Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
l.elf

Overview

General Information

Sample name:l.elf
Analysis ID:1584344
MD5:b32a6c58a36557b105d4367d22a82955
SHA1:869e605dae3b713b37ebfd6e9bebf42f5236b275
SHA256:3698dbc2248139d92bd1926473d62cf0725e98aca0e53559135a1a03ff3eca29
Tags:elfuser-abuse_ch
Infos:

Detection

Gafgyt
Score:68
Range:0 - 100
Whitelisted:false

Signatures

Multi AV Scanner detection for submitted file
Yara detected Gafgyt
Connects to many ports of the same IP (likely port scanning)
Contains symbols with names commonly found in malware
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1584344
Start date and time:2025-01-05 08:51:35 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 20s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:l.elf
Detection:MAL
Classification:mal68.spre.troj.linELF@0/0@2/0

Runtime Messages

Command:/tmp/l.elf
PID:5482
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
gosh that chinese family at the other table sure ate alot
Standard Error:

Process Tree

  • system is lnxubuntu20
  • l.elf (PID: 5482, Parent: 5408, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/l.elf
    • l.elf New Fork (PID: 5485, Parent: 5482)
    • l.elf New Fork (PID: 5486, Parent: 5482)
      • l.elf New Fork (PID: 5489, Parent: 5486)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
l.elfJoeSecurity_GafgytYara detected GafgytJoe Security

    Suricata Signatures

    ⊘No Suricata rule has matched

    Joe Sandbox Signatures

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Multi AV Scanner detection for submitted file
    Source: l.elfVirustotal: Detection: 55%Perma Link
    Source: l.elfReversingLabs: Detection: 57%

    Spreading

    barindex
    Opens /proc/net/* files useful for finding connected devices and routers
    Source: /tmp/l.elf (PID: 5482)Opens: /proc/net/routeJump to behavior

    Networking

    barindex
    Connects to many ports of the same IP (likely port scanning)
    Source: global trafficTCP traffic: 195.133.52.175 ports 65489,4,5,6,8,9
    Source: global trafficTCP traffic: 192.168.2.13:41730 -> 195.133.52.175:65489
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

    System Summary

    barindex
    Contains symbols with names commonly found in malware
    Source: ELF static info symbol of initial sampleName: vseattack
    Source: classification engineClassification label: mal68.spre.troj.linELF@0/0@2/0
    Source: l.elfELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
    Source: l.elfELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
    Source: l.elfELF static info symbol of initial sample: libc/string/sh/sh4/memcpy.S
    Source: l.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/crt1.S
    Source: l.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/crti.S
    Source: l.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/crtn.S
    Source: l.elfELF static info symbol of initial sample: libc/sysdeps/linux/sh/vfork.S
    Source: /tmp/l.elf (PID: 5482)Queries kernel information via 'uname': Jump to behavior
    Source: l.elf, 5482.1.00007ffc939fd000.00007ffc93a1e000.rw-.sdmp, l.elf, 5485.1.00007ffc939fd000.00007ffc93a1e000.rw-.sdmp, l.elf, 5486.1.00007ffc939fd000.00007ffc93a1e000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sh4
    Source: l.elf, 5482.1.000055f243f5b000.000055f243fe0000.rw-.sdmp, l.elf, 5485.1.000055f243f5b000.000055f243fe0000.rw-.sdmp, l.elf, 5486.1.000055f243f5b000.000055f243fe0000.rw-.sdmpBinary or memory string: U5!/etc/qemu-binfmt/sh4
    Source: l.elf, 5482.1.000055f243f5b000.000055f243fe0000.rw-.sdmp, l.elf, 5485.1.000055f243f5b000.000055f243fe0000.rw-.sdmp, l.elf, 5486.1.000055f243f5b000.000055f243fe0000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sh4
    Source: l.elf, 5482.1.00007ffc939fd000.00007ffc93a1e000.rw-.sdmp, l.elf, 5485.1.00007ffc939fd000.00007ffc93a1e000.rw-.sdmp, l.elf, 5486.1.00007ffc939fd000.00007ffc93a1e000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-sh4/tmp/l.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/l.elf

    Stealing of Sensitive Information

    barindex
    Yara detected Gafgyt
    Source: Yara matchFile source: l.elf, type: SAMPLE

    Remote Access Functionality

    barindex
    Yara detected Gafgyt
    Source: Yara matchFile source: l.elf, type: SAMPLE

    Mitre Att&ck Matrix

    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
    Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume AccessOS Credential Dumping11
    Security Software Discovery    		Remote ServicesData from Local System1
    Non-Standard Port    		Exfiltration Over Other Network MediumAbuse Accessibility Features
    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
    Remote System Discovery    		Remote Desktop ProtocolData from Removable Media1
    Non-Application Layer Protocol    		Exfiltration Over BluetoothNetwork Denial of Service
    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
    Application Layer Protocol    		Automated ExfiltrationData Encrypted for Impact

    Malware Configuration

    ⊘No configs have been found

    Behavior Graph

    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Number of created Files
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1584344 Sample: l.elf Startdate: 05/01/2025 Architecture: LINUX Score: 68 17 195.133.52.175, 41730, 41732, 41734 FLEX-ASRU Russian Federation 2->17 19 daisy.ubuntu.com 2->19 21 Multi AV Scanner detection for submitted file 2->21 23 Yara detected Gafgyt 2->23 25 Connects to many ports of the same IP (likely port scanning) 2->25 27 Contains symbols with names commonly found in malware 2->27 8 l.elf 2->8         started        signatures3 process4 signatures5 29 Opens /proc/net/* files useful for finding connected devices and routers 8->29 11 l.elf 8->11         started        13 l.elf 8->13         started        process6 process7 15 l.elf 11->15         started       

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    l.elf56%VirustotalBrowse
    l.elf58%ReversingLabsLinux.Backdoor.Bashlite

    Dropped Files

    ⊘No Antivirus matches

    Domains

    ⊘No Antivirus matches

    URLs

    ⊘No Antivirus matches

    Domains and IPs

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    daisy.ubuntu.com
    		162.213.35.24
    		truefalse
      		high

      World Map of Contacted IPs

      • No. of IPs < 25%
      • 25% < No. of IPs < 50%
      • 50% < No. of IPs < 75%
      • 75% < No. of IPs

      Public IPs

      IPDomainCountryFlagASNASN NameMalicious
      195.133.52.175
      		unknownRussian Federation
      		21453FLEX-ASRUtrue

      Joe Sandbox View / Context

      IPs

      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
      195.133.52.175c.elfGet hashmaliciousGafgytBrowse
        e.elfGet hashmaliciousGafgytBrowse
          x.elfGet hashmaliciousGafgytBrowse
            a.elfGet hashmaliciousGafgytBrowse
              i.elfGet hashmaliciousGafgytBrowse
                176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse

                  Domains

                  MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                  daisy.ubuntu.come.elfGet hashmaliciousGafgytBrowse
                  • 162.213.35.24
                  x.elfGet hashmaliciousGafgytBrowse
                  • 162.213.35.24
                  a.elfGet hashmaliciousGafgytBrowse
                  • 162.213.35.25
                  la.bot.powerpc.elfGet hashmaliciousMiraiBrowse
                  • 162.213.35.25
                  spc.elfGet hashmaliciousMiraiBrowse
                  • 162.213.35.25
                  176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse
                  • 162.213.35.25
                  la.bot.arm7.elfGet hashmaliciousMiraiBrowse
                  • 162.213.35.25
                  arm5.elfGet hashmaliciousMiraiBrowse
                  • 162.213.35.24
                  main.arm6.elfGet hashmaliciousMiraiBrowse
                  • 162.213.35.25
                  fuckunix.arm5.elfGet hashmaliciousMiraiBrowse
                  • 162.213.35.24

                  ASNs

                  MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                  FLEX-ASRUc.elfGet hashmaliciousGafgytBrowse
                  • 195.133.52.175
                  e.elfGet hashmaliciousGafgytBrowse
                  • 195.133.52.175
                  x.elfGet hashmaliciousGafgytBrowse
                  • 195.133.52.175
                  a.elfGet hashmaliciousGafgytBrowse
                  • 195.133.52.175
                  17360626254f6ab0798f0d71fe81e2d058a575b873a7088f40695d7fd8031d0961d3a3694a780.dat-decoded.exeGet hashmaliciousRemcosBrowse
                  • 195.133.78.18
                  Tax_Refund_Claim_2024_Australian_Taxation_Office.jsGet hashmaliciousRemcosBrowse
                  • 195.133.78.18
                  i.elfGet hashmaliciousGafgytBrowse
                  • 195.133.52.175
                  176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse
                  • 195.133.52.175
                  2.elfGet hashmaliciousUnknownBrowse
                  • 94.253.22.15
                  linux_i386.elfGet hashmaliciousUnknownBrowse
                  • 195.133.11.40

                  JA3 Fingerprints

                  ⊘No context

                  Dropped Files

                  ⊘No context

                  Created / dropped Files

                  ⊘No created / dropped files found

                  Static File Info

                  General

                  File type:ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, not stripped
                  Entropy (8bit):6.674119343919075
                  TrID:
                  • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                  File name:l.elf
                  File size:106'142 bytes
                  MD5:b32a6c58a36557b105d4367d22a82955
                  SHA1:869e605dae3b713b37ebfd6e9bebf42f5236b275
                  SHA256:3698dbc2248139d92bd1926473d62cf0725e98aca0e53559135a1a03ff3eca29
                  SHA512:461302d82e9183d19f50d2521ecbe904915923a2a67aeefd4d9552c13310758466af8781b60fbd67f8c70c0d8dc824ee6c03de99bb4beabbe850234514fe9f73
                  SSDEEP:3072:KYOWqTkPYfBCo4XfszcD/Ge0mmPQcUbwKnFdRe:KYOpIwpGsICe0mmPQcUbwKnFdRe
                  TLSH:0AA3188798A59FB7C085AAB169BB49300752AD501F1F1A997139BAF4033F4CEB40FF64
                  File Content Preview:.ELF..............*.......@.4....F......4. ...(...............@...@..6...6...............6...6B..6B.....,h..........Q.td............................././"O.n........#.*@........#.*@.....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

                  Static ELF Info

                  ELF header

                  Class:ELF32
                  Data:2's complement, little endian
                  Version:1 (current)
                  Machine:<unknown>
                  Version Number:0x1
                  Type:EXEC (Executable file)
                  OS/ABI:UNIX - System V
                  ABI Version:0
                  Entry Point Address:0x4001a0
                  Flags:0x9
                  ELF Header Size:52
                  Program Header Offset:52
                  Program Header Size:32
                  Number of Program Headers:3
                  Section Header Offset:83688
                  Section Header Size:40
                  Number of Section Headers:16
                  Header String Table Index:13

                  Sections

                  NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                  NULL0x00x00x00x00x0000
                  .initPROGBITS0x4000940x940x300x00x6AX004
                  .textPROGBITS0x4000e00xe00x10da00x00x6AX0032
                  .finiPROGBITS0x410e800x10e800x240x00x6AX004
                  .rodataPROGBITS0x410ea40x10ea40x28300x00x2A004
                  .eh_framePROGBITS0x4136d40x136d40x40x00x2A004
                  .ctorsPROGBITS0x4236d80x136d80x80x00x3WA004
                  .dtorsPROGBITS0x4236e00x136e00x80x00x3WA004
                  .jcrPROGBITS0x4236e80x136e80x40x00x3WA004
                  .dataPROGBITS0x4236ec0x136ec0x3b00x00x3WA004
                  .gotPROGBITS0x423a9c0x13a9c0x100x40x3WA004
                  .bssNOBITS0x423aac0x13aac0x64580x00x3WA004
                  .commentPROGBITS0x00x13aac0xbd00x00x0001
                  .shstrtabSTRTAB0x00x1467c0x6b0x00x0001
                  .symtabSYMTAB0x00x149680x30d00x100x0152824
                  .strtabSTRTAB0x00x17a380x24660x00x0001

                  Program Segments

                  TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                  LOAD0x00x4000000x4000000x136d80x136d86.88400x5R E0x10000.init .text .fini .rodata .eh_frame
                  LOAD0x136d80x4236d80x4236d80x3d40x682c2.70940x6RW 0x10000.ctors .dtors .jcr .data .got .bss
                  GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                  Symbols

                  NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                  .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                  .symtab0x4000940SECTION<unknown>DEFAULT1
                  .symtab0x4000e00SECTION<unknown>DEFAULT2
                  .symtab0x410e800SECTION<unknown>DEFAULT3
                  .symtab0x410ea40SECTION<unknown>DEFAULT4
                  .symtab0x4136d40SECTION<unknown>DEFAULT5
                  .symtab0x4236d80SECTION<unknown>DEFAULT6
                  .symtab0x4236e00SECTION<unknown>DEFAULT7
                  .symtab0x4236e80SECTION<unknown>DEFAULT8
                  .symtab0x4236ec0SECTION<unknown>DEFAULT9
                  .symtab0x423a9c0SECTION<unknown>DEFAULT10
                  .symtab0x423aac0SECTION<unknown>DEFAULT11
                  .symtab0x00SECTION<unknown>DEFAULT12
                  .symtab0x00SECTION<unknown>DEFAULT13
                  .symtab0x00SECTION<unknown>DEFAULT14
                  .symtab0x00SECTION<unknown>DEFAULT15
                  /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  Hexed.symtab0x403974424FUNC<unknown>DEFAULT2
                  KHcommSOCK.symtab0x423ac84OBJECT<unknown>DEFAULT11
                  KHserverHACKER.symtab0x4237284OBJECT<unknown>DEFAULT9
                  L1.symtab0x409ef00NOTYPE<unknown>DEFAULT2
                  LOCAL_ADDR.symtab0x429d444OBJECT<unknown>DEFAULT11
                  L_abort.symtab0x4001d00NOTYPE<unknown>DEFAULT2
                  L_fini.symtab0x4001c80NOTYPE<unknown>DEFAULT2
                  L_init.symtab0x4001c40NOTYPE<unknown>DEFAULT2
                  L_main.symtab0x4001c00NOTYPE<unknown>DEFAULT2
                  L_uClibc_main.symtab0x4001cc0NOTYPE<unknown>DEFAULT2
                  Percocet_bp.symtab0x4237084OBJECT<unknown>DEFAULT9
                  Q.symtab0x423ae416384OBJECT<unknown>DEFAULT11
                  RSF.symtab0x403b1c672FUNC<unknown>DEFAULT2
                  SendHttpRand.symtab0x4048d8696FUNC<unknown>DEFAULT2
                  UDPBYPASS.symtab0x402e08368FUNC<unknown>DEFAULT2
                  UserAgents.symtab0x42371c12OBJECT<unknown>DEFAULT9
                  _GLOBAL_OFFSET_TABLE_.symtab0x423a9c0OBJECT<unknown>HIDDEN10
                  _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                  _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __CTOR_END__.symtab0x4236dc0OBJECT<unknown>DEFAULT6
                  __CTOR_LIST__.symtab0x4236d80OBJECT<unknown>DEFAULT6
                  __C_ctype_b.symtab0x42373c4OBJECT<unknown>DEFAULT9
                  __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __C_ctype_b_data.symtab0x41207c768OBJECT<unknown>DEFAULT4
                  __C_ctype_tolower.symtab0x423a944OBJECT<unknown>DEFAULT9
                  __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __C_ctype_tolower_data.symtab0x4133d4768OBJECT<unknown>DEFAULT4
                  __C_ctype_toupper.symtab0x4237444OBJECT<unknown>DEFAULT9
                  __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __C_ctype_toupper_data.symtab0x41237c768OBJECT<unknown>DEFAULT4
                  __DTOR_END__.symtab0x4236e40OBJECT<unknown>DEFAULT7
                  __DTOR_LIST__.symtab0x4236e00OBJECT<unknown>DEFAULT7
                  __EH_FRAME_BEGIN__.symtab0x4136d40OBJECT<unknown>DEFAULT5
                  __FRAME_END__.symtab0x4136d40OBJECT<unknown>DEFAULT5
                  __GI___C_ctype_b.symtab0x42373c4OBJECT<unknown>HIDDEN9
                  __GI___C_ctype_b_data.symtab0x41207c768OBJECT<unknown>HIDDEN4
                  __GI___C_ctype_tolower.symtab0x423a944OBJECT<unknown>HIDDEN9
                  __GI___C_ctype_tolower_data.symtab0x4133d4768OBJECT<unknown>HIDDEN4
                  __GI___C_ctype_toupper.symtab0x4237444OBJECT<unknown>HIDDEN9
                  __GI___C_ctype_toupper_data.symtab0x41237c768OBJECT<unknown>HIDDEN4
                  __GI___ctype_b.symtab0x4237404OBJECT<unknown>HIDDEN9
                  __GI___ctype_tolower.symtab0x423a984OBJECT<unknown>HIDDEN9
                  __GI___ctype_toupper.symtab0x4237484OBJECT<unknown>HIDDEN9
                  __GI___errno_location.symtab0x40a63c20FUNC<unknown>HIDDEN2
                  __GI___fgetc_unlocked.symtab0x410a5c216FUNC<unknown>HIDDEN2
                  __GI___glibc_strerror_r.symtab0x40bd3832FUNC<unknown>HIDDEN2
                  __GI___h_errno_location.symtab0x40d9c020FUNC<unknown>HIDDEN2
                  __GI___libc_fcntl.symtab0x409fb0172FUNC<unknown>HIDDEN2
                  __GI___libc_fcntl64.symtab0x40a05c152FUNC<unknown>HIDDEN2
                  __GI___libc_open.symtab0x40a3e4160FUNC<unknown>HIDDEN2
                  __GI___uClibc_fini.symtab0x40d4b8104FUNC<unknown>HIDDEN2
                  __GI___uClibc_init.symtab0x40d58480FUNC<unknown>HIDDEN2
                  __GI___xpg_strerror_r.symtab0x40bd58200FUNC<unknown>HIDDEN2
                  __GI__exit.symtab0x40a0f448FUNC<unknown>HIDDEN2
                  __GI_abort.symtab0x40cacc244FUNC<unknown>HIDDEN2
                  __GI_atoi.symtab0x40d03024FUNC<unknown>HIDDEN2
                  __GI_atol.symtab0x40d03024FUNC<unknown>HIDDEN2
                  __GI_close.symtab0x40a15c56FUNC<unknown>HIDDEN2
                  __GI_connect.symtab0x40c29440FUNC<unknown>HIDDEN2
                  __GI_dup2.symtab0x40a19456FUNC<unknown>HIDDEN2
                  __GI_errno.symtab0x429d1c4OBJECT<unknown>HIDDEN11
                  __GI_execl.symtab0x40d210228FUNC<unknown>HIDDEN2
                  __GI_execve.symtab0x40d83856FUNC<unknown>HIDDEN2
                  __GI_exit.symtab0x40d1a0112FUNC<unknown>HIDDEN2
                  __GI_fclose.symtab0x40f51c272FUNC<unknown>HIDDEN2
                  __GI_fcntl.symtab0x409fb0172FUNC<unknown>HIDDEN2
                  __GI_fcntl64.symtab0x40a05c152FUNC<unknown>HIDDEN2
                  __GI_fflush_unlocked.symtab0x40fba0320FUNC<unknown>HIDDEN2
                  __GI_fgetc_unlocked.symtab0x410a5c216FUNC<unknown>HIDDEN2
                  __GI_fgets.symtab0x40fa48120FUNC<unknown>HIDDEN2
                  __GI_fgets_unlocked.symtab0x40fce0128FUNC<unknown>HIDDEN2
                  __GI_fopen.symtab0x40f62c24FUNC<unknown>HIDDEN2
                  __GI_fork.symtab0x40a1cc56FUNC<unknown>HIDDEN2
                  __GI_fputs_unlocked.symtab0x40b56868FUNC<unknown>HIDDEN2
                  __GI_fseek.symtab0x40f64428FUNC<unknown>HIDDEN2
                  __GI_fseeko64.symtab0x40f660232FUNC<unknown>HIDDEN2
                  __GI_fwrite_unlocked.symtab0x40b5ac156FUNC<unknown>HIDDEN2
                  __GI_getc_unlocked.symtab0x410a5c216FUNC<unknown>HIDDEN2
                  __GI_getdtablesize.symtab0x40a20452FUNC<unknown>HIDDEN2
                  __GI_getegid.symtab0x40d87056FUNC<unknown>HIDDEN2
                  __GI_geteuid.symtab0x40a23856FUNC<unknown>HIDDEN2
                  __GI_getgid.symtab0x40d8a856FUNC<unknown>HIDDEN2
                  __GI_gethostbyname.symtab0x40bfa072FUNC<unknown>HIDDEN2
                  __GI_gethostbyname_r.symtab0x40bfe8684FUNC<unknown>HIDDEN2
                  __GI_getpid.symtab0x40a27056FUNC<unknown>HIDDEN2
                  __GI_getrlimit.symtab0x40a2e056FUNC<unknown>HIDDEN2
                  __GI_getsockname.symtab0x40c2bc40FUNC<unknown>HIDDEN2
                  __GI_getuid.symtab0x40d8e056FUNC<unknown>HIDDEN2
                  __GI_h_errno.symtab0x429d204OBJECT<unknown>HIDDEN11
                  __GI_inet_addr.symtab0x40bf7444FUNC<unknown>HIDDEN2
                  __GI_inet_aton.symtab0x40e9ac204FUNC<unknown>HIDDEN2
                  __GI_inet_ntop.symtab0x410280492FUNC<unknown>HIDDEN2
                  __GI_inet_pton.symtab0x40ffac408FUNC<unknown>HIDDEN2
                  __GI_initstate_r.symtab0x40cf80176FUNC<unknown>HIDDEN2
                  __GI_ioctl.symtab0x40a318148FUNC<unknown>HIDDEN2
                  __GI_isatty.symtab0x40be5036FUNC<unknown>HIDDEN2
                  __GI_kill.symtab0x40a3ac56FUNC<unknown>HIDDEN2
                  __GI_lseek64.symtab0x4109d496FUNC<unknown>HIDDEN2
                  __GI_memchr.symtab0x40e37c204FUNC<unknown>HIDDEN2
                  __GI_memcpy.symtab0x40b6e0636FUNC<unknown>HIDDEN2
                  __GI_memmove.symtab0x40e448978FUNC<unknown>HIDDEN2
                  __GI_mempcpy.symtab0x40e81c36FUNC<unknown>HIDDEN2
                  __GI_memrchr.symtab0x40e840204FUNC<unknown>HIDDEN2
                  __GI_memset.symtab0x40b960124FUNC<unknown>HIDDEN2
                  __GI_nanosleep.symtab0x40d91856FUNC<unknown>HIDDEN2
                  __GI_open.symtab0x40a3e4160FUNC<unknown>HIDDEN2
                  __GI_pipe.symtab0x409ef864FUNC<unknown>HIDDEN2
                  __GI_poll.symtab0x40f4e456FUNC<unknown>HIDDEN2
                  __GI_raise.symtab0x40f34840FUNC<unknown>HIDDEN2
                  __GI_random.symtab0x40cbd4100FUNC<unknown>HIDDEN2
                  __GI_random_r.symtab0x40ce54104FUNC<unknown>HIDDEN2
                  __GI_rawmemchr.symtab0x40fd60152FUNC<unknown>HIDDEN2
                  __GI_read.symtab0x40a4d056FUNC<unknown>HIDDEN2
                  __GI_recv.symtab0x40c31040FUNC<unknown>HIDDEN2
                  __GI_recvfrom.symtab0x40c33848FUNC<unknown>HIDDEN2
                  __GI_sbrk.symtab0x40d7a888FUNC<unknown>HIDDEN2
                  __GI_select.symtab0x40a50852FUNC<unknown>HIDDEN2
                  __GI_send.symtab0x40c36840FUNC<unknown>HIDDEN2
                  __GI_sendto.symtab0x40c39048FUNC<unknown>HIDDEN2
                  __GI_setsockopt.symtab0x40c3c044FUNC<unknown>HIDDEN2
                  __GI_setstate_r.symtab0x40cd7c216FUNC<unknown>HIDDEN2
                  __GI_sigaction.symtab0x40f370160FUNC<unknown>HIDDEN2
                  __GI_sigaddset.symtab0x40c41460FUNC<unknown>HIDDEN2
                  __GI_sigemptyset.symtab0x40c45032FUNC<unknown>HIDDEN2
                  __GI_signal.symtab0x40c470184FUNC<unknown>HIDDEN2
                  __GI_sigprocmask.symtab0x40a53c84FUNC<unknown>HIDDEN2
                  __GI_sleep.symtab0x40d2f4376FUNC<unknown>HIDDEN2
                  __GI_socket.symtab0x40c3ec40FUNC<unknown>HIDDEN2
                  __GI_sprintf.symtab0x40a688132FUNC<unknown>HIDDEN2
                  __GI_srandom_r.symtab0x40cebc196FUNC<unknown>HIDDEN2
                  __GI_strcasecmp.symtab0x410b3464FUNC<unknown>HIDDEN2
                  __GI_strchr.symtab0x40b9dc192FUNC<unknown>HIDDEN2
                  __GI_strcmp.symtab0x40ba9c34FUNC<unknown>HIDDEN2
                  __GI_strcoll.symtab0x40ba9c34FUNC<unknown>HIDDEN2
                  __GI_strcpy.symtab0x40babe30FUNC<unknown>HIDDEN2
                  __GI_strdup.symtab0x40fec476FUNC<unknown>HIDDEN2
                  __GI_strlen.symtab0x40badc136FUNC<unknown>HIDDEN2
                  __GI_strncat.symtab0x40fdf8154FUNC<unknown>HIDDEN2
                  __GI_strncpy.symtab0x40bb64142FUNC<unknown>HIDDEN2
                  __GI_strnlen.symtab0x40bbf4132FUNC<unknown>HIDDEN2
                  __GI_strpbrk.symtab0x40e98440FUNC<unknown>HIDDEN2
                  __GI_strspn.symtab0x40fe9248FUNC<unknown>HIDDEN2
                  __GI_strstr.symtab0x40bc78192FUNC<unknown>HIDDEN2
                  __GI_strtok.symtab0x40be3824FUNC<unknown>HIDDEN2
                  __GI_strtok_r.symtab0x40e90c120FUNC<unknown>HIDDEN2
                  __GI_strtol.symtab0x40d04820FUNC<unknown>HIDDEN2
                  __GI_tcgetattr.symtab0x40be74116FUNC<unknown>HIDDEN2
                  __GI_time.symtab0x40a59056FUNC<unknown>HIDDEN2
                  __GI_times.symtab0x40d95056FUNC<unknown>HIDDEN2
                  __GI_tolower.symtab0x410a3440FUNC<unknown>HIDDEN2
                  __GI_toupper.symtab0x40a61440FUNC<unknown>HIDDEN2
                  __GI_vfork.symtab0x409f4054FUNC<unknown>HIDDEN2
                  __GI_vsnprintf.symtab0x40a70c168FUNC<unknown>HIDDEN2
                  __GI_wait4.symtab0x40d98856FUNC<unknown>HIDDEN2
                  __GI_waitpid.symtab0x40a5c820FUNC<unknown>HIDDEN2
                  __GI_wcrtomb.symtab0x40d9d468FUNC<unknown>HIDDEN2
                  __GI_wcsnrtombs.symtab0x40da38112FUNC<unknown>HIDDEN2
                  __GI_wcsrtombs.symtab0x40da1832FUNC<unknown>HIDDEN2
                  __GI_write.symtab0x40a5dc56FUNC<unknown>HIDDEN2
                  __JCR_END__.symtab0x4236e80OBJECT<unknown>DEFAULT8
                  __JCR_LIST__.symtab0x4236e80OBJECT<unknown>DEFAULT8
                  __app_fini.symtab0x429d104OBJECT<unknown>HIDDEN11
                  __atexit_lock.symtab0x423a5c24OBJECT<unknown>DEFAULT9
                  __bsd_signal.symtab0x40c470184FUNC<unknown>HIDDEN2
                  __bss_start.symtab0x423aac0NOTYPE<unknown>DEFAULTSHN_ABS
                  __check_one_fd.symtab0x40d53a74FUNC<unknown>DEFAULT2
                  __ctype_b.symtab0x4237404OBJECT<unknown>DEFAULT9
                  __ctype_tolower.symtab0x423a984OBJECT<unknown>DEFAULT9
                  __ctype_toupper.symtab0x4237484OBJECT<unknown>DEFAULT9
                  __curbrk.symtab0x429d404OBJECT<unknown>HIDDEN11
                  __data_start.symtab0x4236ec0NOTYPE<unknown>DEFAULT9
                  __decode_answer.symtab0x410648228FUNC<unknown>HIDDEN2
                  __decode_dotted.symtab0x410c20200FUNC<unknown>HIDDEN2
                  __decode_header.symtab0x41052c148FUNC<unknown>HIDDEN2
                  __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                  __dns_lookup.symtab0x40ea781604FUNC<unknown>HIDDEN2
                  __do_global_ctors_aux.symtab0x410e400FUNC<unknown>DEFAULT2
                  __do_global_dtors_aux.symtab0x4000e00FUNC<unknown>DEFAULT2
                  __dso_handle.symtab0x4236ec0OBJECT<unknown>HIDDEN9
                  __encode_dotted.symtab0x410b74172FUNC<unknown>HIDDEN2
                  __encode_header.symtab0x41046c192FUNC<unknown>HIDDEN2
                  __encode_question.symtab0x4105c0104FUNC<unknown>HIDDEN2
                  __environ.symtab0x429d084OBJECT<unknown>DEFAULT11
                  __errno_location.symtab0x40a63c20FUNC<unknown>DEFAULT2
                  __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __exit_cleanup.symtab0x429d004OBJECT<unknown>HIDDEN11
                  __fgetc_unlocked.symtab0x410a5c216FUNC<unknown>DEFAULT2
                  __fini_array_end.symtab0x4236d80NOTYPE<unknown>HIDDENSHN_ABS
                  __fini_array_start.symtab0x4236d80NOTYPE<unknown>HIDDENSHN_ABS
                  __get_hosts_byname_r.symtab0x40f31452FUNC<unknown>HIDDEN2
                  __glibc_strerror_r.symtab0x40bd3832FUNC<unknown>DEFAULT2
                  __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __h_errno_location.symtab0x40d9c020FUNC<unknown>DEFAULT2
                  __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __heap_alloc.symtab0x40c91898FUNC<unknown>DEFAULT2
                  __heap_alloc_at.symtab0x40c97a102FUNC<unknown>DEFAULT2
                  __heap_free.symtab0x40ca1c176FUNC<unknown>DEFAULT2
                  __heap_link_free_area.symtab0x40c9e034FUNC<unknown>DEFAULT2
                  __heap_link_free_area_after.symtab0x40ca0226FUNC<unknown>DEFAULT2
                  __init_array_end.symtab0x4236d80NOTYPE<unknown>HIDDENSHN_ABS
                  __init_array_start.symtab0x4236d80NOTYPE<unknown>HIDDENSHN_ABS
                  __init_brk.symtab0x40f46868FUNC<unknown>HIDDEN2
                  __init_brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __length_dotted.symtab0x410ce864FUNC<unknown>HIDDEN2
                  __length_question.symtab0x41062832FUNC<unknown>HIDDEN2
                  __libc_close.symtab0x40a15c56FUNC<unknown>DEFAULT2
                  __libc_connect.symtab0x40c29440FUNC<unknown>DEFAULT2
                  __libc_creat.symtab0x40a48424FUNC<unknown>DEFAULT2
                  __libc_fcntl.symtab0x409fb0172FUNC<unknown>DEFAULT2
                  __libc_fcntl64.symtab0x40a05c152FUNC<unknown>DEFAULT2
                  __libc_fork.symtab0x40a1cc56FUNC<unknown>DEFAULT2
                  __libc_getpid.symtab0x40a27056FUNC<unknown>DEFAULT2
                  __libc_lseek64.symtab0x4109d496FUNC<unknown>DEFAULT2
                  __libc_nanosleep.symtab0x40d91856FUNC<unknown>DEFAULT2
                  __libc_open.symtab0x40a3e4160FUNC<unknown>DEFAULT2
                  __libc_poll.symtab0x40f4e456FUNC<unknown>DEFAULT2
                  __libc_read.symtab0x40a4d056FUNC<unknown>DEFAULT2
                  __libc_recv.symtab0x40c31040FUNC<unknown>DEFAULT2
                  __libc_recvfrom.symtab0x40c33848FUNC<unknown>DEFAULT2
                  __libc_select.symtab0x40a50852FUNC<unknown>DEFAULT2
                  __libc_send.symtab0x40c36840FUNC<unknown>DEFAULT2
                  __libc_sendto.symtab0x40c39048FUNC<unknown>DEFAULT2
                  __libc_sigaction.symtab0x40f370160FUNC<unknown>DEFAULT2
                  __libc_stack_end.symtab0x429d044OBJECT<unknown>DEFAULT11
                  __libc_waitpid.symtab0x40a5c820FUNC<unknown>DEFAULT2
                  __libc_write.symtab0x40a5dc56FUNC<unknown>DEFAULT2
                  __malloc_heap.symtab0x4238884OBJECT<unknown>DEFAULT9
                  __malloc_heap_lock.symtab0x429ce424OBJECT<unknown>DEFAULT11
                  __malloc_sbrk_lock.symtab0x429ec024OBJECT<unknown>DEFAULT11
                  __nameserver.symtab0x429ee812OBJECT<unknown>HIDDEN11
                  __nameservers.symtab0x429ef44OBJECT<unknown>HIDDEN11
                  __open_etc_hosts.symtab0x41072c68FUNC<unknown>HIDDEN2
                  __open_nameservers.symtab0x40f0bc600FUNC<unknown>HIDDEN2
                  __pagesize.symtab0x429d0c4OBJECT<unknown>DEFAULT11
                  __preinit_array_end.symtab0x4236d80NOTYPE<unknown>HIDDENSHN_ABS
                  __preinit_array_start.symtab0x4236d80NOTYPE<unknown>HIDDENSHN_ABS
                  __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                  __pthread_mutex_init.symtab0x40d52014FUNC<unknown>DEFAULT2
                  __pthread_mutex_lock.symtab0x40d52014FUNC<unknown>DEFAULT2
                  __pthread_mutex_trylock.symtab0x40d52014FUNC<unknown>DEFAULT2
                  __pthread_mutex_unlock.symtab0x40d52014FUNC<unknown>DEFAULT2
                  __pthread_return_0.symtab0x40d52014FUNC<unknown>DEFAULT2
                  __pthread_return_void.symtab0x40d52e12FUNC<unknown>DEFAULT2
                  __raise.symtab0x40f34840FUNC<unknown>HIDDEN2
                  __read_etc_hosts_r.symtab0x410770612FUNC<unknown>HIDDEN2
                  __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                  __resolv_lock.symtab0x423a7c24OBJECT<unknown>DEFAULT9
                  __rtld_fini.symtab0x429d144OBJECT<unknown>HIDDEN11
                  __sdivsi3_i4.symtab0x410e2014FUNC<unknown>HIDDEN2
                  __searchdomain.symtab0x429ed816OBJECT<unknown>HIDDEN11
                  __searchdomains.symtab0x429ef84OBJECT<unknown>HIDDEN11
                  __sigaddset.symtab0x40c55440FUNC<unknown>DEFAULT2
                  __sigdelset.symtab0x40c57c42FUNC<unknown>DEFAULT2
                  __sigismember.symtab0x40c52844FUNC<unknown>DEFAULT2
                  __socketcall.symtab0x40d80056FUNC<unknown>HIDDEN2
                  __socketcall.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __stdin.symtab0x4237584OBJECT<unknown>DEFAULT9
                  __stdio_READ.symtab0x410d2880FUNC<unknown>HIDDEN2
                  __stdio_WRITE.symtab0x40daa8148FUNC<unknown>HIDDEN2
                  __stdio_adjust_position.symtab0x40f748180FUNC<unknown>HIDDEN2
                  __stdio_fwrite.symtab0x40db3c264FUNC<unknown>HIDDEN2
                  __stdio_init_mutex.symtab0x40a82028FUNC<unknown>HIDDEN2
                  __stdio_mutex_initializer.3812.symtab0x41267c24OBJECT<unknown>DEFAULT4
                  __stdio_rfill.symtab0x410d7848FUNC<unknown>HIDDEN2
                  __stdio_seek.symtab0x40fa1452FUNC<unknown>HIDDEN2
                  __stdio_trans2r_o.symtab0x410da8120FUNC<unknown>HIDDEN2
                  __stdio_trans2w_o.symtab0x40dc44176FUNC<unknown>HIDDEN2
                  __stdio_wcommit.symtab0x40a8d052FUNC<unknown>HIDDEN2
                  __stdout.symtab0x42375c4OBJECT<unknown>DEFAULT9
                  __syscall_error.symtab0x409f800NOTYPE<unknown>DEFAULT2
                  __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __syscall_fcntl64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __syscall_rt_sigaction.symtab0x40f4ac56FUNC<unknown>HIDDEN2
                  __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __uClibc_fini.symtab0x40d4b8104FUNC<unknown>DEFAULT2
                  __uClibc_init.symtab0x40d58480FUNC<unknown>DEFAULT2
                  __uClibc_main.symtab0x40d5d4468FUNC<unknown>DEFAULT2
                  __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  __uclibc_progname.symtab0x423a744OBJECT<unknown>HIDDEN9
                  __udivsi3_i4.symtab0x409ec848FUNC<unknown>HIDDEN2
                  __vfork.symtab0x409f4054FUNC<unknown>HIDDEN2
                  __xpg_strerror_r.symtab0x40bd58200FUNC<unknown>DEFAULT2
                  __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _brk.symtab0x40f43056FUNC<unknown>HIDDEN2
                  _charpad.symtab0x40a90480FUNC<unknown>DEFAULT2
                  _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _dl_aux_init.symtab0x40f41032FUNC<unknown>DEFAULT2
                  _dl_phdr.symtab0x429efc4OBJECT<unknown>DEFAULT11
                  _dl_phnum.symtab0x429f004OBJECT<unknown>DEFAULT11
                  _edata.symtab0x423aac0NOTYPE<unknown>DEFAULTSHN_ABS
                  _end.symtab0x429f040NOTYPE<unknown>DEFAULTSHN_ABS
                  _endswith.symtab0x409afe222FUNC<unknown>DEFAULT2
                  _errno.symtab0x429d1c4OBJECT<unknown>DEFAULT11
                  _exit.symtab0x40a0f448FUNC<unknown>DEFAULT2
                  _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _fini.symtab0x410e8012FUNC<unknown>HIDDEN3
                  _fixed_buffers.symtab0x427b008192OBJECT<unknown>DEFAULT11
                  _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _fp_out_narrow.symtab0x40a954124FUNC<unknown>DEFAULT2
                  _fpmaxtostr.symtab0x40de8c1264FUNC<unknown>HIDDEN2
                  _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _h_errno.symtab0x429d204OBJECT<unknown>DEFAULT11
                  _init.symtab0x40009412FUNC<unknown>HIDDEN1
                  _load_inttype.symtab0x40dcf492FUNC<unknown>HIDDEN2
                  _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _memcpy.symtab0x4096d8130FUNC<unknown>DEFAULT2
                  _memmove.symtab0x40975a158FUNC<unknown>DEFAULT2
                  _memset.symtab0x4097f8104FUNC<unknown>DEFAULT2
                  _ppfs_init.symtab0x40af14120FUNC<unknown>HIDDEN2
                  _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _ppfs_parsespec.symtab0x40b1e0902FUNC<unknown>HIDDEN2
                  _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _ppfs_prepargs.symtab0x40af8c72FUNC<unknown>HIDDEN2
                  _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _ppfs_setargs.symtab0x40afd4464FUNC<unknown>HIDDEN2
                  _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _promoted_size.symtab0x40b1a460FUNC<unknown>DEFAULT2
                  _pthread_cleanup_pop_restore.symtab0x40d52e12FUNC<unknown>DEFAULT2
                  _pthread_cleanup_push_defer.symtab0x40d52e12FUNC<unknown>DEFAULT2
                  _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _sigintr.symtab0x429e40128OBJECT<unknown>HIDDEN11
                  _start.symtab0x4001a030FUNC<unknown>DEFAULT2
                  _startswith.symtab0x409a8c114FUNC<unknown>DEFAULT2
                  _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _stdio_fopen.symtab0x40f7fc536FUNC<unknown>HIDDEN2
                  _stdio_init.symtab0x40a7b4108FUNC<unknown>HIDDEN2
                  _stdio_openlist.symtab0x4237604OBJECT<unknown>DEFAULT9
                  _stdio_openlist_add_lock.symtab0x42376424OBJECT<unknown>DEFAULT9
                  _stdio_openlist_dec_use.symtab0x40fac0224FUNC<unknown>DEFAULT2
                  _stdio_openlist_del_count.symtab0x427afc4OBJECT<unknown>DEFAULT11
                  _stdio_openlist_del_lock.symtab0x42377c24OBJECT<unknown>DEFAULT9
                  _stdio_openlist_use_count.symtab0x427af84OBJECT<unknown>DEFAULT11
                  _stdio_streams.symtab0x423798240OBJECT<unknown>DEFAULT9
                  _stdio_term.symtab0x40a83c148FUNC<unknown>HIDDEN2
                  _stdio_user_locking.symtab0x4237944OBJECT<unknown>DEFAULT9
                  _stdlib_strto_l.symtab0x40d05c324FUNC<unknown>HIDDEN2
                  _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _store_inttype.symtab0x40dd5056FUNC<unknown>HIDDEN2
                  _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _strcat.symtab0x4098d6136FUNC<unknown>DEFAULT2
                  _strcmp.symtab0x409616194FUNC<unknown>DEFAULT2
                  _strcpy.symtab0x409860118FUNC<unknown>DEFAULT2
                  _strdup.symtab0x40995e106FUNC<unknown>DEFAULT2
                  _string_syserrmsgs.symtab0x41274c2906OBJECT<unknown>HIDDEN4
                  _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _strlen.symtab0x4095cc74FUNC<unknown>DEFAULT2
                  _strstr.symtab0x4099c8196FUNC<unknown>DEFAULT2
                  _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _uintmaxtostr.symtab0x40dd88260FUNC<unknown>HIDDEN2
                  _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _vfprintf_internal.symtab0x40a9d01348FUNC<unknown>HIDDEN2
                  _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  abort.symtab0x40cacc244FUNC<unknown>DEFAULT2
                  abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  access.symtab0x40a12456FUNC<unknown>DEFAULT2
                  access.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  acnc.symtab0x4046d4228FUNC<unknown>DEFAULT2
                  add_entry.symtab0x40894c160FUNC<unknown>DEFAULT2
                  atoi.symtab0x40d03024FUNC<unknown>DEFAULT2
                  atol.symtab0x40d03024FUNC<unknown>DEFAULT2
                  atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  bcopy.symtab0x40be2024FUNC<unknown>DEFAULT2
                  bcopy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  been_there_done_that.symtab0x429cfc4OBJECT<unknown>DEFAULT11
                  been_there_done_that.2753.symtab0x429d184OBJECT<unknown>DEFAULT11
                  bsd_signal.symtab0x40c470184FUNC<unknown>DEFAULT2
                  buf.4814.symtab0x429b04460OBJECT<unknown>DEFAULT11
                  c.symtab0x4237304OBJECT<unknown>DEFAULT9
                  calloc.symtab0x40c6b0104FUNC<unknown>DEFAULT2
                  calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  checksum_generic.symtab0x4001d4160FUNC<unknown>DEFAULT2
                  checksum_tcp_udp.symtab0x400274444FUNC<unknown>DEFAULT2
                  checksum_tcpudp.symtab0x400430444FUNC<unknown>DEFAULT2
                  clock.symtab0x40a65056FUNC<unknown>DEFAULT2
                  clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  close.symtab0x40a15c56FUNC<unknown>DEFAULT2
                  close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  completed.2217.symtab0x423aac1OBJECT<unknown>DEFAULT11
                  connect.symtab0x40c29440FUNC<unknown>DEFAULT2
                  connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  connectTimeout.symtab0x4020d8772FUNC<unknown>DEFAULT2
                  creat.symtab0x40a48424FUNC<unknown>DEFAULT2
                  crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  csum.symtab0x402568232FUNC<unknown>DEFAULT2
                  data_start.symtab0x4236f40NOTYPE<unknown>DEFAULT9
                  decodea.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  dup2.symtab0x40a19456FUNC<unknown>DEFAULT2
                  dup2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  environ.symtab0x429d084OBJECT<unknown>DEFAULT11
                  errno.symtab0x429d1c4OBJECT<unknown>DEFAULT11
                  errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  execl.symtab0x40d210228FUNC<unknown>DEFAULT2
                  execl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  execve.symtab0x40d83856FUNC<unknown>DEFAULT2
                  execve.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  exit.symtab0x40d1a0112FUNC<unknown>DEFAULT2
                  exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  exp10_table.symtab0x4132f072OBJECT<unknown>DEFAULT4
                  fclose.symtab0x40f51c272FUNC<unknown>DEFAULT2
                  fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fcntl.symtab0x409fb0172FUNC<unknown>DEFAULT2
                  fcntl64.symtab0x40a05c152FUNC<unknown>DEFAULT2
                  fdgets.symtab0x401982198FUNC<unknown>DEFAULT2
                  fdopen_pids.symtab0x427ae44OBJECT<unknown>DEFAULT11
                  fdpclose.symtab0x4017fc390FUNC<unknown>DEFAULT2
                  fdpopen.symtab0x4015c4568FUNC<unknown>DEFAULT2
                  fflush_unlocked.symtab0x40fba0320FUNC<unknown>DEFAULT2
                  fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fgetc_unlocked.symtab0x410a5c216FUNC<unknown>DEFAULT2
                  fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fgets.symtab0x40fa48120FUNC<unknown>DEFAULT2
                  fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fgets_unlocked.symtab0x40fce0128FUNC<unknown>DEFAULT2
                  fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  findRandIP.symtab0x40250c92FUNC<unknown>DEFAULT2
                  fmt.symtab0x4132dc20OBJECT<unknown>DEFAULT4
                  fopen.symtab0x40f62c24FUNC<unknown>DEFAULT2
                  fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fork.symtab0x40a1cc56FUNC<unknown>DEFAULT2
                  fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fputs_unlocked.symtab0x40b56868FUNC<unknown>DEFAULT2
                  fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  frame_dummy.symtab0x4001400FUNC<unknown>DEFAULT2
                  free.symtab0x40c718240FUNC<unknown>DEFAULT2
                  free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fseek.symtab0x40f64428FUNC<unknown>DEFAULT2
                  fseeko.symtab0x40f64428FUNC<unknown>DEFAULT2
                  fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fseeko64.symtab0x40f660232FUNC<unknown>DEFAULT2
                  fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  fwrite_unlocked.symtab0x40b5ac156FUNC<unknown>DEFAULT2
                  fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getBuild.symtab0x40718412FUNC<unknown>DEFAULT2
                  getHost.symtab0x401c2484FUNC<unknown>DEFAULT2
                  getOurIP.symtab0x406ede678FUNC<unknown>DEFAULT2
                  get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getc_unlocked.symtab0x410a5c216FUNC<unknown>DEFAULT2
                  getdtablesize.symtab0x40a20452FUNC<unknown>DEFAULT2
                  getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getegid.symtab0x40d87056FUNC<unknown>DEFAULT2
                  getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  geteuid.symtab0x40a23856FUNC<unknown>DEFAULT2
                  geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getgid.symtab0x40d8a856FUNC<unknown>DEFAULT2
                  getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  gethostbyname.symtab0x40bfa072FUNC<unknown>DEFAULT2
                  gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  gethostbyname_r.symtab0x40bfe8684FUNC<unknown>DEFAULT2
                  gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getpid.symtab0x40a27056FUNC<unknown>DEFAULT2
                  getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getppid.symtab0x40a2a856FUNC<unknown>DEFAULT2
                  getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getrlimit.symtab0x40a2e056FUNC<unknown>DEFAULT2
                  getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getsockname.symtab0x40c2bc40FUNC<unknown>DEFAULT2
                  getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getsockopt.symtab0x40c2e444FUNC<unknown>DEFAULT2
                  getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  getuid.symtab0x40d8e056FUNC<unknown>DEFAULT2
                  getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  h.4813.symtab0x429cd020OBJECT<unknown>DEFAULT11
                  h_errno.symtab0x429d204OBJECT<unknown>DEFAULT11
                  hacks.symtab0x4236f84OBJECT<unknown>DEFAULT9
                  hacks2.symtab0x4236fc4OBJECT<unknown>DEFAULT9
                  hacks3.symtab0x4237004OBJECT<unknown>DEFAULT9
                  hacks4.symtab0x4237044OBJECT<unknown>DEFAULT9
                  heap_alloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  heap_alloc_at.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  heap_free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  hextable.symtab0x4111781024OBJECT<unknown>DEFAULT4
                  htonl.symtab0x40bf2e46FUNC<unknown>DEFAULT2
                  htons.symtab0x40bf5c22FUNC<unknown>DEFAULT2
                  i.4403.symtab0x4237344OBJECT<unknown>DEFAULT9
                  index.symtab0x40b9dc192FUNC<unknown>DEFAULT2
                  inet_addr.symtab0x40bf7444FUNC<unknown>DEFAULT2
                  inet_aton.symtab0x40e9ac204FUNC<unknown>DEFAULT2
                  inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  inet_ntop.symtab0x410280492FUNC<unknown>DEFAULT2
                  inet_ntop4.symtab0x410144316FUNC<unknown>DEFAULT2
                  inet_pton.symtab0x40ffac408FUNC<unknown>DEFAULT2
                  inet_pton4.symtab0x40ff10156FUNC<unknown>DEFAULT2
                  initConnection.symtab0x406d40414FUNC<unknown>DEFAULT2
                  init_rand.symtab0x40071c180FUNC<unknown>DEFAULT2
                  initial_fa.symtab0x42388c260OBJECT<unknown>DEFAULT9
                  initstate.symtab0x40cca4120FUNC<unknown>DEFAULT2
                  initstate_r.symtab0x40cf80176FUNC<unknown>DEFAULT2
                  ioctl.symtab0x40a318148FUNC<unknown>DEFAULT2
                  ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  isatty.symtab0x40be5036FUNC<unknown>DEFAULT2
                  isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  kill.symtab0x40a3ac56FUNC<unknown>DEFAULT2
                  kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  killer_status.symtab0x423ad84OBJECT<unknown>DEFAULT11
                  lengthd.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  lengthq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  libc/string/sh/sh4/memcpy.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  libc/sysdeps/linux/sh/crt1.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  libc/sysdeps/linux/sh/crti.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  libc/sysdeps/linux/sh/crtn.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  libc/sysdeps/linux/sh/vfork.S.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  listFork.symtab0x4023dc304FUNC<unknown>DEFAULT2
                  llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  lseek64.symtab0x4109d496FUNC<unknown>DEFAULT2
                  macAddress.symtab0x423adc6OBJECT<unknown>DEFAULT11
                  main.symtab0x4071902072FUNC<unknown>DEFAULT2
                  main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  makeIPPacket.symtab0x402764224FUNC<unknown>DEFAULT2
                  makeRandomStr.symtab0x401cd4156FUNC<unknown>DEFAULT2
                  makevsepacket.symtab0x403fc2246FUNC<unknown>DEFAULT2
                  malloc.symtab0x40c5a8264FUNC<unknown>DEFAULT2
                  malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  memchr.symtab0x40e37c204FUNC<unknown>DEFAULT2
                  memchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  memcpy.symtab0x40b6e0636FUNC<unknown>DEFAULT2
                  memmove.symtab0x40e448978FUNC<unknown>DEFAULT2
                  memmove.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  mempcpy.symtab0x40e81c36FUNC<unknown>DEFAULT2
                  mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  memrchr.symtab0x40e840204FUNC<unknown>DEFAULT2
                  memrchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  memset.symtab0x40b960124FUNC<unknown>DEFAULT2
                  memset.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  mylock.symtab0x42399024OBJECT<unknown>DEFAULT9
                  mylock.symtab0x4239a824OBJECT<unknown>DEFAULT9
                  mylock.symtab0x429d2424OBJECT<unknown>DEFAULT11
                  nanosleep.symtab0x40d91856FUNC<unknown>DEFAULT2
                  nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  next_start.1030.symtab0x429b004OBJECT<unknown>DEFAULT11
                  ngPid.symtab0x429d4c4OBJECT<unknown>DEFAULT11
                  ntohl.symtab0x40bee848FUNC<unknown>DEFAULT2
                  ntohl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  ntohs.symtab0x40bf1822FUNC<unknown>DEFAULT2
                  ntop.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  numpids.symtab0x423ad08OBJECT<unknown>DEFAULT11
                  object.2270.symtab0x423ab024OBJECT<unknown>DEFAULT11
                  open.symtab0x40a3e4160FUNC<unknown>DEFAULT2
                  open.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  opennameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  ourIP.symtab0x429d484OBJECT<unknown>DEFAULT11
                  p.2215.symtab0x4236f00OBJECT<unknown>DEFAULT9
                  parseHex.symtab0x401a48124FUNC<unknown>DEFAULT2
                  pids.symtab0x429d544OBJECT<unknown>DEFAULT11
                  pipe.symtab0x409ef864FUNC<unknown>DEFAULT2
                  pipe.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  poll.symtab0x40f4e456FUNC<unknown>DEFAULT2
                  poll.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  prctl.symtab0x40a49c52FUNC<unknown>DEFAULT2
                  prctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  prefix.4023.symtab0x4126a412OBJECT<unknown>DEFAULT4
                  print.symtab0x400ebc1072FUNC<unknown>DEFAULT2
                  printchar.symtab0x400b64104FUNC<unknown>DEFAULT2
                  printi.symtab0x400d24408FUNC<unknown>DEFAULT2
                  prints.symtab0x400bcc344FUNC<unknown>DEFAULT2
                  processCmd.symtab0x404b908624FUNC<unknown>DEFAULT2
                  qual_chars.4029.symtab0x4126b820OBJECT<unknown>DEFAULT4
                  raise.symtab0x40f34840FUNC<unknown>DEFAULT2
                  raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  rand.symtab0x40cbc020FUNC<unknown>DEFAULT2
                  rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  rand__str.symtab0x407ab8232FUNC<unknown>DEFAULT2
                  rand_alpha_str.symtab0x407ba0176FUNC<unknown>DEFAULT2
                  rand_alphastr.symtab0x400a28316FUNC<unknown>DEFAULT2
                  rand_cmwc.symtab0x400918272FUNC<unknown>DEFAULT2
                  rand_init.symtab0x4079a8116FUNC<unknown>DEFAULT2
                  rand_next.symtab0x407a1c156FUNC<unknown>DEFAULT2
                  random.symtab0x40cbd4100FUNC<unknown>DEFAULT2
                  random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  random_poly_info.symtab0x4132a840OBJECT<unknown>DEFAULT4
                  random_r.symtab0x40ce54104FUNC<unknown>DEFAULT2
                  random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  randstrings.symtab0x42370c16OBJECT<unknown>DEFAULT9
                  randtbl.symtab0x4239dc128OBJECT<unknown>DEFAULT9
                  rawmemchr.symtab0x40fd60152FUNC<unknown>DEFAULT2
                  rawmemchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  read.symtab0x40a4d056FUNC<unknown>DEFAULT2
                  read.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  read_etc_hosts_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  realloc.symtab0x40c808272FUNC<unknown>DEFAULT2
                  realloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  recv.symtab0x40c31040FUNC<unknown>DEFAULT2
                  recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  recvLine.symtab0x401d70872FUNC<unknown>DEFAULT2
                  recvfrom.symtab0x40c33848FUNC<unknown>DEFAULT2
                  recvfrom.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  resolv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  resolv_domain_to_hostname.symtab0x407c50280FUNC<unknown>DEFAULT2
                  resolv_entries_free.symtab0x40865484FUNC<unknown>DEFAULT2
                  resolv_lookup.symtab0x407e542048FUNC<unknown>DEFAULT2
                  resolv_skip_name.symtab0x407d68236FUNC<unknown>DEFAULT2
                  rtcp.symtab0x4035241104FUNC<unknown>DEFAULT2
                  sbrk.symtab0x40d7a888FUNC<unknown>DEFAULT2
                  sbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  scanPid.symtab0x429d504OBJECT<unknown>DEFAULT11
                  select.symtab0x40a50852FUNC<unknown>DEFAULT2
                  select.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  send.symtab0x40c36840FUNC<unknown>DEFAULT2
                  send.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  sendSTD.symtab0x403dbc518FUNC<unknown>DEFAULT2
                  sendto.symtab0x40c39048FUNC<unknown>DEFAULT2
                  sendto.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  setsockopt.symtab0x40c3c044FUNC<unknown>DEFAULT2
                  setsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  setstate.symtab0x40cc38108FUNC<unknown>DEFAULT2
                  setstate_r.symtab0x40cd7c216FUNC<unknown>DEFAULT2
                  sigaction.symtab0x40f370160FUNC<unknown>DEFAULT2
                  sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  sigaddset.symtab0x40c41460FUNC<unknown>DEFAULT2
                  sigaddset.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  sigempty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  sigemptyset.symtab0x40c45032FUNC<unknown>DEFAULT2
                  signal.symtab0x40c470184FUNC<unknown>DEFAULT2
                  signal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  sigprocmask.symtab0x40a53c84FUNC<unknown>DEFAULT2
                  sigprocmask.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  sigsetops.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  sleep.symtab0x40d2f4376FUNC<unknown>DEFAULT2
                  sleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  socket.symtab0x40c3ec40FUNC<unknown>DEFAULT2
                  socket.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  socket_connect.symtab0x4047b8288FUNC<unknown>DEFAULT2
                  sockprintf.symtab0x40145c360FUNC<unknown>DEFAULT2
                  spec_and_mask.4028.symtab0x4126cc16OBJECT<unknown>DEFAULT4
                  spec_base.4022.symtab0x4126b07OBJECT<unknown>DEFAULT4
                  spec_chars.4025.symtab0x4126f821OBJECT<unknown>DEFAULT4
                  spec_flags.4024.symtab0x4127108OBJECT<unknown>DEFAULT4
                  spec_or_mask.4027.symtab0x4126dc16OBJECT<unknown>DEFAULT4
                  spec_ranges.4026.symtab0x4126ec9OBJECT<unknown>DEFAULT4
                  sprintf.symtab0x40a688132FUNC<unknown>DEFAULT2
                  sprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  srand.symtab0x40cd1c96FUNC<unknown>DEFAULT2
                  srandom.symtab0x40cd1c96FUNC<unknown>DEFAULT2
                  srandom_r.symtab0x40cebc196FUNC<unknown>DEFAULT2
                  static_id.symtab0x423a782OBJECT<unknown>DEFAULT9
                  static_ns.symtab0x429d3c4OBJECT<unknown>DEFAULT11
                  stderr.symtab0x4237544OBJECT<unknown>DEFAULT9
                  stdin.symtab0x42374c4OBJECT<unknown>DEFAULT9
                  stdout.symtab0x4237504OBJECT<unknown>DEFAULT9
                  strcasecmp.symtab0x410b3464FUNC<unknown>DEFAULT2
                  strcasecmp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strchr.symtab0x40b9dc192FUNC<unknown>DEFAULT2
                  strchr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strcmp.symtab0x40ba9c34FUNC<unknown>DEFAULT2
                  strcmp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strcoll.symtab0x40ba9c34FUNC<unknown>DEFAULT2
                  strcpy.symtab0x40babe30FUNC<unknown>DEFAULT2
                  strcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strdup.symtab0x40fec476FUNC<unknown>DEFAULT2
                  strdup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strerror_r.symtab0x40bd58200FUNC<unknown>DEFAULT2
                  strlen.symtab0x40badc136FUNC<unknown>DEFAULT2
                  strlen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strncat.symtab0x40fdf8154FUNC<unknown>DEFAULT2
                  strncat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strncpy.symtab0x40bb64142FUNC<unknown>DEFAULT2
                  strncpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strnlen.symtab0x40bbf4132FUNC<unknown>DEFAULT2
                  strnlen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strpbrk.symtab0x40e98440FUNC<unknown>DEFAULT2
                  strpbrk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strspn.symtab0x40fe9248FUNC<unknown>DEFAULT2
                  strspn.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strstr.symtab0x40bc78192FUNC<unknown>DEFAULT2
                  strstr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strtok.symtab0x40be3824FUNC<unknown>DEFAULT2
                  strtok.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strtok_r.symtab0x40e90c120FUNC<unknown>DEFAULT2
                  strtok_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  strtol.symtab0x40d04820FUNC<unknown>DEFAULT2
                  strtol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  szprintf.symtab0x4013a0188FUNC<unknown>DEFAULT2
                  table.symtab0x429d58232OBJECT<unknown>DEFAULT11
                  table.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  table_init.symtab0x4086a8436FUNC<unknown>DEFAULT2
                  table_key.symtab0x4237384OBJECT<unknown>DEFAULT9
                  table_lock_val.symtab0x4088a472FUNC<unknown>DEFAULT2
                  table_retrieve_val.symtab0x4088ec96FUNC<unknown>DEFAULT2
                  table_unlock_val.symtab0x40885c72FUNC<unknown>DEFAULT2
                  tcgetattr.symtab0x40be74116FUNC<unknown>DEFAULT2
                  tcgetattr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  tcpFl00d.symtab0x402f781452FUNC<unknown>DEFAULT2
                  tcpcsum.symtab0x402650276FUNC<unknown>DEFAULT2
                  time.symtab0x40a59056FUNC<unknown>DEFAULT2
                  time.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  times.symtab0x40d95056FUNC<unknown>DEFAULT2
                  times.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  toggle_obf.symtab0x4089ec360FUNC<unknown>DEFAULT2
                  tolower.symtab0x410a3440FUNC<unknown>DEFAULT2
                  tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  toupper.symtab0x40a61440FUNC<unknown>DEFAULT2
                  toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  trim.symtab0x4007d0328FUNC<unknown>DEFAULT2
                  trivial.symtab0x409eec0NOTYPE<unknown>DEFAULT2
                  type_codes.symtab0x41271824OBJECT<unknown>DEFAULT4
                  type_sizes.symtab0x41273012OBJECT<unknown>DEFAULT4
                  udpfl00d.symtab0x4028441476FUNC<unknown>DEFAULT2
                  unknown.1072.symtab0x41273c14OBJECT<unknown>DEFAULT4
                  unsafe_state.symtab0x4239c028OBJECT<unknown>DEFAULT9
                  uppercase.symtab0x401c7892FUNC<unknown>DEFAULT2
                  userID.symtab0x42372c4OBJECT<unknown>DEFAULT9
                  usleep.symtab0x40d46c76FUNC<unknown>DEFAULT2
                  usleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  util.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  util_atoi.symtab0x408f04688FUNC<unknown>DEFAULT2
                  util_fdgets.symtab0x409cc4220FUNC<unknown>DEFAULT2
                  util_isalpha.symtab0x409de088FUNC<unknown>DEFAULT2
                  util_isdigit.symtab0x409e8864FUNC<unknown>DEFAULT2
                  util_isspace.symtab0x409e3880FUNC<unknown>DEFAULT2
                  util_isupper.symtab0x409da064FUNC<unknown>DEFAULT2
                  util_itoa.symtab0x4091b4456FUNC<unknown>DEFAULT2
                  util_local_addr.symtab0x409bdc232FUNC<unknown>DEFAULT2
                  util_memcpy.symtab0x408e26130FUNC<unknown>DEFAULT2
                  util_memsearch.symtab0x40937c222FUNC<unknown>DEFAULT2
                  util_strcat.symtab0x408db4114FUNC<unknown>DEFAULT2
                  util_strcmp.symtab0x408c88196FUNC<unknown>DEFAULT2
                  util_strcpy.symtab0x408d4c104FUNC<unknown>DEFAULT2
                  util_stristr.symtab0x40945a370FUNC<unknown>DEFAULT2
                  util_strlen.symtab0x408b5490FUNC<unknown>DEFAULT2
                  util_strncmp.symtab0x408bae218FUNC<unknown>DEFAULT2
                  util_zero.symtab0x408ea892FUNC<unknown>DEFAULT2
                  vfork.symtab0x409f4054FUNC<unknown>DEFAULT2
                  vseattack.symtab0x4040b81564FUNC<unknown>DEFAULT2
                  vsnprintf.symtab0x40a70c168FUNC<unknown>DEFAULT2
                  vsnprintf.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  w.symtab0x427af44OBJECT<unknown>DEFAULT11
                  wait4.symtab0x40d98856FUNC<unknown>DEFAULT2
                  wait4.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  waitpid.symtab0x40a5c820FUNC<unknown>DEFAULT2
                  waitpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  watchdog_maintain.symtab0x4005ec304FUNC<unknown>DEFAULT2
                  watchdog_pid.symtab0x423acc4OBJECT<unknown>DEFAULT11
                  wcrtomb.symtab0x40d9d468FUNC<unknown>DEFAULT2
                  wcrtomb.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  wcsnrtombs.symtab0x40da38112FUNC<unknown>DEFAULT2
                  wcsnrtombs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  wcsrtombs.symtab0x40da1832FUNC<unknown>DEFAULT2
                  wcsrtombs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  wildString.symtab0x401ac4352FUNC<unknown>DEFAULT2
                  write.symtab0x40a5dc56FUNC<unknown>DEFAULT2
                  write.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                  x.symtab0x427ae84OBJECT<unknown>DEFAULT11
                  xdigits.3026.symtab0x41339c17OBJECT<unknown>DEFAULT4
                  y.symtab0x427aec4OBJECT<unknown>DEFAULT11
                  z.symtab0x427af04OBJECT<unknown>DEFAULT11
                  zprintf.symtab0x4012ec180FUNC<unknown>DEFAULT2

                  Network Behavior

                  Network Port Distribution

                  TCP Packets

                  TimestampSource PortDest PortSource IPDest IP
                  Jan 5, 2025 08:52:42.469527960 CET4173065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:42.474349022 CET6548941730195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:42.474419117 CET4173065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:42.474909067 CET4173065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:42.479681969 CET6548941730195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:43.183578968 CET6548941730195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:43.183681965 CET4173065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:43.183785915 CET6548941730195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:43.184047937 CET4173065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:43.188864946 CET6548941730195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:58.189728975 CET4173265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:58.194891930 CET6548941732195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:58.194969893 CET4173265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:58.195045948 CET4173265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:58.200043917 CET6548941732195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:58.900580883 CET6548941732195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:58.900690079 CET6548941732195.133.52.175192.168.2.13
                  Jan 5, 2025 08:52:58.900774956 CET4173265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:58.900969028 CET4173265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:52:58.905751944 CET6548941732195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:13.906917095 CET4173465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:13.911773920 CET6548941734195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:13.911879063 CET4173465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:13.911936045 CET4173465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:13.916713953 CET6548941734195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:14.629349947 CET6548941734195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:14.629636049 CET6548941734195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:14.629745007 CET4173465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:14.629792929 CET4173465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:14.635595083 CET6548941734195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:29.635688066 CET4173665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:29.640507936 CET6548941736195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:29.640582085 CET4173665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:29.640659094 CET4173665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:29.645442963 CET6548941736195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:30.340150118 CET6548941736195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:30.340435028 CET4173665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:30.340603113 CET6548941736195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:30.340707064 CET4173665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:30.345529079 CET6548941736195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:45.348754883 CET4173865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:45.353697062 CET6548941738195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:45.353770018 CET4173865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:45.353846073 CET4173865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:45.358613014 CET6548941738195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:46.054488897 CET6548941738195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:46.054512978 CET6548941738195.133.52.175192.168.2.13
                  Jan 5, 2025 08:53:46.054656029 CET4173865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:46.054836035 CET4173865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:53:46.060122013 CET6548941738195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:01.060511112 CET4174065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:01.065356970 CET6548941740195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:01.065421104 CET4174065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:01.065478086 CET4174065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:01.070265055 CET6548941740195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:01.764935017 CET6548941740195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:01.765127897 CET6548941740195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:01.765126944 CET4174065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:01.765240908 CET4174065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:01.769983053 CET6548941740195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:16.769753933 CET4174265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:16.774694920 CET6548941742195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:16.774753094 CET4174265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:16.774804115 CET4174265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:16.779614925 CET6548941742195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:17.490755081 CET6548941742195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:17.490778923 CET6548941742195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:17.490889072 CET4174265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:17.490942001 CET4174265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:17.495753050 CET6548941742195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:32.495131969 CET4174465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:32.499946117 CET6548941744195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:32.500005007 CET4174465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:32.500067949 CET4174465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:32.504790068 CET6548941744195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:33.214272976 CET6548941744195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:33.214427948 CET4174465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:33.214437962 CET6548941744195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:33.214718103 CET4174465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:33.219531059 CET6548941744195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:48.219708920 CET4174665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:48.224443913 CET6548941746195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:48.224529028 CET4174665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:48.224545956 CET4174665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:48.229262114 CET6548941746195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:48.948018074 CET6548941746195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:48.948173046 CET6548941746195.133.52.175192.168.2.13
                  Jan 5, 2025 08:54:48.948216915 CET4174665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:48.948487043 CET4174665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:54:48.953223944 CET6548941746195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:03.953593969 CET4174865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:03.958440065 CET6548941748195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:03.958532095 CET4174865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:03.958564997 CET4174865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:03.963352919 CET6548941748195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:04.691493034 CET6548941748195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:04.691670895 CET4174865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:04.691709042 CET6548941748195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:04.691807032 CET4174865489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:04.696600914 CET6548941748195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:19.696222067 CET4175065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:19.700994015 CET6548941750195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:19.701076031 CET4175065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:19.701095104 CET4175065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:19.705820084 CET6548941750195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:20.393625975 CET6548941750195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:20.393656969 CET6548941750195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:20.393788099 CET4175065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:20.393830061 CET4175065489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:20.398612976 CET6548941750195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:35.399002075 CET4175265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:35.403927088 CET6548941752195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:35.404026985 CET4175265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:35.404042959 CET4175265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:35.408884048 CET6548941752195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:36.110023975 CET6548941752195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:36.110131979 CET4175265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:36.110143900 CET6548941752195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:36.110193014 CET4175265489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:36.114984035 CET6548941752195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:51.115930080 CET4175465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:51.120733976 CET6548941754195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:51.120851994 CET4175465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:51.120904922 CET4175465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:51.125629902 CET6548941754195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:51.831526995 CET6548941754195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:51.831654072 CET4175465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:51.831728935 CET6548941754195.133.52.175192.168.2.13
                  Jan 5, 2025 08:55:51.831883907 CET4175465489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:55:51.836610079 CET6548941754195.133.52.175192.168.2.13
                  Jan 5, 2025 08:56:06.837476015 CET4175665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:56:06.842314959 CET6548941756195.133.52.175192.168.2.13
                  Jan 5, 2025 08:56:06.842395067 CET4175665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:56:06.842423916 CET4175665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:56:06.847201109 CET6548941756195.133.52.175192.168.2.13
                  Jan 5, 2025 08:56:07.554831982 CET6548941756195.133.52.175192.168.2.13
                  Jan 5, 2025 08:56:07.554980993 CET4175665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:56:07.555130959 CET6548941756195.133.52.175192.168.2.13
                  Jan 5, 2025 08:56:07.555191040 CET4175665489192.168.2.13195.133.52.175
                  Jan 5, 2025 08:56:07.559937954 CET6548941756195.133.52.175192.168.2.13

                  UDP Packets

                  TimestampSource PortDest PortSource IPDest IP
                  Jan 5, 2025 08:55:28.808825970 CET5204053192.168.2.131.1.1.1
                  Jan 5, 2025 08:55:28.808881044 CET5365253192.168.2.131.1.1.1
                  Jan 5, 2025 08:55:28.816132069 CET53536521.1.1.1192.168.2.13
                  Jan 5, 2025 08:55:28.816582918 CET53520401.1.1.1192.168.2.13

                  DNS Queries

                  TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                  Jan 5, 2025 08:55:28.808825970 CET192.168.2.131.1.1.10x92a0Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                  Jan 5, 2025 08:55:28.808881044 CET192.168.2.131.1.1.10xf152Standard query (0)daisy.ubuntu.com28IN (0x0001)false

                  DNS Answers

                  TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                  Jan 5, 2025 08:55:28.816582918 CET1.1.1.1192.168.2.130x92a0No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
                  Jan 5, 2025 08:55:28.816582918 CET1.1.1.1192.168.2.130x92a0No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

                  System Behavior

                  General

                  Start time (UTC):07:52:41
                  Start date (UTC):05/01/2025
                  Path:/tmp/l.elf
                  Arguments:/tmp/l.elf
                  File size:4139976 bytes
                  MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                  Chronological Activities


                  General

                  Start time (UTC):07:52:41
                  Start date (UTC):05/01/2025
                  Path:/tmp/l.elf
                  Arguments:-
                  File size:4139976 bytes
                  MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                  Chronological Activities


                  General

                  Start time (UTC):07:52:41
                  Start date (UTC):05/01/2025
                  Path:/tmp/l.elf
                  Arguments:-
                  File size:4139976 bytes
                  MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                  Chronological Activities


                  General

                  Start time (UTC):07:52:41
                  Start date (UTC):05/01/2025
                  Path:/tmp/l.elf
                  Arguments:-
                  File size:4139976 bytes
                  MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                  Chronological Activities