Play interactive tour

Edit tour

macOS Analysis Report PT.updd

Overview

General Information

Sample Name:	PT.updd
Analysis ID:	1691
MD5:	e344d16054bf7571d7ecb8e435b862b2
SHA1:	2992d7b146603cd5bb175a1010b8699a828a239d
SHA256:	4e4ad25e652768157b460a62f87f3d41586a40da4b3b8e40ee35a28d3f5cca03
Infos:
Most interesting Screenshot:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false

Signatures

Performs DNS queries to domains with low reputation

Process executable has a file extension which is uncommon (probably to disguise the executable)

Explicitly loads/starts launch services

Contains symbols with suspicious names likely related to networking

Reads the systems hostname

Creates system-wide 'launchd' managed services aka launch daemons

Executes the "mkdir" command used to create folders

Changes permissions of written Mach-O files

Executes commands using a shell command-line interpreter

Reads the systems OS release and/or type

Writes 64-bit Mach-O files to disk

Classification

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	1691
Start date:	16.10.2021
Start time:	12:09:05
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	PT.updd
Cookbook file name:	defaultmacfilecookbook.jbs
Analysis system description:	Virtual Machine, High Sierra (Office 2016 v16.16, Java 11.0.2+9, Adobe Reader 2019.010.20099)
Analysis Mode:	default
Detection:	MAL
Classification:	mal48.troj.evad.macUPDD@0/4@1/0
Warnings:	Show All Excluded IPs from analysis (whitelisted): 17.253.55.202, 17.253.55.204, 17.253.55.206, 17.253.38.125, 17.253.38.253, 17.253.54.253, 17.253.54.125, 17.253.54.251 Excluded domains from analysis (whitelisted): ocsp.apple.com, valid.origin-apple.com.akadns.net, time-macos.apple.com, time-osx.g.aaplimg.com, ocsp-a.g.aaplimg.com, valid-apple.g.aaplimg.com, crl.apple.com, valid.apple.com, lb._dns-sd._udp.0.11.168.192.in-addr.arpa VT rate limit hit for: http://t4p-upd.info/

Process Tree

System is macvm-highsierra

mono-sgen32 New Fork (PID: 553, Parent: 477)

PT.updd (MD5: e344d16054bf7571d7ecb8e435b862b2) Arguments: /Users/berri/Desktop/PT.updd

sh New Fork (PID: 554, Parent: 553)

mkdir (MD5: 135a3b94b3d9efccb4c8cd23ac404571) Arguments: mkdir -p /Library/PrivilegedHelperTools/

sh New Fork (PID: 555, Parent: 553)

cp (MD5: 57fc302d74610c3350e683c6c9771076) Arguments: cp /Users/berri/Desktop/PT.updd /Library/PrivilegedHelperTools/PT.updd

sh New Fork (PID: 556, Parent: 553)

mkdir (MD5: 135a3b94b3d9efccb4c8cd23ac404571) Arguments: mkdir -p /Library/LaunchDaemons/

sh New Fork (PID: 557, Parent: 553)

launchctl (MD5: 17fad4b994d600d0a5b6bc02b55c2c80) Arguments: /bin/launchctl load /Library/LaunchDaemons/PT.updd.plist

xpcproxy New Fork (PID: 558, Parent: 1)

PT.updd (MD5: e344d16054bf7571d7ecb8e435b862b2) Arguments: /Library/PrivilegedHelperTools/PT.updd

PT.updd New Fork (PID: 559, Parent: 558)

sh (MD5: 8aa60b22a5d30418a002b340989384dc) Arguments: sh -c /usr/libexec/PlistBuddy /Applications/PopcornTime.app/Contents/Info.plist -c 'Print CFBundleVersion'

PlistBuddy (MD5: dc74460b36c41234337e907d4f151e4c) Arguments: /usr/libexec/PlistBuddy /Applications/PopcornTime.app/Contents/Info.plist -c Print CFBundleVersion

cleanup

Yara Overview

No yara matches

Jbx Signature Overview

• Networking
• System Summary
• Data Obfuscation
• Persistence and Installation Behavior
• Boot Survival
• Hooking and other Techniques for Hiding and Protection
• Language, Device and Operating System Detection

Click to jump to signature section

Show All Signature Results

Networking:

Performs DNS queries to domains with low reputation

Show sources

Source:

DNS query: popcorntimeupd.xyz

Source: unknown

DNS traffic detected: queries for: popcorntimeupd.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 104.89.44.72
Source: unknown	TCP traffic detected without corresponding DNS query: 104.89.44.72
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: GET /?app_id=T4P_SEM&hid=dd4890ac960b28289774ea936e033343&ver=UNKNOWN&os=OSX101302 HTTP/1.1Host: popcorntimeupd.xyzUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 v1.4Accept: */*

Source: PT.updd, 00000553.00000239.1.000000010f216000.000000010f231000.r--.sdmp	String found in binary or memory: http://crl.apple.com/codesigning.crl0
Source: PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	String found in binary or memory: http://pct-upd.info/
Source: PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	String found in binary or memory: http://pct-upd.info/(http://t4p-upd.info/&http://updpct.info/(http://upd-pct.info/&http://pctupd.inf
Source: PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	String found in binary or memory: http://pctupd.info/
Source: PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	String found in binary or memory: http://t4p-upd.info/
Source: PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	String found in binary or memory: http://upd-pct.info/
Source: PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	String found in binary or memory: http://updpct.info/
Source: PT.updd, 00000553.00000239.1.000000010900b000.00000001092c8000.r-x.sdmp, PT.updd, 00000553.00000239.1.000000010f216000.000000010f231000.r--.sdmp, PT.updd.plist.239.dr	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: PT.updd, 00000553.00000239.1.000000010f216000.000000010f231000.r--.sdmp	String found in binary or memory: http://www.apple.com/appleca/root.crl0
Source: PT.updd, 00000553.00000239.1.000000010f216000.000000010f231000.r--.sdmp	String found in binary or memory: http://www.apple.com/certificateauthority0
Source: PT.updd, 00000553.00000239.1.000000010900b000.00000001092c8000.r-x.sdmp	String found in binary or memory: https://curl.haxx.se/docs/http-cookies.html
Source: PT.updd, 00000553.00000239.1.000000010f216000.000000010f231000.r--.sdmp	String found in binary or memory: https://www.apple.com/appleca/0
Source: PT.updd, 00000553.00000239.1.000000010900b000.00000001092c8000.r-x.sdmp	String found in binary or memory: https://www.openssl.org/docs/faq.html
Source: PT.updd, 00000553.00000239.1.000000010900b000.00000001092c8000.r-x.sdmp	String found in binary or memory: https://www.openssl.org/docs/faq.htmlPRNG

Source: classification engine

Classification label: mal48.troj.evad.macUPDD@0/4@1/0

Source: submission PT.updd	Mach-O symbol: _connect
Source: submission PT.updd	Mach-O symbol: _getsockname
Source: submission PT.updd	Mach-O symbol: _getsockopt
Source: submission PT.updd	Mach-O symbol: _gethostbyname
Source: submission PT.updd	Mach-O symbol: __ZTVSt12domain_error
Source: submission PT.updd	Mach-O symbol: __ZNKSt3__18numpunctIcE11do_groupingEv
Source: submission PT.updd	Mach-O symbol: _send
Source: submission PT.updd	Mach-O symbol: _sendto
Source: submission PT.updd	Mach-O symbol: __ZNSt12domain_errorD1Ev
Source: submission PT.updd	Mach-O symbol: _setsockopt
Source: submission PT.updd	Mach-O symbol: __ZTISt12domain_error
Source: submission PT.updd	Mach-O symbol: _socket
Source: submission PT.updd	Mach-O symbol: _socketpair
Source: dropped file PT.updd.243.dr	Mach-O symbol: _connect
Source: dropped file PT.updd.243.dr	Mach-O symbol: _getsockname
Source: dropped file PT.updd.243.dr	Mach-O symbol: _getsockopt
Source: dropped file PT.updd.243.dr	Mach-O symbol: _gethostbyname
Source: dropped file PT.updd.243.dr	Mach-O symbol: __ZTVSt12domain_error
Source: dropped file PT.updd.243.dr	Mach-O symbol: __ZNKSt3__18numpunctIcE11do_groupingEv
Source: dropped file PT.updd.243.dr	Mach-O symbol: _send
Source: dropped file PT.updd.243.dr	Mach-O symbol: _sendto
Source: dropped file PT.updd.243.dr	Mach-O symbol: __ZNSt12domain_errorD1Ev
Source: dropped file PT.updd.243.dr	Mach-O symbol: _setsockopt
Source: dropped file PT.updd.243.dr	Mach-O symbol: __ZTISt12domain_error
Source: dropped file PT.updd.243.dr	Mach-O symbol: _socket
Source: dropped file PT.updd.243.dr	Mach-O symbol: _socketpair

Source: /bin/sh (PID: 557)

Launch agent/daemon loaded: /bin/launchctl load /Library/LaunchDaemons/PT.updd.plist

Jump to behavior

Source: /bin/sh (PID: 554)	Mkdir executable: /bin/mkdir -> mkdir -p /Library/PrivilegedHelperTools/			Jump to behavior
Source: /bin/sh (PID: 556)	Mkdir executable: /bin/mkdir -> mkdir -p /Library/LaunchDaemons/			Jump to behavior

Source: /bin/cp (PID: 555)

Permissions modified for written 64-bit Mach-O /Library/PrivilegedHelperTools/PT.updd: bits: - usr: rx grp: rx all: rwx

Jump to dropped file

Source: /Users/berri/Desktop/PT.updd (PID: 553)	Shell command executed: sh -c mkdir -p /Library/PrivilegedHelperTools/	Jump to behavior
Source: /Users/berri/Desktop/PT.updd (PID: 553)	Shell command executed: sh -c cp /Users/berri/Desktop/PT.updd /Library/PrivilegedHelperTools/PT.updd	Jump to behavior
Source: /Users/berri/Desktop/PT.updd (PID: 553)	Shell command executed: sh -c mkdir -p /Library/LaunchDaemons/	Jump to behavior
Source: /Users/berri/Desktop/PT.updd (PID: 553)	Shell command executed: sh -c /bin/launchctl load /Library/LaunchDaemons/PT.updd.plist	Jump to behavior
Source: /Library/PrivilegedHelperTools/PT.updd (PID: 559)	Shell command executed: sh -c /usr/libexec/PlistBuddy /Applications/PopcornTime.app/Contents/Info.plist -c 'Print CFBundleVersion'	Jump to behavior

Source: /bin/cp (PID: 555)

File written: /Library/PrivilegedHelperTools/PT.updd

Jump to dropped file

Source: /bin/sh (PID: 559)

PlistBuddy executable: /usr/libexec/PlistBuddy /usr/libexec/PlistBuddy /Applications/PopcornTime.app/Contents/Info.plist -c Print CFBundleVersion

Jump to behavior

Source: /Users/berri/Desktop/PT.updd (PID: 553)

Launch daemon created File created: /Library/LaunchDaemons/PT.updd.plist

Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Process executable has a file extension which is uncommon (probably to disguise the executable)

Show sources

Source: /Library/Frameworks/Mono.framework/Versions/4.4.2/bin/mono-sgen32 (PID: 553)	Process executable with extension: /Users/berri/Desktop/PT.updd			Jump to behavior
Source: /usr/libexec/xpcproxy (PID: 558)	Process executable with extension: /Library/PrivilegedHelperTools/PT.updd			Jump to behavior

Source: /Users/berri/Desktop/PT.updd (PID: 553)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 554)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 555)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 556)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 557)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /Library/PrivilegedHelperTools/PT.updd (PID: 558)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 559)	Sysctl requested: kern.hostname (1.10)	Jump to behavior

Source: /Users/berri/Desktop/PT.updd (PID: 553)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Users/berri/Desktop/PT.updd (PID: 553)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Library/PrivilegedHelperTools/PT.updd (PID: 558)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Library/PrivilegedHelperTools/PT.updd (PID: 558)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior

Source: /Library/PrivilegedHelperTools/PT.updd (PID: 558)

System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting1	LC_LOAD_DYLIB Addition1	LC_LOAD_DYLIB Addition1	Masquerading1	OS Credential Dumping	System Information Discovery21	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Non-Application Layer Protocol2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Launch Agent1	Launch Agent1	Scripting1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Application Layer Protocol2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Launch Daemon2	Launch Daemon2	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Ingress Tool Transfer1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Plist Modification1	Plist Modification1	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Protocol Impersonation	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Link
PT.updd	0%	Virustotal	Browse
PT.updd	0%	Metadefender	Browse
PT.updd	2%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label	Link
/Library/PrivilegedHelperTools/PT.updd	0%	Metadefender		Browse
/Library/PrivilegedHelperTools/PT.updd	2%	ReversingLabs

Domains

Source	Detection	Scanner	Label	Link
popcorntimeupd.xyz	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://pct-upd.info/	1%	Virustotal		Browse
http://pct-upd.info/	0%	Avira URL Cloud	safe
http://pctupd.info/	0%	Virustotal		Browse
http://pctupd.info/	0%	Avira URL Cloud	safe
http://updpct.info/	4%	Virustotal		Browse
http://updpct.info/	0%	Avira URL Cloud	safe
http://popcorntimeupd.xyz/?app_id=T4P_SEM&hid=dd4890ac960b28289774ea936e033343&ver=UNKNOWN&os=OSX101302	0%	Avira URL Cloud	safe
http://t4p-upd.info/	0%	Avira URL Cloud	safe
http://upd-pct.info/	0%	Avira URL Cloud	safe
http://pct-upd.info/(http://t4p-upd.info/&http://updpct.info/(http://upd-pct.info/&http://pctupd.inf	0%	Avira URL Cloud	safe

Domains and IPs Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
popcorntimeupd.xyz	172.67.191.194	true	true	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://popcorntimeupd.xyz/?app_id=T4P_SEM&hid=dd4890ac960b28289774ea936e033343&ver=UNKNOWN&os=OSX101302	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://pct-upd.info/	PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://pctupd.info/	PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.openssl.org/docs/faq.htmlPRNG	PT.updd, 00000553.00000239.1.000000010900b000.00000001092c8000.r-x.sdmp	false		high
http://updpct.info/	PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://t4p-upd.info/	PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	false	Avira URL Cloud: safe	unknown
https://www.openssl.org/docs/faq.html	PT.updd, 00000553.00000239.1.000000010900b000.00000001092c8000.r-x.sdmp	false		high
http://upd-pct.info/	PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	false	Avira URL Cloud: safe	unknown
http://pct-upd.info/(http://t4p-upd.info/&http://updpct.info/(http://upd-pct.info/&http://pctupd.inf	PT.updd, 00000553.00000239.1.00000001092c8000.00000001092f8000.rw-.sdmp	false	Avira URL Cloud: safe	unknown
https://curl.haxx.se/docs/http-cookies.html	PT.updd, 00000553.00000239.1.000000010900b000.00000001092c8000.r-x.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
172.67.191.194	popcorntimeupd.xyz	United States		13335	CLOUDFLARENETUS	true
104.89.44.72	unknown	United States		16625	AKAMAI-ASUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
104.89.44.72	login_helper	Get hash	malicious	Browse
	module_init	Get hash	malicious	Browse
	63E2F3FC7E33	Get hash	malicious	Browse
	31A21_.10.10.118.3.dmg	Get hash	malicious	Browse
	bfe	Get hash	malicious	Browse
	puS2SWi74R	Get hash	malicious	Browse
	VaudTax_2020.dmg	Get hash	malicious	Browse
	ON24-ScreenShare-plugin.dmg	Get hash	malicious	Browse
	bFd	Get hash	malicious	Browse

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AKAMAI-ASUS	WGEcMZQA.dll	Get hash	malicious	Browse	95.100.216.34
	1WL2kQmrNk	Get hash	malicious	Browse	23.13.101.220
	1Mwzgsrx9C	Get hash	malicious	Browse	104.91.41.117
	MQzYHhdWg0	Get hash	malicious	Browse	23.214.21.214
	8ayDJW4ujq	Get hash	malicious	Browse	104.73.204.126
	DEMONS.arm	Get hash	malicious	Browse	104.85.207.75
	DEMONS.arm7	Get hash	malicious	Browse	184.26.78.15
	vdQzjfJR0u	Get hash	malicious	Browse	23.40.23.245
	dUdVswLLvu	Get hash	malicious	Browse	23.33.161.185
	6ZtFD1dbIy	Get hash	malicious	Browse	23.52.18.154
	Qr7o5ZZmz1	Get hash	malicious	Browse	104.90.135.158
	ii.arm7	Get hash	malicious	Browse	104.78.21.133
	ii.arm	Get hash	malicious	Browse	23.51.122.182
	login_helper	Get hash	malicious	Browse	104.89.44.72
	module_init	Get hash	malicious	Browse	104.89.44.72
	KKveTTgaAAsecNNaaaa.arm	Get hash	malicious	Browse	88.221.5.31
	b3astmode.x86	Get hash	malicious	Browse	23.75.28.45
	Owari.arm7	Get hash	malicious	Browse	104.78.196.214
	z3hir.arm7	Get hash	malicious	Browse	104.127.5.222
	ATT64938.HTM	Get hash	malicious	Browse	104.89.34.102
CLOUDFLARENETUS	ZEKk2t5fJt.exe	Get hash	malicious	Browse	172.67.204.112
	dBJ2dwRpl5.exe	Get hash	malicious	Browse	104.21.85.99
	WGEcMZQA.dll	Get hash	malicious	Browse	104.20.185.68
	Fr6yaDjoE5.exe	Get hash	malicious	Browse	104.21.85.99
	9ubsb7p6h1.exe	Get hash	malicious	Browse	172.67.204.112
	Synapse-X-Cracked_460637337.exe	Get hash	malicious	Browse	172.67.177.45
	AeXXqhQNJKur7teIlOrvF329.exe	Get hash	malicious	Browse	104.21.33.184
	1u1hBVyy1i	Get hash	malicious	Browse	172.67.247.211
	IOI6w12lUDfF4tNCGf_7pzse.exe	Get hash	malicious	Browse	104.21.94.228
	UTJTSQdX9ITDLyCRBKvHrxJ7.exe	Get hash	malicious	Browse	104.21.33.184
	48fl6271oClv7lfnOsBHvbLy.exe	Get hash	malicious	Browse	172.67.176.199
	uFvG6DlSUpNCq_0a0Y3vNrYQ.exe	Get hash	malicious	Browse	172.67.166.84
	UfZQclP1sP8dkdmyrez2O3E7.exe	Get hash	malicious	Browse	104.21.85.99
	5he1PBER3h.exe	Get hash	malicious	Browse	104.21.33.184
	OeMKv473p6	Get hash	malicious	Browse	1.4.26.75
	Sapphire.exe	Get hash	malicious	Browse	162.159.129.233
	Setup.exe	Get hash	malicious	Browse	162.159.129.233
	Quotation- urgent basis.exe	Get hash	malicious	Browse	23.227.38.74
	_APNote Summary79286.HTM	Get hash	malicious	Browse	104.18.11.207
	fO6A7nqU5e.exe	Get hash	malicious	Browse	172.67.171.248

JA3 Fingerprints

No context

Dropped Files

No context

Runtime Messages

Command:	/Users/berri/Desktop/PT.updd
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Created / dropped Files

/Library/Application Support/updater.bin Download File
Process:	/Library/PrivilegedHelperTools/PT.updd
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	90
Entropy (8bit):	5.535863096137363
Encrypted:	false
SSDEEP:	3:/8VCDVPlKD729L3GTjR6hc/vMUMYh+QwI:/ECJtNDG3Ic/PnwI
MD5:	4178CC326AE0A9A02CB9CE4A04273E66
SHA1:	493DE5364F78E36CEC36103BFCB635FF8E48BC55
SHA-256:	CA2D485E589C290F49BA0F85F8D06EC6AAD85BF8127C79E593B2A735DFE9950D
SHA-512:	E0420F9ED532CB4C95C65B3C239A28ABACBBB1CBFFCCF1E1F97E3F3C18A60D4972A7A4360B0073D420D7D244ECBA5E9243B9F2F6C9CD953F848B79A2570EA702
Malicious:	false
Reputation:	low
Preview:	wWdSMXjhBAps234567y0jWSrQFzqxGfy/S0rI7KgU9RRAeSXF69FuE1AQ/XZTVNgzYNqGiiT78koK7DtP5j5UmsU/q

/Library/LaunchDaemons/PT.updd.plist Download File
Process:	/Users/berri/Desktop/PT.updd
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	555
Entropy (8bit):	4.824585057120754
Encrypted:	false
SSDEEP:	12:TMHdgo+t7EdQiCX7+j5oDYY/lKv42EZM0ClnZzMn:2dzyiwi0R/Z7ZM0ChZzMn
MD5:	302234A90C59418FFB32905D5D4C99E7
SHA1:	46E681E8CC57E8A1305280CA9F310A636E8A8E85
SHA-256:	A3D5582DC5E6600EB3632758BFAE018A9DC9699A8860A8144B9A169C9E71108C
SHA-512:	37FB1B44C6DC7758A76409AABFF9FD6525895CD96D670D1B537074DE7767CA8D015192584D23CE69853D50FC43A11F0EFB886DFD3063B666E5708D909F36FC48
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" " http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">. <dict>. <key>Label</key>. <string>PT.updd</string>. <key>ProgramArguments</key>. <array>. <string>/Library/PrivilegedHelperTools/PT.updd</string>. </array>. <key>KeepAlive</key>. <true/>. <key>RunAtLoad</key>. <true/>. <key>Nice</key>. <integer>20</integer>. <key>LowPriorityIO</key>. <true/>. </dict>.</plist>.

/Library/PrivilegedHelperTools/PT.updd Download File
Process:	/bin/cp
File Type:	Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS\|DYLDLINK\|TWOLEVEL\|WEAK_DEFINES\|BINDS_TO_WEAK\|PIE>
Category:	dropped
Size (bytes):	3285300
Entropy (8bit):	6.328074786115305
Encrypted:	false
SSDEEP:	98304:wRS7Y6vD08J/l6p+bpkPjmOqpVHuCvniKQVY:BXvD084kO2AK
MD5:	E344D16054BF7571D7ECB8E435B862B2
SHA1:	2992D7B146603CD5BB175A1010B8699A828A239D
SHA-256:	4E4AD25E652768157B460A62F87F3D41586A40DA4B3B8E40EE35A28D3F5CCA03
SHA-512:	1C3AACCD9B631EACD009C5108AF5FCD4763BC90A7A6E54D670DCF865FE858A4A9115AB83AAF44EA05847385580561F3F64C0357D7CAF6283CE8D6D8C2CBEBDF7
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 2%
Reputation:	low
Preview:	..........................!.........H...__PAGEZERO..............................................................__TEXT....................+...............+.....................__text..........__TEXT........... ........!...... ..............................__stubs.........__TEXT............"...............".............................__stub_helper...__TEXT..........x.".............x.".............................__const.........__TEXT............".....l.........".............................__gcc_except_tab__TEXT............$......W........$.............................__cstring.......__TEXT...........m$.....1G.......m$.............................__unwind_info...__TEXT...........&......D.......&.............................__eh_frame......__TEXT..........h.&.....X.......h.&.....................................__DATA............+......0........+.............................__program_vars..__DATA............+.....(.........+.............................__got...........__DATA..........

/dev/null Download File
Process:	/usr/libexec/PlistBuddy
File Type:	ASCII text
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.389460876028362
Encrypted:	false
SSDEEP:	3:WNzGkr/dMo:aGiVZ
MD5:	6F367B4299FCEC09BF91F53697086443
SHA1:	2FEE70E0140AB7F83A7D01452FD78117EBB479CF
SHA-256:	63B485F855A9AD14D9EB90633C5AC3745120ACAB487422EB5178102525661820
SHA-512:	12E883C8AAE5401A919929B5DFF70BE79F833A43DC3DB9349C3B84CADD096134BA6FC74807AB2CDCE3696FA1035FAD20E1FB5225A2F3E2BD90DE9A02807B8921
Malicious:	false
Reputation:	low
Preview:	Print: Entry, "CFBundleVersion", Does Not Exist.

Static File Info

General
File type:	Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS\|DYLDLINK\|TWOLEVEL\|WEAK_DEFINES\|BINDS_TO_WEAK\|PIE>
Entropy (8bit):	6.328074786115305
TrID:	Mac OS X Mach-O 64bit Intel executable (20004/1) 100.00%
File name:	PT.updd
File size:	3285300
MD5:	e344d16054bf7571d7ecb8e435b862b2
SHA1:	2992d7b146603cd5bb175a1010b8699a828a239d
SHA256:	4e4ad25e652768157b460a62f87f3d41586a40da4b3b8e40ee35a28d3f5cca03
SHA512:	1c3aaccd9b631eacd009c5108af5fcd4763bc90a7a6e54d670dcf865fe858a4a9115ab83aaf44ea05847385580561f3f64c0357d7caf6283ce8d6d8c2cbebdf7
SSDEEP:	98304:wRS7Y6vD08J/l6p+bpkPjmOqpVHuCvniKQVY:BXvD084kO2AK
File Content Preview:	..........................!.........H...__PAGEZERO..............................................................__TEXT....................+...............+.....................__text..........__TEXT........... ........!...... .............................

Static Mach Info

General Information for header 1
Endian:	<
Size:	64-bit
Architecture:	x86_64
Filetype:	execute
Nbr. of load commands:	16
Entry point:	0x100002000

segment_command_64 aggregated: 4

Name	Value
segname	__PAGEZERO
vmaddr	0x0
vmsize	0x100000000
fileoff	0x0
filesize	0x0
maxprot	0x0
initprot	0x0
nsects	0
flags	0x0

Name

Value

segname

__TEXT

vmaddr

0x100000000

vmsize

0x2BD000

fileoff

0x0

filesize

0x2BD000

maxprot

0x7

initprot

0x5

nsects

flags

0x0

Datas

sectname	segname	addr	size	offset	entropy	align	reloff	nreloc	flags
__text	__TEXT	0x100002000	0x21E8CB	0x2000	6.6856	0xC	0x0	0	0x80000400
__stubs	__TEXT	0x1002208CC	0xAAA	0x2208CC	4.0484	0x1	0x0	0	0x80000408
__stub_helper	__TEXT	0x100221378	0xBFA	0x221378	4.8840	0x2	0x0	0	0x80000400
__const	__TEXT	0x100221F80	0x1F66C	0x221F80	2.6015	0x6	0x0	0	0x0
__gcc_except_tab	__TEXT	0x1002415EC	0x579C	0x2415EC	3.2864	0x2	0x0	0	0x0
__cstring	__TEXT	0x100246D90	0x24731	0x246D90	5.3915	0x4	0x0	0	0x2
__unwind_info	__TEXT	0x10026B4C4	0x44A4	0x26B4C4	5.8555	0x2	0x0	0	0x0
__eh_frame	__TEXT	0x10026F968	0x4D258	0x26F968	4.0898	0x3	0x0	0	0x0

Name

Value

segname

__DATA

vmaddr

0x1002BD000

vmsize

0x33000

fileoff

0x2BD000

filesize

0x30000

maxprot

0x7

initprot

0x3

nsects

flags

0x0

Datas

sectname	segname	addr	size	offset	entropy	align	reloff	nreloc	flags
__program_vars	__DATA	0x1002BD000	0x28	0x2BD000	2.0306	0x3	0x0	0	0x0
__got	__DATA	0x1002BD028	0x408	0x2BD028	2.5346	0x3	0x0	0	0x6
__nl_symbol_ptr	__DATA	0x1002BD430	0x10	0x2BD430	-0.0000	0x3	0x0	0	0x6
__la_symbol_ptr	__DATA	0x1002BD440	0xE38	0x2BD440	3.4461	0x3	0x0	0	0x7
__mod_init_func	__DATA	0x1002BE278	0x30	0x2BE278	2.5908	0x3	0x0	0	0x9
__const	__DATA	0x1002BE2B0	0x1F458	0x2BE2B0	2.6015	0x4	0x0	0	0x0
__data	__DATA	0x1002DD710	0xEACC	0x2DD710	3.2971	0x4	0x0	0	0x0
__common	__DATA	0x1002EC1E0	0x758	0x0	-0.0000	0x4	0x0	0	0x1
__bss	__DATA	0x1002EC940	0x2F4A	0x0	-0.0000	0x4	0x0	0	0x1

Name	Value
segname	__LINKEDIT
vmaddr	0x1002F0000
vmsize	0x35134
fileoff	0x2ED000
filesize	0x35134
maxprot	0x7
initprot	0x1
nsects	0
flags	0x0

dyld_info_command aggregated: 1

Name	Value
rebase_off	3067904
rebase_size	7848
bind_off	3075752
bind_size	5064
weak_bind_off	3080816
weak_bind_size	5928
lazy_bind_off	3086744
lazy_bind_size	10088
export_off	3096832
export_size	127376

symtab_command aggregated: 1

Name	Value
symoff	3234552
nsyms	635
stroff	3248876
strsize	36424

dysymtab_command aggregated: 1

Name	Value
ilocalsym	0
nlocalsym	150
iextdefsym	150
nextdefsym	88
iundefsym	238
nundefsym	397
tocoff	0
ntoc	0
modtaboff	0
nmodtab	0
extrefsymoff	0
nextrefsyms	0
indirectsymoff	3244712
nindirectsyms	1041
extreloff	0
nextrel	0
locreloff	0
nlocrel	0

dylinker_command aggregated: 1

Name

Value

name

Datas

/usr/lib/dyld

uuid_command aggregated: 1

Name	Value
uuid	b'\x11\x99A\xb2\xbe\xc57!\xa01b\x1a\xa7qW\xa7'

version_min_command aggregated: 1

Name	Value
version	657152
sdk	657920

thread_command aggregated: 1

Name	Value
flavor	4
count	42

dylib_command aggregated: 3

Name

Value

name

timestamp

Thu Jan 1 01:00:02 1970

current_version

120.0.0

compatibility_version

1.0.0

Datas

/usr/lib/libc++.1.dylib

Name

Value

name

timestamp

Thu Jan 1 01:00:02 1970

current_version

62.0.0

compatibility_version

1.0.0

Datas

/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices

Name

Value

name

timestamp

Thu Jan 1 01:00:02 1970

current_version

1213.0.0

compatibility_version

1.0.0

Datas

/usr/lib/libSystem.B.dylib

linkedit_data_command aggregated: 2

Name	Value
dataoff	3224208
datasize	10344

Name	Value
dataoff	3234552
datasize	0

Internal Symbols

_Gestalt

_NXGetLocalArchInfo

__DefaultRuneLocale

__NSGetExecutablePath

__Unwind_Resume

__ZGVZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E4dumpEiE3loc

__ZN4redi14basic_ipstreamIcNSt3__111char_traitsIcEEEC1ERKNS1_12basic_stringIcS3_NS1_9allocatorIcEEEEj

__ZN4redi14basic_ipstreamIcNSt3__111char_traitsIcEEED2Ev

__ZN4redi14pstream_commonIcNSt3__111char_traitsIcEEEC2ERKNS1_12basic_stringIcS3_NS1_9allocatorIcEEEEj

__ZN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEE11fill_bufferEb

__ZN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEE14create_buffersEj

__ZN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEE4forkEj

__ZN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEE4openERKNS1_12basic_stringIcS3_NS1_9allocatorIcEEEEj

__ZN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEE4waitEb

__ZN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEE5closeEv

__ZN5Plist15stringFromValueINSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEES7_RKT_

__ZN5Plist15stringFromValueIdEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKT_

__ZN5Plist15stringFromValueIfEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKT_

__ZN5Plist15stringFromValueIiEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKT_

__ZN5Plist15stringFromValueIlEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKT_

__ZN5Plist15stringFromValueIsEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKT_

__ZN5Plist15stringFromValueIxEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKT_

__ZN5Plist18writeXMLSimpleNodeINSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEEvRN4pugi8xml_nodeEPKcRKN5boost3anyE

__ZN5Plist18writeXMLSimpleNodeIdEEvRN4pugi8xml_nodeEPKcRKN5boost3anyE

__ZN5Plist18writeXMLSimpleNodeIfEEvRN4pugi8xml_nodeEPKcRKN5boost3anyE

__ZN5Plist18writeXMLSimpleNodeIiEEvRN4pugi8xml_nodeEPKcRKN5boost3anyE

__ZN5Plist18writeXMLSimpleNodeIlEEvRN4pugi8xml_nodeEPKcRKN5boost3anyE

__ZN5Plist18writeXMLSimpleNodeIsEEvRN4pugi8xml_nodeEPKcRKN5boost3anyE

__ZN5Plist18writeXMLSimpleNodeIxEEvRN4pugi8xml_nodeEPKcRKN5boost3anyE

__ZN5Plist9readPlistINSt3__13mapINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEN5boost3anyENS1_4lessIS8_EENS6_INS1_4pairIKS8_SA_EEEEEEEEvRNS1_13basic_istreamIcS5_EERT_

__ZN5boost15throw_exceptionINS_12bad_any_castEEEvRKT_

__ZN5boost16exception_detail10clone_implINS0_19error_info_injectorINS_12bad_any_castEEEEC1ERKS4_

__ZN5boost16exception_detail10clone_implINS0_19error_info_injectorINS_12bad_any_castEEEEC1ERKS5_NS5_9clone_tagE

__ZN5boost6locale3utf10utf_traitsIcLi1EE6encodeINSt3__120back_insert_iteratorINS5_12basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEEEEET_jSE_

__ZN5boost6locale4conv10utf_to_utfIcsEENSt3__112basic_stringIT_NS3_11char_traitsIS5_EENS3_9allocatorIS5_EEEEPKT0_SD_NS1_11method_typeE

__ZN5boost8any_castINSt3__13mapINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS_3anyENS1_4lessIS8_EENS6_INS1_4pairIKS8_S9_EEEEEEEET_RS9_

__ZN5boost8any_castIRKN5Plist4DateEEET_RNS_3anyE

__ZN5boost8any_castIRKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEET_RNS_3anyE

__ZN5boost8any_castIRKNSt3__13mapINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS_3anyENS1_4lessIS8_EENS6_INS1_4pairIKS8_S9_EEEEEEEET_RS9_

__ZN5boost8any_castIRKNSt3__16vectorINS_3anyENS1_9allocatorIS3_EEEEEET_RS3_

__ZN5boost8any_castIRKNSt3__16vectorIcNS1_9allocatorIcEEEEEET_RNS_3anyE

__ZN5boost8any_castIRKbEET_RNS_3anyE

__ZN5boost8any_castIRKdEET_RNS_3anyE

__ZN5boost8any_castIRKfEET_RNS_3anyE

__ZN5boost8any_castIRKiEET_RNS_3anyE

__ZN5boost8any_castIRKlEET_RNS_3anyE

__ZN5boost8any_castIRKsEET_RNS_3anyE

__ZN5boost8any_castIRKxEET_RNS_3anyE

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E10json_valueC2ENSA_7value_tE

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E13escape_stringERKS9_

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5lexer10to_unicodeEmm

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5lexer15token_type_nameENSB_10token_typeE

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5lexer16fill_line_bufferEv

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5lexer4scanEv

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5parseINS1_11__wrap_iterIPKcEELi0EEESA_T_SG_NS1_8functionIFbiNSA_13parse_event_tERSA_EEE

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5parseIS9_Li0EEESA_RKT_NS1_8functionIFbiNSA_13parse_event_tERSA_EEE

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E6parser14parse_internalEb

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E6parser5parseEv

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E9push_backEOSA_

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_EC1EDn

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_EC1EOSA_

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_EC2ENSA_7value_tE

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_EC2ERKS9_

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_ED2Ev

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_EaSESA_

__ZN8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_EixERKS9_

__ZNK5boost16exception_detail10clone_implINS0_19error_info_injectorINS_12bad_any_castEEEE7rethrowEv

__ZNK6base64IcNSt3__111char_traitsIcEEE3getIPKcNS0_15insert_iteratorINS0_6vectorIcNS0_9allocatorIcEEEEEEiEET_SD_SD_T0_RT1_

__ZNK6base64IcNSt3__111char_traitsIcEEE3putINS0_11__wrap_iterIPKcEENS0_15insert_iteratorINS0_12basic_stringIcS2_NS0_9allocatorIcEEEEEEiNS3_2lfEEET_SG_SG_T0_RT1_T2_

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E14const_iteratoreqERKSB_

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E2atERKS9_

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E4dumpERNS1_13basic_ostreamIcS6_EEbjj

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E4dumpEi

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5lexer10get_numberERSA_

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E5lexer10get_stringEv

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E6parser6expectENSA_5lexer10token_typeE

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E6parser8unexpectENSA_5lexer10token_typeE

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E8get_implIS9_Li0EEET_PSC_

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E8get_implIxLi0EEET_PSC_

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E9type_nameEv

__ZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_EixERKS9_

__ZNKSt13runtime_error4whatEv

__ZNKSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE4findEPKcmm

__ZNKSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5rfindEcm

__ZNKSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEPKc

__ZNKSt3__115basic_stringbufIcNS_11char_traitsIcEENS_9allocatorIcEEE3strEv

__ZNKSt3__115basic_stringbufIwNS_11char_traitsIwEENS_9allocatorIwEEE3strEv

__ZNKSt3__120__vector_base_commonILb1EE20__throw_length_errorEv

__ZNKSt3__121__basic_string_commonILb1EE20__throw_length_errorEv

__ZNKSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE13__lower_boundIS7_EENS_21__tree_const_iteratorISA_PNS_11__tree_nodeISA_PvEElEERKT_SM_SM_

__ZNKSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE4findIS7_EENS_21__tree_const_iteratorISA_PNS_11__tree_nodeISA_PvEElEERKT_

__ZNKSt3__16locale9has_facetERNS0_2idE

__ZNKSt3__16locale9use_facetERNS0_2idE

__ZNKSt3__18ios_base6getlocEv

__ZNKSt3__18numpunctIcE11do_groupingEv

__ZNKSt3__18numpunctIcE11do_truenameEv

__ZNKSt3__18numpunctIcE12do_falsenameEv

__ZNKSt3__18numpunctIcE16do_thousands_sepEv

__ZNKSt9exception4whatEv

__ZNSt11logic_errorC2EPKc

__ZNSt11logic_errorC2ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZNSt12domain_errorD1Ev

__ZNSt12out_of_rangeD1Ev

__ZNSt13runtime_errorC2EPKc

__ZNSt13runtime_errorC2ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZNSt13runtime_errorD2Ev

__ZNSt16invalid_argumentD1Ev

__ZNSt3__111this_thread9sleep_forERKNS_6chrono8durationIxNS_5ratioILl1ELl1000000000EEEEE

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5eraseEmm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcmm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEmc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKcm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEmc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertENS_11__wrap_iterIPKcEEc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEmPKc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6resizeEmc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEmmPKcm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7reserveEm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9push_backEc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_mmRKS4_

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEED1Ev

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSERKS5_

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSEc

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEPKwm

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEPKwmm

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEmw

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6appendEPKw

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6appendEPKwm

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6assignEPKw

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6resizeEmw

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7reserveEm

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE9push_backEw

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEC1ERKS5_

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEED1Ev

__ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEaSERKS5_

__ZNSt3__113basic_filebufIcNS_11char_traitsIcEEE4syncEv

__ZNSt3__113basic_filebufIcNS_11char_traitsIcEEEC2Ev

__ZNSt3__113basic_filebufIcNS_11char_traitsIcEEED2Ev

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEE4readEPcl

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEE5seekgENS_4fposI11__mbstate_tEE

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEE5seekgExNS_8ios_base7seekdirE

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEE5tellgEv

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEE6sentryC1ERS3_b

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEED0Ev

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEED1Ev

__ZNSt3__113basic_istreamIcNS_11char_traitsIcEEED2Ev

__ZNSt3__113basic_istreamIwNS_11char_traitsIwEEE4readEPwl

__ZNSt3__113basic_istreamIwNS_11char_traitsIwEEE5seekgENS_4fposI11__mbstate_tEE

__ZNSt3__113basic_istreamIwNS_11char_traitsIwEEE5seekgExNS_8ios_base7seekdirE

__ZNSt3__113basic_istreamIwNS_11char_traitsIwEEE5tellgEv

__ZNSt3__113basic_istreamIwNS_11char_traitsIwEEED0Ev

__ZNSt3__113basic_istreamIwNS_11char_traitsIwEEED1Ev

__ZNSt3__113basic_istreamIwNS_11char_traitsIwEEED2Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE5writeEPKcl

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE6sentryC1ERS3_

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE6sentryD1Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED0Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED1Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED2Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEPNS_15basic_streambufIcS2_EE

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEd

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEf

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEi

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEl

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEs

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEt

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEx

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEy

__ZNSt3__113basic_ostreamIwNS_11char_traitsIwEEE5writeEPKwl

__ZNSt3__113basic_ostreamIwNS_11char_traitsIwEEED0Ev

__ZNSt3__113basic_ostreamIwNS_11char_traitsIwEEED1Ev

__ZNSt3__113basic_ostreamIwNS_11char_traitsIwEEED2Ev

__ZNSt3__113basic_ostreamIwNS_11char_traitsIwEEElsEd

__ZNSt3__114__split_bufferIcRNS_9allocatorIcEEE18__construct_at_endINS_19istreambuf_iteratorIcNS_11char_traitsIcEEEEEENS_9enable_ifIXaasr19__is_input_iteratorIT_EE5valuentsr21__is_forward_iteratorISB_EE5valueEvE4typeESB_SB_

__ZNSt3__114__split_bufferIcRNS_9allocatorIcEEE9push_backEOc

__ZNSt3__114__split_bufferIhRNS_9allocatorIhEEE9push_backEOh

__ZNSt3__114__thread_proxyINS_5tupleIJPFvP9TMainLoopES3_EEEEEPvS7_

__ZNSt3__114basic_iostreamIcNS_11char_traitsIcEEED0Ev

__ZNSt3__114basic_iostreamIcNS_11char_traitsIcEEED1Ev

__ZNSt3__114basic_iostreamIcNS_11char_traitsIcEEED2Ev

__ZNSt3__115__thread_structC1Ev

__ZNSt3__115__thread_structD1Ev

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE4syncEv

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE5imbueERKNS_6localeE

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE5uflowEv

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6setbufEPcl

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6xsgetnEPcl

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6xsputnEPKcl

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE7seekoffExNS_8ios_base7seekdirEj

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE7seekposENS_4fposI11__mbstate_tEEj

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE9showmanycEv

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEEC2Ev

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEED2Ev

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEE4syncEv

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEE5imbueERKNS_6localeE

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEE5uflowEv

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEE6setbufEPwl

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEE6xsgetnEPwl

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEE6xsputnEPKwl

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEE9showmanycEv

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEEC2Ev

__ZNSt3__115basic_streambufIwNS_11char_traitsIwEEED2Ev

__ZNSt3__115basic_stringbufIcNS_11char_traitsIcEENS_9allocatorIcEEE3strERKNS_12basic_stringIcS2_S4_EE

__ZNSt3__115basic_stringbufIwNS_11char_traitsIwEENS_9allocatorIwEEE3strERKNS_12basic_stringIwS2_S4_EE

__ZNSt3__119__thread_local_dataEv

__ZNSt3__120__throw_system_errorEiPKc

__ZNSt3__124__put_character_sequenceIcNS_11char_traitsIcEEEERNS_13basic_ostreamIT_T0_EES7_PKS4_m

__ZNSt3__124uniform_int_distributionIiEclINS_26linear_congruential_engineIjLj48271ELj0ELj2147483647EEEEEiRT_RKNS1_10param_typeE

__ZNSt3__125__independent_bits_engineINS_26linear_congruential_engineIjLj48271ELj0ELj2147483647EEEjE6__evalENS_17integral_constantIbLb1EEE

__ZNSt3__125__independent_bits_engineINS_26linear_congruential_engineIjLj48271ELj0ELj2147483647EEEjEC2ERS2_m

__ZNSt3__127__tree_balance_after_insertIPNS_16__tree_node_baseIPvEEEEvT_S5_

__ZNSt3__13mapINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyENS_4lessIS6_EENS4_INS_4pairIKS6_S8_EEEEE16__find_equal_keyERPNS_16__tree_node_baseIPvEERSC_

__ZNSt3__13mapINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyENS_4lessIS6_EENS4_INS_4pairIKS6_S8_EEEEEixERSC_

__ZNSt3__13mapINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN8nlohmann10basic_jsonIS0_NS_6vectorES6_bxydS4_EENS_4lessIS6_EENS4_INS_4pairIKS6_SA_EEEEE16__find_equal_keyERPNS_16__tree_node_baseIPvEERSE_

__ZNSt3__13mapINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN8nlohmann10basic_jsonIS0_NS_6vectorES6_bxydS4_EENS_4lessIS6_EENS4_INS_4pairIKS6_SA_EEEEE2atERSE_

__ZNSt3__13mapINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN8nlohmann10basic_jsonIS0_NS_6vectorES6_bxydS4_EENS_4lessIS6_EENS4_INS_4pairIKS6_SA_EEEEEixERSE_

__ZNSt3__13mapINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueNS_4lessIS6_EENS4_INS_4pairIKS6_S8_EEEEE16__find_equal_keyERPNS_16__tree_node_baseIPvEERSC_

__ZNSt3__13mapINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueNS_4lessIS6_EENS4_INS_4pairIKS6_S8_EEEEEixERSC_

__ZNSt3__15ctypeIcE2idE

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyEEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE12__find_equalISA_EERPNS_16__tree_node_baseIPvEENS_21__tree_const_iteratorISA_PNS_11__tree_nodeISA_SJ_EElEESM_RKT_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyEEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE15__insert_uniqueIRKNS_4pairIKS7_S9_EEEENS_15__tree_iteratorISA_PNS_11__tree_nodeISA_PvEElEENS_21__tree_const_iteratorISA_SR_lEEOT_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyEEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE16__construct_nodeIJRKNS_4pairIKS7_S9_EEEEENS_10unique_ptrINS_11__tree_nodeISA_PvEENS_22__tree_node_destructorINS5_ISQ_EEEEEEDpOT_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyEEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE4findIS7_EENS_15__tree_iteratorISA_PNS_11__tree_nodeISA_PvEElEERKT_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN8nlohmann10basic_jsonINS_3mapENS_6vectorES7_bxydS5_EEEENS_19__map_value_compareIS7_SD_NS_4lessIS7_EELb1EEENS5_ISD_EEE4findIS7_EENS_15__tree_iteratorISD_PNS_11__tree_nodeISD_PvEElEERKT_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE12__find_equalISA_EERPNS_16__tree_node_baseIPvEENS_21__tree_const_iteratorISA_PNS_11__tree_nodeISA_SJ_EElEESM_RKT_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE13__lower_boundIS7_EENS_15__tree_iteratorISA_PNS_11__tree_nodeISA_PvEElEERKT_SM_SM_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE14__assign_multiINS_21__tree_const_iteratorISA_PNS_11__tree_nodeISA_PvEElEEEEvT_SO_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE14__insert_multiERKSA_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE15__insert_uniqueIRKNS_4pairIKS7_S9_EEEENS_15__tree_iteratorISA_PNS_11__tree_nodeISA_PvEElEENS_21__tree_const_iteratorISA_SR_lEEOT_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE16__find_leaf_highERPNS_16__tree_node_baseIPvEERKSA_

__ZNSt3__16__treeINS_12__value_typeINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEP9JSONValueEENS_19__map_value_compareIS7_SA_NS_4lessIS7_EELb1EEENS5_ISA_EEE4findIS7_EENS_15__tree_iteratorISA_PNS_11__tree_nodeISA_PvEElEERKT_

__ZNSt3__16chrono12system_clock3nowEv

__ZNSt3__16locale14__install_ctorERKS0_PNS0_5facetEl

__ZNSt3__16locale2id5__getEv

__ZNSt3__16locale5facet16__on_zero_sharedEv

__ZNSt3__16localeC1ERKS0_

__ZNSt3__16localeC1Ev

__ZNSt3__16localeD1Ev

__ZNSt3__16localeaSERKS0_

__ZNSt3__16removeINS_11__wrap_iterIPNS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEEES7_EET_SA_SA_RKT0_

__ZNSt3__16threadD1Ev

__ZNSt3__16vectorIN5boost3anyENS_9allocatorIS2_EEE21__push_back_slow_pathIS2_EEvOT_

__ZNSt3__16vectorIN5boost3anyENS_9allocatorIS2_EEEC2ERKS5_

__ZNSt3__16vectorIN8nlohmann10basic_jsonINS_3mapES0_NS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEbxydS7_EENS7_ISA_EEE21__push_back_slow_pathISA_EEvOT_

__ZNSt3__16vectorINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS4_IS6_EEE21__push_back_slow_pathIRKS6_EEvOT_

__ZNSt3__16vectorINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS4_IS6_EEE5eraseENS_11__wrap_iterIPKS6_EESC_

__ZNSt3__16vectorINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS4_IS6_EEE6assignIPKS6_EENS_9enable_ifIXaasr21__is_forward_iteratorIT_EE5valuesr16is_constructibleIS6_NS_15iterator_traitsISD_E9referenceEEE5valueEvE4typeESD_SD_

__ZNSt3__16vectorINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS4_IS6_EEE6insertINS_11__wrap_iterIPS6_EEEENS_9enable_ifIXaasr21__is_forward_iteratorIT_EE5valuesr16is_constructibleIS6_NS_15iterator_traitsISE_E9referenceEEE5valueESC_E4typeENSA_IPKS6_EESE_SE_

__ZNSt3__16vectorINS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEENS4_IS6_EEE21__push_back_slow_pathIRKS6_EEvOT_

__ZNSt3__16vectorIP9JSONValueNS_9allocatorIS2_EEE21__push_back_slow_pathIRKS2_EEvOT_

__ZNSt3__16vectorIP9JSONValueNS_9allocatorIS2_EEE21__push_back_slow_pathIS2_EEvOT_

__ZNSt3__16vectorIP9JSONValueNS_9allocatorIS2_EEE6assignIPS2_EENS_9enable_ifIXaasr21__is_forward_iteratorIT_EE5valuesr16is_constructibleIS2_NS_15iterator_traitsIS9_E9referenceEEE5valueEvE4typeES9_S9_

__ZNSt3__16vectorIP9JSONValueNS_9allocatorIS2_EEEC2ERKS5_

__ZNSt3__16vectorIcNS_9allocatorIcEEE6insertENS_11__wrap_iterIPKcEEOc

__ZNSt3__16vectorIcNS_9allocatorIcEEE6insertINS_13move_iteratorIPcEEEENS_9enable_ifIXaasr21__is_forward_iteratorIT_EE5valuesr16is_constructibleIcNS_15iterator_traitsIS9_E9referenceEEE5valueENS_11__wrap_iterIS6_EEE4typeENSD_IPKcEES9_S9_

__ZNSt3__16vectorIcNS_9allocatorIcEEE6insertINS_19istreambuf_iteratorIcNS_11char_traitsIcEEEEEENS_9enable_ifIXaaaasr19__is_input_iteratorIT_EE5valuentsr21__is_forward_iteratorISA_EE5valuesr16is_constructibleIcNS_15iterator_traitsISA_E9referenceEEE5valueENS_11__wrap_iterIPcEEE4typeENSE_IPKcEESA_SA_

__ZNSt3__16vectorIcNS_9allocatorIcEEE8__appendEm

__ZNSt3__16vectorIcNS_9allocatorIcEEEC2ERKS3_

__ZNSt3__16vectorIcNS_9allocatorIcEEEC2Em

__ZNSt3__16vectorIcNS_9allocatorIcEEEC2INS_11__wrap_iterIPKcEEEET_NS_9enable_ifIXaasr21__is_forward_iteratorIS9_EE5valuesr16is_constructibleIcNS_15iterator_traitsIS9_E9referenceEEE5valueES9_E4typeE

__ZNSt3__16vectorIhNS_9allocatorIhEEE21__push_back_slow_pathIRKhEEvOT_

__ZNSt3__16vectorIhNS_9allocatorIhEEE21__push_back_slow_pathIhEEvOT_

__ZNSt3__16vectorIhNS_9allocatorIhEEE6insertENS_11__wrap_iterIPKhEEOh

__ZNSt3__16vectorIhNS_9allocatorIhEEE6insertINS_11__wrap_iterIPhEEEENS_9enable_ifIXaasr21__is_forward_iteratorIT_EE5valuesr16is_constructibleIhNS_15iterator_traitsIS9_E9referenceEEE5valueES7_E4typeENS5_IPKhEES9_S9_

__ZNSt3__16vectorIhNS_9allocatorIhEEE6insertINS_16reverse_iteratorINS_11__wrap_iterIPhEEEEEENS_9enable_ifIXaasr21__is_forward_iteratorIT_EE5valuesr16is_constructibleIhNS_15iterator_traitsISB_E9referenceEEE5valueES8_E4typeENS6_IPKhEESB_SB_

__ZNSt3__16vectorIhNS_9allocatorIhEEE6insertIPhEENS_9enable_ifIXaasr21__is_forward_iteratorIT_EE5valuesr16is_constructibleIhNS_15iterator_traitsIS7_E9referenceEEE5valueENS_11__wrap_iterIS5_EEE4typeENSB_IPKhEES7_S7_

__ZNSt3__16vectorIhNS_9allocatorIhEEE8__appendEmRKh

__ZNSt3__16vectorIhNS_9allocatorIhEEEC2ERKS3_

__ZNSt3__16vectorIhNS_9allocatorIhEEEC2Em

__ZNSt3__16vectorIiNS_9allocatorIiEEE21__push_back_slow_pathIRKiEEvOT_

__ZNSt3__16vectorIiNS_9allocatorIiEEE21__push_back_slow_pathIiEEvOT_

__ZNSt3__17codecvtIcc11__mbstate_tE2idE

__ZNSt3__17getlineIcNS_11char_traitsIcEENS_9allocatorIcEEEERNS_13basic_istreamIT_T0_EES9_RNS_12basic_stringIS6_S7_T1_EES6_

__ZNSt3__18ios_base33__set_badbit_and_consider_rethrowEv

__ZNSt3__18ios_base4initEPv

__ZNSt3__18ios_base5clearEj

__ZNSt3__18ios_base5imbueERKNS_6localeE

__ZNSt3__18numpunctIcE2idE

__ZNSt3__18numpunctIcEC2Em

__ZNSt3__18numpunctIcED2Ev

__ZNSt3__19basic_iosIcNS_11char_traitsIcEEED2Ev

__ZNSt3__19basic_iosIwNS_11char_traitsIwEEED2Ev

__ZNSt3__1plIcNS_11char_traitsIcEENS_9allocatorIcEEEENS_12basic_stringIT_T0_T1_EEPKS6_RKS9_

__ZNSt3__1plIcNS_11char_traitsIcEENS_9allocatorIcEEEENS_12basic_stringIT_T0_T1_EERKS9_PKS6_

__ZNSt8bad_castC1Ev

__ZNSt8bad_castC2Ev

__ZNSt8bad_castD1Ev

__ZNSt8bad_castD2Ev

__ZNSt9bad_allocC1Ev

__ZNSt9bad_allocD1Ev

__ZNSt9exceptionD2Ev

__ZSt9terminatev

__ZTIN4pugi10xml_writerE

__ZTIN4redi14basic_ipstreamIcNSt3__111char_traitsIcEEEE

__ZTIN4redi14pstream_commonIcNSt3__111char_traitsIcEEEE

__ZTIN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEEE

__ZTIN4redi8pstreamsE

__ZTIN5Plist4DateE

__ZTIN5Plist5ErrorE

__ZTIN5boost12bad_any_castE

__ZTIN5boost16exception_detail10clone_baseE

__ZTIN5boost16exception_detail10clone_implINS0_19error_info_injectorINS_12bad_any_castEEEEE

__ZTIN5boost16exception_detail19error_info_injectorINS_12bad_any_castEEE

__ZTIN5boost3any11placeholderE

__ZTIN5boost3any6holderIKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEE

__ZTIN5boost3any6holderIN5Plist4DateEEE

__ZTIN5boost3any6holderINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEE

__ZTIN5boost3any6holderINSt3__13mapINS2_12basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEES0_NS2_4lessIS9_EENS7_INS2_4pairIKS9_S0_EEEEEEEE

__ZTIN5boost3any6holderINSt3__16vectorIS0_NS2_9allocatorIS0_EEEEEE

__ZTIN5boost3any6holderINSt3__16vectorIcNS2_9allocatorIcEEEEEE

__ZTIN5boost3any6holderIbEE

__ZTIN5boost3any6holderIdEE

__ZTIN5boost3any6holderIxEE

__ZTIN5boost6locale4conv16conversion_errorE

__ZTIN5boost9exceptionE

__ZTIN9libcode646bufferE

__ZTINSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTINSt3__113__vector_baseIN5boost3anyENS_9allocatorIS2_EEEE

__ZTINSt3__113__vector_baseIcNS_9allocatorIcEEEE

__ZTINSt3__113basic_filebufIcNS_11char_traitsIcEEEE

__ZTINSt3__113basic_istreamIcNS_11char_traitsIcEEEE

__ZTINSt3__113basic_istreamIwNS_11char_traitsIwEEEE

__ZTINSt3__113basic_ostreamIcNS_11char_traitsIcEEEE

__ZTINSt3__113basic_ostreamIwNS_11char_traitsIwEEEE

__ZTINSt3__114basic_ifstreamIcNS_11char_traitsIcEEEE

__ZTINSt3__114basic_iostreamIcNS_11char_traitsIcEEEE

__ZTINSt3__114basic_iostreamIwNS_11char_traitsIwEEEE

__ZTINSt3__114basic_ofstreamIcNS_11char_traitsIcEEEE

__ZTINSt3__115basic_streambufIcNS_11char_traitsIcEEEE

__ZTINSt3__115basic_streambufIwNS_11char_traitsIwEEEE

__ZTINSt3__115basic_stringbufIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTINSt3__115basic_stringbufIwNS_11char_traitsIwEENS_9allocatorIwEEEE

__ZTINSt3__117bad_function_callE

__ZTINSt3__118basic_stringstreamIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTINSt3__118basic_stringstreamIwNS_11char_traitsIwEENS_9allocatorIwEEEE

__ZTINSt3__119basic_ostringstreamIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTINSt3__120__vector_base_commonILb1EEE

__ZTINSt3__121__basic_string_commonILb1EEE

__ZTINSt3__13mapINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyENS_4lessIS6_EENS4_INS_4pairIKS6_S8_EEEEEE

__ZTINSt3__16vectorIN5boost3anyENS_9allocatorIS2_EEEE

__ZTINSt3__16vectorIcNS_9allocatorIcEEEE

__ZTINSt3__18numpunctIcEE

__ZTINSt3__19basic_iosIcNS_11char_traitsIcEEEE

__ZTISt12domain_error

__ZTISt12out_of_range

__ZTISt13runtime_error

__ZTISt16invalid_argument

__ZTISt8bad_cast

__ZTISt9bad_alloc

__ZTISt9exception

__ZTIb

__ZTId

__ZTIf

__ZTIi

__ZTIl

__ZTIs

__ZTIv

__ZTIx

__ZTSN4pugi10xml_writerE

__ZTSN4redi14basic_ipstreamIcNSt3__111char_traitsIcEEEE

__ZTSN4redi14pstream_commonIcNSt3__111char_traitsIcEEEE

__ZTSN4redi16basic_pstreambufIcNSt3__111char_traitsIcEEEE

__ZTSN4redi8pstreamsE

__ZTSN5Plist4DateE

__ZTSN5Plist5ErrorE

__ZTSN5boost12bad_any_castE

__ZTSN5boost16exception_detail10clone_baseE

__ZTSN5boost16exception_detail10clone_implINS0_19error_info_injectorINS_12bad_any_castEEEEE

__ZTSN5boost16exception_detail19error_info_injectorINS_12bad_any_castEEE

__ZTSN5boost3any11placeholderE

__ZTSN5boost3any6holderIKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEE

__ZTSN5boost3any6holderIN5Plist4DateEEE

__ZTSN5boost3any6holderINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEE

__ZTSN5boost3any6holderINSt3__13mapINS2_12basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEES0_NS2_4lessIS9_EENS7_INS2_4pairIKS9_S0_EEEEEEEE

__ZTSN5boost3any6holderINSt3__16vectorIS0_NS2_9allocatorIS0_EEEEEE

__ZTSN5boost3any6holderINSt3__16vectorIcNS2_9allocatorIcEEEEEE

__ZTSN5boost3any6holderIbEE

__ZTSN5boost3any6holderIdEE

__ZTSN5boost3any6holderIxEE

__ZTSN5boost6locale4conv16conversion_errorE

__ZTSN5boost9exceptionE

__ZTSN9libcode646bufferE

__ZTSNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTSNSt3__113__vector_baseIN5boost3anyENS_9allocatorIS2_EEEE

__ZTSNSt3__113__vector_baseIcNS_9allocatorIcEEEE

__ZTSNSt3__113basic_filebufIcNS_11char_traitsIcEEEE

__ZTSNSt3__114basic_ifstreamIcNS_11char_traitsIcEEEE

__ZTSNSt3__114basic_iostreamIwNS_11char_traitsIwEEEE

__ZTSNSt3__114basic_ofstreamIcNS_11char_traitsIcEEEE

__ZTSNSt3__115basic_stringbufIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTSNSt3__115basic_stringbufIwNS_11char_traitsIwEENS_9allocatorIwEEEE

__ZTSNSt3__117bad_function_callE

__ZTSNSt3__118basic_stringstreamIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTSNSt3__118basic_stringstreamIwNS_11char_traitsIwEENS_9allocatorIwEEEE

__ZTSNSt3__119basic_ostringstreamIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTSNSt3__120__vector_base_commonILb1EEE

__ZTSNSt3__121__basic_string_commonILb1EEE

__ZTSNSt3__13mapINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEN5boost3anyENS_4lessIS6_EENS4_INS_4pairIKS6_S8_EEEEEE

__ZTSNSt3__16vectorIN5boost3anyENS_9allocatorIS2_EEEE

__ZTSNSt3__16vectorIcNS_9allocatorIcEEEE

__ZTVN10__cxxabiv117__class_type_infoE

__ZTVN10__cxxabiv120__si_class_type_infoE

__ZTVN10__cxxabiv121__vmi_class_type_infoE

__ZTVSt12domain_error

__ZTVSt12out_of_range

__ZTVSt16invalid_argument

__ZThn16_NSt3__114basic_iostreamIcNS_11char_traitsIcEEED0Ev

__ZThn16_NSt3__114basic_iostreamIcNS_11char_traitsIcEEED1Ev

__ZTv0_n24_NSt3__113basic_istreamIcNS_11char_traitsIcEEED0Ev

__ZTv0_n24_NSt3__113basic_istreamIcNS_11char_traitsIcEEED1Ev

__ZTv0_n24_NSt3__113basic_istreamIwNS_11char_traitsIwEEED0Ev

__ZTv0_n24_NSt3__113basic_istreamIwNS_11char_traitsIwEEED1Ev

__ZTv0_n24_NSt3__113basic_ostreamIcNS_11char_traitsIcEEED0Ev

__ZTv0_n24_NSt3__113basic_ostreamIcNS_11char_traitsIcEEED1Ev

__ZTv0_n24_NSt3__113basic_ostreamIwNS_11char_traitsIwEEED0Ev

__ZTv0_n24_NSt3__113basic_ostreamIwNS_11char_traitsIwEEED1Ev

__ZTv0_n24_NSt3__114basic_iostreamIcNS_11char_traitsIcEEED0Ev

__ZTv0_n24_NSt3__114basic_iostreamIcNS_11char_traitsIcEEED1Ev

__ZZNK8nlohmann10basic_jsonINSt3__13mapENS1_6vectorENS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEbxydS7_E4dumpEiE3loc

__ZdaPv

__ZdlPv

__Znam

__Znwm

___assert_rtn

___bzero

___cxa_allocate_exception

___cxa_atexit

___cxa_begin_catch

___cxa_end_catch

___cxa_free_exception

___cxa_guard_abort

___cxa_guard_acquire

___cxa_guard_release

___cxa_pure_virtual

___cxa_rethrow

___cxa_throw

___error

___fpclassifyd

___gxx_personality_v0

___maskrune

___memcpy_chk

___memmove_chk

___memset_chk

___sprintf_chk

___stack_chk_fail

___stack_chk_guard

___stderrp

___stdinp

___stdoutp

___strcat_chk

___strcpy_chk

___tolower

___toupper

__exit

__longjmp

__mh_execute_header

__setjmp

_abort

_accept

_access

_alarm

_atexit

_atof

_atoi

_atoll

_basename

_bind

_calloc

_ceil

_chmod

_close

_closedir

_connect

_dlclose

_dlerror

_dlopen

_dlsym

_dup2

_execl

_exit

_fclose

_fcntl

_fdopen

_feof

_ferror

_fflush

_fgets

_fileno

_floor

_fmod

_fopen

_fork

_fprintf

_fputc

_fputs

_fread

_free

_freeaddrinfo

_freeifaddrs

_fseek

_fseeko

_fstat$INODE64

_ftell

_ftello

_fwrite

_gai_strerror

_getaddrinfo

_getcontext

_getegid

_getenv

_geteuid

_getgid

_gethostbyname

_gethostname

_getifaddrs

_getnameinfo

_getpeername

_getpid

_getpwuid_r

_getsockname

_getsockopt

_gettimeofday

_getuid

_gmtime

_gmtime_r

_if_nametoindex

_inet_ntop

_inet_pton

_ioctl

_kill

_listen

_localtime

_lseek

_makecontext

_malloc

_mbstowcs

_memchr

_memcmp

_memcpy

_memmove

_memset

_memset_pattern16

_mktemp

_mktime

_mlock

_mmap

_mprotect

_munmap

_open

_opendir$INODE64

_pipe

_poll

_pthread_create

_pthread_equal

_pthread_getspecific

_pthread_key_create

_pthread_key_delete

_pthread_once

_pthread_rwlock_destroy

_pthread_rwlock_init

_pthread_rwlock_rdlock

_pthread_rwlock_unlock

_pthread_rwlock_wrlock

_pthread_self

_pthread_setspecific

_qsort

_rand

_read

_readdir$INODE64

_realloc

_recv

_recvfrom

_remove

_select$1050

_send

_sendto

_setbuf

_setcontext

_setpgid

_setsockopt

_sigaction

_siglongjmp

_signal

_sigsetjmp

_sleep

_snprintf

_socket

_socketpair

_sprintf

_srand

_sscanf

_stat$INODE64

_strcasecmp

_strchr

_strcmp

_strcpy

_strcspn

_strdup

_strerror

_strerror_r

_strftime

_strlen

_strncasecmp

_strncmp

_strncpy

_strpbrk

_strrchr

_strspn

_strstr

_strtod

_strtok_r

_strtol

_strtoul

_sysconf

_system

_tcgetattr

_tcsetattr

_time

_uname

_vfprintf

_waitpid

_wcslen

_wcsncasecmp

_wmemcmp

_write

dyld_stub_binder

External symbols