Joe Sandbox Cloud Basic Analysis Report
Edit tour

Linux Analysis Report
efefa7.elf

Overview

General Information

Sample name:efefa7.elf
Analysis ID:1649525
MD5:045c59d0308907ca493b70dfd0dc6b0f
SHA1:d165fb6dafe9c808778673b97dc3a7e4d8e7e709
SHA256:42a30b9e25bce5a7f164c59e56ef0be52179ef8be52e7a11c3d94c28e127470d
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:80
Range:0 - 100

Signatures

Multi AV Scanner detection for submitted file
Yara detected Mirai
Manipulation of devices in /dev
Sample deletes itself
Sample reads /proc/mounts (often used for finding a writable filesystem)
Sends malformed DNS queries
Creates hidden files and/or directories
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes the "rm" command used to delete files or directories
Found strings indicative of a multi-platform dropper
HTTP GET or POST without a user agent
Reads CPU information from /sys indicative of miner or evasive malware
Sample and/or dropped files contains symbols with suspicious names
Sample tries to kill a process (SIGKILL)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1649525
Start date and time:2025-03-26 21:18:18 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 15s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:efefa7.elf
Detection:MAL
Classification:mal80.troj.evad.linELF@0/8@9/0
  • Connection to analysis system has been lost, crash info: Unknown
  • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Runtime Messages

Command:/tmp/efefa7.elf
PID:6235
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
kovey/cursinq was here, go away!
Standard Error:

Process Tree

  • system is lnxubuntu20
  • efefa7.elf (PID: 6235, Parent: 6152, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/efefa7.elf
  • systemd New Fork (PID: 6245, Parent: 1)
  • dbus-daemon (PID: 6245, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
  • systemd New Fork (PID: 6278, Parent: 1860)
  • pulseaudio (PID: 6278, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal
  • systemd New Fork (PID: 6284, Parent: 1)
  • systemd-logind (PID: 6284, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind
  • systemd New Fork (PID: 6328, Parent: 1)
  • rtkit-daemon (PID: 6328, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon
  • systemd New Fork (PID: 6350, Parent: 1)
  • polkitd (PID: 6350, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug
  • dash New Fork (PID: 6496, Parent: 4331)
  • rm (PID: 6496, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.8KEHWJ9YVU /tmp/tmp.CwaW8b0xBl /tmp/tmp.5ns041sVgK
  • dash New Fork (PID: 6497, Parent: 4331)
  • rm (PID: 6497, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.8KEHWJ9YVU /tmp/tmp.CwaW8b0xBl /tmp/tmp.5ns041sVgK
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
efefa7.elfJoeSecurity_Mirai_3Yara detected MiraiJoe Security
    efefa7.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security

      Suricata Signatures

      ⊘No Suricata rule has matched

      Joe Sandbox Signatures

      • • AV Detection
      • • Bitcoin Miner
      • • Spreading
      • • Networking
      • • System Summary
      • • Data Obfuscation
      • • Persistence and Installation Behavior
      • • Hooking and other Techniques for Hiding and Protection
      • • Malware Analysis System Evasion
      • • Stealing of Sensitive Information
      • • Remote Access Functionality

      Click to jump to signature section

      Show All Signature Results

      AV Detection

      barindex
      Source: efefa7.elfReversingLabs: Detection: 30%
      Source: /usr/bin/pulseaudio (PID: 6278)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
      Source: efefa7.elfString: /lib/systemd//usr/lib/systemd/system/system/bin//gm/bin//home/process//home/helper/home/davinci/z/bin//mnt/mtd//tmp/sqfs//usr/libexec//usr/sbin//z/zbin//usr/bin/bin//tmp/var/mnt/root/boot/home/dev/media/opt/../(deleted)x86armmipsmpslsh4wgetcurllynxftpftpgettftpscpaflaaarsyncpfclamscanreadelfizsnapstracelsofgdbpmapltraceptracewiresharktsharktcpdumpnetstatssnmaphping3tracerouteiptablesnftfirewalldauditctlselinuxapparmoraptdnfyumzypperpacmanemergebrewportnanovimvinvimgeditkateemacspkillkillallkillsystemctlservicenohuppythonpython3perlrubyluanodebashshkshzshfishvolatilitychkrootkitrkhunterradare2binwalkdockerpodmanlxcqemuvirshvboxmanagemountumountdfdulsblkblkidmkfsfdiskpartedobjdumpstringsxxdhexdumpncnetcatsocatjournalctldmesglogcattaillessgrepawksedtmux%s/%s/data/local/tmp/sbin/dev/null/dev/console/var/lib/dockerkworker/u8:0raw.awaken-network.net/proc/self/cmdline/proc/%d/statusName:-

      Networking

      barindex
      Source: global trafficDNS traffic detected: malformed DNS query: raw.awaken-network.net. [malformed]
      Source: global trafficTCP traffic: 192.168.2.23:50622 -> 141.98.10.142:7733
      Source: global trafficHTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue
      Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
      Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
      Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
      Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
      Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
      Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
      Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
      Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
      Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
      Source: unknownTCP traffic detected without corresponding DNS query: 34.249.145.219
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: global trafficDNS traffic detected: DNS query: raw.awaken-network.net
      Source: global trafficDNS traffic detected: DNS query: raw.awaken-network.net. [malformed]
      Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com
      Source: unknownHTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 39250
      Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 37602
      Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 39250 -> 443
      Source: efefa7.elfELF static info symbol of initial sample: __gnu_unwind_execute
      Source: /tmp/efefa7.elf (PID: 6239)SIGKILL sent: pid: 777, result: successfulJump to behavior
      Source: classification engineClassification label: mal80.troj.evad.linELF@0/8@9/0

      Data Obfuscation

      barindex
      Source: /tmp/efefa7.elf (PID: 6242)Deleted: /dev/nullJump to behavior
      Source: /tmp/efefa7.elf (PID: 6242)Deleted: /dev/tty2Jump to behavior

      Persistence and Installation Behavior

      barindex
      Source: /usr/bin/dbus-daemon (PID: 6245)File: /proc/6245/mountsJump to behavior
      Source: /lib/systemd/systemd-logind (PID: 6284)Directory: <invalid fd (18)>/..Jump to behavior
      Source: /lib/systemd/systemd-logind (PID: 6284)Directory: <invalid fd (17)>/..Jump to behavior
      Source: /lib/systemd/systemd-logind (PID: 6284)File: /run/systemd/seats/.#seat0Q6LYhmJump to behavior
      Source: /usr/lib/policykit-1/polkitd (PID: 6350)Directory: /root/.cacheJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6350/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6284/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6245/statusJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6245/attr/currentJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6278/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6278/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6278/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6277/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6277/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/1809/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/1/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/1389/cmdlineJump to behavior
      Source: /usr/bin/dbus-daemon (PID: 6245)File opened: /proc/6328/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/44/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/44444/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/111/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/333/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/33333/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/777/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/777/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/777/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/777/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/777/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/1111/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/2222/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/3333/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/5555/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/4444/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/4444/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/999/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/999/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/999/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/999/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/6666/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/7777/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/8888/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/9999/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/33/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/33/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/33/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/33/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/99/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/99/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/99/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66666/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66666/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66666/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/66666/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/22222/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/222/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/888/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/888/mapsJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/888/cmdlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/888/statJump to behavior
      Source: /tmp/efefa7.elf (PID: 6239)File opened: /proc/11111/mapsJump to behavior
      Source: /usr/bin/dash (PID: 6496)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.8KEHWJ9YVU /tmp/tmp.CwaW8b0xBl /tmp/tmp.5ns041sVgKJump to behavior
      Source: /usr/bin/dash (PID: 6497)Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.8KEHWJ9YVU /tmp/tmp.CwaW8b0xBl /tmp/tmp.5ns041sVgKJump to behavior

      Hooking and other Techniques for Hiding and Protection

      barindex
      Source: /tmp/efefa7.elf (PID: 6237)File: /tmp/efefa7.elfJump to behavior
      Source: /usr/bin/pulseaudio (PID: 6278)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
      Source: /tmp/efefa7.elf (PID: 6235)Queries kernel information via 'uname': Jump to behavior
      Source: /usr/bin/pulseaudio (PID: 6278)Queries kernel information via 'uname': Jump to behavior
      Source: efefa7.elfBinary or memory string: /lib/systemd//usr/lib/systemd/system/system/bin//gm/bin//home/process//home/helper/home/davinci/z/bin//mnt/mtd//tmp/sqfs//usr/libexec//usr/sbin//z/zbin//usr/bin/bin//tmp/var/mnt/root/boot/home/dev/media/opt/../(deleted)x86armmipsmpslsh4wgetcurllynxftpftpgettftpscpaflaaarsyncpfclamscanreadelfizsnapstracelsofgdbpmapltraceptracewiresharktsharktcpdumpnetstatssnmaphping3tracerouteiptablesnftfirewalldauditctlselinuxapparmoraptdnfyumzypperpacmanemergebrewportnanovimvinvimgeditkateemacspkillkillallkillsystemctlservicenohuppythonpython3perlrubyluanodebashshkshzshfishvolatilitychkrootkitrkhunterradare2binwalkdockerpodmanlxcqemuvirshvboxmanagemountumountdfdulsblkblkidmkfsfdiskpartedobjdumpstringsxxdhexdumpncnetcatsocatjournalctldmesglogcattaillessgrepawksedtmux%s/%s/data/local/tmp/sbin/dev/null/dev/console/var/lib/dockerkworker/u8:0raw.awaken-network.net/proc/self/cmdline/proc/%d/statusName:-
      Source: efefa7.elf, 6235.1.00007ffe310d2000.00007ffe310f3000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/efefa7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/efefa7.elf
      Source: efefa7.elf, 6235.1.000055b448114000.000055b448266000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
      Source: efefa7.elf, 6235.1.000055b448114000.000055b448266000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
      Source: efefa7.elf, 6235.1.00007ffe310d2000.00007ffe310f3000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
      Source: efefa7.elf, 6235.1.00007ffe310d2000.00007ffe310f3000.rw-.sdmpBinary or memory string: /tmp/qemu-open.Py1qqF
      Source: efefa7.elf, 6235.1.00007ffe310d2000.00007ffe310f3000.rw-.sdmpBinary or memory string: U/tmp/qemu-open.Py1qqF:

      Stealing of Sensitive Information

      barindex
      Source: Yara matchFile source: efefa7.elf, type: SAMPLE

      Remote Access Functionality

      barindex
      Source: Yara matchFile source: efefa7.elf, type: SAMPLE

      Mitre Att&ck Matrix

      ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
      Gather Victim Identity Information1
      Scripting      		Valid AccountsWindows Management Instrumentation1
      Scripting      		Path Interception1
      Masquerading      		1
      OS Credential Dumping      		11
      Security Software Discovery      		Remote ServicesData from Local System1
      Encrypted Channel      		Exfiltration Over Other Network MediumAbuse Accessibility Features
      CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
      Hidden Files and Directories      		LSASS Memory1
      File and Directory Discovery      		Remote Desktop ProtocolData from Removable Media1
      Non-Standard Port      		Exfiltration Over BluetoothNetwork Denial of Service
      Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)11
      File Deletion      		Security Account Manager1
      System Information Discovery      		SMB/Windows Admin SharesData from Network Shared Drive2
      Non-Application Layer Protocol      		Automated ExfiltrationData Encrypted for Impact
      Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture3
      Application Layer Protocol      		Traffic DuplicationData Destruction

      Malware Configuration

      ⊘No configs have been found

      Behavior Graph

      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Number of created Files
      • Is malicious
      • Internet
      behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1649525 Sample: efefa7.elf Startdate: 26/03/2025 Architecture: LINUX Score: 80 27 raw.awaken-network.net. [malformed] 2->27 29 109.202.202.202, 80 INIT7CH Switzerland 2->29 31 6 other IPs or domains 2->31 35 Multi AV Scanner detection for submitted file 2->35 37 Yara detected Mirai 2->37 8 efefa7.elf 2->8         started        10 systemd dbus-daemon 2->10         started        13 systemd pulseaudio 2->13         started        15 5 other processes 2->15 signatures3 39 Sends malformed DNS queries 27->39 process4 signatures5 17 efefa7.elf 8->17         started        43 Sample reads /proc/mounts (often used for finding a writable filesystem) 10->43 process6 signatures7 33 Sample deletes itself 17->33 20 efefa7.elf 17->20         started        23 efefa7.elf 17->23         started        25 efefa7.elf 17->25         started        process8 signatures9 41 Manipulation of devices in /dev 20->41

      Antivirus, Machine Learning and Genetic Malware Detection

      Initial Sample

      SourceDetectionScannerLabelLink
      efefa7.elf31%ReversingLabsLinux.Backdoor.Mirai

      Dropped Files

      ⊘No Antivirus matches

      Domains

      ⊘No Antivirus matches

      URLs

      ⊘No Antivirus matches

      Domains and IPs

      Download Network PCAP: filtered – full

      Contacted Domains

      NameIPActiveMaliciousAntivirus DetectionReputation
      daisy.ubuntu.com
      		162.213.35.25
      		truefalse
        		high
        raw.awaken-network.net
        		141.98.10.142
        		truefalse
          		high
          raw.awaken-network.net. [malformed]
          		unknown
          		unknownfalse
            		high

            Contacted URLs

            NameMaliciousAntivirus DetectionReputation
            https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9efalse
              		high

              World Map of Contacted IPs

              • No. of IPs < 25%
              • 25% < No. of IPs < 50%
              • 50% < No. of IPs < 75%
              • 75% < No. of IPs

              Public IPs

              IPDomainCountryFlagASNASN NameMalicious
              34.249.145.219
              		unknownUnited States
              		16509AMAZON-02USfalse
              162.213.35.24
              		unknownUnited States
              		41231CANONICAL-ASGBfalse
              141.98.10.142
              		raw.awaken-network.netLithuania
              		209605HOSTBALTICLTfalse
              109.202.202.202
              		unknownSwitzerland
              		13030INIT7CHfalse
              91.189.91.43
              		unknownUnited Kingdom
              		41231CANONICAL-ASGBfalse
              91.189.91.42
              		unknownUnited Kingdom
              		41231CANONICAL-ASGBfalse

              Joe Sandbox View / Context

              IPs

              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
              34.249.145.219na.elfGet hashmaliciousPrometeiBrowse
                na.elfGet hashmaliciousPrometeiBrowse
                  na.elfGet hashmaliciousPrometeiBrowse
                    na.elfGet hashmaliciousPrometeiBrowse
                      na.elfGet hashmaliciousPrometeiBrowse
                        na.elfGet hashmaliciousPrometeiBrowse
                          na.elfGet hashmaliciousPrometeiBrowse
                            a-r.m-5.Sakura.elfGet hashmaliciousGafgyt, MiraiBrowse
                              s-h.4-.Sakura.elfGet hashmaliciousGafgyt, MiraiBrowse
                                na.elfGet hashmaliciousPrometeiBrowse
                                  162.213.35.24jfeeps.elfGet hashmaliciousUnknownBrowse
                                    drea4.elfGet hashmaliciousUnknownBrowse
                                      efjepc.elfGet hashmaliciousUnknownBrowse
                                        weje64.elfGet hashmaliciousUnknownBrowse
                                          morte.arm7.elfGet hashmaliciousOkiruBrowse
                                            morte.m68k.elfGet hashmaliciousGafgyt, OkiruBrowse
                                              drea4.elfGet hashmaliciousUnknownBrowse
                                                morte.ppc.elfGet hashmaliciousOkiruBrowse
                                                  eehah4.elfGet hashmaliciousUnknownBrowse
                                                    efjepc.elfGet hashmaliciousUnknownBrowse
                                                      141.98.10.142jfeeps.elfGet hashmaliciousUnknownBrowse
                                                        vjwe68k.elfGet hashmaliciousUnknownBrowse
                                                          rjfe686.elfGet hashmaliciousUnknownBrowse
                                                            drea4.elfGet hashmaliciousUnknownBrowse
                                                              efjepc.elfGet hashmaliciousUnknownBrowse
                                                                bejv86.elfGet hashmaliciousUnknownBrowse
                                                                  eehah4.elfGet hashmaliciousUnknownBrowse
                                                                    weje64.elfGet hashmaliciousUnknownBrowse
                                                                      Aqua.mips.elfGet hashmaliciousUnknownBrowse
                                                                        bejv86.elfGet hashmaliciousUnknownBrowse
                                                                          109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
                                                                          • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb

                                                                          Domains

                                                                          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                          daisy.ubuntu.comjfeeps.elfGet hashmaliciousUnknownBrowse
                                                                          • 162.213.35.25
                                                                          arm6.elfGet hashmaliciousUnknownBrowse
                                                                          • 162.213.35.24
                                                                          rjfe686.elfGet hashmaliciousUnknownBrowse
                                                                          • 162.213.35.24
                                                                          drea4.elfGet hashmaliciousUnknownBrowse
                                                                          • 162.213.35.25
                                                                          efjepc.elfGet hashmaliciousUnknownBrowse
                                                                          • 162.213.35.25
                                                                          bejv86.elfGet hashmaliciousUnknownBrowse
                                                                          • 162.213.35.24
                                                                          weje64.elfGet hashmaliciousUnknownBrowse
                                                                          • 162.213.35.25
                                                                          x-8.6-.Sakura.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 162.213.35.25
                                                                          p-p.c-.Sakura.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 162.213.35.24
                                                                          x-3.2-.Sakura.elfGet hashmaliciousGafgyt, MiraiBrowse
                                                                          • 162.213.35.24
                                                                          raw.awaken-network.netjfeeps.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          vjwe68k.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          efjepc.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          weje64.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          Aqua.mips.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142

                                                                          ASNs

                                                                          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                          CANONICAL-ASGBjfeeps.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 185.125.190.26
                                                                          vjwe68k.elfGet hashmaliciousUnknownBrowse
                                                                          • 185.125.190.26
                                                                          mips.elfGet hashmaliciousUnknownBrowse
                                                                          • 185.125.190.26
                                                                          arm.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          x86.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 91.189.91.42
                                                                          rjfe686.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          sshd.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 91.189.91.42
                                                                          HOSTBALTICLTjfeeps.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          vjwe68k.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          rjfe686.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          drea4.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          efjepc.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          bejv86.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          eehah4.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          weje64.elfGet hashmaliciousUnknownBrowse
                                                                          • 141.98.10.142
                                                                          szerz#U0151d#U00e9s-pdf.bat.exeGet hashmaliciousFormBook, GuLoaderBrowse
                                                                          • 141.98.10.141
                                                                          KONTRAKT.BAT.exeGet hashmaliciousFormBook, GuLoaderBrowse
                                                                          • 141.98.10.141
                                                                          CANONICAL-ASGBjfeeps.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 185.125.190.26
                                                                          vjwe68k.elfGet hashmaliciousUnknownBrowse
                                                                          • 185.125.190.26
                                                                          mips.elfGet hashmaliciousUnknownBrowse
                                                                          • 185.125.190.26
                                                                          arm.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          x86.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 91.189.91.42
                                                                          rjfe686.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          sshd.elfGet hashmaliciousUnknownBrowse
                                                                          • 91.189.91.42
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 91.189.91.42
                                                                          INIT7CHjfeeps.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          arm.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          x86.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 109.202.202.202
                                                                          rjfe686.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          sshd.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 109.202.202.202
                                                                          drea4.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          efjepc.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          bejv86.elfGet hashmaliciousUnknownBrowse
                                                                          • 109.202.202.202
                                                                          AMAZON-02USarm6.elfGet hashmaliciousUnknownBrowse
                                                                          • 34.254.182.186
                                                                          phishing.emlGet hashmaliciousUnknownBrowse
                                                                          • 54.200.22.172
                                                                          OdJqjzS22H.jarGet hashmaliciousCan StealerBrowse
                                                                          • 13.226.94.17
                                                                          OdJqjzS22H.jarGet hashmaliciousCan StealerBrowse
                                                                          • 13.226.94.17
                                                                          https://aoocezieaoocezie.myfreshworks.com/invite/dc31162a-1c0b-4de0-9bee-658f89e887a0Get hashmaliciousHTMLPhisherBrowse
                                                                          • 3.168.122.105
                                                                          https://eqrco.de/a/thFNTJGet hashmaliciousUnknownBrowse
                                                                          • 52.92.18.50
                                                                          https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR*~*QDb5RYhyf7Kpg76mQsWD31yof1Vz37cyQEc6U1m5iMGETnZDWnZDWr0y31qxQrqpjLmAg1Zz37bqRp4oOYOL4Zu8W2iRR0S8V5KSVZcIgrifWpC8hYmJZ2mrY63EVp6sZstChpC0iK4oQ19/RsR6XpqxVrWSTKqN3oOwVpcJR2qHWsSYX801WsKLfop/i50W1Zus0JKR4EOqf8WKSZKNZ8iMZpKRi7l5g0KJ40Z6hqOmg2SNW8u54Mm9S5/k1KKNR7/SQ0m0hs0/48Kuh8N/fsRETImQjr/Uh1J6XLy0gMuD4KmX004r40iyTJy84ISVjKcqjpcq4qcESEGNi5KG26b91om*~*VpJr4Y5y0Kt8TLWLXsOVhpynQ2GERoGtX809TJ3yWpmVQ003iD4o41Zc4L6PhLSyZpKn08mv3rp6fqqWUY5=dc*~*Gb*~*b7F*~2*c/cbH8/FaH9H/KK/GbJaJ/IJ569bFc*~*F/JIbHGHa7H8/7aa/G/Kb6I?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiOGQ1YzIxZDBhODFkODAyNjQ3ZTBjNzc3MTdiNmY3ZDo3OmQwYzA6MTVhOWVkNDViMjQ5YjliMTE4NzM1ZDUwM2UyMThlNWU4ZGRjODY4ZjdmNDczYmNkYThiM2JmNWU0NWI4NDI2NTpoOlQ6VAGet hashmaliciousInvisible JS, Tycoon2FABrowse
                                                                          • 13.249.91.40
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 34.249.145.219
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 34.249.145.219
                                                                          na.elfGet hashmaliciousPrometeiBrowse
                                                                          • 54.171.230.55

                                                                          JA3 Fingerprints

                                                                          ⊘No context

                                                                          Dropped Files

                                                                          ⊘No context

                                                                          Created / dropped Files

                                                                          Process:/usr/bin/pulseaudio
                                                                          File Type:ASCII text
                                                                          Category:dropped
                                                                          Size (bytes):10
                                                                          Entropy (8bit):2.9219280948873623
                                                                          Encrypted:false
                                                                          SSDEEP:3:5bkPn:pkP
                                                                          MD5:FF001A15CE15CF062A3704CEA2991B5F
                                                                          SHA1:B06F6855F376C3245B82212AC73ADED55DFE5DEF
                                                                          SHA-256:C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
                                                                          SHA-512:65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
                                                                          Malicious:false
                                                                          Reputation:moderate, very likely benign file
                                                                          Preview:auto_null.
                                                                          Process:/usr/bin/pulseaudio
                                                                          File Type:ASCII text
                                                                          Category:dropped
                                                                          Size (bytes):18
                                                                          Entropy (8bit):3.4613201402110088
                                                                          Encrypted:false
                                                                          SSDEEP:3:5bkrIZsXvn:pkckv
                                                                          MD5:28FE6435F34B3367707BB1C5D5F6B430
                                                                          SHA1:EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
                                                                          SHA-256:721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
                                                                          SHA-512:6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
                                                                          Malicious:false
                                                                          Reputation:moderate, very likely benign file
                                                                          Preview:auto_null.monitor.
                                                                          Process:/tmp/efefa7.elf
                                                                          File Type:very short file (no magic)
                                                                          Category:dropped
                                                                          Size (bytes):1
                                                                          Entropy (8bit):0.0
                                                                          Encrypted:false
                                                                          SSDEEP:3:I:I
                                                                          MD5:336D5EBC5436534E61D16E63DDFCA327
                                                                          SHA1:3BC15C8AAE3E4124DD409035F32EA2FD6835EFC9
                                                                          SHA-256:3973E022E93220F9212C18D0D0C543AE7C309E46640DA93A4A0314DE999F5112
                                                                          SHA-512:7C0B0D99A6E4C33CDA0F6F63547F878F4DD9F486DFE5D0446CE004B1C0FF28F191FF86F5D5933D3614CCEEE6FBBDC17E658881D3A164DFA5D6F4C699B2126E3D
                                                                          Malicious:false
                                                                          Reputation:moderate, very likely benign file
                                                                          Preview:-
                                                                          Process:/lib/systemd/systemd-logind
                                                                          File Type:ASCII text
                                                                          Category:dropped
                                                                          Size (bytes):95
                                                                          Entropy (8bit):4.921230646592726
                                                                          Encrypted:false
                                                                          SSDEEP:3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
                                                                          MD5:BE58CCABC942125F5E27AF6EB1BA2F88
                                                                          SHA1:07C20F55E36EE48869B223B8FC4DBC227C7353AC
                                                                          SHA-256:551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
                                                                          SHA-512:E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
                                                                          Malicious:false
                                                                          Reputation:moderate, very likely benign file
                                                                          Preview:# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.
                                                                          Process:/usr/bin/pulseaudio
                                                                          File Type:ASCII text
                                                                          Category:dropped
                                                                          Size (bytes):5
                                                                          Entropy (8bit):2.321928094887362
                                                                          Encrypted:false
                                                                          SSDEEP:3:E:E
                                                                          MD5:A77B2EF124339C31F42546DE2182B473
                                                                          SHA1:A3EDF693861CB230F48502007A4AC936B9E43898
                                                                          SHA-256:82C34918A2A0F2A8747DC48F457D849E3822B73B3253BE5A357EBCEFA115B798
                                                                          SHA-512:A86DF6684B3FAD8B044AD4D80660CE67D372FF162B7CE9B390E206129516684B1A33752FD9FE71A674890A9F3100088C74AA03C8A9CE1A5525DD35C25C54E1B1
                                                                          Malicious:false
                                                                          Reputation:low
                                                                          Preview:6278.
                                                                          Process:/tmp/efefa7.elf
                                                                          File Type:ASCII text, with no line terminators
                                                                          Category:dropped
                                                                          Size (bytes):17
                                                                          Entropy (8bit):3.292770193936991
                                                                          Encrypted:false
                                                                          SSDEEP:3:TgPLyn:Tgzy
                                                                          MD5:589797A87BF61303AAA9E3616F70E255
                                                                          SHA1:9D1369A64705687FAE31A21BFB1112B0F95E12D9
                                                                          SHA-256:77A0343B744561B1386F5FC9FF8AF8E6E2108D866221BAE0E92459DEEDB0D164
                                                                          SHA-512:C4CE2A656577DCAB79F5FDED3AE229481F5F7E16D8BFB8C5657156766B7584C82D0981DB585966FF387668423F6E4AE238500A773D6A216F6637D53A99E7F57F
                                                                          Malicious:false
                                                                          Reputation:low
                                                                          Preview:/tmp/efefa7.elf..
                                                                          Process:/tmp/efefa7.elf
                                                                          File Type:data
                                                                          Category:dropped
                                                                          Size (bytes):26
                                                                          Entropy (8bit):3.921029621737614
                                                                          Encrypted:false
                                                                          SSDEEP:3:TgPLc8HJN:TgzFJN
                                                                          MD5:EC608269EB51935C1BD57E560756D790
                                                                          SHA1:25CE2E55C68C344EF44C1327EBC20DD7FC9D73C2
                                                                          SHA-256:9E28DB3920A17F3CE14B9B2772D0634993104041DF6FE97588F57034B398B447
                                                                          SHA-512:A729ADE0298F204D5F99BCDCFA96D7BA27E7467C995F15672F18D6E47E4036C483A989638423D303BEE2DEC76CB65DFA50BAD44EA45CFCDB2F817AEC85555421
                                                                          Malicious:false
                                                                          Preview:/tmp/efefa7.elf.nwlrbbmqbh
                                                                          Process:/tmp/efefa7.elf
                                                                          File Type:ASCII text
                                                                          Category:dropped
                                                                          Size (bytes):152
                                                                          Entropy (8bit):2.5479410558894506
                                                                          Encrypted:false
                                                                          SSDEEP:3:ZZgACLNTUdVvo/FNvN:ZezNYdVA/1
                                                                          MD5:86C9C1532A96904809F1BE29D9363612
                                                                          SHA1:03EDCAB7907789C822F0181451F111BF64F1708F
                                                                          SHA-256:C37975248DDA98EC5A09FEB6F1FE892D4D8450710F943B6CEF2B472D1550DE0D
                                                                          SHA-512:5BDBF15349B6DDCFB91161F8900160838F93250D473A2A6E7CDE666F1B6CBB84EF0325EC75619A67E217C3BE86B66562BB9750063352224BECB4233A3A614767
                                                                          Malicious:false
                                                                          Preview:6235 (/tmp/efefa7.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294901136 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.- (0) S 0 0 0 0 0 0 0 0 0 0 0 0 0 0

                                                                          Static File Info

                                                                          General

                                                                          File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                                                                          Entropy (8bit):5.883831491696333
                                                                          TrID:
                                                                          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                                          File name:efefa7.elf
                                                                          File size:177'494 bytes
                                                                          MD5:045c59d0308907ca493b70dfd0dc6b0f
                                                                          SHA1:d165fb6dafe9c808778673b97dc3a7e4d8e7e709
                                                                          SHA256:42a30b9e25bce5a7f164c59e56ef0be52179ef8be52e7a11c3d94c28e127470d
                                                                          SHA512:079352374e256aa2dcb8d3e0cd53a3a1c4950bcb856c9af0ee7b57c5d580cf79ce245fe9f3e61cba676a5dd0c6e598a1ffe71cb0fd890774f58cf28086585b98
                                                                          SSDEEP:3072:JRQT/urqPQTojnubaggmjFBWC9nnLEufIqR1Em4NaFqAM/9mdM0:JRQT/uqQqubaggmjFBzlLNIQ1EDNaF/l
                                                                          TLSH:D4043C56E6418B17C0D6177AB6DF424533239B64D3EB33069928BFB43F8679E0E23606
                                                                          File Content Preview:.ELF..............(.........4...L!......4. ...(........p...../.../..8...8...........................<...<...............<...<...<...d...................@...@...@...................Q.td..................................-...L..................@-.,@...0....S

                                                                          Static ELF Info

                                                                          ELF header

                                                                          Class:ELF32
                                                                          Data:2's complement, little endian
                                                                          Version:1 (current)
                                                                          Machine:ARM
                                                                          Version Number:0x1
                                                                          Type:EXEC (Executable file)
                                                                          OS/ABI:UNIX - System V
                                                                          ABI Version:0
                                                                          Entry Point Address:0x8194
                                                                          Flags:0x4000002
                                                                          ELF Header Size:52
                                                                          Program Header Offset:52
                                                                          Program Header Size:32
                                                                          Number of Program Headers:5
                                                                          Section Header Offset:139596
                                                                          Section Header Size:40
                                                                          Number of Section Headers:29
                                                                          Header String Table Index:26

                                                                          Sections

                                                                          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                                          NULL0x00x00x00x00x0000
                                                                          .initPROGBITS0x80d40xd40x100x00x6AX004
                                                                          .textPROGBITS0x80f00xf00x176e80x00x6AX0016
                                                                          .finiPROGBITS0x1f7d80x177d80x100x00x6AX004
                                                                          .rodataPROGBITS0x1f7e80x177e80x37040x00x2A008
                                                                          .ARM.extabPROGBITS0x22eec0x1aeec0x180x00x2A004
                                                                          .ARM.exidxARM_EXIDX0x22f040x1af040x1380x00x82AL204
                                                                          .eh_framePROGBITS0x2b03c0x1b03c0x40x00x3WA004
                                                                          .tbssNOBITS0x2b0400x1b0400x80x00x403WAT004
                                                                          .init_arrayINIT_ARRAY0x2b0400x1b0400x40x00x3WA004
                                                                          .fini_arrayFINI_ARRAY0x2b0440x1b0440x40x00x3WA004
                                                                          .jcrPROGBITS0x2b0480x1b0480x40x00x3WA004
                                                                          .gotPROGBITS0x2b04c0x1b04c0xb40x40x3WA004
                                                                          .dataPROGBITS0x2b1000x1b1000x4a00x00x3WA004
                                                                          .bssNOBITS0x2b5a00x1b5a00xaf9c0x00x3WA004
                                                                          .commentPROGBITS0x00x1b5a00xd720x00x0001
                                                                          .debug_arangesPROGBITS0x00x1c3180x1600x00x0008
                                                                          .debug_pubnamesPROGBITS0x00x1c4780x2130x00x0001
                                                                          .debug_infoPROGBITS0x00x1c68b0x210b0x00x0001
                                                                          .debug_abbrevPROGBITS0x00x1e7960x6f60x00x0001
                                                                          .debug_linePROGBITS0x00x1ee8c0xf280x00x0001
                                                                          .debug_framePROGBITS0x00x1fdb40x2b80x00x0004
                                                                          .debug_strPROGBITS0x00x2006c0x8ca0x10x30MS001
                                                                          .debug_locPROGBITS0x00x209360x118f0x00x0001
                                                                          .debug_rangesPROGBITS0x00x21ac50x5580x00x0001
                                                                          .ARM.attributesARM_ATTRIBUTES0x00x2201d0x160x00x0001
                                                                          .shstrtabSTRTAB0x00x220330x1170x00x0001
                                                                          .symtabSYMTAB0x00x225d40x5fa00x100x0288854
                                                                          .strtabSTRTAB0x00x285740x2fe20x00x0001

                                                                          Program Segments

                                                                          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                                          EXIDX0x1af040x22f040x22f040x1380x1384.50890x4R 0x4.ARM.exidx
                                                                          LOAD0x00x80000x80000x1b03c0x1b03c5.97010x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                                                                          LOAD0x1b03c0x2b03c0x2b03c0x5640xb5004.66670x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                                                                          TLS0x1b0400x2b0400x2b0400x00x80.00000x4R 0x4.tbss
                                                                          GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                                                                          Symbols

                                                                          NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                                                          .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          .symtab0x80d40SECTION<unknown>DEFAULT1
                                                                          .symtab0x80f00SECTION<unknown>DEFAULT2
                                                                          .symtab0x1f7d80SECTION<unknown>DEFAULT3
                                                                          .symtab0x1f7e80SECTION<unknown>DEFAULT4
                                                                          .symtab0x22eec0SECTION<unknown>DEFAULT5
                                                                          .symtab0x22f040SECTION<unknown>DEFAULT6
                                                                          .symtab0x2b03c0SECTION<unknown>DEFAULT7
                                                                          .symtab0x2b0400SECTION<unknown>DEFAULT8
                                                                          .symtab0x2b0400SECTION<unknown>DEFAULT9
                                                                          .symtab0x2b0440SECTION<unknown>DEFAULT10
                                                                          .symtab0x2b0480SECTION<unknown>DEFAULT11
                                                                          .symtab0x2b04c0SECTION<unknown>DEFAULT12
                                                                          .symtab0x2b1000SECTION<unknown>DEFAULT13
                                                                          .symtab0x2b5a00SECTION<unknown>DEFAULT14
                                                                          .symtab0x00SECTION<unknown>DEFAULT15
                                                                          .symtab0x00SECTION<unknown>DEFAULT16
                                                                          .symtab0x00SECTION<unknown>DEFAULT17
                                                                          .symtab0x00SECTION<unknown>DEFAULT18
                                                                          .symtab0x00SECTION<unknown>DEFAULT19
                                                                          .symtab0x00SECTION<unknown>DEFAULT20
                                                                          .symtab0x00SECTION<unknown>DEFAULT21
                                                                          .symtab0x00SECTION<unknown>DEFAULT22
                                                                          .symtab0x00SECTION<unknown>DEFAULT23
                                                                          .symtab0x00SECTION<unknown>DEFAULT24
                                                                          .symtab0x00SECTION<unknown>DEFAULT25
                                                                          $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                                                                          $a.symtab0x1f7d80NOTYPE<unknown>DEFAULT3
                                                                          $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                                                                          $a.symtab0x1f7e40NOTYPE<unknown>DEFAULT3
                                                                          $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x81340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x81940NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x822c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x83280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x85440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x85b00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x86200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x8b3c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x91d00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x97ec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x9a8c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xa2400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xa9380NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xafe40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xb6dc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xba380NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xbd900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xbeec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xc1180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xc3b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xc6600NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xc9880NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xce280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xd4ac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xd4fc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xd5a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xd6b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xd7700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xd8400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xda080NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xde580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xe2180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xe4d00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xe76c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xe9e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xec980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xeeb40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xef3c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf0200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf1ac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf3840NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf3980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf40c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf4680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf6140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf8400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0xf8c00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x100940NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x101040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x101700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x102000NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x103340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1035c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x108640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x108880NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x109380NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x109e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10b440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10b6c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10ba40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10bec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10c100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10c340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10c500NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10c640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10ca40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10cec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10d100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10d300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10dc40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10e440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10e880NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10fc40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x10fdc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x110f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x111000NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1114c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1116c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x111c00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x111d00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x112fc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x113040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x114180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x118340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11cd00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11e100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11e240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11e700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11ebc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11ec40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11ec80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11ef40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11f000NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x11f0c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1212c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1227c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x122980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x122f80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x123640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1241c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1243c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x125800NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12ac80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12ad00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12ad80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12ae00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12b9c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x12be00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x132f40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1333c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x133700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x133f80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x134040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x134100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x134a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1359c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x135dc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1361c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x136300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x136740NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x136b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x136f80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x137380NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x137700NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x137a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x137e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x138480NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1388c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x138cc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x139100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x139940NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x139cc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13a0c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13a980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13ac80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13b080NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13c180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13ce80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13dac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13e5c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13f440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x13f780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x142a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x142c80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1433c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x143a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x143ec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1441c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1444c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1451c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1497c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x149fc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x14b600NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x14b900NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x14cd40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x154a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x155400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x155840NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x157340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x157880NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15cf80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15d280NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15d580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15e000NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x15f1c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x161cc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x165780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x166180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x166500NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167c00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x167e00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x168400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x168680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x169580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1697c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16a480NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16b440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16b5c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16c680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16c8c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x16d080NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x170000NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x171500NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x173ec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x174140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x174580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1749c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x175100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x175540NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1759c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x175e00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x176500NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x176980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x177200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x177640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x177d40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x178200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x178a80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x178f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x179340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x179840NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x179980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17a5c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x17ac80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x184780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x185b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x189780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x18e180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x18e580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x18f800NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x18f980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1903c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x190f40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x191b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x192580NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x192e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x193c00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x194b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x195a40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x195c40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x195e00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x197b80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1987c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x199c80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x19fec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a03c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a4080NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a4a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a4e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a5d80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a6240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a67c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a6840NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a6b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a70c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a7140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a7440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a79c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a7a40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a7d40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a82c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a8340NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a8600NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a8e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1a9c40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1aa840NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1aad80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ab300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1af1c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1af980NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1afc40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1afd80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1afe00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b0480NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b0ac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b14c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b1780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b18c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b1a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b1b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b1dc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b2140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b2540NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b2680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b3480NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b38c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b3cc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b40c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b4780NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b48c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b6040NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1b6f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ba940NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bae80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bb0c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bbc80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bbfc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bcd80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1be180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bef40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bf680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1bf940NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1c0f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1c8e40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1c9bc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1d1240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1d1400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1d1ac0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1d2740NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1d5380NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1daa80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1dbec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1dd200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1dd300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1de200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1de440NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1df240NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e0100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e0540NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e0a40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e0f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e1e80NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e4400NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e7ec0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e8640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1e8cc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1eb200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1eb2c0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1eb640NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ebbc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ec140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ec200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ed680NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ee140NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1eefc0NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1ef200NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f1000NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f2c00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f3180NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f3e00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f4100NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f4b40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f4f00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f5300NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f5a00NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f6e40NOTYPE<unknown>DEFAULT2
                                                                          $a.symtab0x1f7380NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x81280NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b0440NOTYPE<unknown>DEFAULT10
                                                                          $d.symtab0x81800NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b0400NOTYPE<unknown>DEFAULT9
                                                                          $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x83200NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x8af40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x91cc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x97e80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xa23c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xa9340NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xafe00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xb6d80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xbd8c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xc9840NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xce240NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xd4540NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x200540NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0xd6ac0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xd7680NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xd83c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xd9fc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xde340NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xe1f80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xe4b40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xe74c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xe9d00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xec7c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xee980NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xef300NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b1000NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x2b1400NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x2b1840NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0xf0100NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf1a00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf3600NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b3280NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0xf3940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf4080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf4600NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf5ec0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0xf82c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x100540NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b3500NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x2b3540NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x2b3580NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x21d1c0NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x100f40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x101600NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x101f00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x103240NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x108840NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x109300NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x109e00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x10b200NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b35c0NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x110e80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x111480NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x111680NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x111b40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x112f40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x00NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0x200NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0x260NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0x121100NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x12ab80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0x00NOTYPE<unknown>DEFAULT23
                                                                          $d.symtab0x2100NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                                                                          $d.symtab0x133ec0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x134a00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1358c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x135d80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x136180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1366c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x136b00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x136f40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x137340NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1376c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x137e40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x138400NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x138880NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x138c80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1390c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1398c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x139c80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13a080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13a940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13b040NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13bfc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13ce00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13da00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13e540NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x220f00NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x13f300NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x13f740NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x142980NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1432c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x143940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x143e40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x145140NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x149480NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x149ec0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x14b440NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b3b80NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x2b3b40NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x1547c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2216c0NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x157300NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1577c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x15cc80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b49c0NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x221740NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x15df80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x161b00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x165600NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x167080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x169500NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x16a400NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x16c580NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x222040NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x16d040NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x16ff00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1714c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x173d80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x174500NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x174940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x175080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1754c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x175940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x175d80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x176480NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x176940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x177180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1775c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x177cc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x178180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x178a00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x178e80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1792c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x179800NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x17a500NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x184540NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b4a00NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x1859c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x189580NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x18dfc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x18e500NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x18f6c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b4b80NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x190200NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x190d80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x191980NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1923c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b4d00NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x2b5680NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x192e40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x193b40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x194a80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x195980NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x22d880NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x197a80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1985c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b57c0NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x199a40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x19fc00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a0380NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a3e00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a5cc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a60c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a6200NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a6b00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a7400NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a7d00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1a9bc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1aa700NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1aad00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1ab240NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1aed00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x2b5940NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x1af900NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1afc00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b0400NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b0a80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b1480NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b1d40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b2100NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b2500NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b3380NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b3880NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b3c80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b4080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b4700NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1b6dc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1ba8c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1bbc40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1bcd40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1bef00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1c8c40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x22e280NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x1c9b80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1d1140NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1d1a40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1d5180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x22e8c0NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x1da940NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x22eb80NOTYPE<unknown>DEFAULT4
                                                                          $d.symtab0x1dd100NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1de180NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1df1c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1e0080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1e1e00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1e4300NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1e7d40NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1e84c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1e8bc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1eaf80NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1eb580NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1ec080NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1ed600NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1ee0c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1eef00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1f2bc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1f3dc0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1f4b00NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x1f59c0NOTYPE<unknown>DEFAULT2
                                                                          $d.symtab0x28c0NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0x2ac0NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0x2b30NOTYPE<unknown>DEFAULT21
                                                                          $d.symtab0x2b3ac0NOTYPE<unknown>DEFAULT13
                                                                          $d.symtab0x21df00NOTYPE<unknown>DEFAULT4
                                                                          AquaBotV6_blocker.symtab0xec98540FUNC<unknown>DEFAULT2
                                                                          AquaBotV6_killer_CPU.symtab0xde58960FUNC<unknown>DEFAULT2
                                                                          AquaBotV6_killer_EXE.symtab0xe76c636FUNC<unknown>DEFAULT2
                                                                          AquaBotV6_killer_cmdline.symtab0xe218696FUNC<unknown>DEFAULT2
                                                                          AquaBotV6_killer_maps.symtab0xe9e8688FUNC<unknown>DEFAULT2
                                                                          AquaBotV6_killer_repeat.symtab0xda081104FUNC<unknown>DEFAULT2
                                                                          AquaBotV6_killer_stat.symtab0xe4d0668FUNC<unknown>DEFAULT2
                                                                          C.11.5548.symtab0x22df412OBJECT<unknown>DEFAULT4
                                                                          C.17.5544.symtab0x200541024OBJECT<unknown>DEFAULT4
                                                                          C.5.5083.symtab0x220f024OBJECT<unknown>DEFAULT4
                                                                          C.7.5370.symtab0x22e0012OBJECT<unknown>DEFAULT4
                                                                          C.7.6078.symtab0x2211412OBJECT<unknown>DEFAULT4
                                                                          C.7.6109.symtab0x2214412OBJECT<unknown>DEFAULT4
                                                                          C.7.6182.symtab0x2212012OBJECT<unknown>DEFAULT4
                                                                          C.7.6365.symtab0x221f812OBJECT<unknown>DEFAULT4
                                                                          C.8.6110.symtab0x2213812OBJECT<unknown>DEFAULT4
                                                                          C.9.6119.symtab0x2212c12OBJECT<unknown>DEFAULT4
                                                                          LOCAL_ADDR.symtab0x360e04OBJECT<unknown>DEFAULT14
                                                                          LOCAL_ADDR2.symtab0x360f44OBJECT<unknown>DEFAULT14
                                                                          Laligned.symtab0x168080NOTYPE<unknown>DEFAULT2
                                                                          Llastword.symtab0x168240NOTYPE<unknown>DEFAULT2
                                                                          _Exit.symtab0x1afe0104FUNC<unknown>DEFAULT2
                                                                          _GLOBAL_OFFSET_TABLE_.symtab0x2b04c0OBJECT<unknown>HIDDEN12
                                                                          _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _Unwind_Complete.symtab0x11ec44FUNC<unknown>HIDDEN2
                                                                          _Unwind_DeleteException.symtab0x11ec844FUNC<unknown>HIDDEN2
                                                                          _Unwind_ForcedUnwind.symtab0x12b7836FUNC<unknown>HIDDEN2
                                                                          _Unwind_GetCFA.symtab0x11ebc8FUNC<unknown>HIDDEN2
                                                                          _Unwind_GetDataRelBase.symtab0x11f0012FUNC<unknown>HIDDEN2
                                                                          _Unwind_GetLanguageSpecificData.symtab0x12b9c68FUNC<unknown>HIDDEN2
                                                                          _Unwind_GetRegionStart.symtab0x1333c52FUNC<unknown>HIDDEN2
                                                                          _Unwind_GetTextRelBase.symtab0x11ef412FUNC<unknown>HIDDEN2
                                                                          _Unwind_RaiseException.symtab0x12b0c36FUNC<unknown>HIDDEN2
                                                                          _Unwind_Resume.symtab0x12b3036FUNC<unknown>HIDDEN2
                                                                          _Unwind_Resume_or_Rethrow.symtab0x12b5436FUNC<unknown>HIDDEN2
                                                                          _Unwind_VRS_Get.symtab0x11e2476FUNC<unknown>HIDDEN2
                                                                          _Unwind_VRS_Pop.symtab0x1243c324FUNC<unknown>HIDDEN2
                                                                          _Unwind_VRS_Set.symtab0x11e7076FUNC<unknown>HIDDEN2
                                                                          _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __C_ctype_b.symtab0x2b3ac4OBJECT<unknown>DEFAULT13
                                                                          __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __C_ctype_b_data.symtab0x21df0768OBJECT<unknown>DEFAULT4
                                                                          __EH_FRAME_BEGIN__.symtab0x2b03c0OBJECT<unknown>DEFAULT7
                                                                          __FRAME_END__.symtab0x2b03c0OBJECT<unknown>DEFAULT7
                                                                          __GI___C_ctype_b.symtab0x2b3ac4OBJECT<unknown>HIDDEN13
                                                                          __GI___close.symtab0x1a640100FUNC<unknown>HIDDEN2
                                                                          __GI___close_nocancel.symtab0x1a62424FUNC<unknown>HIDDEN2
                                                                          __GI___ctype_b.symtab0x2b3b04OBJECT<unknown>HIDDEN13
                                                                          __GI___errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __GI___fcntl_nocancel.symtab0x13410152FUNC<unknown>HIDDEN2
                                                                          __GI___fgetc_unlocked.symtab0x1dbec300FUNC<unknown>HIDDEN2
                                                                          __GI___glibc_strerror_r.symtab0x16b4424FUNC<unknown>HIDDEN2
                                                                          __GI___libc_close.symtab0x1a640100FUNC<unknown>HIDDEN2
                                                                          __GI___libc_fcntl.symtab0x134a8244FUNC<unknown>HIDDEN2
                                                                          __GI___libc_open.symtab0x1a6d0100FUNC<unknown>HIDDEN2
                                                                          __GI___libc_read.symtab0x1a7f0100FUNC<unknown>HIDDEN2
                                                                          __GI___libc_write.symtab0x1a760100FUNC<unknown>HIDDEN2
                                                                          __GI___longjmp.symtab0x1afc420FUNC<unknown>HIDDEN2
                                                                          __GI___open.symtab0x1a6d0100FUNC<unknown>HIDDEN2
                                                                          __GI___open_nocancel.symtab0x1a6b424FUNC<unknown>HIDDEN2
                                                                          __GI___pthread_cleanup_upto.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __GI___pthread_unwind.symtab0x1116c84FUNC<unknown>HIDDEN2
                                                                          __GI___pthread_unwind_next.symtab0x111c016FUNC<unknown>HIDDEN2
                                                                          __GI___read.symtab0x1a7f0100FUNC<unknown>HIDDEN2
                                                                          __GI___read_nocancel.symtab0x1a7d424FUNC<unknown>HIDDEN2
                                                                          __GI___sigaddset.symtab0x17a8036FUNC<unknown>HIDDEN2
                                                                          __GI___sigdelset.symtab0x17aa436FUNC<unknown>HIDDEN2
                                                                          __GI___sigismember.symtab0x17a5c36FUNC<unknown>HIDDEN2
                                                                          __GI___uClibc_fini.symtab0x1aa08124FUNC<unknown>HIDDEN2
                                                                          __GI___uClibc_init.symtab0x1aad888FUNC<unknown>HIDDEN2
                                                                          __GI___write.symtab0x1a760100FUNC<unknown>HIDDEN2
                                                                          __GI___write_nocancel.symtab0x1a74424FUNC<unknown>HIDDEN2
                                                                          __GI___xpg_strerror_r.symtab0x16b5c268FUNC<unknown>HIDDEN2
                                                                          __GI__exit.symtab0x1afe0104FUNC<unknown>HIDDEN2
                                                                          __GI_abort.symtab0x18e58296FUNC<unknown>HIDDEN2
                                                                          __GI_atoi.symtab0x195a432FUNC<unknown>HIDDEN2
                                                                          __GI_bind.symtab0x1741468FUNC<unknown>HIDDEN2
                                                                          __GI_brk.symtab0x1ebbc88FUNC<unknown>HIDDEN2
                                                                          __GI_close.symtab0x1a640100FUNC<unknown>HIDDEN2
                                                                          __GI_closedir.symtab0x13b08272FUNC<unknown>HIDDEN2
                                                                          __GI_config_close.symtab0x1ba1852FUNC<unknown>HIDDEN2
                                                                          __GI_config_open.symtab0x1ba4c72FUNC<unknown>HIDDEN2
                                                                          __GI_config_read.symtab0x1b6f0808FUNC<unknown>HIDDEN2
                                                                          __GI_connect.symtab0x1749c116FUNC<unknown>HIDDEN2
                                                                          __GI_exit.symtab0x197b8196FUNC<unknown>HIDDEN2
                                                                          __GI_fclose.symtab0x13f78816FUNC<unknown>HIDDEN2
                                                                          __GI_fcntl.symtab0x134a8244FUNC<unknown>HIDDEN2
                                                                          __GI_fflush_unlocked.symtab0x161cc940FUNC<unknown>HIDDEN2
                                                                          __GI_fgetc.symtab0x1daa8324FUNC<unknown>HIDDEN2
                                                                          __GI_fgetc_unlocked.symtab0x1dbec300FUNC<unknown>HIDDEN2
                                                                          __GI_fgets.symtab0x15e00284FUNC<unknown>HIDDEN2
                                                                          __GI_fgets_unlocked.symtab0x16578160FUNC<unknown>HIDDEN2
                                                                          __GI_fopen.symtab0x142a832FUNC<unknown>HIDDEN2
                                                                          __GI_fork.symtab0x1a03c972FUNC<unknown>HIDDEN2
                                                                          __GI_fprintf.symtab0x143ec48FUNC<unknown>HIDDEN2
                                                                          __GI_fputs_unlocked.symtab0x1661856FUNC<unknown>HIDDEN2
                                                                          __GI_fscanf.symtab0x15d2848FUNC<unknown>HIDDEN2
                                                                          __GI_fseek.symtab0x1eefc36FUNC<unknown>HIDDEN2
                                                                          __GI_fseeko64.symtab0x1f100448FUNC<unknown>HIDDEN2
                                                                          __GI_fstat.symtab0x1b048100FUNC<unknown>HIDDEN2
                                                                          __GI_fwrite_unlocked.symtab0x16650188FUNC<unknown>HIDDEN2
                                                                          __GI_getc_unlocked.symtab0x1dbec300FUNC<unknown>HIDDEN2
                                                                          __GI_getdtablesize.symtab0x1b14c44FUNC<unknown>HIDDEN2
                                                                          __GI_getegid.symtab0x1b17820FUNC<unknown>HIDDEN2
                                                                          __GI_geteuid.symtab0x1b18c20FUNC<unknown>HIDDEN2
                                                                          __GI_getgid.symtab0x1b1a020FUNC<unknown>HIDDEN2
                                                                          __GI_getpagesize.symtab0x1b1b440FUNC<unknown>HIDDEN2
                                                                          __GI_getpid.symtab0x1a4a072FUNC<unknown>HIDDEN2
                                                                          __GI_getrlimit.symtab0x1b1dc56FUNC<unknown>HIDDEN2
                                                                          __GI_getsockname.symtab0x1751068FUNC<unknown>HIDDEN2
                                                                          __GI_gettimeofday.symtab0x1b21464FUNC<unknown>HIDDEN2
                                                                          __GI_getuid.symtab0x1b25420FUNC<unknown>HIDDEN2
                                                                          __GI_inet_addr.symtab0x173ec40FUNC<unknown>HIDDEN2
                                                                          __GI_inet_aton.symtab0x1e0f0248FUNC<unknown>HIDDEN2
                                                                          __GI_inet_ntop.symtab0x17150668FUNC<unknown>HIDDEN2
                                                                          __GI_inet_pton.symtab0x16dd8552FUNC<unknown>HIDDEN2
                                                                          __GI_initstate_r.symtab0x193c0248FUNC<unknown>HIDDEN2
                                                                          __GI_ioctl.symtab0x1b268224FUNC<unknown>HIDDEN2
                                                                          __GI_isatty.symtab0x16c6836FUNC<unknown>HIDDEN2
                                                                          __GI_kill.symtab0x1373856FUNC<unknown>HIDDEN2
                                                                          __GI_lseek64.symtab0x1f530112FUNC<unknown>HIDDEN2
                                                                          __GI_mbrtowc.symtab0x1ed68172FUNC<unknown>HIDDEN2
                                                                          __GI_mbsnrtowcs.symtab0x1ee14232FUNC<unknown>HIDDEN2
                                                                          __GI_memchr.symtab0x1dd30240FUNC<unknown>HIDDEN2
                                                                          __GI_memcpy.symtab0x167104FUNC<unknown>HIDDEN2
                                                                          __GI_memmove.symtab0x1dd204FUNC<unknown>HIDDEN2
                                                                          __GI_mempcpy.symtab0x1de2036FUNC<unknown>HIDDEN2
                                                                          __GI_memrchr.symtab0x1de44224FUNC<unknown>HIDDEN2
                                                                          __GI_memset.symtab0x16720156FUNC<unknown>HIDDEN2
                                                                          __GI_mmap.symtab0x1af1c124FUNC<unknown>HIDDEN2
                                                                          __GI_mremap.symtab0x1b34868FUNC<unknown>HIDDEN2
                                                                          __GI_munmap.symtab0x1b38c64FUNC<unknown>HIDDEN2
                                                                          __GI_nanosleep.symtab0x137e896FUNC<unknown>HIDDEN2
                                                                          __GI_open.symtab0x1a6d0100FUNC<unknown>HIDDEN2
                                                                          __GI_opendir.symtab0x13ce8196FUNC<unknown>HIDDEN2
                                                                          __GI_perror.symtab0x142c8116FUNC<unknown>HIDDEN2
                                                                          __GI_printf.symtab0x143a076FUNC<unknown>HIDDEN2
                                                                          __GI_raise.symtab0x1a4e8240FUNC<unknown>HIDDEN2
                                                                          __GI_random.symtab0x18f98164FUNC<unknown>HIDDEN2
                                                                          __GI_random_r.symtab0x19258144FUNC<unknown>HIDDEN2
                                                                          __GI_read.symtab0x1a7f0100FUNC<unknown>HIDDEN2
                                                                          __GI_readdir.symtab0x13e5c232FUNC<unknown>HIDDEN2
                                                                          __GI_readdir64.symtab0x1b604236FUNC<unknown>HIDDEN2
                                                                          __GI_readlink.symtab0x1388c64FUNC<unknown>HIDDEN2
                                                                          __GI_recv.symtab0x175e0112FUNC<unknown>HIDDEN2
                                                                          __GI_recvfrom.symtab0x17698136FUNC<unknown>HIDDEN2
                                                                          __GI_remove.symtab0x1433c100FUNC<unknown>HIDDEN2
                                                                          __GI_rmdir.symtab0x1b3cc64FUNC<unknown>HIDDEN2
                                                                          __GI_sbrk.symtab0x1b40c108FUNC<unknown>HIDDEN2
                                                                          __GI_select.symtab0x13910132FUNC<unknown>HIDDEN2
                                                                          __GI_send.symtab0x17764112FUNC<unknown>HIDDEN2
                                                                          __GI_sendto.symtab0x17820136FUNC<unknown>HIDDEN2
                                                                          __GI_setpgid.symtab0x1399456FUNC<unknown>HIDDEN2
                                                                          __GI_setsid.symtab0x139cc64FUNC<unknown>HIDDEN2
                                                                          __GI_setsockopt.symtab0x178a872FUNC<unknown>HIDDEN2
                                                                          __GI_setstate_r.symtab0x194b8236FUNC<unknown>HIDDEN2
                                                                          __GI_sigaction.symtab0x13370136FUNC<unknown>HIDDEN2
                                                                          __GI_sigaddset.symtab0x1793480FUNC<unknown>HIDDEN2
                                                                          __GI_sigemptyset.symtab0x1798420FUNC<unknown>HIDDEN2
                                                                          __GI_signal.symtab0x17998196FUNC<unknown>HIDDEN2
                                                                          __GI_sigprocmask.symtab0x13a0c140FUNC<unknown>HIDDEN2
                                                                          __GI_snprintf.symtab0x1441c48FUNC<unknown>HIDDEN2
                                                                          __GI_socket.symtab0x178f068FUNC<unknown>HIDDEN2
                                                                          __GI_sprintf.symtab0x1bbc852FUNC<unknown>HIDDEN2
                                                                          __GI_srandom_r.symtab0x192e8216FUNC<unknown>HIDDEN2
                                                                          __GI_sscanf.symtab0x15cf848FUNC<unknown>HIDDEN2
                                                                          __GI_strcat.symtab0x1684040FUNC<unknown>HIDDEN2
                                                                          __GI_strchr.symtab0x16868240FUNC<unknown>HIDDEN2
                                                                          __GI_strchrnul.symtab0x1df24236FUNC<unknown>HIDDEN2
                                                                          __GI_strcmp.symtab0x167c028FUNC<unknown>HIDDEN2
                                                                          __GI_strcoll.symtab0x167c028FUNC<unknown>HIDDEN2
                                                                          __GI_strcpy.symtab0x1695836FUNC<unknown>HIDDEN2
                                                                          __GI_strcspn.symtab0x1e01068FUNC<unknown>HIDDEN2
                                                                          __GI_strlen.symtab0x167e096FUNC<unknown>HIDDEN2
                                                                          __GI_strnlen.symtab0x1697c204FUNC<unknown>HIDDEN2
                                                                          __GI_strrchr.symtab0x1e05480FUNC<unknown>HIDDEN2
                                                                          __GI_strspn.symtab0x1e0a476FUNC<unknown>HIDDEN2
                                                                          __GI_strstr.symtab0x16a48252FUNC<unknown>HIDDEN2
                                                                          __GI_strtol.symtab0x195c428FUNC<unknown>HIDDEN2
                                                                          __GI_sysconf.symtab0x199c81572FUNC<unknown>HIDDEN2
                                                                          __GI_tcgetattr.symtab0x16c8c124FUNC<unknown>HIDDEN2
                                                                          __GI_time.symtab0x13a9848FUNC<unknown>HIDDEN2
                                                                          __GI_times.symtab0x1b47820FUNC<unknown>HIDDEN2
                                                                          __GI_ungetc.symtab0x1ef20480FUNC<unknown>HIDDEN2
                                                                          __GI_unlink.symtab0x13ac864FUNC<unknown>HIDDEN2
                                                                          __GI_vfprintf.symtab0x14b90324FUNC<unknown>HIDDEN2
                                                                          __GI_vfscanf.symtab0x1c9bc1896FUNC<unknown>HIDDEN2
                                                                          __GI_vsnprintf.symtab0x1444c208FUNC<unknown>HIDDEN2
                                                                          __GI_vsscanf.symtab0x15d58168FUNC<unknown>HIDDEN2
                                                                          __GI_wcrtomb.symtab0x1ba9484FUNC<unknown>HIDDEN2
                                                                          __GI_wcsnrtombs.symtab0x1bb0c188FUNC<unknown>HIDDEN2
                                                                          __GI_wcsrtombs.symtab0x1bae836FUNC<unknown>HIDDEN2
                                                                          __GI_write.symtab0x1a760100FUNC<unknown>HIDDEN2
                                                                          __JCR_END__.symtab0x2b0480OBJECT<unknown>DEFAULT11
                                                                          __JCR_LIST__.symtab0x2b0480OBJECT<unknown>DEFAULT11
                                                                          ___Unwind_ForcedUnwind.symtab0x12b7836FUNC<unknown>HIDDEN2
                                                                          ___Unwind_RaiseException.symtab0x12b0c36FUNC<unknown>HIDDEN2
                                                                          ___Unwind_Resume.symtab0x12b3036FUNC<unknown>HIDDEN2
                                                                          ___Unwind_Resume_or_Rethrow.symtab0x12b5436FUNC<unknown>HIDDEN2
                                                                          __adddf3.symtab0x11424784FUNC<unknown>HIDDEN2
                                                                          __aeabi_cdcmpeq.symtab0x11d8024FUNC<unknown>HIDDEN2
                                                                          __aeabi_cdcmple.symtab0x11d8024FUNC<unknown>HIDDEN2
                                                                          __aeabi_cdrcmple.symtab0x11d6452FUNC<unknown>HIDDEN2
                                                                          __aeabi_d2f.symtab0x1f738160FUNC<unknown>HIDDEN2
                                                                          __aeabi_d2uiz.symtab0x1f6e484FUNC<unknown>HIDDEN2
                                                                          __aeabi_dadd.symtab0x11424784FUNC<unknown>HIDDEN2
                                                                          __aeabi_dcmpeq.symtab0x11d9824FUNC<unknown>HIDDEN2
                                                                          __aeabi_dcmpge.symtab0x11de024FUNC<unknown>HIDDEN2
                                                                          __aeabi_dcmpgt.symtab0x11df824FUNC<unknown>HIDDEN2
                                                                          __aeabi_dcmple.symtab0x11dc824FUNC<unknown>HIDDEN2
                                                                          __aeabi_dcmplt.symtab0x11db024FUNC<unknown>HIDDEN2
                                                                          __aeabi_ddiv.symtab0x11ac4524FUNC<unknown>HIDDEN2
                                                                          __aeabi_dmul.symtab0x11834656FUNC<unknown>HIDDEN2
                                                                          __aeabi_drsub.symtab0x114180FUNC<unknown>HIDDEN2
                                                                          __aeabi_dsub.symtab0x11420788FUNC<unknown>HIDDEN2
                                                                          __aeabi_f2d.symtab0x1178064FUNC<unknown>HIDDEN2
                                                                          __aeabi_i2d.symtab0x1175840FUNC<unknown>HIDDEN2
                                                                          __aeabi_idiv.symtab0x1f5a00FUNC<unknown>HIDDEN2
                                                                          __aeabi_idivmod.symtab0x1f6cc24FUNC<unknown>HIDDEN2
                                                                          __aeabi_l2d.symtab0x117d496FUNC<unknown>HIDDEN2
                                                                          __aeabi_read_tp.symtab0x110f08FUNC<unknown>HIDDEN2
                                                                          __aeabi_ui2d.symtab0x1173436FUNC<unknown>HIDDEN2
                                                                          __aeabi_uidiv.symtab0x113040FUNC<unknown>HIDDEN2
                                                                          __aeabi_uidivmod.symtab0x1140024FUNC<unknown>HIDDEN2
                                                                          __aeabi_ul2d.symtab0x117c0116FUNC<unknown>HIDDEN2
                                                                          __aeabi_unwind_cpp_pr0.symtab0x12ad88FUNC<unknown>HIDDEN2
                                                                          __aeabi_unwind_cpp_pr1.symtab0x12ad08FUNC<unknown>HIDDEN2
                                                                          __aeabi_unwind_cpp_pr2.symtab0x12ac88FUNC<unknown>HIDDEN2
                                                                          __app_fini.symtab0x2db784OBJECT<unknown>HIDDEN14
                                                                          __atexit_lock.symtab0x2b57c24OBJECT<unknown>DEFAULT13
                                                                          __bss_end__.symtab0x3653c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __bss_start.symtab0x2b5a00NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __bss_start__.symtab0x2b5a00NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __check_one_fd.symtab0x1aa8484FUNC<unknown>DEFAULT2
                                                                          __close.symtab0x1a640100FUNC<unknown>DEFAULT2
                                                                          __close_nocancel.symtab0x1a62424FUNC<unknown>DEFAULT2
                                                                          __cmpdf2.symtab0x11ce0132FUNC<unknown>HIDDEN2
                                                                          __ctype_b.symtab0x2b3b04OBJECT<unknown>DEFAULT13
                                                                          __curbrk.symtab0x2e0bc4OBJECT<unknown>HIDDEN14
                                                                          __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __data_start.symtab0x2b1000NOTYPE<unknown>DEFAULT13
                                                                          __default_rt_sa_restorer.symtab0x134080FUNC<unknown>DEFAULT2
                                                                          __default_sa_restorer.symtab0x133fc0FUNC<unknown>DEFAULT2
                                                                          __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __div0.symtab0x11e1020FUNC<unknown>HIDDEN2
                                                                          __divdf3.symtab0x11ac4524FUNC<unknown>HIDDEN2
                                                                          __divsi3.symtab0x1f5a0300FUNC<unknown>HIDDEN2
                                                                          __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
                                                                          __do_global_dtors_aux_fini_array_entry.symtab0x2b0440OBJECT<unknown>DEFAULT10
                                                                          __end__.symtab0x3653c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __environ.symtab0x2db704OBJECT<unknown>DEFAULT14
                                                                          __eqdf2.symtab0x11ce0132FUNC<unknown>HIDDEN2
                                                                          __errno_location.symtab0x1114c32FUNC<unknown>DEFAULT2
                                                                          __exidx_end.symtab0x2303c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __exidx_start.symtab0x22f040NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          __exit_cleanup.symtab0x2d6204OBJECT<unknown>HIDDEN14
                                                                          __extendsfdf2.symtab0x1178064FUNC<unknown>HIDDEN2
                                                                          __fcntl_nocancel.symtab0x13410152FUNC<unknown>DEFAULT2
                                                                          __fgetc_unlocked.symtab0x1dbec300FUNC<unknown>DEFAULT2
                                                                          __fini_array_end.symtab0x2b0480NOTYPE<unknown>HIDDEN10
                                                                          __fini_array_start.symtab0x2b0440NOTYPE<unknown>HIDDEN10
                                                                          __fixunsdfsi.symtab0x1f6e484FUNC<unknown>HIDDEN2
                                                                          __floatdidf.symtab0x117d496FUNC<unknown>HIDDEN2
                                                                          __floatsidf.symtab0x1175840FUNC<unknown>HIDDEN2
                                                                          __floatundidf.symtab0x117c0116FUNC<unknown>HIDDEN2
                                                                          __floatunsidf.symtab0x1173436FUNC<unknown>HIDDEN2
                                                                          __fork.symtab0x10fc424FUNC<unknown>DEFAULT2
                                                                          __fork_generation_pointer.symtab0x365084OBJECT<unknown>HIDDEN14
                                                                          __fork_handlers.symtab0x3650c4OBJECT<unknown>HIDDEN14
                                                                          __fork_lock.symtab0x2d6244OBJECT<unknown>HIDDEN14
                                                                          __frame_dummy_init_array_entry.symtab0x2b0400OBJECT<unknown>DEFAULT9
                                                                          __gedf2.symtab0x11cd0148FUNC<unknown>HIDDEN2
                                                                          __getdents.symtab0x1b0ac160FUNC<unknown>HIDDEN2
                                                                          __getdents64.symtab0x1ec20328FUNC<unknown>HIDDEN2
                                                                          __getpagesize.symtab0x1b1b440FUNC<unknown>DEFAULT2
                                                                          __getpid.symtab0x1a4a072FUNC<unknown>DEFAULT2
                                                                          __glibc_strerror_r.symtab0x16b4424FUNC<unknown>DEFAULT2
                                                                          __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __gnu_Unwind_ForcedUnwind.symtab0x1227c28FUNC<unknown>HIDDEN2
                                                                          __gnu_Unwind_RaiseException.symtab0x12364184FUNC<unknown>HIDDEN2
                                                                          __gnu_Unwind_Restore_VFP.symtab0x12afc0FUNC<unknown>HIDDEN2
                                                                          __gnu_Unwind_Resume.symtab0x122f8108FUNC<unknown>HIDDEN2
                                                                          __gnu_Unwind_Resume_or_Rethrow.symtab0x1241c32FUNC<unknown>HIDDEN2
                                                                          __gnu_Unwind_Save_VFP.symtab0x12b040FUNC<unknown>HIDDEN2
                                                                          __gnu_unwind_execute.symtab0x12be01812FUNC<unknown>HIDDEN2
                                                                          __gnu_unwind_frame.symtab0x132f472FUNC<unknown>HIDDEN2
                                                                          __gnu_unwind_pr_common.symtab0x125801352FUNC<unknown>DEFAULT2
                                                                          __gtdf2.symtab0x11cd0148FUNC<unknown>HIDDEN2
                                                                          __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __init_array_end.symtab0x2b0440NOTYPE<unknown>HIDDEN9
                                                                          __init_array_start.symtab0x2b0400NOTYPE<unknown>HIDDEN9
                                                                          __init_scan_cookie.symtab0x1d140108FUNC<unknown>HIDDEN2
                                                                          __ledf2.symtab0x11cd8140FUNC<unknown>HIDDEN2
                                                                          __libc_close.symtab0x1a640100FUNC<unknown>DEFAULT2
                                                                          __libc_connect.symtab0x1749c116FUNC<unknown>DEFAULT2
                                                                          __libc_disable_asynccancel.symtab0x1a860136FUNC<unknown>HIDDEN2
                                                                          __libc_enable_asynccancel.symtab0x1a8e8220FUNC<unknown>HIDDEN2
                                                                          __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                                                                          __libc_fcntl.symtab0x134a8244FUNC<unknown>DEFAULT2
                                                                          __libc_fork.symtab0x1a03c972FUNC<unknown>DEFAULT2
                                                                          __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                                                                          __libc_longjmp.symtab0x1377056FUNC<unknown>DEFAULT2
                                                                          __libc_multiple_threads.symtab0x365104OBJECT<unknown>HIDDEN14
                                                                          __libc_nanosleep.symtab0x137e896FUNC<unknown>DEFAULT2
                                                                          __libc_open.symtab0x1a6d0100FUNC<unknown>DEFAULT2
                                                                          __libc_read.symtab0x1a7f0100FUNC<unknown>DEFAULT2
                                                                          __libc_recv.symtab0x175e0112FUNC<unknown>DEFAULT2
                                                                          __libc_recvfrom.symtab0x17698136FUNC<unknown>DEFAULT2
                                                                          __libc_select.symtab0x13910132FUNC<unknown>DEFAULT2
                                                                          __libc_send.symtab0x17764112FUNC<unknown>DEFAULT2
                                                                          __libc_sendto.symtab0x17820136FUNC<unknown>DEFAULT2
                                                                          __libc_setup_tls.symtab0x1e8f0560FUNC<unknown>DEFAULT2
                                                                          __libc_sigaction.symtab0x13370136FUNC<unknown>DEFAULT2
                                                                          __libc_siglongjmp.symtab0x1377056FUNC<unknown>DEFAULT2
                                                                          __libc_stack_end.symtab0x2db6c4OBJECT<unknown>DEFAULT14
                                                                          __libc_write.symtab0x1a760100FUNC<unknown>DEFAULT2
                                                                          __lll_lock_wait_private.symtab0x1a408152FUNC<unknown>HIDDEN2
                                                                          __longjmp.symtab0x1afc420FUNC<unknown>DEFAULT2
                                                                          __ltdf2.symtab0x11cd8140FUNC<unknown>HIDDEN2
                                                                          __malloc_consolidate.symtab0x18a28436FUNC<unknown>HIDDEN2
                                                                          __malloc_largebin_index.symtab0x17ac8120FUNC<unknown>DEFAULT2
                                                                          __malloc_lock.symtab0x2b4a024OBJECT<unknown>DEFAULT13
                                                                          __malloc_state.symtab0x36190888OBJECT<unknown>DEFAULT14
                                                                          __malloc_trim.symtab0x18978176FUNC<unknown>DEFAULT2
                                                                          __muldf3.symtab0x11834656FUNC<unknown>HIDDEN2
                                                                          __nedf2.symtab0x11ce0132FUNC<unknown>HIDDEN2
                                                                          __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __open.symtab0x1a6d0100FUNC<unknown>DEFAULT2
                                                                          __open_nocancel.symtab0x1a6b424FUNC<unknown>DEFAULT2
                                                                          __pagesize.symtab0x2db744OBJECT<unknown>DEFAULT14
                                                                          __preinit_array_end.symtab0x2b0400NOTYPE<unknown>HIDDEN8
                                                                          __preinit_array_start.symtab0x2b0400NOTYPE<unknown>HIDDEN8
                                                                          __progname.symtab0x2b5984OBJECT<unknown>DEFAULT13
                                                                          __progname_full.symtab0x2b59c4OBJECT<unknown>DEFAULT13
                                                                          __psfs_do_numeric.symtab0x1d5381392FUNC<unknown>HIDDEN2
                                                                          __psfs_do_numeric.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __psfs_parse_spec.symtab0x1d274708FUNC<unknown>HIDDEN2
                                                                          __psfs_parse_spec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __pthread_initialize_minimal.symtab0x1eb2012FUNC<unknown>DEFAULT2
                                                                          __pthread_mutex_init.symtab0x1a9cc8FUNC<unknown>DEFAULT2
                                                                          __pthread_mutex_lock.symtab0x1a9c48FUNC<unknown>DEFAULT2
                                                                          __pthread_mutex_trylock.symtab0x1a9c48FUNC<unknown>DEFAULT2
                                                                          __pthread_mutex_unlock.symtab0x1a9c48FUNC<unknown>DEFAULT2
                                                                          __pthread_return_0.symtab0x1a9c48FUNC<unknown>DEFAULT2
                                                                          __pthread_unwind.symtab0x1116c84FUNC<unknown>DEFAULT2
                                                                          __pthread_unwind_next.symtab0x111c016FUNC<unknown>DEFAULT2
                                                                          __read.symtab0x1a7f0100FUNC<unknown>DEFAULT2
                                                                          __read_nocancel.symtab0x1a7d424FUNC<unknown>DEFAULT2
                                                                          __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                                          __restore_core_regs.symtab0x12ae028FUNC<unknown>HIDDEN2
                                                                          __rtld_fini.symtab0x2db7c4OBJECT<unknown>HIDDEN14
                                                                          __scan_cookie.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __scan_getc.symtab0x1d1ac132FUNC<unknown>HIDDEN2
                                                                          __scan_ungetc.symtab0x1d23068FUNC<unknown>HIDDEN2
                                                                          __sigaction.symtab0x1110076FUNC<unknown>DEFAULT2
                                                                          __sigaddset.symtab0x17a8036FUNC<unknown>DEFAULT2
                                                                          __sigdelset.symtab0x17aa436FUNC<unknown>DEFAULT2
                                                                          __sigismember.symtab0x17a5c36FUNC<unknown>DEFAULT2
                                                                          __sigjmp_save.symtab0x1f4f064FUNC<unknown>HIDDEN2
                                                                          __sigsetjmp.symtab0x1ec1412FUNC<unknown>DEFAULT2
                                                                          __stdin.symtab0x2b3c44OBJECT<unknown>DEFAULT13
                                                                          __stdio_READ.symtab0x1f2c088FUNC<unknown>HIDDEN2
                                                                          __stdio_WRITE.symtab0x1bbfc220FUNC<unknown>HIDDEN2
                                                                          __stdio_adjust_position.symtab0x1f318200FUNC<unknown>HIDDEN2
                                                                          __stdio_fwrite.symtab0x1bcd8320FUNC<unknown>HIDDEN2
                                                                          __stdio_rfill.symtab0x1f3e048FUNC<unknown>HIDDEN2
                                                                          __stdio_seek.symtab0x1f4b460FUNC<unknown>HIDDEN2
                                                                          __stdio_trans2r_o.symtab0x1f410164FUNC<unknown>HIDDEN2
                                                                          __stdio_trans2w_o.symtab0x1be18220FUNC<unknown>HIDDEN2
                                                                          __stdio_wcommit.symtab0x14b6048FUNC<unknown>HIDDEN2
                                                                          __stdout.symtab0x2b3c84OBJECT<unknown>DEFAULT13
                                                                          __strtofpmax.symtab0x1e440940FUNC<unknown>HIDDEN2
                                                                          __strtofpmax.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __subdf3.symtab0x11420788FUNC<unknown>HIDDEN2
                                                                          __sys_connect.symtab0x1745868FUNC<unknown>DEFAULT2
                                                                          __sys_recv.symtab0x1759c68FUNC<unknown>DEFAULT2
                                                                          __sys_recvfrom.symtab0x1765072FUNC<unknown>DEFAULT2
                                                                          __sys_send.symtab0x1772068FUNC<unknown>DEFAULT2
                                                                          __sys_sendto.symtab0x177d476FUNC<unknown>DEFAULT2
                                                                          __syscall_error.symtab0x1af9844FUNC<unknown>HIDDEN2
                                                                          __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __syscall_nanosleep.symtab0x137a864FUNC<unknown>DEFAULT2
                                                                          __syscall_rt_sigaction.symtab0x1359c64FUNC<unknown>DEFAULT2
                                                                          __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __syscall_select.symtab0x138cc68FUNC<unknown>DEFAULT2
                                                                          __tls_get_addr.symtab0x1e8cc36FUNC<unknown>DEFAULT2
                                                                          __truncdfsf2.symtab0x1f738160FUNC<unknown>HIDDEN2
                                                                          __uClibc_fini.symtab0x1aa08124FUNC<unknown>DEFAULT2
                                                                          __uClibc_init.symtab0x1aad888FUNC<unknown>DEFAULT2
                                                                          __uClibc_main.symtab0x1ab301004FUNC<unknown>DEFAULT2
                                                                          __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __uclibc_progname.symtab0x2b5944OBJECT<unknown>HIDDEN13
                                                                          __udivsi3.symtab0x11304252FUNC<unknown>HIDDEN2
                                                                          __write.symtab0x1a760100FUNC<unknown>DEFAULT2
                                                                          __write_nocancel.symtab0x1a74424FUNC<unknown>DEFAULT2
                                                                          __xpg_strerror_r.symtab0x16b5c268FUNC<unknown>DEFAULT2
                                                                          __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          __xstat32_conv.symtab0x1b558172FUNC<unknown>HIDDEN2
                                                                          __xstat64_conv.symtab0x1b48c204FUNC<unknown>HIDDEN2
                                                                          _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _atoi.symtab0x10e4468FUNC<unknown>DEFAULT2
                                                                          _bss_custom_printf_spec.symtab0x2d61010OBJECT<unknown>DEFAULT14
                                                                          _bss_end__.symtab0x3653c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          _charpad.symtab0x14cd484FUNC<unknown>DEFAULT2
                                                                          _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                                          _custom_printf_arginfo.symtab0x3613840OBJECT<unknown>HIDDEN14
                                                                          _custom_printf_handler.symtab0x3616040OBJECT<unknown>HIDDEN14
                                                                          _custom_printf_spec.symtab0x2b49c4OBJECT<unknown>HIDDEN13
                                                                          _dl_aux_init.symtab0x1eb2c56FUNC<unknown>DEFAULT2
                                                                          _dl_nothread_init_static_tls.symtab0x1eb6488FUNC<unknown>HIDDEN2
                                                                          _dl_phdr.symtab0x365344OBJECT<unknown>DEFAULT14
                                                                          _dl_phnum.symtab0x365384OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_dtv_gaps.symtab0x365281OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_dtv_slotinfo_list.symtab0x365244OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_generation.symtab0x3652c4OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_max_dtv_idx.symtab0x3651c4OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_setup.symtab0x1e864104FUNC<unknown>DEFAULT2
                                                                          _dl_tls_static_align.symtab0x365184OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_static_nelem.symtab0x365304OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_static_size.symtab0x365204OBJECT<unknown>DEFAULT14
                                                                          _dl_tls_static_used.symtab0x365144OBJECT<unknown>DEFAULT14
                                                                          _edata.symtab0x2b5a00NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          _end.symtab0x3653c0NOTYPE<unknown>DEFAULTSHN_ABS
                                                                          _exit.symtab0x1afe0104FUNC<unknown>DEFAULT2
                                                                          _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS

                                                                          Network Behavior

                                                                          Download Network PCAP: filtered – full

                                                                          Network Port Distribution

                                                                          • Total Packets: 77
                                                                          • • 7733 undefined
                                                                          • • 2211 undefined
                                                                          • • 443 (HTTPS)
                                                                          • • 80 (HTTP)
                                                                          • • 53 (DNS)
                                                                          TimestampSource PortDest PortSource IPDest IP
                                                                          Mar 26, 2025 21:19:10.411884069 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:10.596383095 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:10.596437931 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:10.611757994 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:10.795319080 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:12.571944952 CET42836443192.168.2.2391.189.91.43
                                                                          Mar 26, 2025 21:19:13.851787090 CET4251680192.168.2.23109.202.202.202
                                                                          Mar 26, 2025 21:19:15.544512987 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:15.544612885 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:15.544687986 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.166913986 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.166992903 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.369287968 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.369398117 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.369688034 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.369699955 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.369950056 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.369961023 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.370073080 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.370106936 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.370116949 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.370150089 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.370521069 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.412264109 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539143085 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539227009 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539339066 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539340019 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539340019 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539391994 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539426088 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539450884 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539478064 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539478064 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539479017 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539479017 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539503098 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539530993 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539554119 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539563894 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539565086 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539563894 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539581060 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539603949 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539628983 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539629936 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539649963 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539670944 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539701939 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539702892 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539721012 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539764881 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539767027 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539767027 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539767027 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539799929 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539799929 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539800882 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539849043 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539858103 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539871931 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539871931 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539881945 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539932966 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.539971113 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.539971113 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.540004969 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.540040970 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:20.540132999 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:20.540148020 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:21.011987925 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:21.012084961 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:21.012132883 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:21.012161016 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:21.012187004 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:21.012213945 CET44337602162.213.35.24192.168.2.23
                                                                          Mar 26, 2025 21:19:21.013158083 CET37602443192.168.2.23162.213.35.24
                                                                          Mar 26, 2025 21:19:25.821810007 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:25.821875095 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:26.846890926 CET39250443192.168.2.2334.249.145.219
                                                                          Mar 26, 2025 21:19:26.846930027 CET4433925034.249.145.219192.168.2.23
                                                                          Mar 26, 2025 21:19:26.846982002 CET39250443192.168.2.2334.249.145.219
                                                                          Mar 26, 2025 21:19:26.847429991 CET39250443192.168.2.2334.249.145.219
                                                                          Mar 26, 2025 21:19:26.847439051 CET4433925034.249.145.219192.168.2.23
                                                                          Mar 26, 2025 21:19:28.953898907 CET43928443192.168.2.2391.189.91.42
                                                                          Mar 26, 2025 21:19:35.215645075 CET419082211192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:35.397330046 CET221141908141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:35.397548914 CET419082211192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:35.399194002 CET419082211192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:35.580939054 CET221141908141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:35.581110954 CET419082211192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:35.763324022 CET221141908141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:39.192564011 CET42836443192.168.2.2391.189.91.43
                                                                          Mar 26, 2025 21:19:41.008925915 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:41.009120941 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:43.288043976 CET4251680192.168.2.23109.202.202.202
                                                                          Mar 26, 2025 21:19:50.764870882 CET221141908141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:50.765048981 CET419082211192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:51.942620993 CET221141908141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:51.943638086 CET419082211192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:19:52.125566959 CET221141908141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:56.194231033 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:19:56.194317102 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:20:09.908595085 CET43928443192.168.2.2391.189.91.42
                                                                          Mar 26, 2025 21:20:11.389103889 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:20:11.389240980 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:20:26.575695038 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:20:26.575773954 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:20:26.839710951 CET39250443192.168.2.2334.249.145.219
                                                                          Mar 26, 2025 21:20:26.880279064 CET4433925034.249.145.219192.168.2.23
                                                                          Mar 26, 2025 21:20:41.761351109 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:20:41.761420965 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:20:56.958004951 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:20:56.958096027 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:21:12.141791105 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:21:12.141851902 CET506227733192.168.2.23141.98.10.142
                                                                          Mar 26, 2025 21:21:27.330832005 CET773350622141.98.10.142192.168.2.23
                                                                          Mar 26, 2025 21:21:27.330945969 CET506227733192.168.2.23141.98.10.142
                                                                          TimestampSource PortDest PortSource IPDest IP
                                                                          Mar 26, 2025 21:19:10.100369930 CET3836953192.168.2.238.8.8.8
                                                                          Mar 26, 2025 21:19:10.184345961 CET53383698.8.8.8192.168.2.23
                                                                          Mar 26, 2025 21:19:10.190418959 CET4947953192.168.2.238.8.8.8
                                                                          Mar 26, 2025 21:19:14.884491920 CET3346153192.168.2.231.1.1.1
                                                                          Mar 26, 2025 21:19:14.884567022 CET5954553192.168.2.231.1.1.1
                                                                          Mar 26, 2025 21:19:14.967853069 CET53595451.1.1.1192.168.2.23
                                                                          Mar 26, 2025 21:19:14.967910051 CET53334611.1.1.1192.168.2.23
                                                                          Mar 26, 2025 21:19:15.197233915 CET3700453192.168.2.238.8.8.8
                                                                          Mar 26, 2025 21:19:15.435872078 CET5537253192.168.2.231.1.1.1
                                                                          Mar 26, 2025 21:19:15.518846035 CET53553721.1.1.1192.168.2.23
                                                                          Mar 26, 2025 21:19:20.202512026 CET4324253192.168.2.238.8.8.8
                                                                          Mar 26, 2025 21:19:25.207943916 CET3887453192.168.2.238.8.8.8
                                                                          Mar 26, 2025 21:19:30.210509062 CET4816653192.168.2.238.8.8.8
                                                                          Mar 26, 2025 21:19:52.946475983 CET5519253192.168.2.238.8.8.8
                                                                          Mar 26, 2025 21:19:53.030040979 CET53551928.8.8.8192.168.2.23
                                                                          TimestampSource IPDest IPChecksumCodeType
                                                                          Mar 26, 2025 21:19:16.026621103 CET192.168.2.23192.168.2.18283(Port unreachable)Destination Unreachable
                                                                          Mar 26, 2025 21:20:36.040514946 CET192.168.2.23192.168.2.18283(Port unreachable)Destination Unreachable

                                                                          DNS Queries

                                                                          TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                          Mar 26, 2025 21:19:10.100369930 CET192.168.2.238.8.8.80x8056Standard query (0)raw.awaken-network.netA (IP address)IN (0x0001)false
                                                                          Mar 26, 2025 21:19:10.190418959 CET192.168.2.238.8.8.80xdb1eStandard query (0)raw.awaken-network.net. [malformed]256318false
                                                                          Mar 26, 2025 21:19:14.884491920 CET192.168.2.231.1.1.10xea2dStandard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                                                                          Mar 26, 2025 21:19:14.884567022 CET192.168.2.231.1.1.10xe55dStandard query (0)daisy.ubuntu.com28IN (0x0001)false
                                                                          Mar 26, 2025 21:19:15.197233915 CET192.168.2.238.8.8.80xdb1eStandard query (0)raw.awaken-network.net. [malformed]256323false
                                                                          Mar 26, 2025 21:19:15.435872078 CET192.168.2.231.1.1.10x2296Standard query (0)daisy.ubuntu.com28IN (0x0001)false
                                                                          Mar 26, 2025 21:19:20.202512026 CET192.168.2.238.8.8.80xdb1eStandard query (0)raw.awaken-network.net. [malformed]256328false
                                                                          Mar 26, 2025 21:19:25.207943916 CET192.168.2.238.8.8.80xdb1eStandard query (0)raw.awaken-network.net. [malformed]256333false
                                                                          Mar 26, 2025 21:19:30.210509062 CET192.168.2.238.8.8.80xdb1eStandard query (0)raw.awaken-network.net. [malformed]256343false

                                                                          DNS Answers

                                                                          TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                          Mar 26, 2025 21:19:10.184345961 CET8.8.8.8192.168.2.230x8056No error (0)raw.awaken-network.net141.98.10.142A (IP address)IN (0x0001)false
                                                                          Mar 26, 2025 21:19:14.967910051 CET1.1.1.1192.168.2.230xea2dNo error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false
                                                                          Mar 26, 2025 21:19:14.967910051 CET1.1.1.1192.168.2.230xea2dNo error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false

                                                                          HTTP Request Dependency Graph

                                                                          • daisy.ubuntu.com

                                                                          HTTPS Proxied Packets

                                                                          Session IDSource IPSource PortDestination IPDestination Port
                                                                          0192.168.2.2337602162.213.35.24443
                                                                          TimestampBytes transferredDirectionData
                                                                          2025-03-26 20:19:20 UTC307OUTPOST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1
                                                                          Host: daisy.ubuntu.com
                                                                          Accept: */*
                                                                          Content-Type: application/octet-stream
                                                                          X-Whoopsie-Version: 0.2.69ubuntu0.3
                                                                          Content-Length: 164887
                                                                          Expect: 100-continue
                                                                          2025-03-26 20:19:20 UTC25INHTTP/1.1 100 Continue
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61
                                                                          Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c
                                                                          Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20
                                                                          Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75
                                                                          Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34
                                                                          Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67
                                                                          Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37
                                                                          Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73
                                                                          Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72
                                                                          Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
                                                                          2025-03-26 20:19:20 UTC16384OUTData Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35
                                                                          Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) Option "_source" "server/udev"Aug 17 20:25
                                                                          2025-03-26 20:19:21 UTC279INHTTP/1.1 400 Bad Request
                                                                          Date: Wed, 26 Mar 2025 20:19:20 GMT
                                                                          Server: gunicorn/19.7.1
                                                                          X-Daisy-Revision-Number: 979
                                                                          X-Oops-Repository-Version: 0.0.0
                                                                          Strict-Transport-Security: max-age=2592000
                                                                          Connection: close
                                                                          Transfer-Encoding: chunked
                                                                          17
                                                                          Crash already reported.
                                                                          0


                                                                          System Behavior

                                                                          General

                                                                          Start time (UTC):20:19:08
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/tmp/efefa7.elf
                                                                          Arguments:/tmp/efefa7.elf
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                          File Activities

                                                                          Process Activities

                                                                          System Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/tmp/efefa7.elf
                                                                          Arguments:-
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                          File Activities

                                                                          Process Activities

                                                                          Network Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/tmp/efefa7.elf
                                                                          Arguments:-
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                          File Activities

                                                                          Process Activities

                                                                          Network Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/tmp/efefa7.elf
                                                                          Arguments:-
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                          File Activities

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/tmp/efefa7.elf
                                                                          Arguments:-
                                                                          File size:4956856 bytes
                                                                          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                                          File Activities

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/lib/systemd/systemd
                                                                          Arguments:-
                                                                          File size:1620224 bytes
                                                                          MD5 hash:9b2bec7092a40488108543f9334aab75

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/bin/dbus-daemon
                                                                          Arguments:/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
                                                                          File size:249032 bytes
                                                                          MD5 hash:3089d47e3f3ab84cd81c48fd406d7a8c

                                                                          File Activities

                                                                          Process Activities

                                                                          Network Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/lib/systemd/systemd
                                                                          Arguments:-
                                                                          File size:1620224 bytes
                                                                          MD5 hash:9b2bec7092a40488108543f9334aab75

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:19:09
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/bin/pulseaudio
                                                                          Arguments:/usr/bin/pulseaudio --daemonize=no --log-target=journal
                                                                          File size:100832 bytes
                                                                          MD5 hash:0c3b4c789d8ffb12b25507f27e14c186

                                                                          File Activities

                                                                          Process Activities

                                                                          System Activities

                                                                          Network Activities


                                                                          General

                                                                          Start time (UTC):20:19:12
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/lib/systemd/systemd
                                                                          Arguments:-
                                                                          File size:1620224 bytes
                                                                          MD5 hash:9b2bec7092a40488108543f9334aab75

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:19:12
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/lib/systemd/systemd-logind
                                                                          Arguments:/lib/systemd/systemd-logind
                                                                          File size:268576 bytes
                                                                          MD5 hash:8dd58a1b4c12f7a1d5fe3ce18b2aaeef

                                                                          File Activities

                                                                          Process Activities

                                                                          Network Activities


                                                                          General

                                                                          Start time (UTC):20:19:12
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/lib/systemd/systemd
                                                                          Arguments:-
                                                                          File size:1620224 bytes
                                                                          MD5 hash:9b2bec7092a40488108543f9334aab75

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:19:12
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/libexec/rtkit-daemon
                                                                          Arguments:/usr/libexec/rtkit-daemon
                                                                          File size:68096 bytes
                                                                          MD5 hash:df0cacf1db4ec95ac70f5b6e06b8ffd7

                                                                          File Activities

                                                                          Process Activities

                                                                          Network Activities


                                                                          General

                                                                          Start time (UTC):20:19:13
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/lib/systemd/systemd
                                                                          Arguments:-
                                                                          File size:1620224 bytes
                                                                          MD5 hash:9b2bec7092a40488108543f9334aab75

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:19:13
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/lib/policykit-1/polkitd
                                                                          Arguments:/usr/lib/policykit-1/polkitd --no-debug
                                                                          File size:121504 bytes
                                                                          MD5 hash:8efc9b4b5b524210ad2ea1954a9d0e69

                                                                          File Activities

                                                                          Process Activities

                                                                          Network Activities


                                                                          General

                                                                          Start time (UTC):20:20:26
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/bin/dash
                                                                          Arguments:-
                                                                          File size:129816 bytes
                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:20:26
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/bin/rm
                                                                          Arguments:rm -f /tmp/tmp.8KEHWJ9YVU /tmp/tmp.CwaW8b0xBl /tmp/tmp.5ns041sVgK
                                                                          File size:72056 bytes
                                                                          MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                                                                          File Activities


                                                                          General

                                                                          Start time (UTC):20:20:26
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/bin/dash
                                                                          Arguments:-
                                                                          File size:129816 bytes
                                                                          MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                                          Process Activities


                                                                          General

                                                                          Start time (UTC):20:20:26
                                                                          Start date (UTC):26/03/2025
                                                                          Path:/usr/bin/rm
                                                                          Arguments:rm -f /tmp/tmp.8KEHWJ9YVU /tmp/tmp.CwaW8b0xBl /tmp/tmp.5ns041sVgK
                                                                          File size:72056 bytes
                                                                          MD5 hash:aa2b5496fdbfd88e38791ab81f90b95b

                                                                          File Activities