Play interactive tour

Edit tour

macOS Analysis Report installer_v2021

Overview

General Information

Sample Name:	installer_v2021
Analysis ID:	149261
MD5:	1daba393eee9d8bdaf645157dae83990
SHA1:	2303a9c0092f9b0ccac8536419ee48626a253f94
SHA256:	cf5edcff4053e29cb236d3ed1fe06ca93ae6f64f26e25117d68ee130b9bc60c8
Infos:
Most interesting Screenshot:

Detection

MACMA

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected MACMA aka CDDS

Writes Mach-O files to untypical directories

Contains functionality related to audio recording

Connects to many ports of the same IP (likely port scanning)

Contains functionality related to screen capturing

Executes the "who" command used to get a list of logged in users

Reads system files that contain records of logged in users

Executed dropped file with audio recording capabilities writes audio files to disk

Executed dropped file with screen capturings capabilities writes image and/or video files to disk

Contains functionality related to key logging

Sets full permissions to files and/or directories

Writes PHP files to disk

Contains symbols with suspicious names likely related to encryption

Executes the "chown" command used to modify ownership and group ownership

Contains symbols with suspicious names likely related to networking

Explicitly unloads, stops, and/or removes launch services

Reads the systems hostname

Executes the "mkdir" command used to create folders

Executes the "chmod" command used to modify permissions

Detected TCP or UDP traffic on non-standard ports

Executes the "curl" command used to transfer data via the network (typically using HTTP/S)

Contains symbols with suspicious names likely related to well-known browsers

Creates memory-persistent launch services

Explicitly loads/starts launch services

Creates launch services that start periodically

Creates user-wide 'launchd' managed services aka launch agents

Creates hidden files, links and/or directories

Mach-O contains sections with high entropy indicating compressed/encrypted content

Changes permissions of written Mach-O files

Executes commands using a shell command-line interpreter

Writes 64-bit Mach-O files to disk

Contains functionality related to Data Distribution Service (DDS) indicative for C2 communication

Executes the "rm" command used to delete files or directories

Many shell processes execute programs via execve syscall (might be indicative for malicious behavior)

Classification

General Information

Joe Sandbox Version:
Analysis ID:	149261
Start date:	12.11.2021
Start time:	11:51:27
Joe Sandbox Product:	Cloud
Overall analysis duration:	0h 7m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	installer_v2021
Cookbook file name:	defaultmacfilecookbook.jbs
Analysis system description:	Mac Mini, Mojave (Java JDK 11.0.4, Adobe Reader 2019.012.20034, Flash 32.0.0.223)
Run name:	Potential for more IOCs and behavior
Analysis Mode:	default
Detection:	MAL
Classification:	mal88.troj.spyw.evad.mac@0/18@1/0
Warnings:	Show All Excluded domains from analysis (whitelisted): lb._dns-sd._udp.0.0.168.192.in-addr.arpa

Process Tree

System is mac-mojave

mono-sgen32 New Fork (PID: 637, Parent: 578)

installer_v2021 (MD5: 1daba393eee9d8bdaf645157dae83990) Arguments: /Users/ben/Desktop/installer_v2021

sh New Fork (PID: 638, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Desktop/~tmp

installer_v2021 New Fork (PID: 639, Parent: 637)

who (MD5: 7b585a0b903dbeb22a525e13f99531e0) Arguments: who

sh New Fork (PID: 640, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 641, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 642, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/Preferences/UserAgent

sh New Fork (PID: 643, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/Preferences/UserAgent

sh New Fork (PID: 644, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/Preferences/UserAgent/lib

sh New Fork (PID: 645, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/Preferences/UserAgent/lib

sh New Fork (PID: 646, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/LaunchAgents

sh New Fork (PID: 647, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/LaunchAgents

sh New Fork (PID: 648, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/kAgent /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 649, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/Tools/kAgent

sh New Fork (PID: 650, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/Tools/kAgent

sh New Fork (PID: 651, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/com.UserAgent.va.plist /Users/ben/Library/LaunchAgents

sh New Fork (PID: 652, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

sh New Fork (PID: 653, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 644 /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

sh New Fork (PID: 654, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/arch /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 655, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/Tools/arch

sh New Fork (PID: 656, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/Tools/arch

sh New Fork (PID: 657, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/at /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 658, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/Tools/at

sh New Fork (PID: 659, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/Tools/at

sh New Fork (PID: 660, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/UserAgent /Users/ben/Library/Preferences/UserAgent/lib

sh New Fork (PID: 663, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/UserAgent/lib/UserAgent

sh New Fork (PID: 664, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/UserAgent/lib/UserAgent

sh New Fork (PID: 665, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 777 /Users/ben/start.sh

sh New Fork (PID: 666, Parent: 637)

su (MD5: d4a02fef85cf187b4533f0f974abd17e) Arguments: su - ben /Users/ben/start.sh

su New Fork (PID: 667, Parent: 666)

bash (MD5: 0313fd399b143fc40cd52a1679018305) Arguments: -bash /Users/ben/start.sh

bash New Fork (PID: 668, Parent: 667)

launchctl (MD5: 3e04cf4fe184467aa2dbf4e4d5c72f3d) Arguments: launchctl unload -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

bash New Fork (PID: 669, Parent: 667)

launchctl (MD5: 3e04cf4fe184467aa2dbf4e4d5c72f3d) Arguments: launchctl load -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

sh New Fork (PID: 671, Parent: 637)

rm (MD5: 269d0bd0553e7eafb6e3f70026eeda2b) Arguments: rm -f /Users/ben/start.sh

sh New Fork (PID: 672, Parent: 637)

rm (MD5: 269d0bd0553e7eafb6e3f70026eeda2b) Arguments: rm -Rf /Users/ben/Desktop/~tmp

xpcproxy New Fork (PID: 670, Parent: 1)

UserAgent (MD5: 3e4de0eeefd2e1c024b41a4222285f74) Arguments: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent -runMode ifneeded

sh New Fork (PID: 674, Parent: 670)

curl (MD5: 28fe026db67bee7a3e38a3e32ef21241) Arguments: curl -o /Users/ben/Library/Preferences/UserAgent/lib/my-ip.php http://cgi1.apnic.net/cgi-bin/my-ip.php

UserAgent New Fork (PID: 675, Parent: 670)

kAgent (MD5: 43f6382a5684330f071b329b3cec69e9) Arguments: kAgent /Users/ben/Library/Preferences/UserAgent/lib/data2 670

sh New Fork (PID: 679, Parent: 670)

arch (MD5: 1bbcb128d992eda1632127c48d6dbfe2) Arguments: /Users/ben/Library/Preferences/Tools/arch /tmp/112211334455997890 1280 720 0.000000

cleanup

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
installer_v2021	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
/Users/ben/Desktop/~tmp/UserAgent	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security
/Users/ben/Library/Preferences/UserAgent/lib/UserAgent	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000670.00000327.1.000000010ff4a000.000000010ff68000.rw-.sdmp	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security
00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security
Process Memory Space: UserAgent PID: 670	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22GetEncryptFileDataSizeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERi
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_set_encrypt_key
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_encrypt_one_block
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_set_decrypt_key
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_decrypt_one_block
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_encrypt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_cbc_encrypt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_decrypt
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22IsLocalFileSaveEncryptEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_AddEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_AddNoEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_DATA_ENCRYPT_DEFAULTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_cbc_decrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22GetEncryptFileDataSizeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERi
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_set_encrypt_key
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_encrypt_one_block
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_set_decrypt_key
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_decrypt_one_block
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_encrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_cbc_encrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_decrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi22IsLocalFileSaveEncryptEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_AddEncryptTypeEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_AddNoEncryptTypeEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_DATA_ENCRYPT_DEFAULTEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_cbc_decrypt

Networking:

Connects to many ports of the same IP (likely port scanning)

Show sources

Source: global traffic

TCP traffic: 123.1.170.152 ports 12580,0,1,2,5,8

Source: global traffic

TCP traffic: 192.168.0.51:49345 -> 123.1.170.152:12580

Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI25CDDSRequestCancelDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI22CDDSChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI22CDDSFileTransferStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSRequestDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSFTSRecvThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSFTSSendThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI15CDDSLoginStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSHostStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC17CDDSFTSSendThrMgr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC18CDDSOpWaitCheckThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC14CDDSFTSSendThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC17CDDSFTSRecvThrMgr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC14CDDSFTSRecvThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC10CDDSSndThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC10CDDSRcvThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr4InitERKNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr22HandleRecvDDSHeartBeatEP21TAG_CDataDDCHeartBeat
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr23HandlePassiveConnectACKEP26TAG_CDataPassiveConnectACK
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24HandleChangeDDSPwdStatusEP27TAG_CDataChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24HandleNotifyClientRealIPEP21TAG_CDataClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24ReturnFileTransferStatusEii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25CreatePassiveListenSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25HandleHeartBeatCheckTimerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25InitReconnectNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr22HandlePassiveConnectInEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC1EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC2EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr4InitEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr8GetDDSFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr9Send2HostEP9CDataHead
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrC1EPK7CDDSIfiPK10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrC2EPK7CDDSIfiPK10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj12CreateObjectEPKS_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj18m_mapClass2CreatorE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj20CDDSNetObj_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj12CreateObjectERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj12CreateObjectERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj14BeginSerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj16BeginUnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj18CDDSNetObj_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj18CDDSNetObj_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13ActiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13HandleDDSDataEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr12HandlePacketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21HandleLogin2DDSStatusEP24TAG_CDataLogin2DDSStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21InitIntervalMsgSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13SendHeartBeatEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr14PassiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr15SendIntervalMsgERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr17PerformDisconnectEb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19AfterConnectSuccessEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19GetDDSIntervalMsgFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21HandleECDHKeyExchangeEP24TAG_CDataECDHKeyExchange
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr14CancelSendFileEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr16HandleTaskExceedEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19HandleSendFileTimerEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19SendTransferMode2C2Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleC2PrepareReadyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleCancelSendFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20MatchSimpleRandomMD5ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr21SendFileTransferErrorEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13GetTaskClientEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13HandleFTSDataEjPcib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr23SendFileTransferRequestEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr24HandleC2ACKBaseInfoV2_V3Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr25HandleWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr9GetTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC1EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC2EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleC2ACKFileContentEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleRecvFileCompleteEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22SetWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus22CDDSHostStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus22CDDSHostStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus24CDDSHostStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15SyncDDSCompleteEc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15WaitForSendOverEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetDDSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetFTSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetDDSServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetExcludePortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetQueueStatusEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14SetConnectModeE12CONNECT_MODERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15ClearAllECDHKeyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15GetC2ACKTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SetParam_ServerIPEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18GetPassiveListenIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18GetVersionOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetSubscribeTypeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16InitNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16NotifyHostStatusE4IP32i
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16RemoteCallReturnEiPcji9CDataGUID
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17ProcessHandleFuncEP10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SendFile_PushTaskERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32S9_jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SetParam_ProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetProcTypeOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19PushSndToHstForSendEPci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18NotifyClientStatusE4IP32jii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18PushSndToHstForGetEPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18PushSndToHstNotifyEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18SetSendOverSinglalEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19Distribute_PushDataEiPcji4IP32jbbS0_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetAllSubnetDDSInfoEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetDDSIntervalMsgFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetLocalFileSaveKeyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSndToHstForGetQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetRecvQueueMaxSizeEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20BeginECDHKeyExchangeE4IP32jRK7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20BeginSendPrePushDataE4IP32jPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetC2RecvDataTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetPacketACKIntervalEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetPassiveListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSendFilePacketLenEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetParam_ServerAddrERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr11GetServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr12ReturnStatusEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr10UnlockFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr11Add2ExitThrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr18HandleFileBaseInfoEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr18SendFileContentACKEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19CalcSimpleRandomMD5ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr13HandleFTSDataEjPcib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr13SendTaskIDACKEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr14CancelRecvFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetClientTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetServerTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr17CloseFileAndFlushEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr17HandleFileContentEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr8LockFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrC1EPK7CDDSIfiP17CDDSFTSRecvThrMgrjj4IP32bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19CheckCancelRecvFlagEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19SendFileBaseInfoACKEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr20SendRecvFileCompleteEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr21SendFileBaseInfoACKV2ExRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22GetEncryptFileDataSizeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22HandleC1TransferModeC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr23HandleFileBaseInfoV2_V3Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11Add2ExitThrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11GetTaskHostEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12ReturnStatusEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrC2EPK7CDDSIfiP17CDDSFTSRecvThrMgrjj4IP32bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10DistributeEiPcji4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10RemoteCallEiPcjPS0_PjP9CDataGUIDjb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10Send2LocalEP10CDDSNetObjj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10SetDDSInfoEP20TAG_CDataAllSubnetIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetProcTypeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11IsSubScribeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11ProcTypeA2IERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11PutWaitDataEP9CDataWait
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11SetProcTypeEjPNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi12ChangeDDSPwdEjRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11AssignedPIDEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetClientIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetHostIP32Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetNotifyFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13PacketTypeI2AEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13SendHeartBeatEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14CancelSendFileE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GenerateTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetConnectModeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi12GetQueueDataEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi12GetTimeOutOpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13ChangeDDSInfoE4IP32ii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13GetNotifyAddrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13PacketTypeA2IERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N18CDDSOpWaitCheckThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N18CDDSOpWaitCheckThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSRecvThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSRecvThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSSndThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSSndThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSRecvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N10CDDSRcvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N18CDDSOpWaitCheckThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr19WaitC2ConnInTimeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N18CDDSOpWaitCheckThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr8SendFileEP7CDDSIfiRKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEj4IP32SB_jSA_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N18CDDSOpWaitCheckThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSRecvThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr10AddExitThrEP14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr14CancelSendFileE4IP32jji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSRecvThrQueue15join_and_deleteEP14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSRecvThrQueue6cancelE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue13waitc2timeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThr22HandleRequestOPTimeOutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrC1EPK7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrC2EPK7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus23CDDSLoginStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus23CDDSLoginStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus25CDDSLoginStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP26CDDSClientRealIP_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus26CDDSClientStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr14CancelRecvFileE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr8RecvFileEP7CDDSIfij4IP32jjS2_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr10AddExitThrEP14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22IsLocalFileSaveEncryptEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22PassiveConnectToClientEii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_DDSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSndToHstNotifyQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20SendECDHKeyBob2AliceE4IP32jRK7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21FindECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21GetFIRST_SYNC_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21GetSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22ClearSndToHstForGetQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22ClearSndToHstNotifyQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetMAX_FILE_TRANSFER_THREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetSizeSndToHstForGetQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_FTSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_LoginToDDSKeyERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_SubscribeTypeERKNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23ClearSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23GetAllClientsOfProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_AddEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_C2_ACK_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetDDC_HEARTBEAT_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetMAX_FTS_VALID_DATA_LENEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetWindowsFilenameAsUTF8Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24SetParam_LocalFileAesKeyERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24SetWindowsFilenameAsUTF8Eb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25FindAndSaveAliceECDHParamEP24TAG_CDataECDHKeyExchangeR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetCONNECT_TO_DDS_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetDDC_HEARTBEAT_INTERVALEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetFileTransferResumeModeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetMAX_DDS_VALID_DATA_LENEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetSizeSndToHstNotifyQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_AddNoEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_RegisterDataTypeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26ClearECDHKeyAndPreSaveDataE4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26FindAndSaveBobAckECDHParamEP24TAG_CDataECDHKeyExchangeR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26FindOrAddECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_PacketACKIntervalEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SendFilePacketLenEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetSizeSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetFileTransferResumeModeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_DATA_ENCRYPT_DEFAULTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi30SetParam_DDC_HEARTBEAT_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi30SetParam_ECDH_EXCHANGE_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi30SetParam_MAX_FILE_TRANSFER_THREi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi31SetParam_DDC_HEARTBEAT_INTERVALEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi31SetParam_MAX_DDS_VALID_DATA_LENEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi31SetParam_MAX_FTS_VALID_DATA_LENEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi28GetFileTransferSizeResumeMD5Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi28SetParam_ECDH_EXCHANGE_AGAINEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_C2_RECV_DATA_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi6NotifyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8GetSeqNOEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8PushDataEP9CDataHead
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8Send2OwnEP10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8SendFileERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9GetWaitOpERK9CDataGUID
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4InitERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_S8_S8_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4InitEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSRecvThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4RecvEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4SendEP10CDDSNetObji4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSRecvThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSRecvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9Login2DDSEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9StartWorkEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSSndThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9SubScribeERKNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9SubScribeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSSndThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSSndThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSRcvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV25CDDSRequestCancelDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV22CDDSFileTransferStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV19CDDSRequestDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV22CDDSChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV15CDDSLoginStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSHostStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTSN3YYZ12MonitorQueueIP14CDDSFTSRecvThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTSN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS25CDDSRequestCancelDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus30CDDSFileTransferStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus30CDDSFileTransferStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus32CDDSFileTransferStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus32CDDSChangeDDSPwdStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH7set_ftsEP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus34CDDSPassiveConnectStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload33CDDSRequestCancelDownload_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload33CDDSRequestCancelDownload_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload35CDDSRequestCancelDownload_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownloadC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownloadC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS22CDDSChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS22CDDSFileTransferStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS19CDDSFTSSendThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS19CDDSRequestDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS19CDDSFTSRecvThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS15CDDSLoginStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS14CDDSHostStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload27CDDSRequestDownload_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload27CDDSRequestDownload_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload29CDDSRequestDownload_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownloadC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownloadC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue15join_and_deleteEP14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue6cancelE4IP32jji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21DDSNetObj_INITIALIZORC1ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPFP10CDDSNetObjvEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21DDSNetObj_INITIALIZORC2ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPFP10CDDSNetObjvEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus30CDDSChangeDDSPwdStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus30CDDSChangeDDSPwdStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTIN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTIN3YYZ12MonitorQueueIP14CDDSFTSRecvThrEE

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49340
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49338

Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207

Source: UserAgent, 00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp	String found in binary or memory: http://cgi1.apnic.net/cgi-bin/my-ip.php
Source: UserAgent, 00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp	String found in binary or memory: http://cgi1.apnic.net/cgi-bin/my-ip.phpcurlBuf
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://crl.apple.com/codesigning.crl0
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://www.apple.com/appleca/root.crl0
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://www.apple.com/certificateauthority0
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: https://www.apple.com/appleca/0

Source: unknown

DNS traffic detected: queries for: cgi1.apnic.net

Source: global traffic

HTTP traffic detected: GET /cgi-bin/my-ip.php HTTP/1.1Host: cgi1.apnic.netUser-Agent: curl/7.54.0Accept: */*

Key, Mouse, Clipboard, Microphone and Screen Capturing:

Contains functionality related to audio recording

Show sources

Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueStart
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueStart
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueStart
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueStart

Contains functionality related to screen capturing

Show sources

Source: dropped file arch.255.dr	Mach-O symbol: _CGWindowListCreateImageFromArray
Source: dropped file arch.255.dr	Mach-O symbol: _CGWindowListCreateImageFromArray
Source: dropped file arch.291.dr	Mach-O symbol: _CGWindowListCreateImageFromArray
Source: dropped file arch.291.dr	Mach-O symbol: _CGWindowListCreateImageFromArray

Executed dropped file with audio recording capabilities writes audio files to disk

Show sources

Source: /usr/libexec/xpcproxy (PID: 670)

AIFF file created by process with audio recording functionality: /Users/ben/Library/Preferences/UserAgent/lib/data1/.tmp/1636717998

Jump to dropped file

Executed dropped file with screen capturings capabilities writes image and/or video files to disk

Show sources

Source: /bin/sh (PID: 679)

JPEG file created by process with screen capturing functionality: /private/tmp/.112211334455997890-b8ZA

Jump to dropped file

Contains functionality related to key logging

Show sources

Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapCreate
Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapCreate
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapCreate
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapCreate

Source: classification engine

Classification label: mal88.troj.spyw.evad.mac@0/18@1/0

Source: submission installer_v2021	Mach-O symbol: __Z13GetSocketTypej
Source: submission installer_v2021	Mach-O symbol: __Z14IsNotConnectedv
Source: submission installer_v2021	Mach-O symbol: __Z14ConnectTimeoutjPK8sockaddrii
Source: submission installer_v2021	Mach-O symbol: _sendto
Source: submission installer_v2021	Mach-O symbol: _setsockopt
Source: submission installer_v2021	Mach-O symbol: _socket
Source: submission installer_v2021	Mach-O symbol: _send
Source: submission installer_v2021	Mach-O symbol: __Z15IsConnectFailedv
Source: submission installer_v2021	Mach-O symbol: __Z16IsConnectionLostv
Source: submission installer_v2021	Mach-O symbol: __Z15CreateTcpSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: submission installer_v2021	Mach-O symbol: __Z17SetSendBufferSizeji
Source: submission installer_v2021	Mach-O symbol: __Z17GetSendBufferSizejRi
Source: submission installer_v2021	Mach-O symbol: __Z17GetSocketBindPortj
Source: submission installer_v2021	Mach-O symbol: __Z19IsConnectInProgressv
Source: submission installer_v2021	Mach-O symbol: __Z11GetPeerPortj
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread10SendNotifyEiPKci
Source: submission installer_v2021	Mach-O symbol: _connect
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread15AddNotifyOnPortEiPNS_13CInputHandlerE
Source: submission installer_v2021	Mach-O symbol: __Z27ConnectTimeoutWithInterruptjPK8sockaddriiPi
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread16SendNotifyToPortEiPKci
Source: submission installer_v2021	Mach-O symbol: __Z19IsConnectionRefusedv
Source: submission installer_v2021	Mach-O symbol: __Z21CreateTcpListenSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: submission installer_v2021	Mach-O symbol: _getsockname
Source: submission installer_v2021	Mach-O symbol: _getsockopt
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread11SocketErrorEPKcP7__sFILE
Source: submission installer_v2021	Mach-O symbol: _inet_addr
Source: submission installer_v2021	Mach-O symbol: _inet_ntoa
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread19InitTriggerSocketFDEv
Source: submission installer_v2021	Mach-O symbol: __Z6SendNBjRPcRibPK8sockaddr
Source: dropped file kAgent.255.dr	Mach-O symbol: _CFMachPortCreateRunLoopSource
Source: dropped file kAgent.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file arch.255.dr	Mach-O symbol: _objc_msgSend_stret
Source: dropped file arch.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file at.255.dr	Mach-O symbol: _inet_ntoa
Source: dropped file at.255.dr	Mach-O symbol: _kIOMasterPortDefault
Source: dropped file at.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file at.255.dr	Mach-O symbol: _NSSearchPathForDirectoriesInDomains
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI21CPreSendDataHeadQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSFTSSendThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC17CDDSFTSSendThrMgr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC14CDDSFTSSendThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr23HandlePassiveConnectACKEP26TAG_CDataPassiveConnectACK
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24HandleNotifyClientRealIPEP21TAG_CDataClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25CreatePassiveListenSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25InitReconnectNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr22HandlePassiveConnectInEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC1EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC2EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: _socket
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: _setsockopt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _send
Source: dropped file UserAgent.255.dr	Mach-O symbol: _sendto
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CLIENT_PIDC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CLIENT_PIDC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr9Send2HostEP9CDataHead
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread11SocketErrorEPKcP7__sFILE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread10SendNotifyEiPKci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread19InitTriggerSocketFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread15AddNotifyOnPortEiPNS_13CInputHandlerE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread16SendNotifyToPortEiPKci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13ActiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21InitIntervalMsgSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13SendHeartBeatEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr14PassiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr15SendIntervalMsgERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr17PerformDisconnectEb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19AfterConnectSuccessEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file UserAgent.255.dr	Mach-O symbol: _objc_msgSendSuper2
Source: dropped file UserAgent.255.dr	Mach-O symbol: _inet_addr
Source: dropped file UserAgent.255.dr	Mach-O symbol: _inet_ntoa
Source: dropped file UserAgent.255.dr	Mach-O symbol: _getsockname
Source: dropped file UserAgent.255.dr	Mach-O symbol: _getsockopt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _gethostbyname
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr14CancelSendFileEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr16HandleTaskExceedEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19HandleSendFileTimerEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19SendTransferMode2C2Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleC2PrepareReadyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleCancelSendFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20MatchSimpleRandomMD5ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr21SendFileTransferErrorEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13GetTaskClientEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13HandleFTSDataEjPcib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr23SendFileTransferRequestEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr24HandleC2ACKBaseInfoV2_V3Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr25HandleWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr9GetTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC1EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC2EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleC2ACKFileContentEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleRecvFileCompleteEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22SetWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15WaitForSendOverEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetDDSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetFTSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetDDSServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetExcludePortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14SetConnectModeE12CONNECT_MODERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SetParam_ServerIPEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18GetVersionOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16InitNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SendFile_PushTaskERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32S9_jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetProcTypeOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19PushSndToHstForSendEPci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18NotifyClientStatusE4IP32jii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18SetSendOverSinglalEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20BeginSendPrePushDataE4IP32jPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetPassiveListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSendFilePacketLenEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetParam_ServerAddrERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr11GetServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr18SendFileContentACKEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr13SendTaskIDACKEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetClientTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetServerTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19SendFileBaseInfoACKEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr20SendRecvFileCompleteEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr21SendFileBaseInfoACKV2ExRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11Add2ExitThrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11GetTaskHostEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12ReturnStatusEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10Send2LocalEP10CDDSNetObjj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetClientIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13SendHeartBeatEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14CancelSendFileE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetConnectModeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: _connect
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr19WaitC2ConnInTimeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr8SendFileEP7CDDSIfiRKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEj4IP32SB_jSA_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr10AddExitThrEP14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr14CancelSendFileE4IP32jji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue13waitc2timeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z11GetPeerPortj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP26CDDSClientRealIP_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CAllSubnetDDSInfo18getOneDDSClientSetE4IP32
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus26CDDSClientStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CAllSubnetDDSInfo23getAllClientsOfProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22PassiveConnectToClientEii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_DDSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20SendECDHKeyBob2AliceE4IP32jRK7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21FindECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21GetSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_FTSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23ClearSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23GetAllClientsOfProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetCONNECT_TO_DDS_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26FindOrAddECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SendFilePacketLenEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetSizeSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8Send2OwnEP10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8SendFileERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4SendEP10CDDSNetObji4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTSN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z15IsConnectFailedv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z14IsNotConnectedv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z15CreateTcpSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z17GetSendBufferSizejRi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z16IsConnectionLostv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z17SetSendBufferSizeji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z17GetSocketBindPortj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z21CreateTcpListenSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z19IsConnectInProgressv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z19IsConnectionRefusedv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z27ConnectTimeoutWithInterruptjPK8sockaddriiPi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z6SendNBjRPcRibPK8sockaddr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH3putERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32S9_jS8_bb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH4sendE4IP32jPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH5clearEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH7set_ftsEP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDHC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH13clear_presaveE4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDHC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus34CDDSPassiveConnectStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z13GetSocketTypej
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z14ConnectTimeoutjPK8sockaddrii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN8CAppBase10SendNotifyEiPKci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN8CAppBase11SocketErrorEPKcP7__sFILE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN8CAppBase16SendNotifyToPortEiPKci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN8CAppBase15AddNotifyOnPortEiP13CInputHandler
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS21CPreSendDataHeadQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS19CDDSFTSSendThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue15join_and_deleteEP14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue6cancelE4IP32jji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueueC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueueC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue13clear_presaveE4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue4sendE4IP32jPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTIN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file kAgent.279.dr	Mach-O symbol: _CFMachPortCreateRunLoopSource
Source: dropped file kAgent.279.dr	Mach-O symbol: _objc_msgSend
Source: dropped file arch.291.dr	Mach-O symbol: _objc_msgSend_stret
Source: dropped file arch.291.dr	Mach-O symbol: _objc_msgSend
Source: dropped file at.297.dr	Mach-O symbol: _inet_ntoa
Source: dropped file at.297.dr	Mach-O symbol: _kIOMasterPortDefault
Source: dropped file at.297.dr	Mach-O symbol: _objc_msgSend
Source: dropped file at.297.dr	Mach-O symbol: _NSSearchPathForDirectoriesInDomains
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTI24CDDSPassiveConnectStatus
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTI21CPreSendDataHeadQueue
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTI19CDDSFTSSendThrQueue
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTI17CDDSFTSSendThrMgr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTI16CDDSClientRealIP
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTI16CDDSClientStatus
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTI14CDDSFTSSendThr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTC17CDDSFTSSendThrMgr0_N3YYZ6ThreadE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTC14CDDSFTSSendThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr23HandlePassiveConnectACKEP26TAG_CDataPassiveConnectACK
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr24HandleNotifyClientRealIPEP21TAG_CDataClientRealIP
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr25CreatePassiveListenSocketEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr25InitReconnectNotifySocketEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr22HandlePassiveConnectInEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr9ReconnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThrC1EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThrC2EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.303.dr	Mach-O symbol: _socket
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr7ConnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: _setsockopt
Source: dropped file UserAgent.303.dr	Mach-O symbol: _send
Source: dropped file UserAgent.303.dr	Mach-O symbol: _sendto
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CLIENT_PIDC1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CLIENT_PIDC2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSSndThr9Send2HostEP9CDataHead
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN3YYZ6Thread11SocketErrorEPKcP7__sFILE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN3YYZ6Thread10SendNotifyEiPKci
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN3YYZ6Thread19InitTriggerSocketFDEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN3YYZ6Thread15AddNotifyOnPortEiPNS_13CInputHandlerE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN3YYZ6Thread16SendNotifyToPortEiPKci
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr13ActiveConnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr21InitIntervalMsgSocketEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr13SendHeartBeatEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr14PassiveConnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr15SendIntervalMsgERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr17PerformDisconnectEb
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr19AfterConnectSuccessEj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN10CDDSRcvThr19SetPassiveConnectFDEj
Source: dropped file UserAgent.303.dr	Mach-O symbol: _objc_msgSend
Source: dropped file UserAgent.303.dr	Mach-O symbol: _objc_msgSendSuper2
Source: dropped file UserAgent.303.dr	Mach-O symbol: _inet_addr
Source: dropped file UserAgent.303.dr	Mach-O symbol: _inet_ntoa
Source: dropped file UserAgent.303.dr	Mach-O symbol: _getsockname
Source: dropped file UserAgent.303.dr	Mach-O symbol: _getsockopt
Source: dropped file UserAgent.303.dr	Mach-O symbol: _gethostbyname
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr14CancelSendFileEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr16HandleTaskExceedEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19HandleSendFileTimerEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19SendTransferMode2C2Ei
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleC2PrepareReadyEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleCancelSendFileEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20MatchSimpleRandomMD5ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr21SendFileTransferErrorEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13GetTaskClientEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13HandleFTSDataEjPcib
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr23SendFileTransferRequestEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr24HandleC2ACKBaseInfoV2_V3Ei
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr25HandleWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr7ConnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr9GetTaskIDEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC1EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC2EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleC2ACKFileContentEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleRecvFileCompleteEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22SetWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi15WaitForSendOverEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi16GetDDSListenPortEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi16GetFTSListenPortEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi14GetDDSServerIPEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi14GetExcludePortEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi14SetConnectModeE12CONNECT_MODERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi17SetParam_ServerIPEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi18GetVersionOfClientEji
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi16InitNotifySocketEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi17SendFile_PushTaskERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32S9_jS8_b
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi19GetProcTypeOfClientEji
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi19PushSndToHstForSendEPci
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi18NotifyClientStatusE4IP32jii
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi18SetSendOverSinglalEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi19SetPassiveConnectFDEj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi20BeginSendPrePushDataE4IP32jPc
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi20GetPassiveListenPortEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi20GetSendFilePacketLenEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi19SetParam_ServerAddrERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr11GetServerIPEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr10DisconnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr18SendFileContentACKEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr13SendTaskIDACKEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetClientTaskIDEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetServerTaskIDEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19SendFileBaseInfoACKEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr20SendRecvFileCompleteEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr21SendFileBaseInfoACKV2ExRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr7ConnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr10DisconnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11Add2ExitThrEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11GetTaskHostEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12ReturnStatusEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi10DisconnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi10Send2LocalEP10CDDSNetObjj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi11GetClientIDEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi13SendHeartBeatEj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi14CancelSendFileE4IP32jj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi14GetConnectModeEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: _connect
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr19WaitC2ConnInTimeoutEj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr8SendFileEP7CDDSIfiRKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEj4IP32SB_jSA_bPc
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr10AddExitThrEP14CDDSFTSSendThr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr14CancelSendFileE4IP32jji
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue13waitc2timeoutEj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z11GetPeerPortj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIP11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_CREATOREv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_VERSIONE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_CREATOREv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_VERSIONE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIP26CDDSClientRealIP_CLASSNAMEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIP4DumpEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIP9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIPC1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientRealIPC2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CAllSubnetDDSInfo18getOneDDSClientSetE4IP32
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatus26CDDSClientStatus_CLASSNAMEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatus4DumpEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatusC1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN16CDDSClientStatusC2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN17CAllSubnetDDSInfo23getAllClientsOfProcTypeEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi22PassiveConnectToClientEii
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_DDSListenPortEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi20SendECDHKeyBob2AliceE4IP32jRK7ECDHKEY
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi21FindECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi21GetSndToHstForSendQueEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_FTSListenPortEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi23ClearSndToHstForSendQueEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi23GetAllClientsOfProcTypeEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi25GetCONNECT_TO_DDS_TIMEOUTEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi26FindOrAddECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SendFilePacketLenEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi25GetSizeSndToHstForSendQueEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi8Send2OwnEP10CDDSNetObj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi8SendFileERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32jS8_b
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi4SendEP10CDDSNetObji4IP32j
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi9ReconnectEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTV24CDDSPassiveConnectStatus
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTV17CDDSFTSSendThrMgr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTV16CDDSClientRealIP
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTV16CDDSClientStatus
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTV14CDDSFTSSendThr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTT17CDDSFTSSendThrMgr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTT14CDDSFTSSendThr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTSN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTS24CDDSPassiveConnectStatus
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z15IsConnectFailedv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z14IsNotConnectedv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z15CreateTcpSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z17GetSendBufferSizejRi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z16IsConnectionLostv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z17SetSendBufferSizeji
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z17GetSocketBindPortj
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z21CreateTcpListenSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z19IsConnectInProgressv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z19IsConnectionRefusedv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z27ConnectTimeoutWithInterruptjPK8sockaddriiPi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z6SendNBjRPcRibPK8sockaddr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH3putERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32S9_jS8_bb
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH4sendE4IP32jPc
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH5clearEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH7set_ftsEP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDHC1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH13clear_presaveE4IP32j
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDHC2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_CREATOREv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_VERSIONE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus34CDDSPassiveConnectStatus_CLASSNAMEE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus4DumpEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z13GetSocketTypej
Source: dropped file UserAgent.303.dr	Mach-O symbol: __Z14ConnectTimeoutjPK8sockaddrii
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN8CAppBase10SendNotifyEiPKci
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN8CAppBase11SocketErrorEPKcP7__sFILE
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN8CAppBase16SendNotifyToPortEiPKci
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN8CAppBase15AddNotifyOnPortEiP13CInputHandler
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTS21CPreSendDataHeadQueue
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTS19CDDSFTSSendThrQueue
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTS17CDDSFTSSendThrMgr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTS16CDDSClientRealIP
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTS16CDDSClientStatus
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTS14CDDSFTSSendThr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue15join_and_deleteEP14CDDSFTSSendThr
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue6cancelE4IP32jji
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueueC1Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueueC2Ev
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue13clear_presaveE4IP32j
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue4sendE4IP32jPc
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZTIN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE

Source: dropped file UserAgent.255.dr	Mach-O symbol: _OBJC_METACLASS_$_AudioFileConvertOperation
Source: dropped file UserAgent.255.dr	Mach-O symbol: _OBJC_CLASS_$_NSOperation
Source: dropped file UserAgent.255.dr	Mach-O symbol: _OBJC_METACLASS_$_NSOperation
Source: dropped file UserAgent.255.dr	Mach-O symbol: _OBJC_CLASS_$_AudioFileConvertOperation
Source: dropped file UserAgent.303.dr	Mach-O symbol: _OBJC_METACLASS_$_AudioFileConvertOperation
Source: dropped file UserAgent.303.dr	Mach-O symbol: _OBJC_CLASS_$_NSOperation
Source: dropped file UserAgent.303.dr	Mach-O symbol: _OBJC_METACLASS_$_NSOperation
Source: dropped file UserAgent.303.dr	Mach-O symbol: _OBJC_CLASS_$_AudioFileConvertOperation

Source: initial sample	Mach-O header: dylib_command -> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
Source: initial sample	Mach-O header: dylib_command -> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

Persistence and Installation Behavior:

Writes Mach-O files to untypical directories

Show sources

Source: /bin/cp (PID: 648)	64-bit Mach-O written to unusual path: /Users/ben/Library/Preferences/Tools/kAgent	Jump to dropped file
Source: /bin/cp (PID: 654)	64-bit Mach-O written to unusual path: /Users/ben/Library/Preferences/Tools/arch	Jump to dropped file
Source: /bin/cp (PID: 657)	64-bit Mach-O written to unusual path: /Users/ben/Library/Preferences/Tools/at	Jump to dropped file
Source: /bin/cp (PID: 660)	64-bit Mach-O written to unusual path: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent	Jump to dropped file

Sets full permissions to files and/or directories

Show sources

Source: /bin/sh (PID: 665)

Chmod executable with 777: /bin/chmod -> chmod 777 /Users/ben/start.sh

Jump to behavior

Source: /usr/bin/curl (PID: 674)

PHP file created: /Users/ben/Library/Preferences/UserAgent/lib/my-ip.php

Jump to dropped file

Source: /bin/sh (PID: 641)	Chown executable: /usr/sbin/chown -> chown ben:staff /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /bin/sh (PID: 643)	Chown executable: /usr/sbin/chown -> chown ben:staff /Users/ben/Library/Preferences/UserAgent	Jump to behavior
Source: /bin/sh (PID: 645)	Chown executable: /usr/sbin/chown -> chown ben:staff /Users/ben/Library/Preferences/UserAgent/lib	Jump to behavior
Source: /bin/sh (PID: 647)	Chown executable: /usr/sbin/chown -> chown ben:staff /Users/ben/Library/LaunchAgents	Jump to behavior
Source: /bin/sh (PID: 652)	Chown executable: /usr/sbin/chown -> chown ben:staff /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist	Jump to behavior

Source: /bin/bash (PID: 668)

Launch agent/daemon unloaded: launchctl unload -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

Jump to behavior

Source: /bin/sh (PID: 638)	Mkdir executable: /bin/mkdir -> mkdir /Users/ben/Desktop/~tmp	Jump to behavior
Source: /bin/sh (PID: 640)	Mkdir executable: /bin/mkdir -> mkdir /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /bin/sh (PID: 642)	Mkdir executable: /bin/mkdir -> mkdir /Users/ben/Library/Preferences/UserAgent	Jump to behavior
Source: /bin/sh (PID: 644)	Mkdir executable: /bin/mkdir -> mkdir /Users/ben/Library/Preferences/UserAgent/lib	Jump to behavior
Source: /bin/sh (PID: 646)	Mkdir executable: /bin/mkdir -> mkdir /Users/ben/Library/LaunchAgents	Jump to behavior

Source: /bin/sh (PID: 649)	Chmod executable: /bin/chmod -> chmod 755 /Users/ben/Library/Preferences/Tools/kAgent	Jump to behavior
Source: /bin/sh (PID: 650)	Chmod executable: /bin/chmod -> chmod u+s /Users/ben/Library/Preferences/Tools/kAgent	Jump to behavior
Source: /bin/sh (PID: 653)	Chmod executable: /bin/chmod -> chmod 644 /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist	Jump to behavior
Source: /bin/sh (PID: 655)	Chmod executable: /bin/chmod -> chmod 755 /Users/ben/Library/Preferences/Tools/arch	Jump to behavior
Source: /bin/sh (PID: 656)	Chmod executable: /bin/chmod -> chmod u+s /Users/ben/Library/Preferences/Tools/arch	Jump to behavior
Source: /bin/sh (PID: 658)	Chmod executable: /bin/chmod -> chmod 755 /Users/ben/Library/Preferences/Tools/at	Jump to behavior
Source: /bin/sh (PID: 659)	Chmod executable: /bin/chmod -> chmod u+s /Users/ben/Library/Preferences/Tools/at	Jump to behavior
Source: /bin/sh (PID: 663)	Chmod executable: /bin/chmod -> chmod 755 /Users/ben/Library/Preferences/UserAgent/lib/UserAgent	Jump to behavior
Source: /bin/sh (PID: 664)	Chmod executable: /bin/chmod -> chmod u+s /Users/ben/Library/Preferences/UserAgent/lib/UserAgent	Jump to behavior
Source: /bin/sh (PID: 665)	Chmod executable: /bin/chmod -> chmod 777 /Users/ben/start.sh	Jump to behavior

Source: /bin/sh (PID: 674)

Curl executable: /usr/bin/curl -> curl -o /Users/ben/Library/Preferences/UserAgent/lib/my-ip.php http://cgi1.apnic.net/cgi-bin/my-ip.php

Jump to behavior

Source: /bin/bash (PID: 669)

Launch agent/daemon loaded: launchctl load -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

Jump to behavior

Source: /bin/cp (PID: 651)

Launch agent/daemon created with StartInterval and/or StartCalendarInterval, file created: /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

Jump to behavior

Source: /Users/ben/Library/Preferences/Tools/arch (PID: 679)

Hidden File created: /tmp/.112211334455997890-b8ZA

Jump to behavior

Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Permissions modified for written 64-bit Mach-O /Users/ben/Desktop/~tmp/kAgent: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Permissions modified for written 64-bit Mach-O /Users/ben/Desktop/~tmp/arch: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Permissions modified for written 64-bit Mach-O /Users/ben/Desktop/~tmp/at: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Permissions modified for written 64-bit Mach-O /Users/ben/Desktop/~tmp/UserAgent: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /bin/cp (PID: 648)	Permissions modified for written 64-bit Mach-O /Users/ben/Library/Preferences/Tools/kAgent: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /bin/cp (PID: 654)	Permissions modified for written 64-bit Mach-O /Users/ben/Library/Preferences/Tools/arch: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /bin/cp (PID: 657)	Permissions modified for written 64-bit Mach-O /Users/ben/Library/Preferences/Tools/at: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /bin/cp (PID: 660)	Permissions modified for written 64-bit Mach-O /Users/ben/Library/Preferences/UserAgent/lib/UserAgent: bits: - usr: rx grp: rx all: rwx	Jump to dropped file

Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c mkdir '/Users/ben/Desktop/~tmp'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c mkdir '/Users/ben/Library/Preferences/Tools'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chown ben:staff '/Users/ben/Library/Preferences/Tools'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c mkdir '/Users/ben/Library/Preferences/UserAgent'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chown ben:staff '/Users/ben/Library/Preferences/UserAgent'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c mkdir '/Users/ben/Library/Preferences/UserAgent/lib'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chown ben:staff '/Users/ben/Library/Preferences/UserAgent/lib'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c mkdir '/Users/ben/Library/LaunchAgents'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chown ben:staff '/Users/ben/Library/LaunchAgents'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c cp '/Users/ben/Desktop/~tmp/kAgent' /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod 755 '/Users/ben/Library/Preferences/Tools/kAgent'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod u+s '/Users/ben/Library/Preferences/Tools/kAgent'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c cp '/Users/ben/Desktop/~tmp/com.UserAgent.va.plist' /Users/ben/Library/LaunchAgents	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chown ben:staff '/Users/ben/Library/LaunchAgents/com.UserAgent.va.plist'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod 644 '/Users/ben/Library/LaunchAgents/com.UserAgent.va.plist'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c cp '/Users/ben/Desktop/~tmp/arch' /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod 755 '/Users/ben/Library/Preferences/Tools/arch'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod u+s '/Users/ben/Library/Preferences/Tools/arch'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c cp '/Users/ben/Desktop/~tmp/at' /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod 755 '/Users/ben/Library/Preferences/Tools/at'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod u+s '/Users/ben/Library/Preferences/Tools/at'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c cp '/Users/ben/Desktop/~tmp/UserAgent' /Users/ben/Library/Preferences/UserAgent/lib	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod 755 '/Users/ben/Library/Preferences/UserAgent/lib/UserAgent'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod u+s '/Users/ben/Library/Preferences/UserAgent/lib/UserAgent'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c chmod 777 '/Users/ben/start.sh'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c su - ben '/Users/ben/start.sh'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c rm -f '/Users/ben/start.sh'	Jump to behavior
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	Shell command executed: sh -c rm -Rf '/Users/ben/Desktop/~tmp'	Jump to behavior
Source: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent (PID: 670)	Shell command executed: sh -c curl -o /Users/ben/Library/Preferences/UserAgent/lib/my-ip.php http://cgi1.apnic.net/cgi-bin/my-ip.php	Jump to behavior
Source: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent (PID: 670)	Shell command executed: sh -c /Users/ben/Library/Preferences/Tools/arch '/tmp/112211334455997890' 1280 720 0.000000	Jump to behavior

Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	File written: /Users/ben/Desktop/~tmp/kAgent	Jump to dropped file
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	File written: /Users/ben/Desktop/~tmp/arch	Jump to dropped file
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	File written: /Users/ben/Desktop/~tmp/at	Jump to dropped file
Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	File written: /Users/ben/Desktop/~tmp/UserAgent	Jump to dropped file
Source: /bin/cp (PID: 648)	File written: /Users/ben/Library/Preferences/Tools/kAgent	Jump to dropped file
Source: /bin/cp (PID: 654)	File written: /Users/ben/Library/Preferences/Tools/arch	Jump to dropped file
Source: /bin/cp (PID: 657)	File written: /Users/ben/Library/Preferences/Tools/at	Jump to dropped file
Source: /bin/cp (PID: 660)	File written: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent	Jump to dropped file

Source: /bin/sh (PID: 671)	Rm executable: /bin/rm -> rm -f /Users/ben/start.sh			Jump to behavior
Source: /bin/sh (PID: 672)	Rm executable: /bin/rm -> rm -Rf /Users/ben/Desktop/~tmp			Jump to behavior

Source: /bin/sh (PID: 638)	Shell process: mkdir /Users/ben/Desktop/~tmp	Jump to behavior
Source: /bin/sh (PID: 640)	Shell process: mkdir /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /bin/sh (PID: 641)	Shell process: chown ben:staff /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /bin/sh (PID: 642)	Shell process: mkdir /Users/ben/Library/Preferences/UserAgent	Jump to behavior
Source: /bin/sh (PID: 643)	Shell process: chown ben:staff /Users/ben/Library/Preferences/UserAgent	Jump to behavior
Source: /bin/sh (PID: 644)	Shell process: mkdir /Users/ben/Library/Preferences/UserAgent/lib	Jump to behavior
Source: /bin/sh (PID: 645)	Shell process: chown ben:staff /Users/ben/Library/Preferences/UserAgent/lib	Jump to behavior
Source: /bin/sh (PID: 646)	Shell process: mkdir /Users/ben/Library/LaunchAgents	Jump to behavior
Source: /bin/sh (PID: 647)	Shell process: chown ben:staff /Users/ben/Library/LaunchAgents	Jump to behavior
Source: /bin/sh (PID: 648)	Shell process: cp /Users/ben/Desktop/~tmp/kAgent /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /bin/sh (PID: 649)	Shell process: chmod 755 /Users/ben/Library/Preferences/Tools/kAgent	Jump to behavior
Source: /bin/sh (PID: 650)	Shell process: chmod u+s /Users/ben/Library/Preferences/Tools/kAgent	Jump to behavior
Source: /bin/sh (PID: 651)	Shell process: cp /Users/ben/Desktop/~tmp/com.UserAgent.va.plist /Users/ben/Library/LaunchAgents	Jump to behavior
Source: /bin/sh (PID: 652)	Shell process: chown ben:staff /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist	Jump to behavior
Source: /bin/sh (PID: 653)	Shell process: chmod 644 /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist	Jump to behavior
Source: /bin/sh (PID: 654)	Shell process: cp /Users/ben/Desktop/~tmp/arch /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /bin/sh (PID: 655)	Shell process: chmod 755 /Users/ben/Library/Preferences/Tools/arch	Jump to behavior
Source: /bin/sh (PID: 656)	Shell process: chmod u+s /Users/ben/Library/Preferences/Tools/arch	Jump to behavior
Source: /bin/sh (PID: 657)	Shell process: cp /Users/ben/Desktop/~tmp/at /Users/ben/Library/Preferences/Tools	Jump to behavior
Source: /bin/sh (PID: 658)	Shell process: chmod 755 /Users/ben/Library/Preferences/Tools/at	Jump to behavior
Source: /bin/sh (PID: 659)	Shell process: chmod u+s /Users/ben/Library/Preferences/Tools/at	Jump to behavior
Source: /bin/sh (PID: 660)	Shell process: cp /Users/ben/Desktop/~tmp/UserAgent /Users/ben/Library/Preferences/UserAgent/lib	Jump to behavior
Source: /bin/sh (PID: 663)	Shell process: chmod 755 /Users/ben/Library/Preferences/UserAgent/lib/UserAgent	Jump to behavior
Source: /bin/sh (PID: 664)	Shell process: chmod u+s /Users/ben/Library/Preferences/UserAgent/lib/UserAgent	Jump to behavior
Source: /bin/sh (PID: 665)	Shell process: chmod 777 /Users/ben/start.sh	Jump to behavior
Source: /bin/sh (PID: 666)	Shell process: su - ben /Users/ben/start.sh	Jump to behavior
Source: /bin/sh (PID: 671)	Shell process: rm -f /Users/ben/start.sh	Jump to behavior
Source: /bin/sh (PID: 672)	Shell process: rm -Rf /Users/ben/Desktop/~tmp	Jump to behavior
Source: /bin/sh (PID: 674)	Shell process: curl -o /Users/ben/Library/Preferences/UserAgent/lib/my-ip.php http://cgi1.apnic.net/cgi-bin/my-ip.php	Jump to behavior
Source: /bin/sh (PID: 679)	Shell process: /Users/ben/Library/Preferences/Tools/arch /tmp/112211334455997890 1280 720 0.000000	Jump to behavior

Source: /Users/ben/Desktop/installer_v2021 (PID: 637)	XML plist file created: /Users/ben/Desktop/~tmp/com.UserAgent.va.plist			Jump to dropped file
Source: /bin/cp (PID: 651)	XML plist file created: /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist			Jump to dropped file

Source: /Users/ben/Library/Preferences/Tools/kAgent (PID: 675)

AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist

Jump to behavior

Source: submitted sample

Stderr: mkdir: /Users/ben/Library/LaunchAgents: File exists/Users/ben/Library/LaunchAgents/com.UserAgent.va.plist: Could not find specified service: exit code = 0

Source: /bin/cp (PID: 651)

Launch agent/daemon created with KeepAlive and/or RunAtLoad, file created: /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

Jump to behavior

Source: /bin/cp (PID: 651)

Launch agent created File created: /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

Jump to behavior

Source: UserAgent.255.dr	Dropped file: section __data with 7.7933 entropy (max. 8.0)
Source: UserAgent.303.dr	Dropped file: section __data with 7.7933 entropy (max. 8.0)

Source: kAgent, 00000675.00000333.9.000000010f0ac000.000000010f0b2000.r--.sdmp	Binary or memory string: framework.vmnet
Source: kAgent, 00000675.00000333.9.000000010f0ac000.000000010f0b2000.r--.sdmp	Binary or memory string: framework.vmnet$

Language, Device and Operating System Detection:

Executes the "who" command used to get a list of logged in users

Show sources

Source: /Users/ben/Desktop/installer_v2021 (PID: 639)

Who executable: /usr/bin/who -> who

Jump to behavior

Reads system files that contain records of logged in users

Show sources

Source: /usr/bin/who (PID: 639)	Logged in records file read: /private/var/run/utmpx			Jump to behavior
Source: /usr/bin/who (PID: 639)	Logged in records file read: /private/var/run/utmpx			Jump to behavior

Source: /bin/sh (PID: 638)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 640)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 641)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 642)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 643)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 644)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 645)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 646)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 647)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 648)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 649)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 650)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 651)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 652)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 653)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 654)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 655)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 656)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 657)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 658)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 659)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 660)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 663)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 664)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 665)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 666)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/bash (PID: 667)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 671)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 672)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 674)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 679)	Sysctl requested: kern.hostname (1.10)	Jump to behavior

Stealing of Sensitive Information:

Yara detected MACMA aka CDDS

Show sources

Source: Yara match	File source: installer_v2021, type: SAMPLE
Source: Yara match	File source: 00000670.00000327.1.000000010ff4a000.000000010ff68000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: UserAgent PID: 670, type: MEMORYSTR
Source: Yara match	File source: /Users/ben/Desktop/~tmp/UserAgent, type: DROPPED
Source: Yara match	File source: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent, type: DROPPED

Remote Access Functionality:

Yara detected MACMA aka CDDS

Show sources

Source: Yara match	File source: installer_v2021, type: SAMPLE
Source: Yara match	File source: 00000670.00000327.1.000000010ff4a000.000000010ff68000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: UserAgent PID: 670, type: MEMORYSTR
Source: Yara match	File source: /Users/ben/Desktop/~tmp/UserAgent, type: DROPPED
Source: Yara match	File source: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent, type: DROPPED

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting2	LC_LOAD_DYLIB Addition1	LC_LOAD_DYLIB Addition1	Masquerading1	Input Capture5	Security Software Discovery1	Remote Services	Input Capture5	Exfiltration Over Alternative Protocol1	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Launchctl1	Launch Agent4	Launch Agent4	File and Directory Permissions Modification2	LSASS Memory	System Owner/User Discovery2	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over C2 Channel1	Non-Standard Port1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Launch Daemon3	Launch Daemon3	Scripting2	Security Account Manager	System Information Discovery1	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Ingress Tool Transfer1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Plist Modification1	Plist Modification1	Hidden Files and Directories1	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Non-Application Layer Protocol2	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Obfuscated Files or Information1	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Application Layer Protocol3	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	File Deletion1	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Domains

No Antivirus matches

URLs

No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cgi1.apnic.net	203.119.102.39	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://cgi1.apnic.net/cgi-bin/my-ip.php	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://cgi1.apnic.net/cgi-bin/my-ip.phpcurlBuf	UserAgent, 00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
123.1.170.152	unknown	Hong Kong		17444	NWT-AS-APASnumberforNewWorldTelephoneLtdHK	true
203.119.102.39	cgi1.apnic.net	Australia		4608	APNIC-SERVICESAsiaPacificNetworkInformationCentreAU	false

Runtime Messages

Command:	/Users/ben/Desktop/installer_v2021
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:	mkdir: /Users/ben/Library/LaunchAgents: File exists /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist: Could not find specified service

Created / dropped Files

/Users/ben/Desktop/~tmp/UserAgent Download File
Process:	/Users/ben/Desktop/installer_v2021
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	2068908
Entropy (8bit):	5.803802925411499
Encrypted:	false
SSDEEP:	24576:MwFVmcTJAQ81LGqIvawVSIHXJbchgLbmYnGVxhKfSWjxsvkEFkpiTe82EcnL8+7A://T6Iv9VuCGV+qC1EFTe8mHzU3HqBk
MD5:	3E4DE0EEEFD2E1C024B41A4222285F74
SHA1:	000830573FF24345D88EF7916F9745AFF5EE813D
SHA-256:	D599D7814ADBAB0F1442F5A10074E00F3A776CE183EA924ABCD6154F0D068BB4
SHA-512:	649B84818EE5EE5B275845402A7D144ABF14299B949AFAABDE42597E273A1A9507764FDB1A7BE13F750B510B15D74901C542B4457489D9AAB60C6430E13C3135
Malicious:	true
Yara Hits:	Rule: JoeSecurity_MACMA, Description: Yara detected MACMA aka CDDS, Source: /Users/ben/Desktop/~tmp/UserAgent, Author: Joe Security
Reputation:	low
Preview:	....................@.....!.........H...__PAGEZERO..............................................................__TEXT..........................................................__text..........__TEXT..........0...............0...............................__stubs.........__TEXT........................................................__stub_helper...__TEXT...........0...............0..............................__gcc_except_tab__TEXT...........:.......e.......:..............................__cstring.......__TEXT...................t......................................__const.........__TEXT.................../......................................__objc_methname.__TEXT...........E...............E..............................__objc_classname__TEXT..........vM......_.......vM..............................__objc_methtype.__TEXT...........M......=........M..............................__unwind_info...__TEXT...........Q.......9.......Q..............................__eh_frame......__TEXT..

/Users/ben/Desktop/~tmp/arch Download File
Process:	/Users/ben/Desktop/installer_v2021
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	23468
Entropy (8bit):	4.719207533160346
Encrypted:	false
SSDEEP:	192:r+TAQETSxjhjY18OcDMLgpMwQ/MfAuosCDC0snDCgsqHDrmsDDiEvox3DrztKrjL:r+TVEOxj2kEP9p
MD5:	1BBCB128D992EDA1632127C48D6DBFE2
SHA1:	C77A974C22037378B8FBA95DF155C6757290BEBA
SHA-256:	2E3D636FF79B418FD6745D6474F01F137B798BD84008A4CF5F82B38BE4E878E3
SHA-512:	EFFB99E4560D98EED299B3695F000EB29FDE3855D3177ED479C01C25248324FF000EBF21BC834C2FD51CEE5BBDFD19E9755D020806C302311D1FDF2456EB3D03
Malicious:	false
Reputation:	low
Preview:	.......................... .........H...__PAGEZERO..............................................................__TEXT...................@...............@......................__text..........__TEXT..........................................................__stubs.........__TEXT...........:...............:..............................__stub_helper...__TEXT..........$;..............$;..............................__const.........__TEXT..........P<......(.......P<..............................__objc_methname.__TEXT..........x<......}.......x<..............................__cstring.......__TEXT...........<...............<..............................__unwind_info...__TEXT...........<......P........<..............................__eh_frame......__TEXT..........P=..............P=......................................__DATA...........@...............@..............................__program_vars..__DATA...........@......(........@..............................__got...........__DATA..........

/Users/ben/Desktop/~tmp/at Download File
Process:	/Users/ben/Desktop/installer_v2021
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	14796
Entropy (8bit):	3.661123552351055
Encrypted:	false
SSDEEP:	96:x1hhFQAENdJrOrbPRK6gFyWh8X6E/It/rYnV/A26OqE5y/yMRWDRC6sqnFjfm+O:T/1HJKsWlhpgAjOte/01CULmn
MD5:	53D893D686EE7A1A820CA2E36171B03A
SHA1:	D1D75D8795DDE754165EC12CB38DEC0476E6062C
SHA-256:	D8A49E688F214553A7525BE96CADDDEC224DB19BAE3771D14083A2C4C45F28EB
SHA-512:	9F01BFA8C786D90398EFE4F78BF540151E77F501F714AEBCD9CF05973B9A181D7B104C231C4B010E4F9F33B073CD77F34A2927F7F5C86968E389FFEC64B47D8D
Malicious:	false
Reputation:	low
Preview:	.......................... .........H...__PAGEZERO..............................................................__TEXT................... ............... ......................__text..........__TEXT..........................................................__stubs.........__TEXT..........................................................__stub_helper...__TEXT..........h...............h...............................__const.........__TEXT..........h...............h...............................__cstring.......__TEXT..........l...............l...............................__objc_methname.__TEXT..........X...............X...............................__unwind_info...__TEXT.......... .......\....... ...............................__eh_frame......__TEXT..............................................................h...__DATA........... ............... ..............................__program_vars..__DATA........... ......(........ ..............................__nl_symbol_ptr.__DATA..........

/Users/ben/Desktop/~tmp/com.UserAgent.va.plist Download File
Process:	/Users/ben/Desktop/installer_v2021
File Type:	XML document text
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	5.048992537142611
Encrypted:	false
SSDEEP:	12:TMHdgo+tJVEdQiCXFM9/Wgpyc0jwKj9J+c76EbCTwKmTMHdgo+tJVEdQiCXFM9/8:2dfyiwUHccIiOnwRdfyiwUHccuOnc
MD5:	3C37AC6DE47C648EC77CA4C66332CC96
SHA1:	6B06428CE0CC6C858AC54A391B032273FEF957EA
SHA-256:	1C730A79E3255C091A0146544F49CD550FDE2935F29667ACB40E6EEA38E49633
SHA-512:	A0B566269BA0E62B3D0A897B537ABC8E92E50B974E51B9571DE353CD27A6FB980BB87F1D362719D52917DB05140CDF0130CB2BAAD66CFBD6CCA1F423F6A4F88C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>Label</key>..<string>com.UserAgent.va</string>..<key>LimitLoadToSessionType</key>..<string>Aqua</string>..<key>ProgramArguments</key>..<array>...<string>~/Library/Preferences/UserAgent/lib/UserAgent</string>...<string>-runMode</string>...<string>ifneeded</string>..</array>..<key>RunAtLoad</key>..<true/>..<key>StartInterval</key>..<integer>600</integer>..<key>ThrottleInterval</key>..<integer>2</integer>..<key>WorkingDirectory</key>..<string>~/Library/Preferences/UserAgent/lib</string>.</dict>.</plist>.<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>Label</key>..<string>com.UserAgent.va</string>..<key>LimitLoadToSessionType</key>..<string>Aqua</string>..<key>ProgramArguments</key>..<arra

/Users/ben/Desktop/~tmp/kAgent Download File
Process:	/Users/ben/Desktop/installer_v2021
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	67376
Entropy (8bit):	5.202077512589797
Encrypted:	false
SSDEEP:	768:AdFkvPbRdaxdk+yaJQq6kY98/MJAlnDhDu49kgOPUdmOgFCWSKMHGyJVDSP:coPudwo59Y9IM6rO8dmOgFFSK/yJZSP
MD5:	43F6382A5684330F071B329B3CEC69E9
SHA1:	D811E97461741E93813EECD8E5349772B1C0B001
SHA-256:	570CD76BF49CF52E0CB347A68BDCF0590B2EAECE134E1B1EBA7E8D66261BDBE6
SHA-512:	9C0C5930C36D87DCFF865EFCDD0B093F21EAD68D82EC64729351A859CE1ADC4B7C71560DBB72916494C8D04E05750905A2D006FF2837B7B159F1503BB8CD7C2D
Malicious:	false
Reputation:	low
Preview:	....................p.....!.........H...__PAGEZERO..............................................................__TEXT..........................................................__text..........__TEXT...................T......................................__stubs.........__TEXT...........r......(........r..............................__stub_helper...__TEXT..........,t..............,t..............................__gcc_except_tab__TEXT...........w...............w..............................__const.........__TEXT..................p.......................................__cstring.......__TEXT..........................................................__objc_classname__TEXT..........................................................__objc_methname.__TEXT..........................................................__objc_methtype.__TEXT..................".......................................__unwind_info...__TEXT..................<.......................................__eh_frame......__TEXT..

/Users/ben/Library/LaunchAgents/com.UserAgent.va.plist Download File
Process:	/bin/cp
File Type:	XML document text
Category:	dropped
Size (bytes):	701
Entropy (8bit):	5.033717036042742
Encrypted:	false
SSDEEP:	12:TMHdgo+tJVEdQiCXFM9/Wgpyc0vxKj9J+c76EbC/xKmn:2dfyiwUHccuOnc
MD5:	FBD1712A09CC868973BA6390B9B70262
SHA1:	357F943E071985D487A5F46FC784A8D67C0A3639
SHA-256:	38437521FC34602B3BC18729ABBFECEA7490435475F828D5C7B5342836AF797D
SHA-512:	F73B9353EB3D15E5497196609AF10259975D1D2CC9D4C17B2F9CC12EE9B13007ADDDF0407F22A5DD01F31AA264ED77077DFCBC96EE883F5C7D76141C221254C9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>Label</key>..<string>com.UserAgent.va</string>..<key>LimitLoadToSessionType</key>..<string>Aqua</string>..<key>ProgramArguments</key>..<array>...<string>/Users/ben/Library/Preferences/UserAgent/lib/UserAgent</string>...<string>-runMode</string>...<string>ifneeded</string>..</array>..<key>RunAtLoad</key>..<true/>..<key>StartInterval</key>..<integer>600</integer>..<key>ThrottleInterval</key>..<integer>2</integer>..<key>WorkingDirectory</key>..<string>/Users/ben/Library/Preferences/UserAgent/lib</string>.</dict>.</plist>.

/Users/ben/Library/Preferences/Tools/arch Download File
Process:	/bin/cp
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	23468
Entropy (8bit):	4.719207533160346
Encrypted:	false
SSDEEP:	192:r+TAQETSxjhjY18OcDMLgpMwQ/MfAuosCDC0snDCgsqHDrmsDDiEvox3DrztKrjL:r+TVEOxj2kEP9p
MD5:	1BBCB128D992EDA1632127C48D6DBFE2
SHA1:	C77A974C22037378B8FBA95DF155C6757290BEBA
SHA-256:	2E3D636FF79B418FD6745D6474F01F137B798BD84008A4CF5F82B38BE4E878E3
SHA-512:	EFFB99E4560D98EED299B3695F000EB29FDE3855D3177ED479C01C25248324FF000EBF21BC834C2FD51CEE5BBDFD19E9755D020806C302311D1FDF2456EB3D03
Malicious:	true
Reputation:	low
Preview:	.......................... .........H...__PAGEZERO..............................................................__TEXT...................@...............@......................__text..........__TEXT..........................................................__stubs.........__TEXT...........:...............:..............................__stub_helper...__TEXT..........$;..............$;..............................__const.........__TEXT..........P<......(.......P<..............................__objc_methname.__TEXT..........x<......}.......x<..............................__cstring.......__TEXT...........<...............<..............................__unwind_info...__TEXT...........<......P........<..............................__eh_frame......__TEXT..........P=..............P=......................................__DATA...........@...............@..............................__program_vars..__DATA...........@......(........@..............................__got...........__DATA..........

/Users/ben/Library/Preferences/Tools/at Download File
Process:	/bin/cp
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	14796
Entropy (8bit):	3.661123552351055
Encrypted:	false
SSDEEP:	96:x1hhFQAENdJrOrbPRK6gFyWh8X6E/It/rYnV/A26OqE5y/yMRWDRC6sqnFjfm+O:T/1HJKsWlhpgAjOte/01CULmn
MD5:	53D893D686EE7A1A820CA2E36171B03A
SHA1:	D1D75D8795DDE754165EC12CB38DEC0476E6062C
SHA-256:	D8A49E688F214553A7525BE96CADDDEC224DB19BAE3771D14083A2C4C45F28EB
SHA-512:	9F01BFA8C786D90398EFE4F78BF540151E77F501F714AEBCD9CF05973B9A181D7B104C231C4B010E4F9F33B073CD77F34A2927F7F5C86968E389FFEC64B47D8D
Malicious:	true
Reputation:	low
Preview:	.......................... .........H...__PAGEZERO..............................................................__TEXT................... ............... ......................__text..........__TEXT..........................................................__stubs.........__TEXT..........................................................__stub_helper...__TEXT..........h...............h...............................__const.........__TEXT..........h...............h...............................__cstring.......__TEXT..........l...............l...............................__objc_methname.__TEXT..........X...............X...............................__unwind_info...__TEXT.......... .......\....... ...............................__eh_frame......__TEXT..............................................................h...__DATA........... ............... ..............................__program_vars..__DATA........... ......(........ ..............................__nl_symbol_ptr.__DATA..........

/Users/ben/Library/Preferences/Tools/kAgent Download File
Process:	/bin/cp
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	67376
Entropy (8bit):	5.202077512589797
Encrypted:	false
SSDEEP:	768:AdFkvPbRdaxdk+yaJQq6kY98/MJAlnDhDu49kgOPUdmOgFCWSKMHGyJVDSP:coPudwo59Y9IM6rO8dmOgFFSK/yJZSP
MD5:	43F6382A5684330F071B329B3CEC69E9
SHA1:	D811E97461741E93813EECD8E5349772B1C0B001
SHA-256:	570CD76BF49CF52E0CB347A68BDCF0590B2EAECE134E1B1EBA7E8D66261BDBE6
SHA-512:	9C0C5930C36D87DCFF865EFCDD0B093F21EAD68D82EC64729351A859CE1ADC4B7C71560DBB72916494C8D04E05750905A2D006FF2837B7B159F1503BB8CD7C2D
Malicious:	true
Reputation:	low
Preview:	....................p.....!.........H...__PAGEZERO..............................................................__TEXT..........................................................__text..........__TEXT...................T......................................__stubs.........__TEXT...........r......(........r..............................__stub_helper...__TEXT..........,t..............,t..............................__gcc_except_tab__TEXT...........w...............w..............................__const.........__TEXT..................p.......................................__cstring.......__TEXT..........................................................__objc_classname__TEXT..........................................................__objc_methname.__TEXT..........................................................__objc_methtype.__TEXT..................".......................................__unwind_info...__TEXT..................<.......................................__eh_frame......__TEXT..

/Users/ben/Library/Preferences/UserAgent/lib/UserAgent Download File
Process:	/bin/cp
File Type:	Mach-O 64-bit executable
Category:	dropped
Size (bytes):	2068908
Entropy (8bit):	5.803802925411499
Encrypted:	false
SSDEEP:	24576:MwFVmcTJAQ81LGqIvawVSIHXJbchgLbmYnGVxhKfSWjxsvkEFkpiTe82EcnL8+7A://T6Iv9VuCGV+qC1EFTe8mHzU3HqBk
MD5:	3E4DE0EEEFD2E1C024B41A4222285F74
SHA1:	000830573FF24345D88EF7916F9745AFF5EE813D
SHA-256:	D599D7814ADBAB0F1442F5A10074E00F3A776CE183EA924ABCD6154F0D068BB4
SHA-512:	649B84818EE5EE5B275845402A7D144ABF14299B949AFAABDE42597E273A1A9507764FDB1A7BE13F750B510B15D74901C542B4457489D9AAB60C6430E13C3135
Malicious:	true
Yara Hits:	Rule: JoeSecurity_MACMA, Description: Yara detected MACMA aka CDDS, Source: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent, Author: Joe Security
Reputation:	low
Preview:	....................@.....!.........H...__PAGEZERO..............................................................__TEXT..........................................................__text..........__TEXT..........0...............0...............................__stubs.........__TEXT........................................................__stub_helper...__TEXT...........0...............0..............................__gcc_except_tab__TEXT...........:.......e.......:..............................__cstring.......__TEXT...................t......................................__const.........__TEXT.................../......................................__objc_methname.__TEXT...........E...............E..............................__objc_classname__TEXT..........vM......_.......vM..............................__objc_methtype.__TEXT...........M......=........M..............................__unwind_info...__TEXT...........Q.......9.......Q..............................__eh_frame......__TEXT..

/Users/ben/Library/Preferences/UserAgent/lib/data1/.tmp/1636717998 Download File
Process:	/Users/ben/Library/Preferences/UserAgent/lib/UserAgent
File Type:	IFF data, AIFF audio
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.1806220302188266
Encrypted:	false
SSDEEP:	3:lTC+4l3/lzu2Mhlll/:w+l2Mz
MD5:	FD5CF343252F1A790DF50573613C9C23
SHA1:	0C05B284343F8BA222D663F5CA3B19F6C8D81C8D
SHA-256:	4DE212577CB4E72820146913219253D9C16662CDDDF14146A417D32AD5EFCEA5
SHA-512:	21552BE6E89228FE7DD0D65687F7DD68945C929204FF4C5D413306F8BAB99418C03BD907E34C15A8990154BBB736EC943F276CCA9B0007A384944CA0F7A3DF27
Malicious:	true
Reputation:	low
Preview:	FORM....AIFFCOMM............@..D......FLLR....SSND............

/Users/ben/Library/Preferences/UserAgent/lib/my-ip.php Download File
Process:	/usr/bin/curl
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.794653473544342
Encrypted:	false
SSDEEP:	3:ZD3:Zj
MD5:	7B37A65DA30A55485B1FE5F6B124D4C6
SHA1:	664DA161DEAEA3C6C1B1D72E788C750B0A4EB4DD
SHA-256:	93AAC68DA7E7D83644060CFF1F5DE64B44D22DF8BCF53AD993AFAC895F708A6A
SHA-512:	D7A7515FDC055755335E1A4EADB2A0DD5708E3E9B597A5A1A5E8085A42D97E4764BF36C75391DAB75D056A0BD4F53B9B840BA6ACEC0DD90CC222EA8C6C8A3578
Malicious:	false
Reputation:	low
Preview:	{ip:"84.17.52.39"}

/Users/ben/start.sh Download File
Process:	/Users/ben/Desktop/installer_v2021
File Type:	ASCII text
Category:	dropped
Size (bytes):	148
Entropy (8bit):	4.5772907839830355
Encrypted:	false
SSDEEP:	3:LyURLWKEBBFrHGKHTM0MXQeCWKdILGLuRLIfXJ/NRLmSFrHGKHTM0MXQeCWKdIL+:LaFmEM0GQ1WKdILGyRuXJ/DZFmEM0GQb
MD5:	1E5356CCEB0D96A326548174009B03E8
SHA1:	F0C4D765A7E96DCE74FBFE23164C273C115A3C2C
SHA-256:	C5E48FC07D269337C6B9EC2F1DB51EA62697BD8CF8F5EF646D9CFE59F4427065
SHA-512:	65B3B8913488128FFC70099E462C12859EFD03AB3AB92AD6364E022948E1B37C96E816F5A2E3AD516975BD53FFF3B398B8F69D89376FBCB84B6D70DC3B4A0F8E
Malicious:	true
Reputation:	low
Preview:	launchctl unload -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist.launchctl load -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist.

/dev/null Download File
Process:	/Users/ben/Library/Preferences/Tools/kAgent
File Type:	ASCII text
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.416234402684466
Encrypted:	false
SSDEEP:	3:x2WwwWFKHTM0MYADyuGAWD7uRKjCegct:x2JwWFEM0UGiRKjC4t
MD5:	E7A79C419FEE850BBC797578B6AFDC18
SHA1:	D73965BD552DF7DFEFB7C34FC5A31AF0D3672816
SHA-256:	D22D9A83434BAC222693BF7A4359D02845C9D84325F5D83BC16647A8C6A5CBF5
SHA-512:	A141444E120E8C8685C7F3E6F14AC4E4119B10F678EA7D26552AC0BCAD0C3D8A94BAF78D80430BC9C1AB5BE5B7D0E38CCD9E90E2051FA107B5B152BB8B60AE83
Malicious:	false
Reputation:	low
Preview:	file is /Users/ben/Library/Preferences/UserAgent/lib/data2/1636717998.

/dev/ttys000 Download File
Process:	/usr/bin/who
File Type:	ASCII text
Category:	dropped
Size (bytes):	32
Entropy (8bit):	3.412230146650821
Encrypted:	false
SSDEEP:	3:6HbOIu+X5s:yv5s
MD5:	4B4D1E5F3ED3E9EF2E98765E7D344BB5
SHA1:	C6E9FA733969330F4631E0914566ED34577F4241
SHA-256:	DBC2A3046FC0D493A0120744D177D49984C93D3296CD5041723E1C0C5EC6B482
SHA-512:	97695E4A3DBCD132A9B13CC47865F5DE9393FC6AA56FF93FB852A67D51CDEDF7A5E4B8E6A68FC2882400B8A46E6059153E2878DB9516E9302D3B61D6D3C15725
Malicious:	false
Reputation:	low
Preview:	ben console Nov 12 12:43 .

/private/tmp/.112211334455997890-b8ZA Download File
Process:	/Users/ben/Library/Preferences/Tools/arch
File Type:	JPEG image data, JFIF standard 1.01
Category:	dropped
Size (bytes):	32392
Entropy (8bit):	7.39923733769483
Encrypted:	false
SSDEEP:	384:QxIg1i3B2CTBvCqvnaHTyWEV8+eGscSf2XzD19srzFeDKjp1ZeGBEKduXe:QqWix2pUnaiV8+eGtSfSUzFwKjo36Ye
MD5:	3B8F84A4EF145430E032354ECD899132
SHA1:	B10C40803CDE0582EB4A8B2FEDDEF26C0A5717C8
SHA-256:	9E7847D2A5F0021999B96E7CCA7F42EBA7FD4693105C3D55DE8CE441541EC6C7
SHA-512:	AB4EEFFFFB517379DF77839A4157361336D166193BBB0CE79EA927B6C157DF78AA8BD5B961C529E3D763CD9047AA59B7E3DE2973410CE77C81F150B4CF836E85
Malicious:	true
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%....................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C.......0..0D000D\DDDD\t\\\\\t.tttttt................................C."$$848`44`...........................................................P............?....)..G..F71..h..8....N6.0=NsF....w.........Y........x.).6;...QP...G..%.........E...$....P....?....I^..!.<?.2.....b..7d$....)....o.....A....Y.E._;r.q......s.A%.......5.u.'..........3.E.E...:.K...=q..r.T....e...Z..&..'b......?.{[:gs'.?

Static File Info

General
File type:	Mach-O 64-bit executable
Entropy (8bit):	5.759168878164395
TrID:	Mac OS X Mach-O 64bit Intel executable (20004/1) 100.00%
File name:	installer_v2021
File size:	2575107
MD5:	1daba393eee9d8bdaf645157dae83990
SHA1:	2303a9c0092f9b0ccac8536419ee48626a253f94
SHA256:	cf5edcff4053e29cb236d3ed1fe06ca93ae6f64f26e25117d68ee130b9bc60c8
SHA512:	7c1cbe4311a891e6098fe45e2412430d8da1849ff9e4d66425bf6d00366c8d707df33889f2897013b22a7690347e74aa340dcacbac9e79acf6b707a72a5bdbb8
SSDEEP:	49152:h1GZzr0vfu08/T6Iv9VuCGV+qC1EFTe8mHzU3HqBP:OZzr0vfu00eIv9VJGLEEF0TU3HqBP
File Content Preview:	..........................!.........H...__PAGEZERO..............................................................__TEXT...................@...............@......................__text..........__TEXT..........P...............P..............................

Static Mach Info

General Information for header 1
Endian:	<
Size:	64-bit
Architecture:	x86_64
Filetype:	execute
Nbr. of load commands:	16
Entry point:	0x100000F50

segment_command_64 aggregated: 4

Name	Value
segname	__PAGEZERO
vmaddr	0x0
vmsize	0x100000000
fileoff	0x0
filesize	0x0
maxprot	0x0
initprot	0x0
nsects	0
flags	0x0

Name

Value

segname

__TEXT

vmaddr

0x100000000

vmsize

0x54000

fileoff

0x0

filesize

0x54000

maxprot

0x7

initprot

0x5

nsects

flags

0x0

Datas

sectname	segname	addr	size	offset	entropy	align	reloff	nreloc	flags
__text	__TEXT	0x100000F50	0x484A8	0xF50	5.2459	0x4	0x0	0	0x80000400
__stubs	__TEXT	0x1000493F8	0x3A8	0x493F8	3.5139	0x1	0x0	0	0x80000408
__stub_helper	__TEXT	0x1000497A0	0x5F6	0x497A0	4.6455	0x2	0x0	0	0x80000400
__gcc_except_tab	__TEXT	0x100049D98	0x3A38	0x49D98	3.3254	0x2	0x0	0	0x0
__cstring	__TEXT	0x10004D7D0	0x73B	0x4D7D0	5.3063	0x0	0x0	0	0x2
__const	__TEXT	0x10004DF10	0x2C6	0x4DF10	2.9056	0x4	0x0	0	0x0
__unwind_info	__TEXT	0x10004E1D8	0x7C0	0x4E1D8	5.3136	0x2	0x0	0	0x0
__eh_frame	__TEXT	0x10004E998	0x5668	0x4E998	3.6983	0x3	0x0	0	0x0

Name

Value

segname

__DATA

vmaddr

0x100054000

vmsize

0x2000

fileoff

0x54000

filesize

0x2000

maxprot

0x7

initprot

0x3

nsects

flags

0x0

Datas

sectname	segname	addr	size	offset	entropy	align	reloff	nreloc	flags
__program_vars	__DATA	0x100054000	0x28	0x54000	1.9618	0x3	0x0	0	0x0
__got	__DATA	0x100054028	0xB8	0x54028	1.9957	0x3	0x0	0	0x6
__nl_symbol_ptr	__DATA	0x1000540E0	0x10	0x540E0	-0.0000	0x3	0x0	0	0x6
__la_symbol_ptr	__DATA	0x1000540F0	0x4E0	0x540F0	3.1229	0x3	0x0	0	0x7
__mod_init_func	__DATA	0x1000545D0	0x28	0x545D0	2.4593	0x3	0x0	0	0x9
__const	__DATA	0x100054600	0x618	0x54600	2.9056	0x4	0x0	0	0x0
__data	__DATA	0x100054C20	0x4D8	0x54C20	2.7702	0x4	0x0	0	0x0
__common	__DATA	0x1000550F8	0xB8	0x0	-0.0000	0x3	0x0	0	0x1
__bss	__DATA	0x1000551B0	0xF0	0x0	-0.0000	0x4	0x0	0	0x1

Name	Value
segname	__LINKEDIT
vmaddr	0x100056000
vmsize	0xB99C
fileoff	0x56000
filesize	0xB99C
maxprot	0x7
initprot	0x1
nsects	0
flags	0x0

dyld_info_command aggregated: 1

Name	Value
rebase_off	352256
rebase_size	152
bind_off	352408
bind_size	1552
weak_bind_off	353960
weak_bind_size	776
lazy_bind_off	354736
lazy_bind_size	4440
export_off	359176
export_size	12416

symtab_command aggregated: 1

Name	Value
symoff	372344
nsyms	518
stroff	381980
strsize	17792

dysymtab_command aggregated: 1

Name	Value
ilocalsym	0
nlocalsym	1
iextdefsym	1
nextdefsym	335
iundefsym	336
nundefsym	182
tocoff	0
ntoc	0
modtaboff	0
nmodtab	0
extrefsymoff	0
nextrefsyms	0
indirectsymoff	380632
nindirectsyms	337
extreloff	0
nextrel	0
locreloff	0
nlocrel	0

dylinker_command aggregated: 1

Name

Value

name

Datas

/usr/lib/dyld

uuid_command aggregated: 1

Name	Value
uuid	b'\xb0\xea\xd3\xfb\xe7\xc26A\xadk\xb2\xcds\x9c\x07\n'

version_min_command aggregated: 1

Name	Value
version	657152
sdk	658432

thread_command aggregated: 1

Name	Value
flavor	4
count	42

dylib_command aggregated: 3

Name

Value

name

timestamp

Thu Jan 1 01:00:02 1970

current_version

1238.0.0

compatibility_version

1.0.0

Datas

/usr/lib/libSystem.B.dylib

Name

Value

name

timestamp

Thu Jan 1 01:00:02 1970

current_version

1.0.0

compatibility_version

1.0.0

Datas

/usr/lib/libpcap.A.dylib

Name

Value

name

timestamp

Thu Jan 1 01:00:02 1970

current_version

307.4.0

compatibility_version

1.0.0

Datas

/usr/lib/libc++.1.dylib

linkedit_data_command aggregated: 2

Name	Value
dataoff	371592
datasize	752

Name	Value
dataoff	372344
datasize	0

Internal Symbols

_NXArgc

_NXArgv

__DefaultRuneLocale

__INIT_GetRunTime_fakeobj

__Unwind_Resume

__Z10Dec2Octstrt

__Z10DeleteFileRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z10FileExistsRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z10GetMacAddrNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z10GetMacAddrj

__Z10GetRunTimePjS_

__Z10GetSysTimePjS_S_S_S_S_S_

__Z10HTMLEncodeRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z10IfStrIsNumPKc

__Z10IfStrIsNumRNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z10Octstr2DecPKc

__Z10PrintErrorPKcP7__sFILE

__Z10net_printfbPKcz

__Z11CopyOneFileRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_

__Z11GetPeerHostj

__Z11GetPeerPortj

__Z11HexStr2CharPKh

__Z11IsBigEndianv

__Z11IsNoBuffersv

__Z11SplitStringRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_RNS_6vectorIS5_NS3_IS5_EEEEb

__Z12GetCurAbsDirv

__Z12GetFileInDirRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z12GetHexStringPhib

__Z12IsStrEndWithRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_b

__Z12IsWouldBlockv

__Z12PrintHex2BufPhi

__Z12SetBlockModejb

__Z12SetReuseAddrjb

__Z12WaitWritablejii

__Z12bytes_swap16Pc

__Z12bytes_swap32Pc

__Z12bytes_swap64Pc

__Z12close_all_fdRKNSt3__16vectorIiNS_9allocatorIiEEEE

__Z12close_all_fdb

__Z12fsync_commiti

__Z13CreateDirHierRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z13GetDayOfMonthii

__Z13GetSocketTypej

__Z13GetSysMemInfoRiS_

__Z13HexString2BufRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEPi

__Z13IfStrIsDoublePKc

__Z13IsInterruptedv

__Z13SetDontLingerj

__Z13SetTCPNoDelayj

__Z13StringReplaceRNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEERKS5_S8_b

__Z13_SleepMS_Unixjj

__Z13clock_gettimeiP8timespec

__Z14ConnectTimeoutjPK8sockaddrii

__Z14GetLowerStringPc

__Z14GetLowerStringRNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z14GetSubDirInDirRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z14GetUpperStringPc

__Z14GetUpperStringRNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z14IsNotConnectedv

__Z14IsStrBeginWithRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_b

__Z14PowerOnFromNetNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES5_S5_

__Z14WaitForUDPDataiPPcPii

__Z15CreateTcpSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi

__Z15IsConnectFailedv

__Z15ParseArgsStringRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEERNS_6vectorIS5_NS3_IS5_EEEE

__Z16GetBroadcastAddrRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_

__Z16IsConnectionLostv

__Z16_GetRunTime_UNIXPjS_

__Z16net_printf_errorbPKc

__Z17GetAllSubDirInDirRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEERNS_6vectorIS5_NS3_IS5_EEEE

__Z17GetRecvBufferSizejRi

__Z17GetSendBufferSizejRi

__Z17GetSocketBindPortj

__Z17KillProcessByNameRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z17SetRecvBufferSizeji

__Z17SetSendBufferSizeji

__Z18set_print_log_pathRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z19GetFileNameFromPathRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z19GetPathNameFromPathRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z19IsAcceptInterruptedv

__Z19IsConnectInProgressv

__Z19IsConnectionRefusedv

__Z20close_net_print_filev

__Z21CreateTcpListenSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi

__Z21GetFileInDirAndSubDirRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEERNS_6vectorIS5_NS3_IS5_EEEE

__Z24force_unlock_print_mutexv

__Z25get_net_print_stdout_flagv

__Z27ConnectTimeoutWithInterruptjPK8sockaddriiPi

__Z2T0PKc

__Z2T0Pc

__Z2T0RNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z2T1PKc

__Z2T1Pc

__Z2T1RNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z2T2PKc

__Z2T2Pc

__Z2T2RNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z5IsDirRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z5fRandffi

__Z5iRandii

__Z6SendNBjRPcRibPK8sockaddr

__Z7GetIP32RKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z7SleepMSjj

__Z8FileSizeRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z8GetMAC48RKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEPh

__Z8PrintHexPhiP7__sFILE

__Z8toStringNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEPKc

__Z8toStringPcPKc

__Z8toStringcPKc

__Z8toStringdPKc

__Z8toStringfPKc

__Z8toStringiPKc

__Z8toStringjPKc

__Z8toStringlPKc

__Z8toStringmPKc

__Z8toStringsPKc

__Z8toStringtPKc

__Z8toStringxPKc

__Z9DeleteDirRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z9GetAbsDirRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__Z9GetHostIPRNSt3__16vectorINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS4_IS6_EEEES9_

__Z9TrimSpacePci

__Z9TrimSpaceRNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi

__Z9ptsname_riPcm

__Z9set_printbRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEb

__ZN11CProcRunner10GetTimeOutEv

__ZN11CProcRunner10SetTimeOutEi

__ZN11CProcRunner11GetExitCodeEv

__ZN11CProcRunner12GetStartTimeEv

__ZN11CProcRunner12TimerHandlerEi

__ZN11CProcRunner13SetCloseAllFDEb

__ZN11CProcRunner13SetShowWindowEb

__ZN11CProcRunner13TerminateTreeERNSt3__13mapIiNS0_4listIiNS0_9allocatorIiEEEENS0_4lessIiEENS3_INS0_4pairIKiS5_EEEEEEi

__ZN11CProcRunner14SetErrorOutputEb

__ZN11CProcRunner16SetWorkDirectoryERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZN11CProcRunner16TerminateWithPIDEi

__ZN11CProcRunner24SetAdvanceOutputCallbackEPFvPS_PciE

__ZN11CProcRunner5InputERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZN11CProcRunner6GetCmdEv

__ZN11CProcRunner6GetPIDEv

__ZN11CProcRunner6SetEnvERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_

__ZN11CProcRunner9AddOutputEPci

__ZN11CProcRunner9GetOutputEv

__ZN11CProcRunner9SetOutputEb

__ZN11CProcRunner9TerminateEv

__ZN11CProcRunner9ptym_openEPci

__ZN11CProcRunner9ptys_openEiPc

__ZN11CProcRunnerC1EP19CProcRunnerNotifyerRKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE

__ZN11CProcRunnerC1EiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZN11CProcRunnerC2EP19CProcRunnerNotifyerRKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE

__ZN11CProcRunnerC2EiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZN11CProcRunnerD0Ev

__ZN11CProcRunnerD1Ev

__ZN11CProcRunnerD2Ev

__ZN27CProcRunnerTimoutCheckerThr12TimerHandlerEi

__ZN27CProcRunnerTimoutCheckerThrC1EiiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZN27CProcRunnerTimoutCheckerThrC2EiiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

__ZN3YYZ13CInputHandler9GetThreadEv

__ZN3YYZ13CInputHandlerC2Ev

__ZN3YYZ13CInputHandlerD0Ev

__ZN3YYZ13CInputHandlerD1Ev

__ZN3YYZ13CInputHandlerD2Ev

__ZN3YYZ13CTimerHandler9GetThreadEv

__ZN3YYZ13CTimerHandlerC2Ev

__ZN3YYZ13CTimerHandlerD0Ev

__ZN3YYZ13CTimerHandlerD1Ev

__ZN3YYZ13CTimerHandlerD2Ev

__ZN3YYZ13ThreadControl11setpriorityEi

__ZN3YYZ13ThreadControl4exitEv

__ZN3YYZ13ThreadControl4joinEv

__ZN3YYZ13ThreadControl5sleepER7timeval

__ZN3YYZ13ThreadControl5yieldEv

__ZN3YYZ13ThreadControl6detachEv

__ZN3YYZ13ThreadControlC1EP17_opaque_pthread_t

__ZN3YYZ13ThreadControlC1ERKS0_

__ZN3YYZ13ThreadControlC1Ev

__ZN3YYZ13ThreadControlC2EP17_opaque_pthread_t

__ZN3YYZ13ThreadControlC2ERKS0_

__ZN3YYZ13ThreadControlC2Ev

__ZN3YYZ13ThreadControlaSERKS0_

__ZN3YYZ19CLoopTriggerHandler12InputHandlerEiPKvi

__ZN3YYZ19NullHandleException5_nameE

__ZN3YYZ19NullHandleExceptionC1EPKci

__ZN3YYZ19NullHandleExceptionC2EPKci

__ZN3YYZ21ThreadLockedException5_nameE

__ZN3YYZ21ThreadLockedExceptionC1EPKci

__ZN3YYZ21ThreadLockedExceptionC2EPKci

__ZN3YYZ22ThreadStartedException5_nameE

__ZN3YYZ22ThreadStartedExceptionC1EPKci

__ZN3YYZ22ThreadStartedExceptionC2EPKci

__ZN3YYZ22ThreadSyscallException5_nameE

__ZN3YYZ22ThreadSyscallExceptionC1EPKcii

__ZN3YYZ22ThreadSyscallExceptionC2EPKcii

__ZN3YYZ25ThreadNotStartedException5_nameE

__ZN3YYZ25ThreadNotStartedExceptionC1EPKci

__ZN3YYZ25ThreadNotStartedExceptionC2EPKci

__ZN3YYZ6Thread10SendNotifyEiPKci

__ZN3YYZ6Thread11GetExitFlagEv

__ZN3YYZ6Thread11RemoveInputEiPKNS_13CInputHandlerE

__ZN3YYZ6Thread11RemoveTimerEiPKNS_13CTimerHandlerE

__ZN3YYZ6Thread11SocketErrorEPKcP7__sFILE

__ZN3YYZ6Thread11setblock_fdEiiPl

__ZN3YYZ6Thread12IsTimerExistEiPNS_13CTimerHandlerE

__ZN3YYZ6Thread12RemoveNotifyEiPNS_13CInputHandlerE

__ZN3YYZ6Thread14GetUDPFromAddrEv

__ZN3YYZ6Thread14WaitFor_selectERi

__ZN3YYZ6Thread15AddNotifyOnPortEiPNS_13CInputHandlerE

__ZN3YYZ6Thread15_ProcessTimeOutEv

__ZN3YYZ6Thread16GetThreadRunTimeEPjS1_

__ZN3YYZ6Thread16SendNotifyToPortEiPKci

__ZN3YYZ6Thread16_GetLargestInputEv

__ZN3YYZ6Thread16_GetNearestTimerERjS1_

__ZN3YYZ6Thread19InitTriggerSocketFDEv

__ZN3YYZ6Thread20_ProcessInput_selectER6fd_set

__ZN3YYZ6Thread3runEv

__ZN3YYZ6Thread4ExitEv

__ZN3YYZ6Thread5startEm

__ZN3YYZ6Thread7WaitForERi

__ZN3YYZ6Thread8AddInputEiPNS_13CInputHandlerE

__ZN3YYZ6Thread8AddTimerEiiPNS_13CTimerHandlerE

__ZN3YYZ6Thread9AddNotifyEPNS_13CInputHandlerEPNSt3__16vectorIiNS3_9allocatorIiEEEE

__ZN3YYZ6Thread9_AddInputEiPNS_13CInputHandlerE

__ZN3YYZ6Thread9_AddTimerEiiPNS_13CTimerHandlerE

__ZN3YYZ6ThreadC1Ev

__ZN3YYZ6ThreadC2Ev

__ZN3YYZ6ThreadD0Ev

__ZN3YYZ6ThreadD1Ev

__ZN3YYZ6ThreadD2Ev

__ZN3YYZ9Exception5_nameE

__ZN3YYZ9ExceptionC1EPKci

__ZN3YYZ9ExceptionC1Ev

__ZN3YYZ9ExceptionC2EPKci

__ZN3YYZ9ExceptionC2Ev

__ZN3YYZ9ExceptionD0Ev

__ZN3YYZ9ExceptionD1Ev

__ZN3YYZ9ExceptionD2Ev

__ZN3YYZlsERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEERKNS_9ExceptionE

__ZNK3YYZ13ThreadControl2idEv

__ZNK3YYZ13ThreadControl7isAliveEv

__ZNK3YYZ13ThreadControleqERKS0_

__ZNK3YYZ13ThreadControlltERKS0_

__ZNK3YYZ13ThreadControlneERKS0_

__ZNK3YYZ19NullHandleException8yyz_nameEv

__ZNK3YYZ19NullHandleException9yyz_cloneEv

__ZNK3YYZ19NullHandleException9yyz_throwEv

__ZNK3YYZ21ThreadLockedException8yyz_nameEv

__ZNK3YYZ21ThreadLockedException9yyz_cloneEv

__ZNK3YYZ21ThreadLockedException9yyz_throwEv

__ZNK3YYZ22ThreadStartedException8yyz_nameEv

__ZNK3YYZ22ThreadStartedException9yyz_cloneEv

__ZNK3YYZ22ThreadStartedException9yyz_throwEv

__ZNK3YYZ22ThreadSyscallException5errorEv

__ZNK3YYZ22ThreadSyscallException8yyz_nameEv

__ZNK3YYZ22ThreadSyscallException9yyz_cloneEv

__ZNK3YYZ22ThreadSyscallException9yyz_printERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE

__ZNK3YYZ22ThreadSyscallException9yyz_throwEv

__ZNK3YYZ25ThreadNotStartedException8yyz_nameEv

__ZNK3YYZ25ThreadNotStartedException9yyz_cloneEv

__ZNK3YYZ25ThreadNotStartedException9yyz_throwEv

__ZNK3YYZ6Thread16getThreadControlEv

__ZNK3YYZ6Thread2idEv

__ZNK3YYZ6ThreadeqERKS0_

__ZNK3YYZ6ThreadltERKS0_

__ZNK3YYZ6ThreadneERKS0_

__ZNK3YYZ9Exception8yyz_fileEv

__ZNK3YYZ9Exception8yyz_lineEv

__ZNK3YYZ9Exception8yyz_nameEv

__ZNK3YYZ9Exception9yyz_cloneEv

__ZNK3YYZ9Exception9yyz_printERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE

__ZNK3YYZ9Exception9yyz_throwEv

__ZNKSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEPKc

__ZNKSt3__120__vector_base_commonILb1EE20__throw_length_errorEv

__ZNKSt3__121__basic_string_commonILb1EE20__throw_length_errorEv

__ZNKSt3__16locale9use_facetERNS0_2idE

__ZNKSt3__18ios_base6getlocEv

__ZNSt3__111char_traitsIcE2eqEcc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5eraseEmm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcmm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEmc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKcm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6resizeEmc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEmmPKcm

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9push_backEc

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_mmRKS4_

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEED1Ev

__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSERKS5_

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE3putEc

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE5flushEv

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE6sentryC1ERS3_

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE6sentryD1Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED0Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED1Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED2Ev

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEi

__ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEt

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE4syncEv

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE5imbueERKNS_6localeE

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE5uflowEv

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6setbufEPcl

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6xsgetnEPcl

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6xsputnEPKcl

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE9showmanycEv

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEEC2Ev

__ZNSt3__115basic_streambufIcNS_11char_traitsIcEEED2Ev

__ZNSt3__14coutE

__ZNSt3__15ctypeIcE2idE

__ZNSt3__16localeD1Ev

__ZNSt3__18ios_base33__set_badbit_and_consider_rethrowEv

__ZNSt3__18ios_base4initEPv

__ZNSt3__18ios_base5clearEj

__ZNSt3__19basic_iosIcNS_11char_traitsIcEEED2Ev

__ZSt9terminatev

__ZTC11CProcRunner0_N3YYZ6ThreadE

__ZTC27CProcRunnerTimoutCheckerThr0_N3YYZ6ThreadE

__ZTI11CProcRunner

__ZTI19CReadOutputThrForPS

__ZTI27CProcRunnerTimoutCheckerThr

__ZTI27CReadOutputThrForProcRunner

__ZTIN3YYZ11noncopyableE

__ZTIN3YYZ13CInputHandlerE

__ZTIN3YYZ13CTimerHandlerE

__ZTIN3YYZ19CLoopTriggerHandlerE

__ZTIN3YYZ19NullHandleExceptionE

__ZTIN3YYZ21ThreadLockedExceptionE

__ZTIN3YYZ22ThreadStartedExceptionE

__ZTIN3YYZ22ThreadSyscallExceptionE

__ZTIN3YYZ25ThreadNotStartedExceptionE

__ZTIN3YYZ6SharedE

__ZTIN3YYZ6ThreadE

__ZTIN3YYZ9ExceptionE

__ZTINSt3__113basic_ostreamIcNS_11char_traitsIcEEEE

__ZTINSt3__115basic_streambufIcNS_11char_traitsIcEEEE

__ZTINSt3__115basic_stringbufIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTINSt3__119basic_ostringstreamIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTS11CProcRunner

__ZTS19CReadOutputThrForPS

__ZTS27CProcRunnerTimoutCheckerThr

__ZTS27CReadOutputThrForProcRunner

__ZTSN3YYZ11noncopyableE

__ZTSN3YYZ13CInputHandlerE

__ZTSN3YYZ13CTimerHandlerE

__ZTSN3YYZ19CLoopTriggerHandlerE

__ZTSN3YYZ19NullHandleExceptionE

__ZTSN3YYZ21ThreadLockedExceptionE

__ZTSN3YYZ22ThreadStartedExceptionE

__ZTSN3YYZ22ThreadSyscallExceptionE

__ZTSN3YYZ25ThreadNotStartedExceptionE

__ZTSN3YYZ6SharedE

__ZTSN3YYZ6ThreadE

__ZTSN3YYZ9ExceptionE

__ZTSNSt3__115basic_stringbufIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTSNSt3__119basic_ostringstreamIcNS_11char_traitsIcEENS_9allocatorIcEEEE

__ZTT11CProcRunner

__ZTT27CProcRunnerTimoutCheckerThr

__ZTTN3YYZ6ThreadE

__ZTV11CProcRunner

__ZTV27CProcRunnerTimoutCheckerThr

__ZTVN10__cxxabiv117__class_type_infoE

__ZTVN10__cxxabiv120__si_class_type_infoE

__ZTVN10__cxxabiv121__vmi_class_type_infoE

__ZTVN3YYZ13CInputHandlerE

__ZTVN3YYZ13CTimerHandlerE

__ZTVN3YYZ19CLoopTriggerHandlerE

__ZTVN3YYZ19NullHandleExceptionE

__ZTVN3YYZ21ThreadLockedExceptionE

__ZTVN3YYZ22ThreadStartedExceptionE

__ZTVN3YYZ22ThreadSyscallExceptionE

__ZTVN3YYZ25ThreadNotStartedExceptionE

__ZTVN3YYZ6ThreadE

__ZTVN3YYZ9ExceptionE

__ZTVNSt3__18ios_baseE

__ZTVNSt3__19basic_iosIcNS_11char_traitsIcEEEE

__ZThn184_N11CProcRunner12TimerHandlerEi

__ZThn184_N11CProcRunnerD0Ev

__ZThn184_N11CProcRunnerD1Ev

__ZThn184_N27CProcRunnerTimoutCheckerThr12TimerHandlerEi

__ZTv0_n24_N11CProcRunnerD0Ev

__ZTv0_n24_N11CProcRunnerD1Ev

__ZTv0_n24_N3YYZ6ThreadD0Ev

__ZTv0_n24_N3YYZ6ThreadD1Ev

__ZTv0_n24_NSt3__113basic_ostreamIcNS_11char_traitsIcEEED0Ev

__ZTv0_n24_NSt3__113basic_ostreamIcNS_11char_traitsIcEEED1Ev

__ZdaPv

__ZdlPv

__Znam

__Znwm

___bzero

___cxa_allocate_exception

___cxa_atexit

___cxa_begin_catch

___cxa_call_unexpected

___cxa_end_catch

___cxa_free_exception

___cxa_pure_virtual

___cxa_throw

___error

___gxx_personality_v0

___maskrune

___progname

___stack_chk_fail

___stack_chk_guard

___stderrp

___stdinp

___tolower

___toupper

__mh_execute_header

_atof

_atoi

_bind

_chdir

_chmod

_close

_closedir

_connect

_dup2

_environ

_execlp

_execvp

_exit

_fclose

_fcntl

_fflush

_fileno

_fopen

_fork

_fprintf

_fread

_free

_fseek

_fstat$INODE64

_fsync

_ftell

_fwrite

_getcwd

_getpeername

_getrlimit

_getsockname

_getsockopt

_gettimeofday

_getuid

_grantpt

_inet_addr

_inet_ntoa

_ioctl

_kill

_listen

_localtime_r

_lseek

_mach_absolute_time

_mach_timebase_info

_malloc

_memcmp

_memcpy

_memset

_mkdir

_nanosleep

_open

_opendir$INODE64

_pcap_findalldevs

_perror

_pipe

_printf

_pthread_attr_init

_pthread_attr_setstacksize

_pthread_cancel

_pthread_create

_pthread_detach

_pthread_equal

_pthread_getschedparam

_pthread_join

_pthread_mutex_destroy

_pthread_mutex_init

_pthread_mutex_lock

_pthread_mutex_unlock

_pthread_mutexattr_destroy

_pthread_mutexattr_init

_pthread_mutexattr_settype

_pthread_self

_pthread_setschedparam

_putenv

_rand

_read

_readdir$INODE64

_realloc

_recvfrom

_rmdir

_round

_sched_yield

_select$1050

_send

_sendto

_setsockopt

_sleep

_socket

_sprintf

_srand

_sscanf

_stat$INODE64

_strcpy

_strerror

_strlen

_strstr

_system

_time

_unlink

_unlockpt

_usleep

_vfprintf

_vprintf

_waitpid

_write

dyld_stub_binder

radr://5614542

start

External symbols