcpudp.symtab0xcbc0164FUNC<unknown>DEFAULT2
                                                                    clock.symtab0x10edc52FUNC<unknown>DEFAULT2
                                                                    clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    close.symtab0x151f0100FUNC<unknown>DEFAULT2
                                                                    closedir.symtab0x10a80272FUNC<unknown>DEFAULT2
                                                                    closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    completed.5105.symtab0x254081OBJECT<unknown>DEFAULT14
                                                                    comtrend.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    comtrend_scanner.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    connect.symtab0x12830116FUNC<unknown>DEFAULT2
                                                                    connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    dlink_scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    ensure_single_instance.symtab0xe27c356FUNC<unknown>DEFAULT2
                                                                    environ.symtab0x279c84OBJECT<unknown>DEFAULT14
                                                                    errno.symtab0x04TLS<unknown>DEFAULT8
                                                                    errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    exit.symtab0x14284196FUNC<unknown>DEFAULT2
                                                                    exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    exp10_table.symtab0x1d07872OBJECT<unknown>DEFAULT4
                                                                    fclose.symtab0x16748816FUNC<unknown>DEFAULT2
                                                                    fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fcntl.symtab0x10618244FUNC<unknown>DEFAULT2
                                                                    fd_ctrl.symtab0x252ac4OBJECT<unknown>DEFAULT13
                                                                    fd_serv.symtab0x252b04OBJECT<unknown>DEFAULT13
                                                                    fd_to_DIR.symtab0x10b90208FUNC<unknown>DEFAULT2
                                                                    fdopendir.symtab0x10d24176FUNC<unknown>DEFAULT2
                                                                    fflush_unlocked.symtab0x180f0940FUNC<unknown>DEFAULT2
                                                                    fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fgetc.symtab0x17be0324FUNC<unknown>DEFAULT2
                                                                    fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fgetc_unlocked.symtab0x1849c300FUNC<unknown>DEFAULT2
                                                                    fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fgets.symtab0x17d24284FUNC<unknown>DEFAULT2
                                                                    fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fgets_unlocked.symtab0x185c8160FUNC<unknown>DEFAULT2
                                                                    fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fmt.symtab0x1d06020OBJECT<unknown>DEFAULT4
                                                                    fopen.symtab0x16a7832FUNC<unknown>DEFAULT2
                                                                    fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fork.symtab0x14b08972FUNC<unknown>DEFAULT2
                                                                    fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fork_handler_pool.symtab0x274801348OBJECT<unknown>DEFAULT14
                                                                    fputs_unlocked.symtab0x122d856FUNC<unknown>DEFAULT2
                                                                    fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    frame_dummy.symtab0x81340FUNC<unknown>DEFAULT2
                                                                    free.symtab0x13ee0572FUNC<unknown>DEFAULT2
                                                                    free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fseek.symtab0x196dc36FUNC<unknown>DEFAULT2
                                                                    fseeko.symtab0x196dc36FUNC<unknown>DEFAULT2
                                                                    fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fseeko64.symtab0x19700448FUNC<unknown>DEFAULT2
                                                                    fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fstat.symtab0x15c48100FUNC<unknown>DEFAULT2
                                                                    fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    fwrite_unlocked.symtab0x12310188FUNC<unknown>DEFAULT2
                                                                    fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    get_eit_entry.symtab0x1a6d4544FUNC<unknown>DEFAULT2
                                                                    getc.symtab0x17be0324FUNC<unknown>DEFAULT2
                                                                    getc_unlocked.symtab0x1849c300FUNC<unknown>DEFAULT2
                                                                    getdents.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getdtablesize.symtab0x15d4c44FUNC<unknown>DEFAULT2
                                                                    getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getegid.symtab0x15d7820FUNC<unknown>DEFAULT2
                                                                    getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    geteuid.symtab0x15d8c20FUNC<unknown>DEFAULT2
                                                                    geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getgid.symtab0x15da020FUNC<unknown>DEFAULT2
                                                                    getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getpagesize.symtab0x15db440FUNC<unknown>DEFAULT2
                                                                    getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getpid.symtab0x14f6c72FUNC<unknown>DEFAULT2
                                                                    getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getppid.symtab0x1070c20FUNC<unknown>DEFAULT2
                                                                    getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getrlimit.symtab0x15ddc56FUNC<unknown>DEFAULT2
                                                                    getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getsockname.symtab0x128a468FUNC<unknown>DEFAULT2
                                                                    getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getsockopt.symtab0x128e872FUNC<unknown>DEFAULT2
                                                                    getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    gettimeofday.symtab0x15e1464FUNC<unknown>DEFAULT2
                                                                    gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    getuid.symtab0x15e5420FUNC<unknown>DEFAULT2
                                                                    getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    gpon443.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    gpon443_scanner.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    gpon80_scanner.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    gpon80_scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    h_errno.symtab0x44TLS<unknown>DEFAULT8
                                                                    hnap_scanner.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    huawei.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    index.symtab0x18d14240FUNC<unknown>DEFAULT2
                                                                    inet_addr.symtab0x1278040FUNC<unknown>DEFAULT2
                                                                    inet_aton.symtab0x18fd0248FUNC<unknown>DEFAULT2
                                                                    inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    init_static_tls.symtab0x19160120FUNC<unknown>DEFAULT2
                                                                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    ioctl.symtab0x10720224FUNC<unknown>DEFAULT2
                                                                    ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    ioctl_keepalive.symtab0xe428336FUNC<unknown>DEFAULT2
                                                                    ioctl_pid.symtab0x254304OBJECT<unknown>DEFAULT14
                                                                    isatty.symtab0x126e036FUNC<unknown>DEFAULT2
                                                                    isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    jaws.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    kill.symtab0x1080056FUNC<unknown>DEFAULT2
                                                                    kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    killer.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    killer_init.symtab0xd1e04228FUNC<unknown>DEFAULT2
                                                                    killer_kill_by_port.symtab0xcc641404FUNC<unknown>DEFAULT2
                                                                    killer_pid.symtab0x2542c4OBJECT<unknown>DEFAULT14
                                                                    libc-cancellation.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    libc-lowlevellock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    libc-tls.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    libc_multiple_threads.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    linksys.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    linksys_scanner_init.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                    listen.symtab0x1293064FUNC<unknown>DEFAULT2
                                                                    listen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                    local_bind.6067.symtab0x252b81OBJECT<unknown>DEFAULT13
                                                                    lseek64.symtab0x19b30112FUNC<unknown>DEFAULT2
                                                                    main.symtab0xe5781784FUNC<unknown>DEFAULT2

                                                                    Download Network PCAP: filteredfull

                                                                    • Total Packets: 25
                                                                    • 5555 undefined
                                                                    • 443 (HTTPS)
                                                                    • 80 (HTTP)
                                                                    TimestampSource PortDest PortSource IPDest IP
                                                                    Mar 23, 2025 04:12:18.841324091 CET43928443192.168.2.2391.189.91.42
                                                                    Mar 23, 2025 04:12:21.365322113 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:12:21.455846071 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:12:21.455926895 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:12:21.484709978 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:12:21.575758934 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:12:21.575819016 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:12:21.667212009 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:12:24.472461939 CET42836443192.168.2.2391.189.91.43
                                                                    Mar 23, 2025 04:12:25.240385056 CET4251680192.168.2.23109.202.202.202
                                                                    Mar 23, 2025 04:12:31.487255096 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:12:31.577785969 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:12:31.577882051 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:12:31.578066111 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:12:32.412492037 CET39246443192.168.2.2334.249.145.219
                                                                    Mar 23, 2025 04:12:32.412606955 CET4433924634.249.145.219192.168.2.23
                                                                    Mar 23, 2025 04:12:32.412729025 CET39246443192.168.2.2334.249.145.219
                                                                    Mar 23, 2025 04:12:32.413111925 CET39246443192.168.2.2334.249.145.219
                                                                    Mar 23, 2025 04:12:32.413146973 CET4433924634.249.145.219192.168.2.23
                                                                    Mar 23, 2025 04:12:39.318479061 CET43928443192.168.2.2391.189.91.42
                                                                    Mar 23, 2025 04:12:46.786887884 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:12:46.787050962 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:12:51.604820967 CET42836443192.168.2.2391.189.91.43
                                                                    Mar 23, 2025 04:12:55.700438976 CET4251680192.168.2.23109.202.202.202
                                                                    Mar 23, 2025 04:13:01.890836954 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:13:01.891172886 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:13:16.994338036 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:13:16.994594097 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:13:20.272984982 CET43928443192.168.2.2391.189.91.42
                                                                    Mar 23, 2025 04:13:31.616189957 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:13:31.705890894 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:13:31.706119061 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:13:32.405064106 CET39246443192.168.2.2334.249.145.219
                                                                    Mar 23, 2025 04:13:32.452337980 CET4433924634.249.145.219192.168.2.23
                                                                    Mar 23, 2025 04:13:46.946716070 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:13:46.947021008 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:14:02.051109076 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:14:02.051516056 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:14:17.154970884 CET555553658157.245.211.199192.168.2.23
                                                                    Mar 23, 2025 04:14:17.155258894 CET536585555192.168.2.23157.245.211.199
                                                                    Mar 23, 2025 04:14:25.113990068 CET4433924634.249.145.219192.168.2.23

                                                                    System Behavior

                                                                    Start time (UTC):03:12:20
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/tmp/arm7.elf
                                                                    Arguments:/tmp/arm7.elf
                                                                    File size:4956856 bytes
                                                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                    Start time (UTC):03:12:20
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/tmp/arm7.elf
                                                                    Arguments:-
                                                                    File size:4956856 bytes
                                                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                    Start time (UTC):03:12:20
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/tmp/arm7.elf
                                                                    Arguments:-
                                                                    File size:4956856 bytes
                                                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                    Start time (UTC):03:12:20
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/tmp/arm7.elf
                                                                    Arguments:-
                                                                    File size:4956856 bytes
                                                                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                    Start time (UTC):03:13:31
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/usr/bin/dash
                                                                    Arguments:-
                                                                    File size:129816 bytes
                                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                    Start time (UTC):03:13:31
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/usr/bin/rm
                                                                    Arguments:rm -f /tmp/tmp.V9EYqCQmt0 /tmp/tmp.gHS5r2SPW4 /tmp/tmp.CFXahaDIZi
                                                                    File size:72056 bytes
                                                                    MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                                                                    Start time (UTC):03:13:31
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/usr/bin/dash
                                                                    Arguments:-
                                                                    File size:129816 bytes
                                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                    Start time (UTC):03:13:31
                                                                    Start date (UTC):23/03/2025
                                                                    Path:/usr/bin/rm
                                                                    Arguments:rm -f /tmp/tmp.V9EYqCQmt0 /tmp/tmp.gHS5r2SPW4 /tmp/tmp.CFXahaDIZi
                                                                    File size:72056 bytes
                                                                    MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b