Edit tour

Linux Analysis Report
FederalAgent.arm7.elf

Overview

General Information

Sample name:FederalAgent.arm7.elf
Analysis ID:1653884
MD5:fd5cff042ad108a850a643552a1c2033
SHA1:c41cfda47cd7b1606691a452825773e78d89b26c
SHA256:247a1fe57cfbf437d16ce550531f22252af2e9fdeebd3a381234929270ae54c8
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:76
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Mirai
Contains symbols with names commonly found in malware
Sample and/or dropped files contains symbols with suspicious names
Sample listens on a socket
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1653884
Start date and time:2025-04-01 17:49:05 +02:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 29s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:FederalAgent.arm7.elf
Detection:MAL
Classification:mal76.troj.linELF@0/0@2/0
Command:/tmp/FederalAgent.arm7.elf
PID:5432
Exit Code:139
Exit Code Info:SIGSEGV (11) Segmentation fault invalid memory reference
Killed:False
Standard Output:

Standard Error:qemu: uncaught target signal 11 (Segmentation fault) - core dumped
  • system is lnxubuntu20
  • FederalAgent.arm7.elf (PID: 5432, Parent: 5354, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/FederalAgent.arm7.elf
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
FederalAgent.arm7.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
    FederalAgent.arm7.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
    • 0x16678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x1668c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x166a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x166b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x166c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x166dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    • 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
    SourceRuleDescriptionAuthorStrings
    5432.1.00007fa0a4017000.00007fa0a4031000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      5432.1.00007fa0a4017000.00007fa0a4031000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
      • 0x16678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1668c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x166a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x166b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x166c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x166dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      Process Memory Space: FederalAgent.arm7.elf PID: 5432JoeSecurity_Mirai_8Yara detected MiraiJoe Security
        Process Memory Space: FederalAgent.arm7.elf PID: 5432Linux_Trojan_Gafgyt_28a2fe0cunknownunknown
        • 0x143d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1451:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1465:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1479:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x148d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14a1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14b5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14c9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x14f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1505:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1519:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x152d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1541:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1555:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1569:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x157d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x1591:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x15a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x15b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        • 0x15cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
        No Suricata rule has matched

        Click to jump to signature section

        Show All Signature Results

        AV Detection

        barindex
        Source: FederalAgent.arm7.elfAvira: detected
        Source: FederalAgent.arm7.elfVirustotal: Detection: 57%Perma Link
        Source: FederalAgent.arm7.elfReversingLabs: Detection: 55%
        Source: /tmp/FederalAgent.arm7.elf (PID: 5432)Socket: 192.168.2.13:9473Jump to behavior
        Source: global trafficTCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443
        Source: unknownTCP traffic detected without corresponding DNS query: 185.125.190.26
        Source: unknownTCP traffic detected without corresponding DNS query: 185.125.190.26
        Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
        Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
        Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com
        Source: unknownNetwork traffic detected: HTTP traffic on port 48202 -> 443

        System Summary

        barindex
        Source: FederalAgent.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
        Source: 5432.1.00007fa0a4017000.00007fa0a4031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
        Source: Process Memory Space: FederalAgent.arm7.elf PID: 5432, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
        Source: ELF static info symbol of initial sampleName: attack.c
        Source: ELF static info symbol of initial sampleName: attack_get_opt_int
        Source: ELF static info symbol of initial sampleName: attack_get_opt_ip
        Source: ELF static info symbol of initial sampleName: attack_gre_ip
        Source: ELF static info symbol of initial sampleName: attack_init
        Source: ELF static info symbol of initial sampleName: attack_method.c
        Source: ELF static info symbol of initial sampleName: attack_method_nudp
        Source: ELF static info symbol of initial sampleName: attack_method_ovhudp
        Source: ELF static info symbol of initial sampleName: attack_method_std
        Source: ELF static info symbol of initial sampleName: attack_method_stdhex
        Source: FederalAgent.arm7.elfELF static info symbol of initial sample: __gnu_unwind_execute
        Source: FederalAgent.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
        Source: 5432.1.00007fa0a4017000.00007fa0a4031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
        Source: Process Memory Space: FederalAgent.arm7.elf PID: 5432, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
        Source: classification engineClassification label: mal76.troj.linELF@0/0@2/0
        Source: /tmp/FederalAgent.arm7.elf (PID: 5432)Queries kernel information via 'uname': Jump to behavior
        Source: FederalAgent.arm7.elf, 5432.1.0000557e47c3d000.0000557e47d6b000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
        Source: FederalAgent.arm7.elf, 5432.1.00007ffd0b7d8000.00007ffd0b7f9000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
        Source: FederalAgent.arm7.elf, 5432.1.0000557e47c3d000.0000557e47d6b000.rw-.sdmpBinary or memory string: G~U!/etc/qemu-binfmt/arm
        Source: FederalAgent.arm7.elf, 5432.1.00007ffd0b7d8000.00007ffd0b7f9000.rw-.sdmpBinary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped
        Source: FederalAgent.arm7.elf, 5432.1.00007ffd0b7d8000.00007ffd0b7f9000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/FederalAgent.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/FederalAgent.arm7.elf

        Stealing of Sensitive Information

        barindex
        Source: Yara matchFile source: FederalAgent.arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 5432.1.00007fa0a4017000.00007fa0a4031000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: Process Memory Space: FederalAgent.arm7.elf PID: 5432, type: MEMORYSTR

        Remote Access Functionality

        barindex
        Source: Yara matchFile source: FederalAgent.arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 5432.1.00007fa0a4017000.00007fa0a4031000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: Process Memory Space: FederalAgent.arm7.elf PID: 5432, type: MEMORYSTR
        ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
        Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
        Masquerading
        OS Credential Dumping11
        Security Software Discovery
        Remote ServicesData from Local System1
        Encrypted Channel
        Exfiltration Over Other Network MediumAbuse Accessibility Features
        CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
        Non-Application Layer Protocol
        Exfiltration Over BluetoothNetwork Denial of Service
        Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive2
        Application Layer Protocol
        Automated ExfiltrationData Encrypted for Impact
        No configs have been found
        Hide Legend

        Legend:

        • Process
        • Signature
        • Created File
        • DNS/IP Info
        • Is Dropped
        • Number of created Files
        • Is malicious
        • Internet
        behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1653884 Sample: FederalAgent.arm7.elf Startdate: 01/04/2025 Architecture: LINUX Score: 76 8 185.125.190.26, 443 CANONICAL-ASGB United Kingdom 2->8 10 daisy.ubuntu.com 2->10 12 Malicious sample detected (through community Yara rule) 2->12 14 Antivirus / Scanner detection for submitted sample 2->14 16 Multi AV Scanner detection for submitted file 2->16 18 2 other signatures 2->18 6 FederalAgent.arm7.elf 2->6         started        signatures3 process4
        SourceDetectionScannerLabelLink
        FederalAgent.arm7.elf57%VirustotalBrowse
        FederalAgent.arm7.elf56%ReversingLabsLinux.Exploit.Mirai
        FederalAgent.arm7.elf100%AviraEXP/ELF.Mirai.Z.A
        No Antivirus matches
        No Antivirus matches
        No Antivirus matches

        Download Network PCAP: filteredfull

        NameIPActiveMaliciousAntivirus DetectionReputation
        daisy.ubuntu.com
        162.213.35.24
        truefalse
          high
          • No. of IPs < 25%
          • 25% < No. of IPs < 50%
          • 50% < No. of IPs < 75%
          • 75% < No. of IPs
          IPDomainCountryFlagASNASN NameMalicious
          185.125.190.26
          unknownUnited Kingdom
          41231CANONICAL-ASGBfalse
          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
          185.125.190.26FederalAgent.m68k.elfGet hashmaliciousMiraiBrowse
            FederalAgent.x86.elfGet hashmaliciousMiraiBrowse
              na.elfGet hashmaliciousPrometeiBrowse
                tftp.elfGet hashmaliciousUnknownBrowse
                  main_ppc.elfGet hashmaliciousMiraiBrowse
                    main_arm5.elfGet hashmaliciousMiraiBrowse
                      na.elfGet hashmaliciousPrometeiBrowse
                        ub8ehJSePAfc9FYqZIT6.m68k.elfGet hashmaliciousMiraiBrowse
                          na.elfGet hashmaliciousPrometeiBrowse
                            miraint.arm64.elfGet hashmaliciousMiraiBrowse
                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                              daisy.ubuntu.comFederalAgent.sh4.elfGet hashmaliciousMiraiBrowse
                              • 162.213.35.24
                              FederalAgent.m68k.elfGet hashmaliciousMiraiBrowse
                              • 162.213.35.25
                              FederalAgent.x86.elfGet hashmaliciousMiraiBrowse
                              • 162.213.35.24
                              most-mpsl.elfGet hashmaliciousMiraiBrowse
                              • 162.213.35.25
                              most-mips.elfGet hashmaliciousMiraiBrowse
                              • 162.213.35.25
                              tftp.elfGet hashmaliciousUnknownBrowse
                              • 162.213.35.24
                              .i.elfGet hashmaliciousUnknownBrowse
                              • 162.213.35.25
                              main_arm6.elfGet hashmaliciousMiraiBrowse
                              • 162.213.35.25
                              socatGet hashmaliciousUnknownBrowse
                              • 162.213.35.24
                              killua.x86_64.elfGet hashmaliciousUnknownBrowse
                              • 162.213.35.25
                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                              CANONICAL-ASGBFederalAgent.m68k.elfGet hashmaliciousMiraiBrowse
                              • 185.125.190.26
                              FederalAgent.arm6.elfGet hashmaliciousMiraiBrowse
                              • 91.189.91.42
                              FederalAgent.x86.elfGet hashmaliciousMiraiBrowse
                              • 185.125.190.26
                              na.elfGet hashmaliciousPrometeiBrowse
                              • 91.189.91.42
                              na.elfGet hashmaliciousPrometeiBrowse
                              • 91.189.91.42
                              na.elfGet hashmaliciousPrometeiBrowse
                              • 185.125.190.26
                              most-arm6.elfGet hashmaliciousMiraiBrowse
                              • 91.189.91.42
                              most-arm5.elfGet hashmaliciousUnknownBrowse
                              • 91.189.91.42
                              na.elfGet hashmaliciousPrometeiBrowse
                              • 91.189.91.42
                              tftp.elfGet hashmaliciousUnknownBrowse
                              • 185.125.190.26
                              No context
                              No context
                              No created / dropped files found
                              File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                              Entropy (8bit):6.05354977215728
                              TrID:
                              • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                              File name:FederalAgent.arm7.elf
                              File size:166'176 bytes
                              MD5:fd5cff042ad108a850a643552a1c2033
                              SHA1:c41cfda47cd7b1606691a452825773e78d89b26c
                              SHA256:247a1fe57cfbf437d16ce550531f22252af2e9fdeebd3a381234929270ae54c8
                              SHA512:7ee25de432117c65b64b1b4dcc3b09e4ea1be9bc10fe6a8a5415980641352f0bbca00438fc7e0c48998d2569ed1aba1df0635e61c0d7e0896876cbf09a64a4ae
                              SSDEEP:3072:N1Bqt1DnUX2q8JccaBtvagZuJIDDZ6So431SusJ1M/9OhMi+umqwbsQhR:fBqt1DUh8+caBtvagZSIgbG1SuMM/9W+
                              TLSH:32F35D46FA414B13C4D61776BADF42453322A7A4D3DB73069928AFB43F8769F0E23A05
                              File Content Preview:.ELF..............(.........4...........4. ...(........p(...(...(...................................@...@...............@...@...@........x..............D...D...D...................Q.td..................................-...L..................@-.,@...0....S

                              ELF header

                              Class:ELF32
                              Data:2's complement, little endian
                              Version:1 (current)
                              Machine:ARM
                              Version Number:0x1
                              Type:EXEC (Executable file)
                              OS/ABI:UNIX - System V
                              ABI Version:0
                              Entry Point Address:0x8194
                              Flags:0x4000002
                              ELF Header Size:52
                              Program Header Offset:52
                              Program Header Size:32
                              Number of Program Headers:5
                              Section Header Offset:132368
                              Section Header Size:40
                              Number of Section Headers:29
                              Header String Table Index:26
                              NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                              NULL0x00x00x00x00x0000
                              .initPROGBITS0x80d40xd40x100x00x6AX004
                              .textPROGBITS0x80f00xf00x165740x00x6AX0016
                              .finiPROGBITS0x1e6640x166640x100x00x6AX004
                              .rodataPROGBITS0x1e6780x166780x2d980x00x2A008
                              .ARM.extabPROGBITS0x214100x194100x180x00x2A004
                              .ARM.exidxARM_EXIDX0x214280x194280x1180x00x82AL204
                              .eh_framePROGBITS0x295400x195400x40x00x3WA004
                              .tbssNOBITS0x295440x195440x80x00x403WAT004
                              .init_arrayINIT_ARRAY0x295440x195440x40x00x3WA004
                              .fini_arrayFINI_ARRAY0x295480x195480x40x00x3WA004
                              .jcrPROGBITS0x2954c0x1954c0x40x00x3WA004
                              .gotPROGBITS0x295500x195500xac0x40x3WA004
                              .dataPROGBITS0x295fc0x195fc0x7100x00x3WA004
                              .bssNOBITS0x29d0c0x19d0c0x712c0x00x3WA004
                              .commentPROGBITS0x00x19d0c0xb7a0x00x0001
                              .debug_arangesPROGBITS0x00x1a8880x1400x00x0008
                              .debug_pubnamesPROGBITS0x00x1a9c80x2130x00x0001
                              .debug_infoPROGBITS0x00x1abdb0x20430x00x0001
                              .debug_abbrevPROGBITS0x00x1cc1e0x6e20x00x0001
                              .debug_linePROGBITS0x00x1d3000xe760x00x0001
                              .debug_framePROGBITS0x00x1e1780x2b80x00x0004
                              .debug_strPROGBITS0x00x1e4300x8ca0x10x30MS001
                              .debug_locPROGBITS0x00x1ecfa0x118f0x00x0001
                              .debug_rangesPROGBITS0x00x1fe890x5580x00x0001
                              .ARM.attributesARM_ATTRIBUTES0x00x203e10x160x00x0001
                              .shstrtabSTRTAB0x00x203f70x1170x00x0001
                              .symtabSYMTAB0x00x209980x54800x100x0287744
                              .strtabSTRTAB0x00x25e180x2b080x00x0001
                              TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                              EXIDX0x194280x214280x214280x1180x1184.48220x4R 0x4.ARM.exidx
                              LOAD0x00x80000x80000x195400x195406.21030x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                              LOAD0x195400x295400x295400x7cc0x78f84.62590x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                              TLS0x195440x295440x295440x00x80.00000x4R 0x4.tbss
                              GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                              NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                              .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              .symtab0x80d40SECTION<unknown>DEFAULT1
                              .symtab0x80f00SECTION<unknown>DEFAULT2
                              .symtab0x1e6640SECTION<unknown>DEFAULT3
                              .symtab0x1e6780SECTION<unknown>DEFAULT4
                              .symtab0x214100SECTION<unknown>DEFAULT5
                              .symtab0x214280SECTION<unknown>DEFAULT6
                              .symtab0x295400SECTION<unknown>DEFAULT7
                              .symtab0x295440SECTION<unknown>DEFAULT8
                              .symtab0x295440SECTION<unknown>DEFAULT9
                              .symtab0x295480SECTION<unknown>DEFAULT10
                              .symtab0x2954c0SECTION<unknown>DEFAULT11
                              .symtab0x295500SECTION<unknown>DEFAULT12
                              .symtab0x295fc0SECTION<unknown>DEFAULT13
                              .symtab0x29d0c0SECTION<unknown>DEFAULT14
                              .symtab0x00SECTION<unknown>DEFAULT15
                              .symtab0x00SECTION<unknown>DEFAULT16
                              .symtab0x00SECTION<unknown>DEFAULT17
                              .symtab0x00SECTION<unknown>DEFAULT18
                              .symtab0x00SECTION<unknown>DEFAULT19
                              .symtab0x00SECTION<unknown>DEFAULT20
                              .symtab0x00SECTION<unknown>DEFAULT21
                              .symtab0x00SECTION<unknown>DEFAULT22
                              .symtab0x00SECTION<unknown>DEFAULT23
                              .symtab0x00SECTION<unknown>DEFAULT24
                              .symtab0x00SECTION<unknown>DEFAULT25
                              $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                              $a.symtab0x1e6640NOTYPE<unknown>DEFAULT3
                              $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                              $a.symtab0x1e6700NOTYPE<unknown>DEFAULT3
                              $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x81340NOTYPE<unknown>DEFAULT2
                              $a.symtab0x81940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x82cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x84e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x85540NOTYPE<unknown>DEFAULT2
                              $a.symtab0x85c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x8b300NOTYPE<unknown>DEFAULT2
                              $a.symtab0x8de00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x90800NOTYPE<unknown>DEFAULT2
                              $a.symtab0x93600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x997c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x9e680NOTYPE<unknown>DEFAULT2
                              $a.symtab0xa61c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xad380NOTYPE<unknown>DEFAULT2
                              $a.symtab0xb4500NOTYPE<unknown>DEFAULT2
                              $a.symtab0xbb800NOTYPE<unknown>DEFAULT2
                              $a.symtab0xbe5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xc0c00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xc31c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xc7b80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xcc5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xd3e40NOTYPE<unknown>DEFAULT2
                              $a.symtab0xddd00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xe5440NOTYPE<unknown>DEFAULT2
                              $a.symtab0xe5940NOTYPE<unknown>DEFAULT2
                              $a.symtab0xe6380NOTYPE<unknown>DEFAULT2
                              $a.symtab0xeba80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xed400NOTYPE<unknown>DEFAULT2
                              $a.symtab0xeda00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xedb80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xedfc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xef5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf13c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf1680NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf92c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf9880NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf9f00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfac00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfb9c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfbc00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfc600NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfd000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x103b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x103d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x105100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x105d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x107380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1120c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1175c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11da40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11dcc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11e140NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11e380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11e5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11ec80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x120040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x120600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x120f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x121840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x122980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x122ac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x123440NOTYPE<unknown>DEFAULT2
                              $a.symtab0x124380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1244c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1252c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x125640NOTYPE<unknown>DEFAULT2
                              $a.symtab0x125a80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x125e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1262c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x126b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x126f00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1277c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x127ac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x128bc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1298c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12a500NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12b000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12be80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12c080NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12c3c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12cb00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12ce00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12d100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12de00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12e600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12fc40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x12ff40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x131380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x139040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x139a40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x139e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13b980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13bec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1415c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x141940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x142500NOTYPE<unknown>DEFAULT2
                              $a.symtab0x142600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x142700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x143100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x143300NOTYPE<unknown>DEFAULT2
                              $a.symtab0x143900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x143b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x144800NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1457c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x145940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x146a00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x147240NOTYPE<unknown>DEFAULT2
                              $a.symtab0x147480NOTYPE<unknown>DEFAULT2
                              $a.symtab0x147c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x147ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x148300NOTYPE<unknown>DEFAULT2
                              $a.symtab0x148a40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x148e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1492c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x149a00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x149e40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14a2c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14a6c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14ab00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14b200NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14b680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14bf00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14c340NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14ca40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14cf00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14d780NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14dc00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14e040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14e540NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14e680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14f2c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14f980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x159480NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15a880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15e480NOTYPE<unknown>DEFAULT2
                              $a.symtab0x162e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x163280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x164500NOTYPE<unknown>DEFAULT2
                              $a.symtab0x164680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1650c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x165c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x166840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x167280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x167b80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x168900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x169880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16a740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16a940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16ab00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16c880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16d4c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16e980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x174bc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1750c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x178d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x179700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x179b80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17aa80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17be40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17c3c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17c440NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17c740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17ccc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17cd40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17d040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17d5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17d640NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17d940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17dec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17df40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17e200NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17ea80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x17f840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x180440NOTYPE<unknown>DEFAULT2
                              $a.symtab0x180980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x180f00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x184dc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x185580NOTYPE<unknown>DEFAULT2
                              $a.symtab0x185840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1860c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x186140NOTYPE<unknown>DEFAULT2
                              $a.symtab0x186200NOTYPE<unknown>DEFAULT2
                              $a.symtab0x186300NOTYPE<unknown>DEFAULT2
                              $a.symtab0x186400NOTYPE<unknown>DEFAULT2
                              $a.symtab0x186800NOTYPE<unknown>DEFAULT2
                              $a.symtab0x186e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1874c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x187ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x188180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1882c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x188400NOTYPE<unknown>DEFAULT2
                              $a.symtab0x188540NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1887c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x188b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x188f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x189080NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1894c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1898c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x189cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18a2c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18a980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18aac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18c240NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18d100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x190b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x191080NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1912c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x191e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x195180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x195380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x196140NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19a740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19bb40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19c900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19d040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19d300NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19e8c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a6800NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a7c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a8e00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ab900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1af3c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b0680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b1100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b5a00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b6900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b6b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b7940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b8840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b9700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b9b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ba040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ba500NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1bb480NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1bbc00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1bc280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1be7c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1be880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1bec00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1bf180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1bf700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1bf7c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c0c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c0e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c2a80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c3000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c3c80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c3f80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c49c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c4d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c5180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c5880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c6cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1cae80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1cf840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d0c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d1180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d1640NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d1b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d1b80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d1bc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d1e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d1f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d2000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d4200NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d5700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d58c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d5ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d6580NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d7100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d7300NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1d8740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ddbc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ddc40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ddcc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ddd40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1de900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ded40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1e5e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1e6300NOTYPE<unknown>DEFAULT2
                              $d.symtab0x81280NOTYPE<unknown>DEFAULT2
                              $d.symtab0x295480NOTYPE<unknown>DEFAULT10
                              $d.symtab0x81800NOTYPE<unknown>DEFAULT2
                              $d.symtab0x295440NOTYPE<unknown>DEFAULT9
                              $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x82c40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x8ae40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x8ddc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x935c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x99780NOTYPE<unknown>DEFAULT2
                              $d.symtab0x9e640NOTYPE<unknown>DEFAULT2
                              $d.symtab0xa6180NOTYPE<unknown>DEFAULT2
                              $d.symtab0xad340NOTYPE<unknown>DEFAULT2
                              $d.symtab0xb44c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xbb7c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xc0bc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xc7b40NOTYPE<unknown>DEFAULT2
                              $d.symtab0xcc580NOTYPE<unknown>DEFAULT2
                              $d.symtab0xd3d40NOTYPE<unknown>DEFAULT2
                              $d.symtab0xddbc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xe4ec0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x295fc0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x296000NOTYPE<unknown>DEFAULT13
                              $d.symtab0x296040NOTYPE<unknown>DEFAULT13
                              $d.symtab0xeba00NOTYPE<unknown>DEFAULT2
                              $d.symtab0xed240NOTYPE<unknown>DEFAULT2
                              $d.symtab0xed940NOTYPE<unknown>DEFAULT2
                              $d.symtab0x296080NOTYPE<unknown>DEFAULT13
                              $d.symtab0xedb00NOTYPE<unknown>DEFAULT2
                              $d.symtab0xedf40NOTYPE<unknown>DEFAULT2
                              $d.symtab0xef4c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xf1380NOTYPE<unknown>DEFAULT2
                              $d.symtab0xf8f40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29afc0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x29b000NOTYPE<unknown>DEFAULT13
                              $d.symtab0x29b040NOTYPE<unknown>DEFAULT13
                              $d.symtab0x29b080NOTYPE<unknown>DEFAULT13
                              $d.symtab0xf9780NOTYPE<unknown>DEFAULT2
                              $d.symtab0xf9e00NOTYPE<unknown>DEFAULT2
                              $d.symtab0xfab00NOTYPE<unknown>DEFAULT2
                              $d.symtab0xfb8c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xfbbc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xfc580NOTYPE<unknown>DEFAULT2
                              $d.symtab0xfcf80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x103000NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29b0c0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x103d40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1050c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x105d40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1072c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x111e80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x116bc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x2009b0NOTYPE<unknown>DEFAULT4
                              $d.symtab0x200a40NOTYPE<unknown>DEFAULT4
                              $d.symtab0x00NOTYPE<unknown>DEFAULT21
                              $d.symtab0x200NOTYPE<unknown>DEFAULT21
                              $d.symtab0x260NOTYPE<unknown>DEFAULT21
                              $d.symtab0x1233c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x124280NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1251c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x125600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x125a40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x125e40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x126280NOTYPE<unknown>DEFAULT2
                              $d.symtab0x126a80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x126ec0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x127780NOTYPE<unknown>DEFAULT2
                              $d.symtab0x128a00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x129840NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12a440NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12af80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x200a80NOTYPE<unknown>DEFAULT4
                              $d.symtab0x12bd40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12c040NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12c380NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12ca00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12dd80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12e500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x12fa80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29b140NOTYPE<unknown>DEFAULT13
                              $d.symtab0x29b100NOTYPE<unknown>DEFAULT13
                              $d.symtab0x138e00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x201180NOTYPE<unknown>DEFAULT4
                              $d.symtab0x13b940NOTYPE<unknown>DEFAULT2
                              $d.symtab0x13be00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1412c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29bf80NOTYPE<unknown>DEFAULT13
                              $d.symtab0x201200NOTYPE<unknown>DEFAULT4
                              $d.symtab0x1424c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x144780NOTYPE<unknown>DEFAULT2
                              $d.symtab0x146900NOTYPE<unknown>DEFAULT2
                              $d.symtab0x201a40NOTYPE<unknown>DEFAULT4
                              $d.symtab0x1471c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x147c00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x148280NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1489c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x148e00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x149240NOTYPE<unknown>DEFAULT2
                              $d.symtab0x149980NOTYPE<unknown>DEFAULT2
                              $d.symtab0x149dc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14a240NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14a680NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14aa80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14b180NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14b640NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14be80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14c2c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14c9c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14ce80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14d700NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14db80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14dfc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14e500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14f200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x159240NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29bfc0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x15a6c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x15e280NOTYPE<unknown>DEFAULT2
                              $d.symtab0x162cc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x163200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1643c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29c140NOTYPE<unknown>DEFAULT13
                              $d.symtab0x164f00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x165a80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x166680NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1670c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29c2c0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x29cc40NOTYPE<unknown>DEFAULT13
                              $d.symtab0x167b40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x168840NOTYPE<unknown>DEFAULT2
                              $d.symtab0x169780NOTYPE<unknown>DEFAULT2
                              $d.symtab0x16a680NOTYPE<unknown>DEFAULT2
                              $d.symtab0x20d100NOTYPE<unknown>DEFAULT4
                              $d.symtab0x16c780NOTYPE<unknown>DEFAULT2
                              $d.symtab0x16d2c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29cd80NOTYPE<unknown>DEFAULT13
                              $d.symtab0x16e740NOTYPE<unknown>DEFAULT2
                              $d.symtab0x174900NOTYPE<unknown>DEFAULT2
                              $d.symtab0x175080NOTYPE<unknown>DEFAULT2
                              $d.symtab0x178b00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x17a9c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x17bc80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x17be00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x17c700NOTYPE<unknown>DEFAULT2
                              $d.symtab0x17d000NOTYPE<unknown>DEFAULT2
                              $d.symtab0x17d900NOTYPE<unknown>DEFAULT2
                              $d.symtab0x17f7c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x180300NOTYPE<unknown>DEFAULT2
                              $d.symtab0x180900NOTYPE<unknown>DEFAULT2
                              $d.symtab0x180e40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x184900NOTYPE<unknown>DEFAULT2
                              $d.symtab0x29cf00NOTYPE<unknown>DEFAULT13
                              $d.symtab0x185500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x185800NOTYPE<unknown>DEFAULT2
                              $d.symtab0x186000NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1867c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x186e00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x187480NOTYPE<unknown>DEFAULT2
                              $d.symtab0x187e80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x188740NOTYPE<unknown>DEFAULT2
                              $d.symtab0x188b00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x188f00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x189480NOTYPE<unknown>DEFAULT2
                              $d.symtab0x189880NOTYPE<unknown>DEFAULT2
                              $d.symtab0x189c80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x18a240NOTYPE<unknown>DEFAULT2
                              $d.symtab0x18a900NOTYPE<unknown>DEFAULT2
                              $d.symtab0x18cfc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x190ac0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x191e40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x195080NOTYPE<unknown>DEFAULT2
                              $d.symtab0x196100NOTYPE<unknown>DEFAULT2
                              $d.symtab0x19a400NOTYPE<unknown>DEFAULT2
                              $d.symtab0x19c8c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1a6600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x213c80NOTYPE<unknown>DEFAULT4
                              $d.symtab0x1ab740NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1af240NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1b0600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1b6880NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1b78c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1b87c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1b9680NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1bb400NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1bba80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1bc180NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1be540NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1beb40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1bf640NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c0bc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c2a40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c3c40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c4980NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c5840NOTYPE<unknown>DEFAULT2
                              $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                              $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
                              $d.symtab0x530NOTYPE<unknown>DEFAULT21
                              $d.symtab0x1d4040NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1ddac0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x580NOTYPE<unknown>DEFAULT21
                              $d.symtab0x00NOTYPE<unknown>DEFAULT23
                              $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
                              $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                              $d.symtab0x29cfc0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x20da20NOTYPE<unknown>DEFAULT4
                              $d.symtab0x29d040NOTYPE<unknown>DEFAULT13
                              $d.symtab0x210a20NOTYPE<unknown>DEFAULT4
                              C.11.5548.symtab0x20d8012OBJECT<unknown>DEFAULT4
                              C.42.5014.symtab0x200a43OBJECT<unknown>DEFAULT4
                              C.43.5015.symtab0x2009b9OBJECT<unknown>DEFAULT4
                              C.5.5083.symtab0x200a824OBJECT<unknown>DEFAULT4
                              C.7.5370.symtab0x20d8c12OBJECT<unknown>DEFAULT4
                              C.7.6078.symtab0x200cc12OBJECT<unknown>DEFAULT4
                              C.7.6109.symtab0x200f012OBJECT<unknown>DEFAULT4
                              C.7.6182.symtab0x213a412OBJECT<unknown>DEFAULT4
                              C.8.6110.symtab0x200e412OBJECT<unknown>DEFAULT4
                              C.9.6119.symtab0x200d812OBJECT<unknown>DEFAULT4
                              KillStructure.symtab0x296081268OBJECT<unknown>DEFAULT13
                              LOCAL_ADDR.symtab0x308504OBJECT<unknown>DEFAULT14
                              Laligned.symtab0x143580NOTYPE<unknown>DEFAULT2
                              Llastword.symtab0x143740NOTYPE<unknown>DEFAULT2
                              Q.symtab0x29d3016384OBJECT<unknown>DEFAULT14
                              _Exit.symtab0x18680104FUNC<unknown>DEFAULT2
                              _GLOBAL_OFFSET_TABLE_.symtab0x295500OBJECT<unknown>HIDDEN12
                              _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _Unwind_Complete.symtab0x1d1b84FUNC<unknown>HIDDEN2
                              _Unwind_DeleteException.symtab0x1d1bc44FUNC<unknown>HIDDEN2
                              _Unwind_ForcedUnwind.symtab0x1de6c36FUNC<unknown>HIDDEN2
                              _Unwind_GetCFA.symtab0x1d1b08FUNC<unknown>HIDDEN2
                              _Unwind_GetDataRelBase.symtab0x1d1f412FUNC<unknown>HIDDEN2
                              _Unwind_GetLanguageSpecificData.symtab0x1de9068FUNC<unknown>HIDDEN2
                              _Unwind_GetRegionStart.symtab0x1e63052FUNC<unknown>HIDDEN2
                              _Unwind_GetTextRelBase.symtab0x1d1e812FUNC<unknown>HIDDEN2
                              _Unwind_RaiseException.symtab0x1de0036FUNC<unknown>HIDDEN2
                              _Unwind_Resume.symtab0x1de2436FUNC<unknown>HIDDEN2
                              _Unwind_Resume_or_Rethrow.symtab0x1de4836FUNC<unknown>HIDDEN2
                              _Unwind_VRS_Get.symtab0x1d11876FUNC<unknown>HIDDEN2
                              _Unwind_VRS_Pop.symtab0x1d730324FUNC<unknown>HIDDEN2
                              _Unwind_VRS_Set.symtab0x1d16476FUNC<unknown>HIDDEN2
                              _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __C_ctype_b.symtab0x29cfc4OBJECT<unknown>DEFAULT13
                              __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __C_ctype_b_data.symtab0x20da2768OBJECT<unknown>DEFAULT4
                              __C_ctype_tolower.symtab0x29d044OBJECT<unknown>DEFAULT13
                              __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __C_ctype_tolower_data.symtab0x210a2768OBJECT<unknown>DEFAULT4
                              __EH_FRAME_BEGIN__.symtab0x295400OBJECT<unknown>DEFAULT7
                              __FRAME_END__.symtab0x295400OBJECT<unknown>DEFAULT7
                              __GI___C_ctype_b.symtab0x29cfc4OBJECT<unknown>HIDDEN13
                              __GI___C_ctype_tolower.symtab0x29d044OBJECT<unknown>HIDDEN13
                              __GI___close.symtab0x17c00100FUNC<unknown>HIDDEN2
                              __GI___close_nocancel.symtab0x17be424FUNC<unknown>HIDDEN2
                              __GI___ctype_b.symtab0x29d004OBJECT<unknown>HIDDEN13
                              __GI___ctype_tolower.symtab0x29d084OBJECT<unknown>HIDDEN13
                              __GI___errno_location.symtab0x12be832FUNC<unknown>HIDDEN2
                              __GI___fcntl_nocancel.symtab0x122ac152FUNC<unknown>HIDDEN2
                              __GI___fgetc_unlocked.symtab0x1af3c300FUNC<unknown>HIDDEN2
                              __GI___glibc_strerror_r.symtab0x1457c24FUNC<unknown>HIDDEN2
                              __GI___libc_close.symtab0x17c00100FUNC<unknown>HIDDEN2
                              __GI___libc_fcntl.symtab0x12344244FUNC<unknown>HIDDEN2
                              __GI___libc_open.symtab0x17c90100FUNC<unknown>HIDDEN2
                              __GI___libc_read.symtab0x17db0100FUNC<unknown>HIDDEN2
                              __GI___libc_write.symtab0x17d20100FUNC<unknown>HIDDEN2
                              __GI___open.symtab0x17c90100FUNC<unknown>HIDDEN2
                              __GI___open_nocancel.symtab0x17c7424FUNC<unknown>HIDDEN2
                              __GI___read.symtab0x17db0100FUNC<unknown>HIDDEN2
                              __GI___read_nocancel.symtab0x17d9424FUNC<unknown>HIDDEN2
                              __GI___sigaddset.symtab0x14f5036FUNC<unknown>HIDDEN2
                              __GI___sigdelset.symtab0x14f7436FUNC<unknown>HIDDEN2
                              __GI___sigismember.symtab0x14f2c36FUNC<unknown>HIDDEN2
                              __GI___uClibc_fini.symtab0x17fc8124FUNC<unknown>HIDDEN2
                              __GI___uClibc_init.symtab0x1809888FUNC<unknown>HIDDEN2
                              __GI___write.symtab0x17d20100FUNC<unknown>HIDDEN2
                              __GI___write_nocancel.symtab0x17d0424FUNC<unknown>HIDDEN2
                              __GI___xpg_strerror_r.symtab0x14594268FUNC<unknown>HIDDEN2
                              __GI__exit.symtab0x18680104FUNC<unknown>HIDDEN2
                              __GI_abort.symtab0x16328296FUNC<unknown>HIDDEN2
                              __GI_accept.symtab0x14830116FUNC<unknown>HIDDEN2
                              __GI_atoi.symtab0x16a7432FUNC<unknown>HIDDEN2
                              __GI_bind.symtab0x148a468FUNC<unknown>HIDDEN2
                              __GI_brk.symtab0x1bf1888FUNC<unknown>HIDDEN2
                              __GI_close.symtab0x17c00100FUNC<unknown>HIDDEN2
                              __GI_closedir.symtab0x127ac272FUNC<unknown>HIDDEN2
                              __GI_config_close.symtab0x1903852FUNC<unknown>HIDDEN2
                              __GI_config_open.symtab0x1906c72FUNC<unknown>HIDDEN2
                              __GI_config_read.symtab0x18d10808FUNC<unknown>HIDDEN2
                              __GI_connect.symtab0x1492c116FUNC<unknown>HIDDEN2
                              __GI_exit.symtab0x16c88196FUNC<unknown>HIDDEN2
                              __GI_fclose.symtab0x191e8816FUNC<unknown>HIDDEN2
                              __GI_fcntl.symtab0x12344244FUNC<unknown>HIDDEN2
                              __GI_fflush_unlocked.symtab0x1ab90940FUNC<unknown>HIDDEN2
                              __GI_fgetc.symtab0x1a680324FUNC<unknown>HIDDEN2
                              __GI_fgetc_unlocked.symtab0x1af3c300FUNC<unknown>HIDDEN2
                              __GI_fgets.symtab0x1a7c4284FUNC<unknown>HIDDEN2
                              __GI_fgets_unlocked.symtab0x1b068160FUNC<unknown>HIDDEN2
                              __GI_fopen.symtab0x1951832FUNC<unknown>HIDDEN2
                              __GI_fork.symtab0x1750c972FUNC<unknown>HIDDEN2
                              __GI_fprintf.symtab0x12cb048FUNC<unknown>HIDDEN2
                              __GI_fputs_unlocked.symtab0x1415c56FUNC<unknown>HIDDEN2
                              __GI_fseek.symtab0x1c0c436FUNC<unknown>HIDDEN2
                              __GI_fseeko64.symtab0x1c0e8448FUNC<unknown>HIDDEN2
                              __GI_fstat.symtab0x186e8100FUNC<unknown>HIDDEN2
                              __GI_fwrite_unlocked.symtab0x14194188FUNC<unknown>HIDDEN2
                              __GI_getc_unlocked.symtab0x1af3c300FUNC<unknown>HIDDEN2
                              __GI_getdtablesize.symtab0x187ec44FUNC<unknown>HIDDEN2
                              __GI_getegid.symtab0x1881820FUNC<unknown>HIDDEN2
                              __GI_geteuid.symtab0x1882c20FUNC<unknown>HIDDEN2
                              __GI_getgid.symtab0x1884020FUNC<unknown>HIDDEN2
                              __GI_getpagesize.symtab0x1885440FUNC<unknown>HIDDEN2
                              __GI_getpid.symtab0x1797072FUNC<unknown>HIDDEN2
                              __GI_getrlimit.symtab0x1887c56FUNC<unknown>HIDDEN2
                              __GI_getsockname.symtab0x149a068FUNC<unknown>HIDDEN2
                              __GI_gettimeofday.symtab0x188b464FUNC<unknown>HIDDEN2
                              __GI_getuid.symtab0x188f420FUNC<unknown>HIDDEN2
                              __GI_inet_addr.symtab0x147c440FUNC<unknown>HIDDEN2
                              __GI_inet_aton.symtab0x1ba50248FUNC<unknown>HIDDEN2
                              __GI_initstate_r.symtab0x16890248FUNC<unknown>HIDDEN2
                              __GI_ioctl.symtab0x1244c224FUNC<unknown>HIDDEN2
                              __GI_isatty.symtab0x1472436FUNC<unknown>HIDDEN2
                              __GI_kill.symtab0x1252c56FUNC<unknown>HIDDEN2
                              __GI_listen.symtab0x14a2c64FUNC<unknown>HIDDEN2
                              __GI_lseek64.symtab0x1c518112FUNC<unknown>HIDDEN2
                              __GI_memchr.symtab0x1b5a0240FUNC<unknown>HIDDEN2
                              __GI_memcpy.symtab0x142504FUNC<unknown>HIDDEN2
                              __GI_memmove.symtab0x142604FUNC<unknown>HIDDEN2
                              __GI_mempcpy.symtab0x1b69036FUNC<unknown>HIDDEN2
                              __GI_memrchr.symtab0x1b6b4224FUNC<unknown>HIDDEN2
                              __GI_memset.symtab0x14270156FUNC<unknown>HIDDEN2
                              __GI_mmap.symtab0x184dc124FUNC<unknown>HIDDEN2
                              __GI_mremap.symtab0x1890868FUNC<unknown>HIDDEN2
                              __GI_munmap.symtab0x1894c64FUNC<unknown>HIDDEN2
                              __GI_nanosleep.symtab0x189cc96FUNC<unknown>HIDDEN2
                              __GI_open.symtab0x17c90100FUNC<unknown>HIDDEN2
                              __GI_opendir.symtab0x1298c196FUNC<unknown>HIDDEN2
                              __GI_perror.symtab0x12c3c116FUNC<unknown>HIDDEN2
                              __GI_raise.symtab0x179b8240FUNC<unknown>HIDDEN2
                              __GI_random.symtab0x16468164FUNC<unknown>HIDDEN2
                              __GI_random_r.symtab0x16728144FUNC<unknown>HIDDEN2
                              __GI_read.symtab0x17db0100FUNC<unknown>HIDDEN2
                              __GI_readdir.symtab0x12b00232FUNC<unknown>HIDDEN2
                              __GI_readdir64.symtab0x18c24236FUNC<unknown>HIDDEN2
                              __GI_readlink.symtab0x125a864FUNC<unknown>HIDDEN2
                              __GI_recv.symtab0x14ab0112FUNC<unknown>HIDDEN2
                              __GI_recvfrom.symtab0x14b68136FUNC<unknown>HIDDEN2
                              __GI_sbrk.symtab0x18a2c108FUNC<unknown>HIDDEN2
                              __GI_select.symtab0x1262c132FUNC<unknown>HIDDEN2
                              __GI_send.symtab0x14c34112FUNC<unknown>HIDDEN2
                              __GI_sendto.symtab0x14cf0136FUNC<unknown>HIDDEN2
                              __GI_setsid.symtab0x126b064FUNC<unknown>HIDDEN2
                              __GI_setsockopt.symtab0x14d7872FUNC<unknown>HIDDEN2
                              __GI_setstate_r.symtab0x16988236FUNC<unknown>HIDDEN2
                              __GI_sigaction.symtab0x18584136FUNC<unknown>HIDDEN2
                              __GI_sigaddset.symtab0x14e0480FUNC<unknown>HIDDEN2
                              __GI_sigemptyset.symtab0x14e5420FUNC<unknown>HIDDEN2
                              __GI_signal.symtab0x14e68196FUNC<unknown>HIDDEN2
                              __GI_sigprocmask.symtab0x126f0140FUNC<unknown>HIDDEN2
                              __GI_sleep.symtab0x17aa8300FUNC<unknown>HIDDEN2
                              __GI_snprintf.symtab0x12ce048FUNC<unknown>HIDDEN2
                              __GI_socket.symtab0x14dc068FUNC<unknown>HIDDEN2
                              __GI_srandom_r.symtab0x167b8216FUNC<unknown>HIDDEN2
                              __GI_strcasestr.symtab0x146a0132FUNC<unknown>HIDDEN2
                              __GI_strchr.symtab0x1b794240FUNC<unknown>HIDDEN2
                              __GI_strchrnul.symtab0x1b884236FUNC<unknown>HIDDEN2
                              __GI_strcmp.symtab0x1431028FUNC<unknown>HIDDEN2
                              __GI_strcoll.symtab0x1431028FUNC<unknown>HIDDEN2
                              __GI_strcpy.symtab0x1439036FUNC<unknown>HIDDEN2
                              __GI_strcspn.symtab0x1b97068FUNC<unknown>HIDDEN2
                              __GI_strlen.symtab0x1433096FUNC<unknown>HIDDEN2
                              __GI_strnlen.symtab0x143b4204FUNC<unknown>HIDDEN2
                              __GI_strrchr.symtab0x1b9b480FUNC<unknown>HIDDEN2
                              __GI_strspn.symtab0x1ba0476FUNC<unknown>HIDDEN2
                              __GI_strstr.symtab0x14480252FUNC<unknown>HIDDEN2
                              __GI_strtol.symtab0x16a9428FUNC<unknown>HIDDEN2
                              __GI_sysconf.symtab0x16e981572FUNC<unknown>HIDDEN2
                              __GI_tcgetattr.symtab0x14748124FUNC<unknown>HIDDEN2
                              __GI_time.symtab0x1277c48FUNC<unknown>HIDDEN2
                              __GI_times.symtab0x18a9820FUNC<unknown>HIDDEN2
                              __GI_vfprintf.symtab0x12ff4324FUNC<unknown>HIDDEN2
                              __GI_vsnprintf.symtab0x12d10208FUNC<unknown>HIDDEN2
                              __GI_wcrtomb.symtab0x190b484FUNC<unknown>HIDDEN2
                              __GI_wcsnrtombs.symtab0x1912c188FUNC<unknown>HIDDEN2
                              __GI_wcsrtombs.symtab0x1910836FUNC<unknown>HIDDEN2
                              __GI_write.symtab0x17d20100FUNC<unknown>HIDDEN2
                              __JCR_END__.symtab0x2954c0OBJECT<unknown>DEFAULT11
                              __JCR_LIST__.symtab0x2954c0OBJECT<unknown>DEFAULT11
                              ___Unwind_ForcedUnwind.symtab0x1de6c36FUNC<unknown>HIDDEN2
                              ___Unwind_RaiseException.symtab0x1de0036FUNC<unknown>HIDDEN2
                              ___Unwind_Resume.symtab0x1de2436FUNC<unknown>HIDDEN2
                              ___Unwind_Resume_or_Rethrow.symtab0x1de4836FUNC<unknown>HIDDEN2
                              __adddf3.symtab0x1c6d8784FUNC<unknown>HIDDEN2
                              __aeabi_cdcmpeq.symtab0x1d03424FUNC<unknown>HIDDEN2
                              __aeabi_cdcmple.symtab0x1d03424FUNC<unknown>HIDDEN2
                              __aeabi_cdrcmple.symtab0x1d01852FUNC<unknown>HIDDEN2
                              __aeabi_d2uiz.symtab0x1d0c484FUNC<unknown>HIDDEN2
                              __aeabi_dadd.symtab0x1c6d8784FUNC<unknown>HIDDEN2
                              __aeabi_dcmpeq.symtab0x1d04c24FUNC<unknown>HIDDEN2
                              __aeabi_dcmpge.symtab0x1d09424FUNC<unknown>HIDDEN2
                              __aeabi_dcmpgt.symtab0x1d0ac24FUNC<unknown>HIDDEN2
                              __aeabi_dcmple.symtab0x1d07c24FUNC<unknown>HIDDEN2
                              __aeabi_dcmplt.symtab0x1d06424FUNC<unknown>HIDDEN2
                              __aeabi_ddiv.symtab0x1cd78524FUNC<unknown>HIDDEN2
                              __aeabi_dmul.symtab0x1cae8656FUNC<unknown>HIDDEN2
                              __aeabi_drsub.symtab0x1c6cc0FUNC<unknown>HIDDEN2
                              __aeabi_dsub.symtab0x1c6d4788FUNC<unknown>HIDDEN2
                              __aeabi_f2d.symtab0x1ca3464FUNC<unknown>HIDDEN2
                              __aeabi_i2d.symtab0x1ca0c40FUNC<unknown>HIDDEN2
                              __aeabi_idiv.symtab0x1c5880FUNC<unknown>HIDDEN2
                              __aeabi_idivmod.symtab0x1c6b424FUNC<unknown>HIDDEN2
                              __aeabi_l2d.symtab0x1ca8896FUNC<unknown>HIDDEN2
                              __aeabi_read_tp.symtab0x186308FUNC<unknown>DEFAULT2
                              __aeabi_ui2d.symtab0x1c9e836FUNC<unknown>HIDDEN2
                              __aeabi_uidiv.symtab0x121840FUNC<unknown>HIDDEN2
                              __aeabi_uidivmod.symtab0x1228024FUNC<unknown>HIDDEN2
                              __aeabi_ul2d.symtab0x1ca74116FUNC<unknown>HIDDEN2
                              __aeabi_unwind_cpp_pr0.symtab0x1ddcc8FUNC<unknown>HIDDEN2
                              __aeabi_unwind_cpp_pr1.symtab0x1ddc48FUNC<unknown>HIDDEN2
                              __aeabi_unwind_cpp_pr2.symtab0x1ddbc8FUNC<unknown>HIDDEN2
                              __app_fini.symtab0x303084OBJECT<unknown>HIDDEN14
                              __atexit_lock.symtab0x29cd824OBJECT<unknown>DEFAULT13
                              __bss_end__.symtab0x30e380NOTYPE<unknown>DEFAULTSHN_ABS
                              __bss_start.symtab0x29d0c0NOTYPE<unknown>DEFAULTSHN_ABS
                              __bss_start__.symtab0x29d0c0NOTYPE<unknown>DEFAULTSHN_ABS
                              __check_one_fd.symtab0x1804484FUNC<unknown>DEFAULT2
                              __close.symtab0x17c00100FUNC<unknown>DEFAULT2
                              __close_nocancel.symtab0x17be424FUNC<unknown>DEFAULT2
                              __cmpdf2.symtab0x1cf94132FUNC<unknown>HIDDEN2
                              __ctype_b.symtab0x29d004OBJECT<unknown>DEFAULT13
                              __ctype_tolower.symtab0x29d084OBJECT<unknown>DEFAULT13
                              __curbrk.symtab0x3084c4OBJECT<unknown>HIDDEN14
                              __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __data_start.symtab0x295fc0NOTYPE<unknown>DEFAULT13
                              __default_rt_sa_restorer.symtab0x186240FUNC<unknown>DEFAULT2
                              __default_sa_restorer.symtab0x186180FUNC<unknown>DEFAULT2
                              __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __div0.symtab0x1229820FUNC<unknown>HIDDEN2
                              __divdf3.symtab0x1cd78524FUNC<unknown>HIDDEN2
                              __divsi3.symtab0x1c588300FUNC<unknown>HIDDEN2
                              __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
                              __do_global_dtors_aux_fini_array_entry.symtab0x295480OBJECT<unknown>DEFAULT10
                              __end__.symtab0x30e380NOTYPE<unknown>DEFAULTSHN_ABS
                              __environ.symtab0x303004OBJECT<unknown>DEFAULT14
                              __eqdf2.symtab0x1cf94132FUNC<unknown>HIDDEN2
                              __errno_location.symtab0x12be832FUNC<unknown>DEFAULT2
                              __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __exidx_end.symtab0x215400NOTYPE<unknown>DEFAULTSHN_ABS
                              __exidx_start.symtab0x214280NOTYPE<unknown>DEFAULTSHN_ABS
                              __exit_cleanup.symtab0x2fdb04OBJECT<unknown>HIDDEN14
                              __extendsfdf2.symtab0x1ca3464FUNC<unknown>HIDDEN2
                              __fcntl_nocancel.symtab0x122ac152FUNC<unknown>DEFAULT2
                              __fgetc_unlocked.symtab0x1af3c300FUNC<unknown>DEFAULT2
                              __fini_array_end.symtab0x2954c0NOTYPE<unknown>HIDDEN10
                              __fini_array_start.symtab0x295480NOTYPE<unknown>HIDDEN10
                              __fixunsdfsi.symtab0x1d0c484FUNC<unknown>HIDDEN2
                              __floatdidf.symtab0x1ca8896FUNC<unknown>HIDDEN2
                              __floatsidf.symtab0x1ca0c40FUNC<unknown>HIDDEN2
                              __floatundidf.symtab0x1ca74116FUNC<unknown>HIDDEN2
                              __floatunsidf.symtab0x1c9e836FUNC<unknown>HIDDEN2
                              __fork.symtab0x1750c972FUNC<unknown>DEFAULT2
                              __fork_generation_pointer.symtab0x30e044OBJECT<unknown>HIDDEN14
                              __fork_handlers.symtab0x30e084OBJECT<unknown>HIDDEN14
                              __fork_lock.symtab0x2fdb44OBJECT<unknown>HIDDEN14
                              __frame_dummy_init_array_entry.symtab0x295440OBJECT<unknown>DEFAULT9
                              __gedf2.symtab0x1cf84148FUNC<unknown>HIDDEN2
                              __getdents.symtab0x1874c160FUNC<unknown>HIDDEN2
                              __getdents64.symtab0x1bf7c328FUNC<unknown>HIDDEN2
                              __getpagesize.symtab0x1885440FUNC<unknown>DEFAULT2
                              __getpid.symtab0x1797072FUNC<unknown>DEFAULT2
                              __glibc_strerror_r.symtab0x1457c24FUNC<unknown>DEFAULT2
                              __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __gnu_Unwind_ForcedUnwind.symtab0x1d57028FUNC<unknown>HIDDEN2
                              __gnu_Unwind_RaiseException.symtab0x1d658184FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Restore_VFP.symtab0x1ddf00FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Resume.symtab0x1d5ec108FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Resume_or_Rethrow.symtab0x1d71032FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Save_VFP.symtab0x1ddf80FUNC<unknown>HIDDEN2
                              __gnu_unwind_execute.symtab0x1ded41812FUNC<unknown>HIDDEN2
                              __gnu_unwind_frame.symtab0x1e5e872FUNC<unknown>HIDDEN2
                              __gnu_unwind_pr_common.symtab0x1d8741352FUNC<unknown>DEFAULT2
                              __gtdf2.symtab0x1cf84148FUNC<unknown>HIDDEN2
                              __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __init_array_end.symtab0x295480NOTYPE<unknown>HIDDEN9
                              __init_array_start.symtab0x295440NOTYPE<unknown>HIDDEN9
                              __ledf2.symtab0x1cf8c140FUNC<unknown>HIDDEN2
                              __libc_accept.symtab0x14830116FUNC<unknown>DEFAULT2
                              __libc_close.symtab0x17c00100FUNC<unknown>DEFAULT2
                              __libc_connect.symtab0x1492c116FUNC<unknown>DEFAULT2
                              __libc_disable_asynccancel.symtab0x17e20136FUNC<unknown>HIDDEN2
                              __libc_enable_asynccancel.symtab0x17ea8220FUNC<unknown>HIDDEN2
                              __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                              __libc_fcntl.symtab0x12344244FUNC<unknown>DEFAULT2
                              __libc_fork.symtab0x1750c972FUNC<unknown>DEFAULT2
                              __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                              __libc_multiple_threads.symtab0x30e0c4OBJECT<unknown>HIDDEN14
                              __libc_nanosleep.symtab0x189cc96FUNC<unknown>DEFAULT2
                              __libc_open.symtab0x17c90100FUNC<unknown>DEFAULT2
                              __libc_read.symtab0x17db0100FUNC<unknown>DEFAULT2
                              __libc_recv.symtab0x14ab0112FUNC<unknown>DEFAULT2
                              __libc_recvfrom.symtab0x14b68136FUNC<unknown>DEFAULT2
                              __libc_select.symtab0x1262c132FUNC<unknown>DEFAULT2
                              __libc_send.symtab0x14c34112FUNC<unknown>DEFAULT2
                              __libc_sendto.symtab0x14cf0136FUNC<unknown>DEFAULT2
                              __libc_setup_tls.symtab0x1bc4c560FUNC<unknown>DEFAULT2
                              __libc_sigaction.symtab0x18584136FUNC<unknown>DEFAULT2
                              __libc_stack_end.symtab0x302fc4OBJECT<unknown>DEFAULT14
                              __libc_write.symtab0x17d20100FUNC<unknown>DEFAULT2
                              __lll_lock_wait_private.symtab0x178d8152FUNC<unknown>HIDDEN2
                              __ltdf2.symtab0x1cf8c140FUNC<unknown>HIDDEN2
                              __malloc_consolidate.symtab0x15ef8436FUNC<unknown>HIDDEN2
                              __malloc_largebin_index.symtab0x14f98120FUNC<unknown>DEFAULT2
                              __malloc_lock.symtab0x29bfc24OBJECT<unknown>DEFAULT13
                              __malloc_state.symtab0x30a8c888OBJECT<unknown>DEFAULT14
                              __malloc_trim.symtab0x15e48176FUNC<unknown>DEFAULT2
                              __muldf3.symtab0x1cae8656FUNC<unknown>HIDDEN2
                              __nedf2.symtab0x1cf94132FUNC<unknown>HIDDEN2
                              __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __open.symtab0x17c90100FUNC<unknown>DEFAULT2
                              __open_nocancel.symtab0x17c7424FUNC<unknown>DEFAULT2
                              __pagesize.symtab0x303044OBJECT<unknown>DEFAULT14
                              __preinit_array_end.symtab0x295440NOTYPE<unknown>HIDDEN8
                              __preinit_array_start.symtab0x295440NOTYPE<unknown>HIDDEN8
                              __progname.symtab0x29cf44OBJECT<unknown>DEFAULT13
                              __progname_full.symtab0x29cf84OBJECT<unknown>DEFAULT13
                              __pthread_initialize_minimal.symtab0x1be7c12FUNC<unknown>DEFAULT2
                              __pthread_mutex_init.symtab0x17f8c8FUNC<unknown>DEFAULT2
                              __pthread_mutex_lock.symtab0x17f848FUNC<unknown>DEFAULT2
                              __pthread_mutex_trylock.symtab0x17f848FUNC<unknown>DEFAULT2
                              __pthread_mutex_unlock.symtab0x17f848FUNC<unknown>DEFAULT2
                              __pthread_return_0.symtab0x17f848FUNC<unknown>DEFAULT2
                              __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __read.symtab0x17db0100FUNC<unknown>DEFAULT2
                              __read_nocancel.symtab0x17d9424FUNC<unknown>DEFAULT2
                              __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __restore_core_regs.symtab0x1ddd428FUNC<unknown>HIDDEN2
                              __rtld_fini.symtab0x3030c4OBJECT<unknown>HIDDEN14
                              __sigaddset.symtab0x14f5036FUNC<unknown>DEFAULT2
                              __sigdelset.symtab0x14f7436FUNC<unknown>DEFAULT2
                              __sigismember.symtab0x14f2c36FUNC<unknown>DEFAULT2
                              __sigjmp_save.symtab0x1c4d864FUNC<unknown>HIDDEN2
                              __sigsetjmp.symtab0x1bf7012FUNC<unknown>DEFAULT2
                              __stdin.symtab0x29b204OBJECT<unknown>DEFAULT13
                              __stdio_READ.symtab0x1c2a888FUNC<unknown>HIDDEN2
                              __stdio_WRITE.symtab0x19538220FUNC<unknown>HIDDEN2
                              __stdio_adjust_position.symtab0x1c300200FUNC<unknown>HIDDEN2
                              __stdio_fwrite.symtab0x19a74320FUNC<unknown>HIDDEN2
                              __stdio_rfill.symtab0x1c3c848FUNC<unknown>HIDDEN2
                              __stdio_seek.symtab0x1c49c60FUNC<unknown>HIDDEN2
                              __stdio_trans2r_o.symtab0x1c3f8164FUNC<unknown>HIDDEN2
                              __stdio_trans2w_o.symtab0x19bb4220FUNC<unknown>HIDDEN2
                              __stdio_wcommit.symtab0x12fc448FUNC<unknown>HIDDEN2
                              __stdout.symtab0x29b244OBJECT<unknown>DEFAULT13
                              __subdf3.symtab0x1c6d4788FUNC<unknown>HIDDEN2
                              __sys_accept.symtab0x147ec68FUNC<unknown>DEFAULT2
                              __sys_connect.symtab0x148e868FUNC<unknown>DEFAULT2
                              __sys_recv.symtab0x14a6c68FUNC<unknown>DEFAULT2
                              __sys_recvfrom.symtab0x14b2072FUNC<unknown>DEFAULT2
                              __sys_send.symtab0x14bf068FUNC<unknown>DEFAULT2
                              __sys_sendto.symtab0x14ca476FUNC<unknown>DEFAULT2
                              __syscall_error.symtab0x1855844FUNC<unknown>HIDDEN2
                              __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __syscall_nanosleep.symtab0x1898c64FUNC<unknown>DEFAULT2
                              __syscall_rt_sigaction.symtab0x1864064FUNC<unknown>DEFAULT2
                              __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __syscall_select.symtab0x125e868FUNC<unknown>DEFAULT2
                              __tls_get_addr.symtab0x1bc2836FUNC<unknown>DEFAULT2
                              __uClibc_fini.symtab0x17fc8124FUNC<unknown>DEFAULT2
                              __uClibc_init.symtab0x1809888FUNC<unknown>DEFAULT2
                              __uClibc_main.symtab0x180f01004FUNC<unknown>DEFAULT2
                              __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __uclibc_progname.symtab0x29cf04OBJECT<unknown>HIDDEN13
                              __udivsi3.symtab0x12184252FUNC<unknown>HIDDEN2
                              __write.symtab0x17d20100FUNC<unknown>DEFAULT2
                              __write_nocancel.symtab0x17d0424FUNC<unknown>DEFAULT2
                              __xpg_strerror_r.symtab0x14594268FUNC<unknown>DEFAULT2
                              __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __xstat32_conv.symtab0x18b78172FUNC<unknown>HIDDEN2
                              __xstat64_conv.symtab0x18aac204FUNC<unknown>HIDDEN2
                              _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _bss_custom_printf_spec.symtab0x2fda010OBJECT<unknown>DEFAULT14
                              _bss_end__.symtab0x30e380NOTYPE<unknown>DEFAULTSHN_ABS
                              _charpad.symtab0x1313884FUNC<unknown>DEFAULT2
                              _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _custom_printf_arginfo.symtab0x30a3440OBJECT<unknown>HIDDEN14
                              _custom_printf_handler.symtab0x30a5c40OBJECT<unknown>HIDDEN14
                              _custom_printf_spec.symtab0x29bf84OBJECT<unknown>HIDDEN13
                              _dl_aux_init.symtab0x1be8856FUNC<unknown>DEFAULT2
                              _dl_nothread_init_static_tls.symtab0x1bec088FUNC<unknown>HIDDEN2
                              _dl_phdr.symtab0x30e304OBJECT<unknown>DEFAULT14
                              _dl_phnum.symtab0x30e344OBJECT<unknown>DEFAULT14
                              _dl_tls_dtv_gaps.symtab0x30e241OBJECT<unknown>DEFAULT14
                              _dl_tls_dtv_slotinfo_list.symtab0x30e204OBJECT<unknown>DEFAULT14
                              _dl_tls_generation.symtab0x30e284OBJECT<unknown>DEFAULT14
                              _dl_tls_max_dtv_idx.symtab0x30e184OBJECT<unknown>DEFAULT14
                              _dl_tls_setup.symtab0x1bbc0104FUNC<unknown>DEFAULT2
                              _dl_tls_static_align.symtab0x30e144OBJECT<unknown>DEFAULT14
                              _dl_tls_static_nelem.symtab0x30e2c4OBJECT<unknown>DEFAULT14
                              _dl_tls_static_size.symtab0x30e1c4OBJECT<unknown>DEFAULT14
                              _dl_tls_static_used.symtab0x30e104OBJECT<unknown>DEFAULT14
                              _edata.symtab0x29d0c0NOTYPE<unknown>DEFAULTSHN_ABS
                              _end.symtab0x30e380NOTYPE<unknown>DEFAULTSHN_ABS
                              _exit.symtab0x18680104FUNC<unknown>DEFAULT2
                              _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _fini.symtab0x1e6640FUNC<unknown>DEFAULT3
                              _fixed_buffers.symtab0x2dda08192OBJECT<unknown>DEFAULT14
                              _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _fp_out_narrow.symtab0x1318c132FUNC<unknown>DEFAULT2
                              _fpmaxtostr.symtab0x19e8c2036FUNC<unknown>HIDDEN2
                              _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _init.symtab0x80d40FUNC<unknown>DEFAULT1
                              _load_inttype.symtab0x19c90116FUNC<unknown>HIDDEN2
                              _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _memcpy.symtab0x1b1100FUNC<unknown>HIDDEN2
                              _ppfs_init.symtab0x13904160FUNC<unknown>HIDDEN2
                              _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _ppfs_parsespec.symtab0x13bec1392FUNC<unknown>HIDDEN2
                              _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _ppfs_prepargs.symtab0x139a468FUNC<unknown>HIDDEN2
                              _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _ppfs_setargs.symtab0x139e8432FUNC<unknown>HIDDEN2
                              _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _promoted_size.symtab0x13b9884FUNC<unknown>DEFAULT2
                              _pthread_cleanup_pop_restore.symtab0x17f9c44FUNC<unknown>DEFAULT2
                              _pthread_cleanup_push_defer.symtab0x17f948FUNC<unknown>DEFAULT2
                              _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _setjmp.symtab0x1860c8FUNC<unknown>DEFAULT2
                              _sigintr.symtab0x30a848OBJECT<unknown>HIDDEN14
                              _start.symtab0x81940FUNC<unknown>DEFAULT2
                              _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _stdio_fopen.symtab0x196141120FUNC<unknown>HIDDEN2
                              _stdio_init.symtab0x12de0128FUNC<unknown>HIDDEN2
                              _stdio_openlist.symtab0x29b284OBJECT<unknown>DEFAULT13
                              _stdio_openlist_add_lock.symtab0x2dd8012OBJECT<unknown>DEFAULT14
                              _stdio_openlist_dec_use.symtab0x1a8e0688FUNC<unknown>HIDDEN2
                              _stdio_openlist_del_count.symtab0x2dd9c4OBJECT<unknown>DEFAULT14
                              _stdio_openlist_del_lock.symtab0x2dd8c12OBJECT<unknown>DEFAULT14
                              _stdio_openlist_use_count.symtab0x2dd984OBJECT<unknown>DEFAULT14
                              _stdio_streams.symtab0x29b2c204OBJECT<unknown>DEFAULT13
                              _stdio_term.symtab0x12e60356FUNC<unknown>HIDDEN2
                              _stdio_user_locking.symtab0x29b104OBJECT<unknown>DEFAULT13
                              _stdlib_strto_l.symtab0x16ab0472FUNC<unknown>HIDDEN2
                              _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _store_inttype.symtab0x19d0444FUNC<unknown>HIDDEN2
                              _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _string_syserrmsgs.symtab0x201b42906OBJECT<unknown>HIDDEN4
                              _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _uintmaxtostr.symtab0x19d30348FUNC<unknown>HIDDEN2
                              _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _vfprintf_internal.symtab0x132101780FUNC<unknown>HIDDEN2
                              _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              abort.symtab0x16328296FUNC<unknown>DEFAULT2
                              abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              accept.symtab0x14830116FUNC<unknown>DEFAULT2
                              accept.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              add_auth_entry.symtab0x105d8352FUNC<unknown>DEFAULT2
                              anti_gdb_entry.symtab0xeda024FUNC<unknown>DEFAULT2
                              atoi.symtab0x16a7432FUNC<unknown>DEFAULT2
                              atol.symtab0x16a7432FUNC<unknown>DEFAULT2
                              atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack_get_opt_int.symtab0x8554112FUNC<unknown>DEFAULT2
                              attack_get_opt_ip.symtab0x84e8108FUNC<unknown>DEFAULT2
                              attack_gre_ip.symtab0x93601564FUNC<unknown>DEFAULT2
                              attack_init.symtab0x85c41388FUNC<unknown>DEFAULT2
                              attack_method.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack_method_nudp.symtab0xddd01908FUNC<unknown>DEFAULT2
                              attack_method_ovhudp.symtab0xd3e42540FUNC<unknown>DEFAULT2
                              attack_method_std.symtab0xbb80732FUNC<unknown>DEFAULT2
                              attack_method_stdhex.symtab0x9080736FUNC<unknown>DEFAULT2
                              attack_method_stdplain.symtab0xc0c0604FUNC<unknown>DEFAULT2
                              attack_method_synurgplain.symtab0xad381816FUNC<unknown>DEFAULT2
                              attack_method_tcpack.symtab0xcc5c1928FUNC<unknown>DEFAULT2
                              attack_method_tcpplain.symtab0xb4501840FUNC<unknown>DEFAULT2
                              attack_method_tcpstomp.symtab0x9e681972FUNC<unknown>DEFAULT2
                              attack_method_tcpstrong.symtab0xa61c1820FUNC<unknown>DEFAULT2
                              attack_method_udpbypass.symtab0xbe5c612FUNC<unknown>DEFAULT2
                              attack_method_udpgeneric.symtab0x997c1260FUNC<unknown>DEFAULT2
                              attack_method_udphex.symtab0x8b30688FUNC<unknown>DEFAULT2
                              attack_method_udpkick.symtab0xc31c1180FUNC<unknown>DEFAULT2
                              attack_method_udpplain.symtab0x8de0672FUNC<unknown>DEFAULT2
                              attack_method_udpvse.symtab0xc7b81188FUNC<unknown>DEFAULT2
                              attack_parse.symtab0x82cc540FUNC<unknown>DEFAULT2
                              attack_start.symtab0x81d0252FUNC<unknown>DEFAULT2
                              auth_table.symtab0x2dd744OBJECT<unknown>DEFAULT14
                              auth_table_len.symtab0x2dd484OBJECT<unknown>DEFAULT14
                              auth_table_max_weight.symtab0x2dd782OBJECT<unknown>DEFAULT14
                              been_there_done_that.symtab0x2fdac4OBJECT<unknown>DEFAULT14
                              bind.symtab0x148a468FUNC<unknown>DEFAULT2
                              bind.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              brk.symtab0x1bf1888FUNC<unknown>DEFAULT2
                              brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              bsd_signal.symtab0x14e68196FUNC<unknown>DEFAULT2
                              c.symtab0x296004OBJECT<unknown>DEFAULT13
                              calloc.symtab0x15948320FUNC<unknown>DEFAULT2
                              calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              checksum_generic.symtab0xe54480FUNC<unknown>DEFAULT2
                              checksum_tcpudp.symtab0xe594164FUNC<unknown>DEFAULT2
                              clock.symtab0x12c0852FUNC<unknown>DEFAULT2
                              clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              close.symtab0x17c00100FUNC<unknown>DEFAULT2
                              closedir.symtab0x127ac272FUNC<unknown>DEFAULT2
                              closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              completed.5105.symtab0x29d0c1OBJECT<unknown>DEFAULT14

                              Download Network PCAP: filteredfull

                              • Total Packets: 4
                              • 443 (HTTPS)
                              • 53 (DNS)
                              TimestampSource PortDest PortSource IPDest IP
                              Apr 1, 2025 17:49:55.709913969 CEST48202443192.168.2.13185.125.190.26
                              Apr 1, 2025 17:50:27.200647116 CEST48202443192.168.2.13185.125.190.26
                              TimestampSource PortDest PortSource IPDest IP
                              Apr 1, 2025 17:49:54.958587885 CEST4764753192.168.2.131.1.1.1
                              Apr 1, 2025 17:49:54.958587885 CEST5170453192.168.2.131.1.1.1
                              Apr 1, 2025 17:49:55.065802097 CEST53476471.1.1.1192.168.2.13
                              Apr 1, 2025 17:49:55.065880060 CEST53517041.1.1.1192.168.2.13
                              TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                              Apr 1, 2025 17:49:54.958587885 CEST192.168.2.131.1.1.10xc8a1Standard query (0)daisy.ubuntu.com28IN (0x0001)false
                              Apr 1, 2025 17:49:54.958587885 CEST192.168.2.131.1.1.10x3f8bStandard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                              TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                              Apr 1, 2025 17:49:55.065880060 CEST1.1.1.1192.168.2.130x3f8bNo error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
                              Apr 1, 2025 17:49:55.065880060 CEST1.1.1.1192.168.2.130x3f8bNo error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

                              System Behavior

                              Start time (UTC):15:49:46
                              Start date (UTC):01/04/2025
                              Path:/tmp/FederalAgent.arm7.elf
                              Arguments:/tmp/FederalAgent.arm7.elf
                              File size:4956856 bytes
                              MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1