Edit tour

Linux Analysis Report
8sh48.elf

Overview

General Information

Sample name:	8sh48.elf
Analysis ID:	1674795
MD5:	cb3da7c2c3de707a2fda8f63010289db
SHA1:	e58ff6f6699dc8e61d67049fa7563a54d1e9a1f1
SHA256:	823c38c9e4b20afbb589f5019d43890096fa19f751a302998dc765fdc68e2f83
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	76
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1674795
Start date and time:	2025-04-26 16:15:51 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	8sh48.elf
Detection:	MAL
Classification:	mal76.spre.troj.linELF@0/0@2/0

Runtime Messages

Command:	/tmp/8sh48.elf
PID:	5446
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	{YAMI}- You Can Find Me At yami.crimson.rip -{daddyl33t}
Standard Error:

Process Tree

system is lnxubuntu20

8sh48.elf (PID: 5446, Parent: 5373, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/8sh48.elf

8sh48.elf New Fork (PID: 5450, Parent: 5446)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
8sh48.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
8sh48.elf	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5446.1.00007f2800400000.00007f2800413000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Spreading
• Networking
• System Summary
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 8sh48.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: 8sh48.elf	Virustotal: Detection: 57%			Perma Link
Source: 8sh48.elf	ReversingLabs: Detection: 58%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/8sh48.elf (PID: 5446)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:57934 -> 156.253.227.62:1994

Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: classification engine

Classification label: mal76.spre.troj.linELF@0/0@2/0

Source: 8sh48.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
Source: 8sh48.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
Source: 8sh48.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
Source: 8sh48.elf	ELF static info symbol of initial sample: libc/string/sh/sh4/memcpy.S
Source: 8sh48.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sh/crt1.S
Source: 8sh48.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sh/crti.S
Source: 8sh48.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sh/crtn.S
Source: 8sh48.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sh/vfork.S

Source: /tmp/8sh48.elf (PID: 5446)

Queries kernel information via 'uname':

Jump to behavior

Source: 8sh48.elf, 5446.1.00007ffd488d1000.00007ffd488f2000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: 8sh48.elf, 5446.1.00005577dfb81000.00005577dfc05000.rw-.sdmp	Binary or memory string: wU5!/etc/qemu-binfmt/sh4
Source: 8sh48.elf, 5446.1.00005577dfb81000.00005577dfc05000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4
Source: 8sh48.elf, 5446.1.00007ffd488d1000.00007ffd488f2000.rw-.sdmp	Binary or memory string: Mx86_64/usr/bin/qemu-sh4/tmp/8sh48.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/8sh48.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: 8sh48.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: 8sh48.elf, type: SAMPLE
Source: Yara match	File source: 5446.1.00007f2800400000.00007f2800413000.r-x.sdmp, type: MEMORY

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Safari/604.1.38
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; CrOS x86_64 9592.96.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.114 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; Lumia 535) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Mobile Safari/537.36 Edge/14.14393
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.4; HTC Desire 620 Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 10_2_1 like Mac OS X) AppleWebKit/602.4.6 (KHTML, like Gecko) Mobile/14D27
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: 8sh48.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: 8sh48.elf, type: SAMPLE
Source: Yara match	File source: 5446.1.00007f2800400000.00007f2800413000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
8sh48.elf	57%	Virustotal		Browse
8sh48.elf	58%	ReversingLabs	Linux.Backdoor.Gafgyt
8sh48.elf	100%	Avira	EXP/ELF.Mirai.W

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
156.253.227.62	unknown	Seychelles		132839	POWERLINE-AS-APPOWERLINEDATACENTERHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.253.227.62	skid.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fuckjewishpeople.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fuckjewishpeople.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	skid.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	8arm68.elf	Get hash	malicious	Mirai	Browse
	8arm48.elf	Get hash	malicious	Mirai	Browse
	8mpsl8.elf	Get hash	malicious	Mirai	Browse
	skid.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	skid.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	skid.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	fuckjewishpeople.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	fuckjewishpeople.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	skid.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	8arm68.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	8arm48.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	8mpsl8.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	fuckjewishpeople.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	skid.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	skid.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	fuckjewishpeople.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
POWERLINE-AS-APPOWERLINEDATACENTERHK	skid.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	fuckjewishpeople.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	fuckjewishpeople.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	skid.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	8arm68.elf	Get hash	malicious	Mirai	Browse	156.253.227.62
	8arm48.elf	Get hash	malicious	Mirai	Browse	156.253.227.62
	8mpsl8.elf	Get hash	malicious	Mirai	Browse	156.253.227.62
	skid.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	skid.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	skid.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.614678255704364
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	8sh48.elf
File size:	105'174 bytes
MD5:	cb3da7c2c3de707a2fda8f63010289db
SHA1:	e58ff6f6699dc8e61d67049fa7563a54d1e9a1f1
SHA256:	823c38c9e4b20afbb589f5019d43890096fa19f751a302998dc765fdc68e2f83
SHA512:	e9cb12fd8af76809d0f4ae172f9691088a14b019b51f5c70ebde112aa7b6d12c52f33a18bf4cbae09f51b736f9a740dfafaad70e08d7e92658c7bac0f785605c
SSDEEP:	1536:2RqLUFerFPfNG+CKsTCsemV5BVCgPpzGpE8f+EF880HFXFsZcw44BiQr1:rrXDsjZVPVIdf+EFr0lXFsZB44BiQr1
TLSH:	09A3184789654FB7C086AAB52AA75670071BAC120F5F1B897139BAF4033F5DEB40F7A0
File Content Preview:	.ELF.....................@.4...,A......4. ...(...............@...@..,...,...............0...0B..0B.(....g..........Q.td............................././"O.n........#.@........#.*@.....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	82220
Section Header Size:	40
Number of Section Headers:	16
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x4000e0	0xe0	0xfcc0	0x0	0x6	AX	0	0	32
.fini	PROGBITS	0x40fda0	0xfda0	0x24	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x40fdc4	0xfdc4	0x2e48	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x412c0c	0x12c0c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x423000	0x13000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x423008	0x13008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x423010	0x13010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x423014	0x13014	0x404	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x423418	0x13418	0x10	0x4	0x3	WA	0	0	4
.bss	NOBITS	0x423428	0x13428	0x637c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x13428	0xc96	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x140be	0x6b	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x143ac	0x31e0	0x10	0x0		15	295	4
.strtab	STRTAB	0x0	0x1758c	0x254a	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x12c10	0x12c10	6.9037	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x13000	0x423000	0x423000	0x428	0x67a4	3.0769	0x6	RW	0x10000	.ctors .dtors .jcr .data .got .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x400094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000e0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x40fda0	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x40fdc4	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x412c0c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x423000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x423008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x423010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x423014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x423418	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x423428	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
/home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.212.6083	.symtab	0x411180	144	OBJECT	<unknown>	DEFAULT	4
ClearHistory	.symtab	0x405934	48	FUNC	<unknown>	DEFAULT	2
GetRandomIP	.symtab	0x403a0c	92	FUNC	<unknown>	DEFAULT	2
L1	.symtab	0x408588	0	NOTYPE	<unknown>	DEFAULT	2
L_abort	.symtab	0x4001d0	0	NOTYPE	<unknown>	DEFAULT	2
L_fini	.symtab	0x4001c8	0	NOTYPE	<unknown>	DEFAULT	2
L_init	.symtab	0x4001c4	0	NOTYPE	<unknown>	DEFAULT	2
L_main	.symtab	0x4001c0	0	NOTYPE	<unknown>	DEFAULT	2
L_movmem_2mod4_end	.symtab	0x408500	0	NOTYPE	<unknown>	DEFAULT	2
L_movmem_loop	.symtab	0x40851a	0	NOTYPE	<unknown>	DEFAULT	2
L_movmem_start_even	.symtab	0x408526	0	NOTYPE	<unknown>	DEFAULT	2
L_uClibc_main	.symtab	0x4001cc	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x423460	16384	OBJECT	<unknown>	DEFAULT	11
UpdateBins	.symtab	0x406228	340	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x423418	0	OBJECT	<unknown>	HIDDEN	10
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x423004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x423000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x4230b8	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x4115a4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x4233f4	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x412812	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x4230c0	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x4118a4	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x42300c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x423008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x412c0c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x412c0c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x4230b8	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x4115a4	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x4233f4	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x412812	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x4230c0	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x4118a4	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x4230bc	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x4233f8	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x4230c4	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x40903c	20	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x40d990	216	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x40ae18	32	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x40cfd4	20	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x408640	172	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x4086ec	152	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x408b24	160	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x40c778	104	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x40c844	80	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x40ae38	200	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x408784	48	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x40bc9c	244	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x40c2f0	24	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x40c2f0	24	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x40b444	40	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x4087b4	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x4087ec	56	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x408e40	136	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x40b46c	40	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x408824	56	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x429698	4	OBJECT	<unknown>	HIDDEN	11
__GI_execl	.symtab	0x40c4d0	228	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x40caf8	56	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x40c460	112	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x409050	272	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x408640	172	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x4086ec	152	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x40a498	320	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x40d990	216	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x40a2d0	120	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x40a5d8	128	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x409160	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x40885c	56	FUNC	<unknown>	HIDDEN	2
__GI_fputs	.symtab	0x40a348	112	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x40a658	68	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x40ec08	28	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x40ec24	232	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x40cb30	88	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x40a69c	156	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x40d990	216	FUNC	<unknown>	HIDDEN	2
__GI_getcwd	.symtab	0x408894	204	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x408960	52	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x40cd10	56	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x40cd48	56	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x40cd80	56	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x40b150	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x40b198	684	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x408994	28	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x4089b0	56	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x408a20	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x40b494	40	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x40cdb8	56	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x42969c	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x40b124	44	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x40e098	204	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x40b10c	24	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x40b094	120	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x40f40c	492	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x40f138	408	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x40c150	176	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x408a58	148	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x40af70	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x408aec	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x40b4e8	40	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x40cdf0	96	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x40da68	204	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x40a7c0	636	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x40db34	978	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x40df08	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x40df2c	204	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x40aa40	124	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x40ce50	56	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x408b24	160	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x408ec8	228	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x408590	64	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x40ebd0	56	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x40ea34	40	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x40bda4	100	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x40c024	104	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x40eeec	152	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x408c10	56	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x408fac	144	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x408c48	56	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x40b510	40	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x40ca68	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x408c80	52	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x40b538	40	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x40b560	48	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x408cb4	56	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x40b590	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x40bf4c	216	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x40ea5c	160	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x40b5e4	60	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x40b620	32	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x40b640	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x408cec	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x40c5b4	376	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x40b5bc	40	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x409178	132	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x40c08c	196	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x40af18	64	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x40aabc	192	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x40ab7c	34	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x40ab7c	34	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x40ab9e	30	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x40f050	76	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x40abbc	136	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x40ef84	154	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x40ac44	142	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x40acd4	132	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x40e070	40	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x40f01e	48	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x40ad58	192	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x40af58	24	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x40dff8	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x40c308	20	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x40af94	116	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x408d40	56	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x40fb60	40	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x408e18	40	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x408d78	56	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x4085d0	54	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x4091fc	168	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x40ce88	56	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x408db0	20	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x40cfe8	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x40d04c	112	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x40d02c	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x408dc4	56	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x423010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x423010	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x42968c	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x4233d8	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x40b640	184	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x423428	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40c7fa	74	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x4230bc	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x4233f8	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x4230c4	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x4296bc	4	OBJECT	<unknown>	HIDDEN	11
__data_start	.symtab	0x423014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x40f7d4	228	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x40fc34	200	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x40f6b8	148	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x40e164	1604	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x40fd60	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x4000e0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x423014	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x40fb88	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x40f5f8	192	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x40f74c	104	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x429684	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x40903c	20	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x42967c	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x40d990	216	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x423000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x423000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x40ea00	52	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x40cb88	128	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x40cc08	264	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x408994	28	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x40ae18	32	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x40cfd4	20	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x40bae8	98	FUNC	<unknown>	DEFAULT	2
__heap_alloc_at	.symtab	0x40bb4a	102	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x40bbec	176	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x40bbb0	34	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x40bbd2	26	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x423000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x423000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_brk	.symtab	0x40eb54	68	FUNC	<unknown>	HIDDEN	2
__init_brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__length_dotted	.symtab	0x40fcfc	64	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x40f7b4	32	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x4087ec	56	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x40b46c	40	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x408bc4	24	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x408640	172	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x4086ec	152	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x40885c	56	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x4089b0	56	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x40cdf0	96	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x40ce50	56	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x408b24	160	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x40ebd0	56	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x408c10	56	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x40b510	40	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x408c80	52	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x40b538	40	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x40b560	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x40ea5c	160	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x429680	4	OBJECT	<unknown>	DEFAULT	11
__libc_system	.symtab	0x40c200	240	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x408db0	20	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x408dc4	56	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x423204	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x429660	24	OBJECT	<unknown>	DEFAULT	11
__malloc_sbrk_lock	.symtab	0x429760	24	OBJECT	<unknown>	DEFAULT	11
__movmemSI12_i4	.symtab	0x408540	14	FUNC	<unknown>	HIDDEN	2
__movmem_i4_even	.symtab	0x408508	48	FUNC	<unknown>	HIDDEN	2
__movmem_i4_odd	.symtab	0x40850e	42	FUNC	<unknown>	HIDDEN	2
__movstrSI12_i4	.symtab	0x408540	14	FUNC	<unknown>	HIDDEN	2
__movstr_i4_even	.symtab	0x408508	48	FUNC	<unknown>	HIDDEN	2
__movstr_i4_odd	.symtab	0x40850e	42	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x429788	12	OBJECT	<unknown>	HIDDEN	11
__nameservers	.symtab	0x429794	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x40f8b8	68	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x40e7a8	600	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x429688	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x423000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x423000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x40c7e0	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x40c7e0	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x40c7e0	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x40c7e0	14	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x40c7e0	14	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x40c7ee	12	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x40ea34	40	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x40f8fc	612	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x423400	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x429690	4	OBJECT	<unknown>	HIDDEN	11
__sdivsi3_i4	.symtab	0x40fd3c	14	FUNC	<unknown>	HIDDEN	2
__searchdomain	.symtab	0x429778	16	OBJECT	<unknown>	HIDDEN	11
__searchdomains	.symtab	0x429798	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x40b724	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x40b74c	42	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x40b6f8	44	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x40cac0	56	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x4230d4	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x40ed0c	80	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x40d0bc	148	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x40ed5c	180	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x40d150	264	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x409528	28	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3812	.symtab	0x411ba4	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x40ee10	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x40eeb8	52	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x40ee40	120	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x40d258	176	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x4095d8	52	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x4230d8	4	OBJECT	<unknown>	DEFAULT	9
__syscall_error	.symtab	0x408610	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x40eb98	56	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x40c778	104	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x40c844	80	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x40c894	468	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x4233f0	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3_i4	.symtab	0x408560	48	FUNC	<unknown>	HIDDEN	2
__vfork	.symtab	0x4085d0	54	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x40ae38	200	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat64_conv	.symtab	0x40cec0	132	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x40cf44	144	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_brk	.symtab	0x40eb1c	56	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x40960c	80	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x40eafc	32	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x42979c	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x4297a0	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x423428	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x4297a4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x429698	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x408784	48	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x40fda0	12	FUNC	<unknown>	HIDDEN	3
_fixed_buffers	.symtab	0x42746c	8192	OBJECT	<unknown>	DEFAULT	11
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40965c	124	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x40d4a0	1264	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x42969c	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x400094	12	FUNC	<unknown>	HIDDEN	1
_load_inttype	.symtab	0x40d308	92	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x409c1c	120	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x409ee8	902	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x409c94	72	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x409cdc	464	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x409eac	60	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x40c7ee	12	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x40c7ee	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x4296e0	128	OBJECT	<unknown>	HIDDEN	11
_start	.symtab	0x4001a0	30	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x4092a4	536	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x4094bc	108	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x4230dc	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x4230e0	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x40a3b8	224	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x427468	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x4230f8	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x427464	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x423114	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x409544	148	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x423110	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x40c31c	324	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40d364	56	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x411c74	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40d39c	260	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x4096d8	1348	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40bc9c	244	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x40c2f0	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x40c2f0	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x40af00	24	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x429678	4	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.2753	.symtab	0x429694	4	OBJECT	<unknown>	DEFAULT	11
bind	.symtab	0x40b444	40	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x40b640	184	FUNC	<unknown>	DEFAULT	2
buf.2577	.symtab	0x429470	16	OBJECT	<unknown>	DEFAULT	11
buf.4814	.symtab	0x429480	460	OBJECT	<unknown>	DEFAULT	11
c	.symtab	0x4230b0	4	OBJECT	<unknown>	DEFAULT	9
calloc	.symtab	0x40b880	104	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x4087b4	56	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x4087ec	56	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x408e40	136	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cncip	.symtab	0x423020	4	OBJECT	<unknown>	DEFAULT	9
cncport	.symtab	0x423024	4	OBJECT	<unknown>	DEFAULT	9
completed.2217	.symtab	0x423428	1	OBJECT	<unknown>	DEFAULT	11
connect	.symtab	0x40b46c	40	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x402f2c	772	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x408bc4	24	FUNC	<unknown>	DEFAULT	2
crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x403a68	232	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x4230a8	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x42301c	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x408824	56	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x429684	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x429698	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x40c4d0	228	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x40caf8	56	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x40c460	112	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x412b28	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x409050	272	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x408640	172	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x4086ec	152	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x402e66	198	FUNC	<unknown>	DEFAULT	2
fdopen_pids	.symtab	0x427460	4	OBJECT	<unknown>	DEFAULT	11
fdpclose	.symtab	0x402ce0	390	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x402aa8	568	FUNC	<unknown>	DEFAULT	2
feof	.symtab	0x40a270	96	FUNC	<unknown>	DEFAULT	2
feof.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fflush_unlocked	.symtab	0x40a498	320	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40d990	216	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40a2d0	120	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40a5d8	128	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
findwritedir	.symtab	0x405e44	168	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x412b14	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x409160	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40885c	56	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs	.symtab	0x40a348	112	FUNC	<unknown>	DEFAULT	2
fputs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40a658	68	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400140	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x40b8e8	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40ec08	28	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x40ec08	28	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40ec24	232	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x40cb30	88	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x40a69c	156	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x405eec	60	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x40340c	84	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x40764c	680	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x40d990	216	FUNC	<unknown>	DEFAULT	2
getcwd	.symtab	0x408894	204	FUNC	<unknown>	DEFAULT	2
getcwd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x408960	52	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x40cd10	56	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40cd48	56	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40cd80	56	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x40b150	72	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x40b198	684	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x408994	28	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x4089b0	56	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x4089e8	56	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x408a20	56	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x40b494	40	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x40b4bc	44	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40cdb8	56	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x423448	4	OBJECT	<unknown>	DEFAULT	11
h.4813	.symtab	0x42964c	20	OBJECT	<unknown>	DEFAULT	11
h_errno	.symtab	0x42969c	4	OBJECT	<unknown>	DEFAULT	11
hacked	.symtab	0x42344c	4	OBJECT	<unknown>	DEFAULT	11
has_exe_access	.symtab	0x400cd0	412	FUNC	<unknown>	DEFAULT	2
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_alloc_at.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hextable	.symtab	0x410bd4	1024	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x40b04e	46	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x40b07c	22	FUNC	<unknown>	DEFAULT	2
httpsocket	.symtab	0x405f28	768	FUNC	<unknown>	DEFAULT	2
i.4872	.symtab	0x4230b4	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x40aabc	192	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x40b124	44	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x40e098	204	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x40b10c	24	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x40b094	120	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x40f40c	492	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x40f2d0	316	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x40f138	408	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x40f09c	156	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x407588	196	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x401d50	180	FUNC	<unknown>	DEFAULT	2
initial_fa	.symtab	0x423208	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x40be74	120	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x40c150	176	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x408a58	148	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40af70	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x408dfc	28	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x408aec	56	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0x4016e8	1600	FUNC	<unknown>	DEFAULT	2
killer_kill	.symtab	0x401d28	40	FUNC	<unknown>	DEFAULT	2
killer_kill_by_port	.symtab	0x400e6c	2172	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x4296d4	4	OBJECT	<unknown>	DEFAULT	11
killer_realpath	.symtab	0x4296c4	4	OBJECT	<unknown>	DEFAULT	11
killer_realpath_len	.symtab	0x4296c0	4	OBJECT	<unknown>	DEFAULT	11
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sh/sh4/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sh/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sh/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sh/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sh/vfork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x4038dc	304	FUNC	<unknown>	DEFAULT	2
listen	.symtab	0x40b4e8	40	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40cdf0	96	FUNC	<unknown>	DEFAULT	2
m_fdgets	.symtab	0x40092c	220	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x423458	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x4078f4	3056	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x423444	4	OBJECT	<unknown>	DEFAULT	11
makeIPPacket	.symtab	0x403c64	224	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x4034bc	156	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x40b778	264	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mem_exists	.symtab	0x400a08	198	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x40da68	204	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x40a7c0	636	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x40db34	978	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memory_scan_match	.symtab	0x400ace	514	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x40df08	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x40df2c	204	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40aa40	124	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x42330c	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x423324	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x4296a0	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x40ce50	56	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1030	.symtab	0x42946c	4	OBJECT	<unknown>	DEFAULT	11
ntohl	.symtab	0x40b008	48	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40b038	22	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x423450	8	OBJECT	<unknown>	DEFAULT	11
object.2270	.symtab	0x42342c	24	OBJECT	<unknown>	DEFAULT	11
open	.symtab	0x408b24	160	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x408ec8	228	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x4296c8	4	OBJECT	<unknown>	DEFAULT	11
ourPublicIP	.symtab	0x4296cc	4	OBJECT	<unknown>	DEFAULT	11
p.2215	.symtab	0x423018	0	OBJECT	<unknown>	DEFAULT	9
parseHex	.symtab	0x403230	124	FUNC	<unknown>	DEFAULT	2
pgid	.symtab	0x4296d8	4	OBJECT	<unknown>	DEFAULT	11
pids	.symtab	0x4296dc	4	OBJECT	<unknown>	DEFAULT	11
pipe	.symtab	0x408590	64	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
poll	.symtab	0x40ebd0	56	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x408bdc	52	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4023	.symtab	0x411bcc	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x4023a0	1072	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x402048	104	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x402208	408	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x4020b0	344	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x40637c	4620	FUNC	<unknown>	DEFAULT	2
qual_chars.4029	.symtab	0x411be0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x40ea34	40	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40bd90	20	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x401e04	272	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x40bda4	100	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x4127d0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x40c024	104	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x423358	128	OBJECT	<unknown>	DEFAULT	9
rangechoice	.symtab	0x4230ac	4	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x40eeec	152	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x408c10	56	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir	.symtab	0x408fac	144	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x408c48	56	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x40b9d8	272	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x40b510	40	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x403558	900	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x40ca68	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x4296d0	4	OBJECT	<unknown>	DEFAULT	11
sclose	.symtab	0x403d44	72	FUNC	<unknown>	DEFAULT	2
select	.symtab	0x408c80	52	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x40b538	40	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendCNC	.symtab	0x405d60	228	FUNC	<unknown>	DEFAULT	2
sendHOLD	.symtab	0x403eac	1684	FUNC	<unknown>	DEFAULT	2
sendHTTP	.symtab	0x405964	1020	FUNC	<unknown>	DEFAULT	2
sendJUNK	.symtab	0x404540	1472	FUNC	<unknown>	DEFAULT	2
sendSaD	.symtab	0x404b00	562	FUNC	<unknown>	DEFAULT	2
sendTCP	.symtab	0x405338	1532	FUNC	<unknown>	DEFAULT	2
sendUDP	.symtab	0x404d32	1542	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x40b560	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x408cb4	56	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x40b590	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40be08	108	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x40bf4c	216	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x40ea5c	160	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x40b5e4	60	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x40b620	32	FUNC	<unknown>	DEFAULT	2
signal	.symtab	0x40b640	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x408cec	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40c5b4	376	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x40b5bc	40	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x403d8c	288	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x402940	360	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4028	.symtab	0x411bf4	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4022	.symtab	0x411bd8	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4025	.symtab	0x411c20	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4024	.symtab	0x411c38	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4027	.symtab	0x411c04	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4026	.symtab	0x411c14	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x409178	132	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40beec	96	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x40beec	96	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x40c08c	196	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x4233fc	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x4296b8	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x4230d0	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x4230c8	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x4230cc	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x40af18	64	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40aabc	192	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x40ab7c	34	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x40ab7c	34	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x40ab9e	30	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x40f050	76	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40ae38	200	FUNC	<unknown>	DEFAULT	2
stristr	.symtab	0x4007b8	372	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x40abbc	136	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x40ef84	154	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40ac44	142	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40acd4	132	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40e070	40	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x40f01e	48	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x40ad58	192	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x40af58	24	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40dff8	120	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40c308	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
system	.symtab	0x40c200	240	FUNC	<unknown>	DEFAULT	2
system.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x402884	188	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x40af94	116	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x403b50	276	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x408d40	56	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x40fb60	40	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x408e18	40	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x401f14	308	FUNC	<unknown>	DEFAULT	2
trivial	.symtab	0x408584	0	NOTYPE	<unknown>	DEFAULT	2
type_codes	.symtab	0x411c40	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x411c58	12	OBJECT	<unknown>	DEFAULT	4
unknown.1072	.symtab	0x411c64	14	OBJECT	<unknown>	DEFAULT	4
unlink	.symtab	0x408d78	56	FUNC	<unknown>	DEFAULT	2
unlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unsafe_state	.symtab	0x42333c	28	OBJECT	<unknown>	DEFAULT	9
uppercase	.symtab	0x403460	92	FUNC	<unknown>	DEFAULT	2
useragents	.symtab	0x423028	128	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x40c72c	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x400384	688	FUNC	<unknown>	DEFAULT	2
util_isalpha	.symtab	0x4006c4	88	FUNC	<unknown>	DEFAULT	2
util_isdigit	.symtab	0x400684	64	FUNC	<unknown>	DEFAULT	2
util_isspace	.symtab	0x400634	80	FUNC	<unknown>	DEFAULT	2
util_isupper	.symtab	0x40071c	64	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x4001d4	432	FUNC	<unknown>	DEFAULT	2
vfork	.symtab	0x4085d0	54	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x4091fc	168	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x40ce88	56	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x408db0	20	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x40cfe8	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40d04c	112	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40d02c	32	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x4032ac	352	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x408dc4	56	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3026	.symtab	0x412bd4	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
zero	.symtab	0x40075c	92	FUNC	<unknown>	DEFAULT	2
zprintf	.symtab	0x4027d0	180	FUNC	<unknown>	DEFAULT	2

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 43
• 1994 undefined
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2025 16:16:41.586611032 CEST	57934	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:16:41.857861996 CEST	1994	57934	156.253.227.62	192.168.2.13
Apr 26, 2025 16:16:46.860096931 CEST	57936	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:16:47.131608963 CEST	1994	57936	156.253.227.62	192.168.2.13
Apr 26, 2025 16:16:52.133117914 CEST	57938	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:16:52.406615019 CEST	1994	57938	156.253.227.62	192.168.2.13
Apr 26, 2025 16:16:57.408840895 CEST	57940	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:16:57.680206060 CEST	1994	57940	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:02.682374954 CEST	57942	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:02.953655005 CEST	1994	57942	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:07.956279993 CEST	57944	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:08.228723049 CEST	1994	57944	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:13.231034040 CEST	57946	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:13.502438068 CEST	1994	57946	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:18.505069017 CEST	57948	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:18.776060104 CEST	1994	57948	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:23.778456926 CEST	57950	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:24.049735069 CEST	1994	57950	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:29.052195072 CEST	57952	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:29.323915958 CEST	1994	57952	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:34.326073885 CEST	57954	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:34.597584963 CEST	1994	57954	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:39.599600077 CEST	57956	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:39.870686054 CEST	1994	57956	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:44.873171091 CEST	57958	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:45.144289970 CEST	1994	57958	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:50.146564960 CEST	57960	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:50.417965889 CEST	1994	57960	156.253.227.62	192.168.2.13
Apr 26, 2025 16:17:55.419794083 CEST	57962	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:17:55.691956997 CEST	1994	57962	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:00.694463968 CEST	57964	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:00.965540886 CEST	1994	57964	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:05.967802048 CEST	57966	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:06.239204884 CEST	1994	57966	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:11.241219997 CEST	57968	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:11.512471914 CEST	1994	57968	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:16.514174938 CEST	57970	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:16.785788059 CEST	1994	57970	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:21.787800074 CEST	57972	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:22.059504986 CEST	1994	57972	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:27.061990976 CEST	57974	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:27.333411932 CEST	1994	57974	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:32.335624933 CEST	57976	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:32.607032061 CEST	1994	57976	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:37.608640909 CEST	57978	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:37.880141020 CEST	1994	57978	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:42.882776022 CEST	57980	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:43.154325962 CEST	1994	57980	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:48.156497955 CEST	57982	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:48.428463936 CEST	1994	57982	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:53.430692911 CEST	57984	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:53.702266932 CEST	1994	57984	156.253.227.62	192.168.2.13
Apr 26, 2025 16:18:58.704802990 CEST	57986	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:18:58.976218939 CEST	1994	57986	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:03.977942944 CEST	57988	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:04.249794006 CEST	1994	57988	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:09.251105070 CEST	57990	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:09.522442102 CEST	1994	57990	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:14.523817062 CEST	57992	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:14.795244932 CEST	1994	57992	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:19.796907902 CEST	57994	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:20.068443060 CEST	1994	57994	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:25.070698977 CEST	57996	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:25.342072010 CEST	1994	57996	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:30.344230890 CEST	57998	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:30.615494967 CEST	1994	57998	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:35.617535114 CEST	58000	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:35.889697075 CEST	1994	58000	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:40.891798019 CEST	58002	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:41.162992954 CEST	1994	58002	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:46.165265083 CEST	58004	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:46.436992884 CEST	1994	58004	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:51.439708948 CEST	58006	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:51.711420059 CEST	1994	58006	156.253.227.62	192.168.2.13
Apr 26, 2025 16:19:56.713654041 CEST	58008	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:19:56.984927893 CEST	1994	58008	156.253.227.62	192.168.2.13
Apr 26, 2025 16:20:01.987102032 CEST	58010	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:20:02.258332968 CEST	1994	58010	156.253.227.62	192.168.2.13
Apr 26, 2025 16:20:07.260624886 CEST	58012	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:20:07.532103062 CEST	1994	58012	156.253.227.62	192.168.2.13
Apr 26, 2025 16:20:12.534097910 CEST	58014	1994	192.168.2.13	156.253.227.62
Apr 26, 2025 16:20:12.805484056 CEST	1994	58014	156.253.227.62	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2025 16:19:28.233036041 CEST	36919	53	192.168.2.13	1.1.1.1
Apr 26, 2025 16:19:28.233098030 CEST	43201	53	192.168.2.13	1.1.1.1
Apr 26, 2025 16:19:28.375849962 CEST	53	43201	1.1.1.1	192.168.2.13
Apr 26, 2025 16:19:28.395720959 CEST	53	36919	1.1.1.1	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2025 16:19:28.233036041 CEST	192.168.2.13	1.1.1.1	0x892a	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Apr 26, 2025 16:19:28.233098030 CEST	192.168.2.13	1.1.1.1	0x1613	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2025 16:19:28.395720959 CEST	1.1.1.1	192.168.2.13	0x892a	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Apr 26, 2025 16:19:28.395720959 CEST	1.1.1.1	192.168.2.13	0x892a	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: 8sh48.elf PID: 5446, Parent PID: 5373

General

Start time (UTC):	14:16:40
Start date (UTC):	26/04/2025
Path:	/tmp/8sh48.elf
Arguments:	/tmp/8sh48.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: 8sh48.elf PID: 5450, Parent PID: 5446

General

Start time (UTC):	14:16:41
Start date (UTC):	26/04/2025
Path:	/tmp/8sh48.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report 8sh48.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: 8sh48.elf PID: 5446, Parent PID: 5373

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: 8sh48.elf PID: 5450, Parent PID: 5446

General

Process Activities

Thread Sleep

Linux Analysis Report
8sh48.elf