Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
t.elf

Overview

General Information

Sample name:t.elf
Analysis ID:1584345
MD5:5eac14dfbadebe0e62d714bee8a873d0
SHA1:51a2ef104a64a21edfbebe3f1294ed7bb3605b59
SHA256:bfa0d7d433c1e0a5a89554d466294fc66bf83acc1b5284f6d9378f1870d4d642
Tags:elfuser-abuse_ch
Infos:

Detection

Gafgyt
Score:80
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Gafgyt
Connects to many ports of the same IP (likely port scanning)
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Sample and/or dropped files contains symbols with suspicious names
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1584345
Start date and time:2025-01-05 08:51:39 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 22s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:t.elf
Detection:MAL
Classification:mal80.spre.troj.linELF@0/0@2/0

Runtime Messages

Command:/tmp/t.elf
PID:5833
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
gosh that chinese family at the other table sure ate alot
Standard Error:

Process Tree

  • system is lnxubuntu20
  • t.elf (PID: 5833, Parent: 5758, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/t.elf
    • t.elf New Fork (PID: 5835, Parent: 5833)
    • t.elf New Fork (PID: 5837, Parent: 5833)
      • t.elf New Fork (PID: 5839, Parent: 5837)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
t.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    t.elfLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1bbe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    t.elfLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x1ace:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00

    Memory Dumps

    SourceRuleDescriptionAuthorStrings
    5833.1.00007efe90017000.00007efe90032000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1bbe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    5833.1.00007efe90017000.00007efe90032000.r-x.sdmpLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x1ace:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
    5835.1.00007efe90017000.00007efe90032000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1bbe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    5835.1.00007efe90017000.00007efe90032000.r-x.sdmpLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x1ace:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
    5837.1.00007efe90017000.00007efe90032000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1bbe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    Click to see the 1 entries

    Suricata Signatures

    ⊘No Suricata rule has matched

    Joe Sandbox Signatures

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Antivirus / Scanner detection for submitted sample
    Source: t.elfAvira: detected
    Multi AV Scanner detection for submitted file
    Source: t.elfVirustotal: Detection: 60%Perma Link
    Source: t.elfReversingLabs: Detection: 65%

    Spreading

    barindex
    Opens /proc/net/* files useful for finding connected devices and routers
    Source: /tmp/t.elf (PID: 5833)Opens: /proc/net/routeJump to behavior

    Networking

    barindex
    Connects to many ports of the same IP (likely port scanning)
    Source: global trafficTCP traffic: 195.133.52.175 ports 65489,4,5,6,8,9
    Source: global trafficTCP traffic: 192.168.2.15:56698 -> 195.133.52.175:65489
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

    System Summary

    barindex
    Malicious sample detected (through community Yara rule)
    Source: t.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: t.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5833.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5833.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5835.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5835.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5837.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5837.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: t.elfELF static info symbol of initial sample: __gnu_unwind_execute
    Source: t.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: t.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5833.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5833.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5835.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5835.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5837.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5837.1.00007efe90017000.00007efe90032000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: classification engineClassification label: mal80.spre.troj.linELF@0/0@2/0
    Source: /tmp/t.elf (PID: 5833)Queries kernel information via 'uname': Jump to behavior
    Source: t.elf, 5833.1.000055ee90d9d000.000055ee90eec000.rw-.sdmp, t.elf, 5835.1.000055ee90d9d000.000055ee90eec000.rw-.sdmp, t.elf, 5837.1.000055ee90d9d000.000055ee90eec000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
    Source: t.elf, 5833.1.00007fff80e48000.00007fff80e69000.rw-.sdmp, t.elf, 5835.1.00007fff80e48000.00007fff80e69000.rw-.sdmp, t.elf, 5837.1.00007fff80e48000.00007fff80e69000.rw-.sdmpBinary or memory string: hx86_64/usr/bin/qemu-arm/tmp/t.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/t.elf
    Source: t.elf, 5833.1.000055ee90d9d000.000055ee90eec000.rw-.sdmp, t.elf, 5835.1.000055ee90d9d000.000055ee90eec000.rw-.sdmp, t.elf, 5837.1.000055ee90d9d000.000055ee90eec000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
    Source: t.elf, 5833.1.00007fff80e48000.00007fff80e69000.rw-.sdmp, t.elf, 5835.1.00007fff80e48000.00007fff80e69000.rw-.sdmp, t.elf, 5837.1.00007fff80e48000.00007fff80e69000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

    Stealing of Sensitive Information

    barindex
    Yara detected Gafgyt
    Source: Yara matchFile source: t.elf, type: SAMPLE

    Remote Access Functionality

    barindex
    Yara detected Gafgyt
    Source: Yara matchFile source: t.elf, type: SAMPLE

    Mitre Att&ck Matrix

    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
    Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
    Masquerading    		OS Credential Dumping11
    Security Software Discovery    		Remote ServicesData from Local System1
    Non-Standard Port    		Exfiltration Over Other Network MediumAbuse Accessibility Features
    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
    Remote System Discovery    		Remote Desktop ProtocolData from Removable Media1
    Non-Application Layer Protocol    		Exfiltration Over BluetoothNetwork Denial of Service
    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
    Application Layer Protocol    		Automated ExfiltrationData Encrypted for Impact

    Malware Configuration

    ⊘No configs have been found

    Behavior Graph

    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Number of created Files
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1584345 Sample: t.elf Startdate: 05/01/2025 Architecture: LINUX Score: 80 17 195.133.52.175, 56698, 56700, 56702 FLEX-ASRU Russian Federation 2->17 19 daisy.ubuntu.com 2->19 21 Malicious sample detected (through community Yara rule) 2->21 23 Antivirus / Scanner detection for submitted sample 2->23 25 Multi AV Scanner detection for submitted file 2->25 27 2 other signatures 2->27 8 t.elf 2->8         started        signatures3 process4 signatures5 29 Opens /proc/net/* files useful for finding connected devices and routers 8->29 11 t.elf 8->11         started        13 t.elf 8->13         started        process6 process7 15 t.elf 11->15         started       

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    t.elf60%VirustotalBrowse
    t.elf66%ReversingLabsLinux.Backdoor.Gafgyt
    t.elf100%AviraLINUX/Gafgyt.opnd

    Dropped Files

    ⊘No Antivirus matches

    Domains

    ⊘No Antivirus matches

    URLs

    ⊘No Antivirus matches

    Domains and IPs

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    daisy.ubuntu.com
    		162.213.35.25
    		truefalse
      		high

      World Map of Contacted IPs

      • No. of IPs < 25%
      • 25% < No. of IPs < 50%
      • 50% < No. of IPs < 75%
      • 75% < No. of IPs

      Public IPs

      IPDomainCountryFlagASNASN NameMalicious
      195.133.52.175
      		unknownRussian Federation
      		21453FLEX-ASRUtrue

      Joe Sandbox View / Context

      IPs

      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
      195.133.52.175y.elfGet hashmaliciousGafgytBrowse
        c.elfGet hashmaliciousGafgytBrowse
          e.elfGet hashmaliciousGafgytBrowse
            x.elfGet hashmaliciousGafgytBrowse
              a.elfGet hashmaliciousGafgytBrowse
                i.elfGet hashmaliciousGafgytBrowse
                  176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse

                    Domains

                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                    daisy.ubuntu.comy.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.24
                    e.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.24
                    x.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.24
                    a.elfGet hashmaliciousGafgytBrowse
                    • 162.213.35.25
                    la.bot.powerpc.elfGet hashmaliciousMiraiBrowse
                    • 162.213.35.25
                    spc.elfGet hashmaliciousMiraiBrowse
                    • 162.213.35.25
                    176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 162.213.35.25
                    la.bot.arm7.elfGet hashmaliciousMiraiBrowse
                    • 162.213.35.25
                    arm5.elfGet hashmaliciousMiraiBrowse
                    • 162.213.35.24
                    main.arm6.elfGet hashmaliciousMiraiBrowse
                    • 162.213.35.25

                    ASNs

                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                    FLEX-ASRUy.elfGet hashmaliciousGafgytBrowse
                    • 195.133.52.175
                    c.elfGet hashmaliciousGafgytBrowse
                    • 195.133.52.175
                    e.elfGet hashmaliciousGafgytBrowse
                    • 195.133.52.175
                    x.elfGet hashmaliciousGafgytBrowse
                    • 195.133.52.175
                    a.elfGet hashmaliciousGafgytBrowse
                    • 195.133.52.175
                    17360626254f6ab0798f0d71fe81e2d058a575b873a7088f40695d7fd8031d0961d3a3694a780.dat-decoded.exeGet hashmaliciousRemcosBrowse
                    • 195.133.78.18
                    Tax_Refund_Claim_2024_Australian_Taxation_Office.jsGet hashmaliciousRemcosBrowse
                    • 195.133.78.18
                    i.elfGet hashmaliciousGafgytBrowse
                    • 195.133.52.175
                    176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse
                    • 195.133.52.175
                    2.elfGet hashmaliciousUnknownBrowse
                    • 94.253.22.15

                    JA3 Fingerprints

                    ⊘No context

                    Dropped Files

                    ⊘No context

                    Created / dropped Files

                    ⊘No created / dropped files found

                    Static File Info

                    General

                    File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                    Entropy (8bit):5.97412177766836
                    TrID:
                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                    File name:t.elf
                    File size:176'658 bytes
                    MD5:5eac14dfbadebe0e62d714bee8a873d0
                    SHA1:51a2ef104a64a21edfbebe3f1294ed7bb3605b59
                    SHA256:bfa0d7d433c1e0a5a89554d466294fc66bf83acc1b5284f6d9378f1870d4d642
                    SHA512:79a0bf584ee548d34e775ee0e7f8e95b0167d275c430aa2f19bdcfcd88f32f6e6d4b90655911407b64b3c49906bf346ca8fb56b33b0b806f68d00de5afc86e5b
                    SSDEEP:3072:L7EM1YSFQaDaV7r/OqZru7lt/CUnPD3MMM/9DsfGSfmUIwHyA/WRZ:R1QaDaV7r/RZIt/5nPD3/M/9DsOSfmUE
                    TLSH:89044A04D650975BC2E223BAE7CB424E33335F94A3D733198938BBB43BD27A95E22515
                    File Content Preview:.ELF..............(.........4...........4. ...(........p.....,...,.. ... ...............................................................<u..........................................Q.td..................................-...L..................G.F.G.F.G.F.G.

                    Static ELF Info

                    ELF header

                    Class:ELF32
                    Data:2's complement, little endian
                    Version:1 (current)
                    Machine:ARM
                    Version Number:0x1
                    Type:EXEC (Executable file)
                    OS/ABI:UNIX - System V
                    ABI Version:0
                    Entry Point Address:0x81d0
                    Flags:0x4000002
                    ELF Header Size:52
                    Program Header Offset:52
                    Program Header Size:32
                    Number of Program Headers:5
                    Section Header Offset:138392
                    Section Header Size:40
                    Number of Section Headers:29
                    Header String Table Index:26

                    Sections

                    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                    NULL0x00x00x00x00x0000
                    .initPROGBITS0x80d40xd40x100x00x6AX004
                    .textPROGBITS0x80f00xf00x182c00x00x6AX0016
                    .finiPROGBITS0x203b00x183b00x100x00x6AX004
                    .rodataPROGBITS0x203c00x183c00x291c0x00x2A008
                    .ARM.extabPROGBITS0x22cdc0x1acdc0x180x00x2A004
                    .ARM.exidxARM_EXIDX0x22cf40x1acf40x1200x00x82AL204
                    .eh_framePROGBITS0x2b0000x1b0000x40x00x3WA004
                    .tbssNOBITS0x2b0040x1b0040x80x00x403WAT004
                    .init_arrayINIT_ARRAY0x2b0040x1b0040x40x00x3WA004
                    .fini_arrayFINI_ARRAY0x2b0080x1b0080x40x00x3WA004
                    .jcrPROGBITS0x2b00c0x1b00c0x40x00x3WA004
                    .gotPROGBITS0x2b0100x1b0100xb00x40x3WA004
                    .dataPROGBITS0x2b0c00x1b0c00x2580x00x3WA004
                    .bssNOBITS0x2b3180x1b3180x72240x00x3WA008
                    .commentPROGBITS0x00x1b3180xcf40x00x0001
                    .debug_arangesPROGBITS0x00x1c0100x1400x00x0008
                    .debug_pubnamesPROGBITS0x00x1c1500x2130x00x0001
                    .debug_infoPROGBITS0x00x1c3630x20430x00x0001
                    .debug_abbrevPROGBITS0x00x1e3a60x6e20x00x0001
                    .debug_linePROGBITS0x00x1ea880xe760x00x0001
                    .debug_framePROGBITS0x00x1f9000x2b80x00x0004
                    .debug_strPROGBITS0x00x1fbb80x8ca0x10x30MS001
                    .debug_locPROGBITS0x00x204820x118f0x00x0001
                    .debug_rangesPROGBITS0x00x216110x5580x00x0001
                    .ARM.attributesARM_ATTRIBUTES0x00x21b690x160x00x0001
                    .shstrtabSTRTAB0x00x21b7f0x1170x00x0001
                    .symtabSYMTAB0x00x221200x5fa00x100x0288434
                    .strtabSTRTAB0x00x280c00x31520x00x0001

                    Program Segments

                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                    EXIDX0x1acf40x22cf40x22cf40x1200x1204.48270x4R 0x4.ARM.exidx
                    LOAD0x00x80000x80000x1ae140x1ae146.06490x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                    LOAD0x1b0000x2b0000x2b0000x3180x753c4.00790x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                    TLS0x1b0040x2b0040x2b0040x00x80.00000x4R 0x4.tbss
                    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                    Symbols

                    NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                    .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    .symtab0x80d40SECTION<unknown>DEFAULT1
                    .symtab0x80f00SECTION<unknown>DEFAULT2
                    .symtab0x203b00SECTION<unknown>DEFAULT3
                    .symtab0x203c00SECTION<unknown>DEFAULT4
                    .symtab0x22cdc0SECTION<unknown>DEFAULT5
                    .symtab0x22cf40SECTION<unknown>DEFAULT6
                    .symtab0x2b0000SECTION<unknown>DEFAULT7
                    .symtab0x2b0040SECTION<unknown>DEFAULT8
                    .symtab0x2b0040SECTION<unknown>DEFAULT9
                    .symtab0x2b0080SECTION<unknown>DEFAULT10
                    .symtab0x2b00c0SECTION<unknown>DEFAULT11
                    .symtab0x2b0100SECTION<unknown>DEFAULT12
                    .symtab0x2b0c00SECTION<unknown>DEFAULT13
                    .symtab0x2b3180SECTION<unknown>DEFAULT14
                    .symtab0x00SECTION<unknown>DEFAULT15
                    .symtab0x00SECTION<unknown>DEFAULT16
                    .symtab0x00SECTION<unknown>DEFAULT17
                    .symtab0x00SECTION<unknown>DEFAULT18
                    .symtab0x00SECTION<unknown>DEFAULT19
                    .symtab0x00SECTION<unknown>DEFAULT20
                    .symtab0x00SECTION<unknown>DEFAULT21
                    .symtab0x00SECTION<unknown>DEFAULT22
                    .symtab0x00SECTION<unknown>DEFAULT23
                    .symtab0x00SECTION<unknown>DEFAULT24
                    .symtab0x00SECTION<unknown>DEFAULT25
                    $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                    $a.symtab0x203b00NOTYPE<unknown>DEFAULT3
                    $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                    $a.symtab0x203bc0NOTYPE<unknown>DEFAULT3
                    $a.symtab0x812c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x81700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x820c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x86340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x87800NOTYPE<unknown>DEFAULT2
                    $a.symtab0x88580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x89b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x8af40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x93e80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x97c80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x99500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9aa80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x9dd40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xa0ac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xa4c80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xa52c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xafe00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xb6a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0xbd140NOTYPE<unknown>DEFAULT2
                    $a.symtab0xbf680NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc1400NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc2640NOTYPE<unknown>DEFAULT2
                    $a.symtab0xc8f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xcd200NOTYPE<unknown>DEFAULT2
                    $a.symtab0xdd340NOTYPE<unknown>DEFAULT2
                    $a.symtab0xea5c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0xed180NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf6500NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf6e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf7b80NOTYPE<unknown>DEFAULT2
                    $a.symtab0xf9400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x103e00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x105c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x106100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1065c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x106c80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x107540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x108dc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11d580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11e6c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11e800NOTYPE<unknown>DEFAULT2
                    $a.symtab0x11f180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1200c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x120740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x120b40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x120f40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x121200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x121340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x121480NOTYPE<unknown>DEFAULT2
                    $a.symtab0x121800NOTYPE<unknown>DEFAULT2
                    $a.symtab0x122600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x122980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x122d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1231c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x123600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x123e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x124700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x124a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1251c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1254c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1256c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x125a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x125d40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x126a40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12e700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12f100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x12f540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x131040NOTYPE<unknown>DEFAULT2
                    $a.symtab0x131580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x136c80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x137000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x137c00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x137d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x137e00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x137f00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x138900NOTYPE<unknown>DEFAULT2
                    $a.symtab0x138b00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x139100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13a000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13a240NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13ae00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13bac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13ca80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13cc00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13dcc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13dfc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13e5c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13e840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13ea00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13f100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13f540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x13fc80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1400c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x140540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x140980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x141080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x141500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x141d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1421c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1428c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x142d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x143600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x143a80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x143ec0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1443c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x144500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x145140NOTYPE<unknown>DEFAULT2
                    $a.symtab0x145800NOTYPE<unknown>DEFAULT2
                    $a.symtab0x14f300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x150700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x154300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x158d00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x159100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15a380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15a500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15af40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15bac0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15c6c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15d100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15da00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15e780NOTYPE<unknown>DEFAULT2
                    $a.symtab0x15f700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1605c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1607c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x160980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x162700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x163340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x163e00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1652c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16b500NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16ba00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16c100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x16fdc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x170740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x170d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x172600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x172a80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x173980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x174d40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1752c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x175340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x175640NOTYPE<unknown>DEFAULT2
                    $a.symtab0x175bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x175c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x175f40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1764c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x176540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x176840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x176dc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x176e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x177100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x177980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x178740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x179340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x179880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x179e00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17dcc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17e480NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17e740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17efc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17f040NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17f100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17f200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17f300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17f700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17fb00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17fc40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x17fd80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x180000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x180400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x180540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x180980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x180d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x181180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x181780NOTYPE<unknown>DEFAULT2
                    $a.symtab0x181e40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x181f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x182300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x183400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x184100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x184d40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x185840NOTYPE<unknown>DEFAULT2
                    $a.symtab0x186700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x18a140NOTYPE<unknown>DEFAULT2
                    $a.symtab0x18a680NOTYPE<unknown>DEFAULT2
                    $a.symtab0x18a8c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x18b480NOTYPE<unknown>DEFAULT2
                    $a.symtab0x18e780NOTYPE<unknown>DEFAULT2
                    $a.symtab0x18e980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x192f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x194380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x194b80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1961c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x196f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x197280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1979c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x197c80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x199240NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1a1180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1a25c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1a3780NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1a6280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1a9d40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ab000NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1aba00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ac900NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ad700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ae5c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1aea00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1aef00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1af3c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1afb40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1aff40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b0180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b0940NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b18c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b4600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b4d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b5400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b7940NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b7a00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b7d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b8300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b8880NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b8940NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1b8f80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ba700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1bbb80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1bbdc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1bd9c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1bdf40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1bed00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1bf980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1bfc80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c06c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c0a80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c0cc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c17c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c4740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c5c40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c8600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1c9580NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1d1680NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1d1bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1d2140NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1d6700NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1d7080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1d7540NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1da980NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dad80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1db5c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1db9c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dc100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dc740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dcb40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dd300NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dd400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dd740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1de600NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1df140NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1df740NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1dfa40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1e1bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1e2280NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1e2d40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1e4180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1e8340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ecd00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ee100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ee640NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1eeb00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1eefc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ef040NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ef080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ef340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ef400NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1ef4c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f16c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f2bc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f2d80NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f3380NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f3a40NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f45c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f47c0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1f5c00NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1fb080NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1fb100NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1fb180NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1fb200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1fbdc0NOTYPE<unknown>DEFAULT2
                    $a.symtab0x1fc200NOTYPE<unknown>DEFAULT2
                    $a.symtab0x203340NOTYPE<unknown>DEFAULT2
                    $a.symtab0x2037c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x81640NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b0080NOTYPE<unknown>DEFAULT10
                    $d.symtab0x81bc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b0040NOTYPE<unknown>DEFAULT9
                    $d.symtab0x2b0c40NOTYPE<unknown>DEFAULT13
                    $d.symtab0x82000NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b0c80NOTYPE<unknown>DEFAULT13
                    $d.symtab0x877c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x88500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x89ac0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x8ae80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x93e40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x97b80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x994c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x206940NOTYPE<unknown>DEFAULT4
                    $d.symtab0x9aa40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x9dd00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xa0a80NOTYPE<unknown>DEFAULT2
                    $d.symtab0xa4c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0xa5280NOTYPE<unknown>DEFAULT2
                    $d.symtab0xafdc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xb6840NOTYPE<unknown>DEFAULT2
                    $d.symtab0xbd100NOTYPE<unknown>DEFAULT2
                    $d.symtab0xbf5c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xc1380NOTYPE<unknown>DEFAULT2
                    $d.symtab0xc2600NOTYPE<unknown>DEFAULT2
                    $d.symtab0xc8f40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xcd0c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xdce40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xea3c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0xed040NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf6200NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf6d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf7a80NOTYPE<unknown>DEFAULT2
                    $d.symtab0xf93c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b1080NOTYPE<unknown>DEFAULT13
                    $d.symtab0x105680NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1060c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x106580NOTYPE<unknown>DEFAULT2
                    $d.symtab0x106c40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x107500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x108d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x00NOTYPE<unknown>DEFAULT21
                    $d.symtab0x200NOTYPE<unknown>DEFAULT21
                    $d.symtab0x260NOTYPE<unknown>DEFAULT21
                    $d.symtab0x11f100NOTYPE<unknown>DEFAULT2
                    $d.symtab0x11ffc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1206c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x120b00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x120f00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1217c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x122500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x122940NOTYPE<unknown>DEFAULT2
                    $d.symtab0x122d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x123180NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1235c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x123dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1246c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x125140NOTYPE<unknown>DEFAULT2
                    $d.symtab0x125440NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b10c0NOTYPE<unknown>DEFAULT13
                    $d.symtab0x215ec0NOTYPE<unknown>DEFAULT4
                    $d.symtab0x2b1140NOTYPE<unknown>DEFAULT13
                    $d.symtab0x218ec0NOTYPE<unknown>DEFAULT4
                    $d.symtab0x125680NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1259c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1269c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x12e4c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x21c140NOTYPE<unknown>DEFAULT4
                    $d.symtab0x131000NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1314c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x136980NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b11c0NOTYPE<unknown>DEFAULT13
                    $d.symtab0x21c1c0NOTYPE<unknown>DEFAULT4
                    $d.symtab0x137b80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x139f80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13ba40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13dbc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x21ca00NOTYPE<unknown>DEFAULT4
                    $d.symtab0x13df40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13f000NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13f4c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x13fc00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x140040NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1404c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x140900NOTYPE<unknown>DEFAULT2
                    $d.symtab0x141000NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1414c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x141d00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x142140NOTYPE<unknown>DEFAULT2
                    $d.symtab0x142840NOTYPE<unknown>DEFAULT2
                    $d.symtab0x142d00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x143580NOTYPE<unknown>DEFAULT2
                    $d.symtab0x143a00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x143e40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x144380NOTYPE<unknown>DEFAULT2
                    $d.symtab0x145080NOTYPE<unknown>DEFAULT2
                    $d.symtab0x14f0c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b1200NOTYPE<unknown>DEFAULT13
                    $d.symtab0x150540NOTYPE<unknown>DEFAULT2
                    $d.symtab0x154100NOTYPE<unknown>DEFAULT2
                    $d.symtab0x158b40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x159080NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15a240NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b1380NOTYPE<unknown>DEFAULT13
                    $d.symtab0x15ad80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15b900NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15c500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15cf40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b1500NOTYPE<unknown>DEFAULT13
                    $d.symtab0x2b1e80NOTYPE<unknown>DEFAULT13
                    $d.symtab0x15d9c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15e6c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x15f600NOTYPE<unknown>DEFAULT2
                    $d.symtab0x160500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2280c0NOTYPE<unknown>DEFAULT4
                    $d.symtab0x162600NOTYPE<unknown>DEFAULT2
                    $d.symtab0x163140NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b1fc0NOTYPE<unknown>DEFAULT13
                    $d.symtab0x163d80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x165080NOTYPE<unknown>DEFAULT2
                    $d.symtab0x16b240NOTYPE<unknown>DEFAULT2
                    $d.symtab0x16b9c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x16fb40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x170d00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x172500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1738c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x174b80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x174d00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x175600NOTYPE<unknown>DEFAULT2
                    $d.symtab0x175f00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x176800NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1786c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x179200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x179800NOTYPE<unknown>DEFAULT2
                    $d.symtab0x179d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x17d800NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b2140NOTYPE<unknown>DEFAULT13
                    $d.symtab0x17e400NOTYPE<unknown>DEFAULT2
                    $d.symtab0x17e700NOTYPE<unknown>DEFAULT2
                    $d.symtab0x17ef00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x17f6c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x17fac0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x17ff80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1803c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x180940NOTYPE<unknown>DEFAULT2
                    $d.symtab0x180d40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x181140NOTYPE<unknown>DEFAULT2
                    $d.symtab0x181700NOTYPE<unknown>DEFAULT2
                    $d.symtab0x181dc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1822c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x183240NOTYPE<unknown>DEFAULT2
                    $d.symtab0x184080NOTYPE<unknown>DEFAULT2
                    $d.symtab0x184c80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1857c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x228a00NOTYPE<unknown>DEFAULT4
                    $d.symtab0x1865c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x18a0c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x18b440NOTYPE<unknown>DEFAULT2
                    $d.symtab0x18e680NOTYPE<unknown>DEFAULT2
                    $d.symtab0x192c40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x194a80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x196000NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b2240NOTYPE<unknown>DEFAULT13
                    $d.symtab0x2b2200NOTYPE<unknown>DEFAULT13
                    $d.symtab0x196f40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1a0f80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x229000NOTYPE<unknown>DEFAULT4
                    $d.symtab0x1a60c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1a9bc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1aaf80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1ac880NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1ad680NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1ae540NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b0900NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b1840NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b44c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b4c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b5300NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b76c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b7cc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b3080NOTYPE<unknown>DEFAULT13
                    $d.symtab0x1b87c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1b8f40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1bbb00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1bd980NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1becc0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1bf940NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1c0680NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1c1740NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1c4640NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1c5c00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1c84c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1d1200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b30c0NOTYPE<unknown>DEFAULT13
                    $d.symtab0x1d1b40NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1d20c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1d6280NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b30e0NOTYPE<unknown>DEFAULT13
                    $d.symtab0x229bc0NOTYPE<unknown>DEFAULT4
                    $d.symtab0x1d6f00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1da800NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1db580NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1db980NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1dc080NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1dc700NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1dcb00NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1dd200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1df9c0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1e1ac0NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1e2200NOTYPE<unknown>DEFAULT2
                    $d.symtab0x2b3100NOTYPE<unknown>DEFAULT13
                    $d.symtab0x229dc0NOTYPE<unknown>DEFAULT4
                    $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                    $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
                    $d.symtab0x530NOTYPE<unknown>DEFAULT21
                    $d.symtab0x1f1500NOTYPE<unknown>DEFAULT2
                    $d.symtab0x1faf80NOTYPE<unknown>DEFAULT2
                    $d.symtab0x580NOTYPE<unknown>DEFAULT21
                    $d.symtab0x00NOTYPE<unknown>DEFAULT23
                    $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
                    $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                    $t.symtab0x80f00NOTYPE<unknown>DEFAULT2
                    C.11.5548.symtab0x2287c12OBJECT<unknown>DEFAULT4
                    C.152.6371.symtab0x20d8c36OBJECT<unknown>DEFAULT4
                    C.156.6413.symtab0x2112c24OBJECT<unknown>DEFAULT4
                    C.186.6692.symtab0x2135020OBJECT<unknown>DEFAULT4
                    C.5.5083.symtab0x228a024OBJECT<unknown>DEFAULT4
                    C.7.5370.symtab0x2288812OBJECT<unknown>DEFAULT4
                    C.7.6078.symtab0x21bec12OBJECT<unknown>DEFAULT4
                    C.7.6109.symtab0x228dc12OBJECT<unknown>DEFAULT4
                    C.7.6182.symtab0x228b812OBJECT<unknown>DEFAULT4
                    C.8.6110.symtab0x228d012OBJECT<unknown>DEFAULT4
                    C.9.6119.symtab0x228c412OBJECT<unknown>DEFAULT4
                    Hexed.symtab0xbb98380FUNC<unknown>DEFAULT2
                    KHcommSOCK.symtab0x2b3384OBJECT<unknown>DEFAULT14
                    KHserverHACKER.symtab0x2b0f84OBJECT<unknown>DEFAULT13
                    LOCAL_ADDR.symtab0x320284OBJECT<unknown>DEFAULT14
                    Laligned.symtab0x138d80NOTYPE<unknown>DEFAULT2
                    Llastword.symtab0x138f40NOTYPE<unknown>DEFAULT2
                    Percocet_bp.symtab0x2b0d84OBJECT<unknown>DEFAULT13
                    Q.symtab0x2b35416384OBJECT<unknown>DEFAULT14
                    RSF.symtab0xbd14596FUNC<unknown>DEFAULT2
                    SendHttpRand.symtab0xcaf4556FUNC<unknown>DEFAULT2
                    UDPBYPASS.symtab0xae90336FUNC<unknown>DEFAULT2
                    UserAgents.symtab0x2b0ec12OBJECT<unknown>DEFAULT13
                    _Exit.symtab0x1200c104FUNC<unknown>DEFAULT2
                    _GLOBAL_OFFSET_TABLE_.symtab0x2b0100OBJECT<unknown>HIDDEN12
                    _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _Unwind_Complete.symtab0x1ef044FUNC<unknown>HIDDEN2
                    _Unwind_DeleteException.symtab0x1ef0844FUNC<unknown>HIDDEN2
                    _Unwind_ForcedUnwind.symtab0x1fbb836FUNC<unknown>HIDDEN2
                    _Unwind_GetCFA.symtab0x1eefc8FUNC<unknown>HIDDEN2
                    _Unwind_GetDataRelBase.symtab0x1ef4012FUNC<unknown>HIDDEN2
                    _Unwind_GetLanguageSpecificData.symtab0x1fbdc68FUNC<unknown>HIDDEN2
                    _Unwind_GetRegionStart.symtab0x2037c52FUNC<unknown>HIDDEN2
                    _Unwind_GetTextRelBase.symtab0x1ef3412FUNC<unknown>HIDDEN2
                    _Unwind_RaiseException.symtab0x1fb4c36FUNC<unknown>HIDDEN2
                    _Unwind_Resume.symtab0x1fb7036FUNC<unknown>HIDDEN2
                    _Unwind_Resume_or_Rethrow.symtab0x1fb9436FUNC<unknown>HIDDEN2
                    _Unwind_VRS_Get.symtab0x1ee6476FUNC<unknown>HIDDEN2
                    _Unwind_VRS_Pop.symtab0x1f47c324FUNC<unknown>HIDDEN2
                    _Unwind_VRS_Set.symtab0x1eeb076FUNC<unknown>HIDDEN2
                    _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_b.symtab0x2b10c4OBJECT<unknown>DEFAULT13
                    __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_b_data.symtab0x215ec768OBJECT<unknown>DEFAULT4
                    __C_ctype_tolower.symtab0x2b3104OBJECT<unknown>DEFAULT13
                    __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_tolower_data.symtab0x229dc768OBJECT<unknown>DEFAULT4
                    __C_ctype_toupper.symtab0x2b1144OBJECT<unknown>DEFAULT13
                    __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __C_ctype_toupper_data.symtab0x218ec768OBJECT<unknown>DEFAULT4
                    __EH_FRAME_BEGIN__.symtab0x2b0000OBJECT<unknown>DEFAULT7
                    __FRAME_END__.symtab0x2b0000OBJECT<unknown>DEFAULT7
                    __GI___C_ctype_b.symtab0x2b10c4OBJECT<unknown>HIDDEN13
                    __GI___C_ctype_tolower.symtab0x2b3104OBJECT<unknown>HIDDEN13
                    __GI___C_ctype_toupper.symtab0x2b1144OBJECT<unknown>HIDDEN13
                    __GI___close.symtab0x174f0100FUNC<unknown>HIDDEN2
                    __GI___close_nocancel.symtab0x174d424FUNC<unknown>HIDDEN2
                    __GI___ctype_b.symtab0x2b1104OBJECT<unknown>HIDDEN13
                    __GI___ctype_tolower.symtab0x2b3144OBJECT<unknown>HIDDEN13
                    __GI___ctype_toupper.symtab0x2b1184OBJECT<unknown>HIDDEN13
                    __GI___errno_location.symtab0x1254c32FUNC<unknown>HIDDEN2
                    __GI___fcntl_nocancel.symtab0x11e80152FUNC<unknown>HIDDEN2
                    __GI___fgetc_unlocked.symtab0x1a9d4300FUNC<unknown>HIDDEN2
                    __GI___glibc_strerror_r.symtab0x13ca824FUNC<unknown>HIDDEN2
                    __GI___libc_close.symtab0x174f0100FUNC<unknown>HIDDEN2
                    __GI___libc_fcntl.symtab0x11f18244FUNC<unknown>HIDDEN2
                    __GI___libc_open.symtab0x17580100FUNC<unknown>HIDDEN2
                    __GI___libc_read.symtab0x176a0100FUNC<unknown>HIDDEN2
                    __GI___libc_write.symtab0x17610100FUNC<unknown>HIDDEN2
                    __GI___open.symtab0x17580100FUNC<unknown>HIDDEN2
                    __GI___open_nocancel.symtab0x1756424FUNC<unknown>HIDDEN2
                    __GI___read.symtab0x176a0100FUNC<unknown>HIDDEN2
                    __GI___read_nocancel.symtab0x1768424FUNC<unknown>HIDDEN2
                    __GI___register_atfork.symtab0x170d8392FUNC<unknown>HIDDEN2
                    __GI___sigaddset.symtab0x1453836FUNC<unknown>HIDDEN2
                    __GI___sigdelset.symtab0x1455c36FUNC<unknown>HIDDEN2
                    __GI___sigismember.symtab0x1451436FUNC<unknown>HIDDEN2
                    __GI___uClibc_fini.symtab0x178b8124FUNC<unknown>HIDDEN2
                    __GI___uClibc_init.symtab0x1798888FUNC<unknown>HIDDEN2
                    __GI___write.symtab0x17610100FUNC<unknown>HIDDEN2
                    __GI___write_nocancel.symtab0x175f424FUNC<unknown>HIDDEN2
                    __GI___xpg_strerror_r.symtab0x13cc0268FUNC<unknown>HIDDEN2
                    __GI__exit.symtab0x1200c104FUNC<unknown>HIDDEN2
                    __GI_abort.symtab0x15910296FUNC<unknown>HIDDEN2
                    __GI_atoi.symtab0x1605c32FUNC<unknown>HIDDEN2
                    __GI_brk.symtab0x1b83088FUNC<unknown>HIDDEN2
                    __GI_close.symtab0x174f0100FUNC<unknown>HIDDEN2
                    __GI_closedir.symtab0x18230272FUNC<unknown>HIDDEN2
                    __GI_config_close.symtab0x1899852FUNC<unknown>HIDDEN2
                    __GI_config_open.symtab0x189cc72FUNC<unknown>HIDDEN2
                    __GI_config_read.symtab0x18670808FUNC<unknown>HIDDEN2
                    __GI_connect.symtab0x13f54116FUNC<unknown>HIDDEN2
                    __GI_dup2.symtab0x120b464FUNC<unknown>HIDDEN2
                    __GI_execl.symtab0x16334172FUNC<unknown>HIDDEN2
                    __GI_execve.symtab0x17f7064FUNC<unknown>HIDDEN2
                    __GI_exit.symtab0x16270196FUNC<unknown>HIDDEN2
                    __GI_fclose.symtab0x18b48816FUNC<unknown>HIDDEN2
                    __GI_fcntl.symtab0x11f18244FUNC<unknown>HIDDEN2
                    __GI_fflush_unlocked.symtab0x1a628940FUNC<unknown>HIDDEN2
                    __GI_fgetc.symtab0x1a118324FUNC<unknown>HIDDEN2
                    __GI_fgetc_unlocked.symtab0x1a9d4300FUNC<unknown>HIDDEN2
                    __GI_fgets.symtab0x1a25c284FUNC<unknown>HIDDEN2
                    __GI_fgets_unlocked.symtab0x1ab00160FUNC<unknown>HIDDEN2
                    __GI_fopen.symtab0x18e7832FUNC<unknown>HIDDEN2
                    __GI_fork.symtab0x16c10972FUNC<unknown>HIDDEN2
                    __GI_fputs_unlocked.symtab0x136c856FUNC<unknown>HIDDEN2
                    __GI_fseek.symtab0x1bbb836FUNC<unknown>HIDDEN2
                    __GI_fseeko64.symtab0x1bbdc448FUNC<unknown>HIDDEN2
                    __GI_fstat.symtab0x1b894100FUNC<unknown>HIDDEN2
                    __GI_fwrite_unlocked.symtab0x13700188FUNC<unknown>HIDDEN2
                    __GI_getc_unlocked.symtab0x1a9d4300FUNC<unknown>HIDDEN2
                    __GI_getdtablesize.symtab0x120f444FUNC<unknown>HIDDEN2
                    __GI_getegid.symtab0x17fb020FUNC<unknown>HIDDEN2
                    __GI_geteuid.symtab0x1212020FUNC<unknown>HIDDEN2
                    __GI_getgid.symtab0x17fc420FUNC<unknown>HIDDEN2
                    __GI_gethostbyname.symtab0x13e8428FUNC<unknown>HIDDEN2
                    __GI_gethostbyname2.symtab0x13ea0112FUNC<unknown>HIDDEN2
                    __GI_gethostbyname2_r.symtab0x1b18c724FUNC<unknown>HIDDEN2
                    __GI_gethostbyname_r.symtab0x1d754836FUNC<unknown>HIDDEN2
                    __GI_gethostname.symtab0x1dad8132FUNC<unknown>HIDDEN2
                    __GI_getpagesize.symtab0x17fd840FUNC<unknown>HIDDEN2
                    __GI_getpid.symtab0x1726072FUNC<unknown>HIDDEN2
                    __GI_getrlimit.symtab0x1214856FUNC<unknown>HIDDEN2
                    __GI_getsockname.symtab0x13fc868FUNC<unknown>HIDDEN2
                    __GI_gettimeofday.symtab0x1800064FUNC<unknown>HIDDEN2
                    __GI_getuid.symtab0x1804020FUNC<unknown>HIDDEN2
                    __GI_htonl.symtab0x13e0c32FUNC<unknown>HIDDEN2
                    __GI_htons.symtab0x13dfc16FUNC<unknown>HIDDEN2
                    __GI_inet_addr.symtab0x13e5c40FUNC<unknown>HIDDEN2
                    __GI_inet_aton.symtab0x1b094248FUNC<unknown>HIDDEN2
                    __GI_inet_ntop.symtab0x1c5c4668FUNC<unknown>HIDDEN2
                    __GI_inet_pton.symtab0x1c24c552FUNC<unknown>HIDDEN2
                    __GI_initstate_r.symtab0x15e78248FUNC<unknown>HIDDEN2
                    __GI_ioctl.symtab0x12180224FUNC<unknown>HIDDEN2
                    __GI_isatty.symtab0x1aff436FUNC<unknown>HIDDEN2
                    __GI_kill.symtab0x1226056FUNC<unknown>HIDDEN2
                    __GI_lseek64.symtab0x1dcb4112FUNC<unknown>HIDDEN2
                    __GI_memchr.symtab0x1aba0240FUNC<unknown>HIDDEN2
                    __GI_memcpy.symtab0x137e04FUNC<unknown>HIDDEN2
                    __GI_memmove.symtab0x1dd304FUNC<unknown>HIDDEN2
                    __GI_mempcpy.symtab0x1c0a836FUNC<unknown>HIDDEN2
                    __GI_memrchr.symtab0x1ac90224FUNC<unknown>HIDDEN2
                    __GI_memset.symtab0x137f0156FUNC<unknown>HIDDEN2
                    __GI_mmap.symtab0x17dcc124FUNC<unknown>HIDDEN2
                    __GI_mremap.symtab0x1805468FUNC<unknown>HIDDEN2
                    __GI_munmap.symtab0x1809864FUNC<unknown>HIDDEN2
                    __GI_nanosleep.symtab0x1811896FUNC<unknown>HIDDEN2
                    __GI_ntohl.symtab0x13e3c32FUNC<unknown>HIDDEN2
                    __GI_ntohs.symtab0x13e2c16FUNC<unknown>HIDDEN2
                    __GI_open.symtab0x17580100FUNC<unknown>HIDDEN2
                    __GI_opendir.symtab0x18410196FUNC<unknown>HIDDEN2
                    __GI_pipe.symtab0x1229864FUNC<unknown>HIDDEN2
                    __GI_poll.symtab0x1db9c116FUNC<unknown>HIDDEN2
                    __GI_raise.symtab0x172a8240FUNC<unknown>HIDDEN2
                    __GI_random.symtab0x15a50164FUNC<unknown>HIDDEN2
                    __GI_random_r.symtab0x15d10144FUNC<unknown>HIDDEN2
                    __GI_rawmemchr.symtab0x1c0cc176FUNC<unknown>HIDDEN2
                    __GI_read.symtab0x176a0100FUNC<unknown>HIDDEN2
                    __GI_readdir64.symtab0x18584236FUNC<unknown>HIDDEN2
                    __GI_recv.symtab0x14098112FUNC<unknown>HIDDEN2
                    __GI_recvfrom.symtab0x14150136FUNC<unknown>HIDDEN2
                    __GI_sbrk.symtab0x18178108FUNC<unknown>HIDDEN2
                    __GI_select.symtab0x12360132FUNC<unknown>HIDDEN2
                    __GI_send.symtab0x1421c112FUNC<unknown>HIDDEN2
                    __GI_sendto.symtab0x142d8136FUNC<unknown>HIDDEN2
                    __GI_setsockopt.symtab0x1436072FUNC<unknown>HIDDEN2
                    __GI_setstate_r.symtab0x15f70236FUNC<unknown>HIDDEN2
                    __GI_sigaction.symtab0x17e74136FUNC<unknown>HIDDEN2
                    __GI_sigaddset.symtab0x143ec80FUNC<unknown>HIDDEN2
                    __GI_sigemptyset.symtab0x1443c20FUNC<unknown>HIDDEN2
                    __GI_signal.symtab0x14450196FUNC<unknown>HIDDEN2
                    __GI_sigprocmask.symtab0x123e4140FUNC<unknown>HIDDEN2
                    __GI_sleep.symtab0x17398300FUNC<unknown>HIDDEN2
                    __GI_socket.symtab0x143a868FUNC<unknown>HIDDEN2
                    __GI_sprintf.symtab0x125a052FUNC<unknown>HIDDEN2
                    __GI_srandom_r.symtab0x15da0216FUNC<unknown>HIDDEN2
                    __GI_stat.symtab0x1dc10100FUNC<unknown>HIDDEN2
                    __GI_strcasecmp.symtab0x1e1bc108FUNC<unknown>HIDDEN2
                    __GI_strchr.symtab0x13910240FUNC<unknown>HIDDEN2
                    __GI_strchrnul.symtab0x1ad70236FUNC<unknown>HIDDEN2
                    __GI_strcmp.symtab0x1389028FUNC<unknown>HIDDEN2
                    __GI_strcoll.symtab0x1389028FUNC<unknown>HIDDEN2
                    __GI_strcpy.symtab0x13a0036FUNC<unknown>HIDDEN2
                    __GI_strcspn.symtab0x1ae5c68FUNC<unknown>HIDDEN2
                    __GI_strdup.symtab0x1dd4052FUNC<unknown>HIDDEN2
                    __GI_strlen.symtab0x138b096FUNC<unknown>HIDDEN2
                    __GI_strncpy.symtab0x13a24188FUNC<unknown>HIDDEN2
                    __GI_strnlen.symtab0x13ae0204FUNC<unknown>HIDDEN2
                    __GI_strpbrk.symtab0x1afb464FUNC<unknown>HIDDEN2
                    __GI_strrchr.symtab0x1aea080FUNC<unknown>HIDDEN2
                    __GI_strspn.symtab0x1aef076FUNC<unknown>HIDDEN2
                    __GI_strstr.symtab0x13bac252FUNC<unknown>HIDDEN2
                    __GI_strtok.symtab0x13dcc48FUNC<unknown>HIDDEN2
                    __GI_strtok_r.symtab0x1af3c120FUNC<unknown>HIDDEN2
                    __GI_strtol.symtab0x1607c28FUNC<unknown>HIDDEN2
                    __GI_sysconf.symtab0x1652c1572FUNC<unknown>HIDDEN2
                    __GI_tcgetattr.symtab0x1b018124FUNC<unknown>HIDDEN2
                    __GI_time.symtab0x1247048FUNC<unknown>HIDDEN2
                    __GI_times.symtab0x181e420FUNC<unknown>HIDDEN2
                    __GI_toupper.symtab0x1251c48FUNC<unknown>HIDDEN2
                    __GI_uname.symtab0x1dc7464FUNC<unknown>HIDDEN2
                    __GI_vfork.symtab0x16ba0112FUNC<unknown>HIDDEN2
                    __GI_vsnprintf.symtab0x125d4208FUNC<unknown>HIDDEN2
                    __GI_wait4.symtab0x181f856FUNC<unknown>HIDDEN2
                    __GI_waitpid.symtab0x124a0124FUNC<unknown>HIDDEN2
                    __GI_wcrtomb.symtab0x18a1484FUNC<unknown>HIDDEN2
                    __GI_wcsnrtombs.symtab0x18a8c188FUNC<unknown>HIDDEN2
                    __GI_wcsrtombs.symtab0x18a6836FUNC<unknown>HIDDEN2
                    __GI_write.symtab0x17610100FUNC<unknown>HIDDEN2
                    __JCR_END__.symtab0x2b00c0OBJECT<unknown>DEFAULT11
                    __JCR_LIST__.symtab0x2b00c0OBJECT<unknown>DEFAULT11
                    ___Unwind_ForcedUnwind.symtab0x1fbb836FUNC<unknown>HIDDEN2
                    ___Unwind_RaiseException.symtab0x1fb4c36FUNC<unknown>HIDDEN2
                    ___Unwind_Resume.symtab0x1fb7036FUNC<unknown>HIDDEN2
                    ___Unwind_Resume_or_Rethrow.symtab0x1fb9436FUNC<unknown>HIDDEN2
                    __adddf3.symtab0x1e424784FUNC<unknown>HIDDEN2
                    __aeabi_cdcmpeq.symtab0x1ed8024FUNC<unknown>HIDDEN2
                    __aeabi_cdcmple.symtab0x1ed8024FUNC<unknown>HIDDEN2
                    __aeabi_cdrcmple.symtab0x1ed6452FUNC<unknown>HIDDEN2
                    __aeabi_d2uiz.symtab0x1ee1084FUNC<unknown>HIDDEN2
                    __aeabi_dadd.symtab0x1e424784FUNC<unknown>HIDDEN2
                    __aeabi_dcmpeq.symtab0x1ed9824FUNC<unknown>HIDDEN2
                    __aeabi_dcmpge.symtab0x1ede024FUNC<unknown>HIDDEN2
                    __aeabi_dcmpgt.symtab0x1edf824FUNC<unknown>HIDDEN2
                    __aeabi_dcmple.symtab0x1edc824FUNC<unknown>HIDDEN2
                    __aeabi_dcmplt.symtab0x1edb024FUNC<unknown>HIDDEN2
                    __aeabi_ddiv.symtab0x1eac4524FUNC<unknown>HIDDEN2
                    __aeabi_dmul.symtab0x1e834656FUNC<unknown>HIDDEN2
                    __aeabi_drsub.symtab0x1e4180FUNC<unknown>HIDDEN2
                    __aeabi_dsub.symtab0x1e420788FUNC<unknown>HIDDEN2
                    __aeabi_f2d.symtab0x1e78064FUNC<unknown>HIDDEN2
                    __aeabi_i2d.symtab0x1e75840FUNC<unknown>HIDDEN2
                    __aeabi_idiv.symtab0x1e2d40FUNC<unknown>HIDDEN2
                    __aeabi_idivmod.symtab0x1e40024FUNC<unknown>HIDDEN2
                    __aeabi_l2d.symtab0x1e7d496FUNC<unknown>HIDDEN2
                    __aeabi_read_tp.symtab0x17f208FUNC<unknown>DEFAULT2
                    __aeabi_ui2d.symtab0x1e73436FUNC<unknown>HIDDEN2
                    __aeabi_uidiv.symtab0x11d580FUNC<unknown>HIDDEN2
                    __aeabi_uidivmod.symtab0x11e5424FUNC<unknown>HIDDEN2
                    __aeabi_ul2d.symtab0x1e7c0116FUNC<unknown>HIDDEN2
                    __aeabi_unwind_cpp_pr0.symtab0x1fb188FUNC<unknown>HIDDEN2
                    __aeabi_unwind_cpp_pr1.symtab0x1fb108FUNC<unknown>HIDDEN2
                    __aeabi_unwind_cpp_pr2.symtab0x1fb088FUNC<unknown>HIDDEN2
                    __app_fini.symtab0x2faa04OBJECT<unknown>HIDDEN14
                    __atexit_lock.symtab0x2b1fc24OBJECT<unknown>DEFAULT13
                    __bss_end__.symtab0x3253c0NOTYPE<unknown>DEFAULTSHN_ABS
                    __bss_start.symtab0x2b3180NOTYPE<unknown>DEFAULTSHN_ABS
                    __bss_start__.symtab0x2b3180NOTYPE<unknown>DEFAULTSHN_ABS
                    __check_one_fd.symtab0x1793484FUNC<unknown>DEFAULT2
                    __close.symtab0x174f0100FUNC<unknown>DEFAULT2
                    __close_nameservers.symtab0x1d670152FUNC<unknown>HIDDEN2
                    __close_nocancel.symtab0x174d424FUNC<unknown>DEFAULT2
                    __cmpdf2.symtab0x1ece0132FUNC<unknown>HIDDEN2
                    __ctype_b.symtab0x2b1104OBJECT<unknown>DEFAULT13
                    __ctype_tolower.symtab0x2b3144OBJECT<unknown>DEFAULT13
                    __ctype_toupper.symtab0x2b1184OBJECT<unknown>DEFAULT13
                    __curbrk.symtab0x320044OBJECT<unknown>HIDDEN14
                    __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __data_start.symtab0x2b0c00NOTYPE<unknown>DEFAULT13
                    __decode_dotted.symtab0x1c860248FUNC<unknown>HIDDEN2
                    __decode_header.symtab0x1de60180FUNC<unknown>HIDDEN2
                    __default_rt_sa_restorer.symtab0x17f140FUNC<unknown>DEFAULT2
                    __default_sa_restorer.symtab0x17f080FUNC<unknown>DEFAULT2
                    __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __div0.symtab0x11e6c20FUNC<unknown>HIDDEN2
                    __divdf3.symtab0x1eac4524FUNC<unknown>HIDDEN2
                    __divsi3.symtab0x1e2d4300FUNC<unknown>HIDDEN2
                    __dns_lookup.symtab0x1c9582064FUNC<unknown>HIDDEN2
                    __do_global_dtors_aux.symtab0x812c0FUNC<unknown>DEFAULT2
                    __do_global_dtors_aux_fini_array_entry.symtab0x2b0080OBJECT<unknown>DEFAULT10
                    __dso_handle.symtab0x2b0c00OBJECT<unknown>HIDDEN13
                    __encode_dotted.symtab0x1e228172FUNC<unknown>HIDDEN2
                    __encode_header.symtab0x1dd74236FUNC<unknown>HIDDEN2
                    __encode_question.symtab0x1df1496FUNC<unknown>HIDDEN2
                    __end__.symtab0x3253c0NOTYPE<unknown>DEFAULTSHN_ABS
                    __environ.symtab0x2fa984OBJECT<unknown>DEFAULT14
                    __eqdf2.symtab0x1ece0132FUNC<unknown>HIDDEN2
                    __errno_location.symtab0x1254c32FUNC<unknown>DEFAULT2
                    __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __error.symtab0x16c0c0NOTYPE<unknown>DEFAULT2
                    __exidx_end.symtab0x22e140NOTYPE<unknown>DEFAULTSHN_ABS
                    __exidx_start.symtab0x22cf40NOTYPE<unknown>DEFAULTSHN_ABS
                    __exit_cleanup.symtab0x2f5484OBJECT<unknown>HIDDEN14
                    __extendsfdf2.symtab0x1e78064FUNC<unknown>HIDDEN2
                    __fcntl_nocancel.symtab0x11e80152FUNC<unknown>DEFAULT2
                    __fgetc_unlocked.symtab0x1a9d4300FUNC<unknown>DEFAULT2
                    __fini_array_end.symtab0x2b00c0NOTYPE<unknown>HIDDEN10
                    __fini_array_start.symtab0x2b0080NOTYPE<unknown>HIDDEN10
                    __fixunsdfsi.symtab0x1ee1084FUNC<unknown>HIDDEN2
                    __floatdidf.symtab0x1e7d496FUNC<unknown>HIDDEN2
                    __floatsidf.symtab0x1e75840FUNC<unknown>HIDDEN2
                    __floatundidf.symtab0x1e7c0116FUNC<unknown>HIDDEN2
                    __floatunsidf.symtab0x1e73436FUNC<unknown>HIDDEN2
                    __fork.symtab0x16c10972FUNC<unknown>DEFAULT2
                    __fork_generation_pointer.symtab0x324f44OBJECT<unknown>HIDDEN14
                    __fork_handlers.symtab0x324f84OBJECT<unknown>HIDDEN14
                    __fork_lock.symtab0x2f54c4OBJECT<unknown>HIDDEN14
                    __frame_dummy_init_array_entry.symtab0x2b0040OBJECT<unknown>DEFAULT9
                    __gedf2.symtab0x1ecd0148FUNC<unknown>HIDDEN2
                    __get_hosts_byname_r.symtab0x1d70876FUNC<unknown>HIDDEN2
                    __getdents64.symtab0x1ba70328FUNC<unknown>HIDDEN2
                    __getpagesize.symtab0x17fd840FUNC<unknown>DEFAULT2
                    __getpid.symtab0x1726072FUNC<unknown>DEFAULT2
                    __glibc_strerror_r.symtab0x13ca824FUNC<unknown>DEFAULT2
                    __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __gnu_Unwind_ForcedUnwind.symtab0x1f2bc28FUNC<unknown>HIDDEN2
                    __gnu_Unwind_RaiseException.symtab0x1f3a4184FUNC<unknown>HIDDEN2
                    __gnu_Unwind_Restore_VFP.symtab0x1fb3c0FUNC<unknown>HIDDEN2
                    __gnu_Unwind_Resume.symtab0x1f338108FUNC<unknown>HIDDEN2
                    __gnu_Unwind_Resume_or_Rethrow.symtab0x1f45c32FUNC<unknown>HIDDEN2
                    __gnu_Unwind_Save_VFP.symtab0x1fb440FUNC<unknown>HIDDEN2
                    __gnu_unwind_execute.symtab0x1fc201812FUNC<unknown>HIDDEN2
                    __gnu_unwind_frame.symtab0x2033472FUNC<unknown>HIDDEN2
                    __gnu_unwind_pr_common.symtab0x1f5c01352FUNC<unknown>DEFAULT2
                    __gtdf2.symtab0x1ecd0148FUNC<unknown>HIDDEN2
                    __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __init_array_end.symtab0x2b0080NOTYPE<unknown>HIDDEN9
                    __init_array_start.symtab0x2b0040NOTYPE<unknown>HIDDEN9
                    __ledf2.symtab0x1ecd8140FUNC<unknown>HIDDEN2
                    __libc_close.symtab0x174f0100FUNC<unknown>DEFAULT2
                    __libc_connect.symtab0x13f54116FUNC<unknown>DEFAULT2
                    __libc_disable_asynccancel.symtab0x17710136FUNC<unknown>HIDDEN2
                    __libc_enable_asynccancel.symtab0x17798220FUNC<unknown>HIDDEN2
                    __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                    __libc_fcntl.symtab0x11f18244FUNC<unknown>DEFAULT2
                    __libc_fork.symtab0x16c10972FUNC<unknown>DEFAULT2
                    __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                    __libc_multiple_threads.symtab0x324fc4OBJECT<unknown>HIDDEN14
                    __libc_nanosleep.symtab0x1811896FUNC<unknown>DEFAULT2
                    __libc_open.symtab0x17580100FUNC<unknown>DEFAULT2
                    __libc_read.symtab0x176a0100FUNC<unknown>DEFAULT2
                    __libc_recv.symtab0x14098112FUNC<unknown>DEFAULT2
                    __libc_recvfrom.symtab0x14150136FUNC<unknown>DEFAULT2
                    __libc_select.symtab0x12360132FUNC<unknown>DEFAULT2
                    __libc_send.symtab0x1421c112FUNC<unknown>DEFAULT2
                    __libc_sendto.symtab0x142d8136FUNC<unknown>DEFAULT2
                    __libc_setup_tls.symtab0x1b564560FUNC<unknown>DEFAULT2
                    __libc_sigaction.symtab0x17e74136FUNC<unknown>DEFAULT2
                    __libc_stack_end.symtab0x2fa944OBJECT<unknown>DEFAULT14
                    __libc_waitpid.symtab0x124a0124FUNC<unknown>DEFAULT2
                    __libc_write.symtab0x17610100FUNC<unknown>DEFAULT2
                    __linkin_atfork.symtab0x17074100FUNC<unknown>HIDDEN2
                    __lll_lock_wait_private.symtab0x16fdc152FUNC<unknown>HIDDEN2
                    __local_nameserver.symtab0x229bc16OBJECT<unknown>HIDDEN4
                    __ltdf2.symtab0x1ecd8140FUNC<unknown>HIDDEN2
                    __malloc_consolidate.symtab0x154e0436FUNC<unknown>HIDDEN2
                    __malloc_largebin_index.symtab0x14580120FUNC<unknown>DEFAULT2
                    __malloc_lock.symtab0x2b12024OBJECT<unknown>DEFAULT13
                    __malloc_state.symtab0x3217c888OBJECT<unknown>DEFAULT14
                    __malloc_trim.symtab0x15430176FUNC<unknown>DEFAULT2
                    __muldf3.symtab0x1e834656FUNC<unknown>HIDDEN2
                    __nameserver.symtab0x325304OBJECT<unknown>HIDDEN14
                    __nameservers.symtab0x325344OBJECT<unknown>HIDDEN14
                    __nedf2.symtab0x1ece0132FUNC<unknown>HIDDEN2
                    __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __open.symtab0x17580100FUNC<unknown>DEFAULT2
                    __open_etc_hosts.symtab0x1df7448FUNC<unknown>HIDDEN2
                    __open_nameservers.symtab0x1d2141116FUNC<unknown>HIDDEN2
                    __open_nocancel.symtab0x1756424FUNC<unknown>DEFAULT2
                    __pagesize.symtab0x2fa9c4OBJECT<unknown>DEFAULT14
                    __preinit_array_end.symtab0x2b0040NOTYPE<unknown>HIDDEN8
                    __preinit_array_start.symtab0x2b0040NOTYPE<unknown>HIDDEN8
                    __progname.symtab0x2b2184OBJECT<unknown>DEFAULT13
                    __progname_full.symtab0x2b21c4OBJECT<unknown>DEFAULT13
                    __pthread_initialize_minimal.symtab0x1b79412FUNC<unknown>DEFAULT2
                    __pthread_mutex_init.symtab0x1787c8FUNC<unknown>DEFAULT2
                    __pthread_mutex_lock.symtab0x178748FUNC<unknown>DEFAULT2
                    __pthread_mutex_trylock.symtab0x178748FUNC<unknown>DEFAULT2
                    __pthread_mutex_unlock.symtab0x178748FUNC<unknown>DEFAULT2
                    __pthread_return_0.symtab0x178748FUNC<unknown>DEFAULT2
                    __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __read.symtab0x176a0100FUNC<unknown>DEFAULT2
                    __read_etc_hosts_r.symtab0x1dfa4536FUNC<unknown>HIDDEN2
                    __read_nocancel.symtab0x1768424FUNC<unknown>DEFAULT2
                    __register_atfork.symtab0x170d8392FUNC<unknown>DEFAULT2
                    __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                    __res_sync.symtab0x325284OBJECT<unknown>HIDDEN14
                    __resolv_attempts.symtab0x2b30f1OBJECT<unknown>HIDDEN13
                    __resolv_lock.symtab0x3200c24OBJECT<unknown>DEFAULT14
                    __resolv_timeout.symtab0x2b30e1OBJECT<unknown>HIDDEN13
                    __restore_core_regs.symtab0x1fb2028FUNC<unknown>HIDDEN2
                    __rtld_fini.symtab0x2faa44OBJECT<unknown>HIDDEN14
                    __searchdomain.symtab0x3252c4OBJECT<unknown>HIDDEN14
                    __searchdomains.symtab0x325384OBJECT<unknown>HIDDEN14
                    __sigaddset.symtab0x1453836FUNC<unknown>DEFAULT2
                    __sigdelset.symtab0x1455c36FUNC<unknown>DEFAULT2
                    __sigismember.symtab0x1451436FUNC<unknown>DEFAULT2
                    __sigjmp_save.symtab0x1da9864FUNC<unknown>HIDDEN2
                    __sigsetjmp.symtab0x1b88812FUNC<unknown>DEFAULT2
                    __stdin.symtab0x2b2304OBJECT<unknown>DEFAULT13
                    __stdio_READ.symtab0x1bd9c88FUNC<unknown>HIDDEN2
                    __stdio_WRITE.symtab0x1bdf4220FUNC<unknown>HIDDEN2
                    __stdio_adjust_position.symtab0x1bed0200FUNC<unknown>HIDDEN2
                    __stdio_fwrite.symtab0x192f8320FUNC<unknown>HIDDEN2
                    __stdio_rfill.symtab0x1bf9848FUNC<unknown>HIDDEN2
                    __stdio_seek.symtab0x1c06c60FUNC<unknown>HIDDEN2
                    __stdio_trans2r_o.symtab0x1bfc8164FUNC<unknown>HIDDEN2
                    __stdio_trans2w_o.symtab0x1961c220FUNC<unknown>HIDDEN2
                    __stdio_wcommit.symtab0x196f848FUNC<unknown>HIDDEN2
                    __stdout.symtab0x2b2344OBJECT<unknown>DEFAULT13
                    __subdf3.symtab0x1e420788FUNC<unknown>HIDDEN2
                    __sys_connect.symtab0x13f1068FUNC<unknown>DEFAULT2
                    __sys_recv.symtab0x1405468FUNC<unknown>DEFAULT2
                    __sys_recvfrom.symtab0x1410872FUNC<unknown>DEFAULT2
                    __sys_send.symtab0x141d868FUNC<unknown>DEFAULT2
                    __sys_sendto.symtab0x1428c76FUNC<unknown>DEFAULT2
                    __syscall_error.symtab0x17e4844FUNC<unknown>HIDDEN2
                    __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __syscall_nanosleep.symtab0x180d864FUNC<unknown>DEFAULT2
                    __syscall_poll.symtab0x1db5c64FUNC<unknown>DEFAULT2
                    __syscall_rt_sigaction.symtab0x17f3064FUNC<unknown>DEFAULT2
                    __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __syscall_select.symtab0x1231c68FUNC<unknown>DEFAULT2
                    __tls_get_addr.symtab0x1b54036FUNC<unknown>DEFAULT2
                    __uClibc_fini.symtab0x178b8124FUNC<unknown>DEFAULT2
                    __uClibc_init.symtab0x1798888FUNC<unknown>DEFAULT2
                    __uClibc_main.symtab0x179e01004FUNC<unknown>DEFAULT2
                    __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __uclibc_progname.symtab0x2b2144OBJECT<unknown>HIDDEN13
                    __udivsi3.symtab0x11d58252FUNC<unknown>HIDDEN2
                    __vfork.symtab0x16ba0112FUNC<unknown>HIDDEN2
                    __write.symtab0x17610100FUNC<unknown>DEFAULT2
                    __write_nocancel.symtab0x175f424FUNC<unknown>DEFAULT2
                    __xpg_strerror_r.symtab0x13cc0268FUNC<unknown>DEFAULT2
                    __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    __xstat32_conv.symtab0x1b9c4172FUNC<unknown>HIDDEN2
                    __xstat64_conv.symtab0x1b8f8204FUNC<unknown>HIDDEN2
                    _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _bss_custom_printf_spec.symtab0x2f36810OBJECT<unknown>DEFAULT14
                    _bss_end__.symtab0x3253c0NOTYPE<unknown>DEFAULTSHN_ABS
                    _call_via_fp.symtab0x811d4FUNC<unknown>HIDDEN2
                    _call_via_ip.symtab0x81214FUNC<unknown>HIDDEN2
                    _call_via_lr.symtab0x81294FUNC<unknown>HIDDEN2
                    _call_via_r0.symtab0x80f14FUNC<unknown>HIDDEN2
                    _call_via_r1.symtab0x80f54FUNC<unknown>HIDDEN2
                    _call_via_r2.symtab0x80f94FUNC<unknown>HIDDEN2
                    _call_via_r3.symtab0x80fd4FUNC<unknown>HIDDEN2
                    _call_via_r4.symtab0x81014FUNC<unknown>HIDDEN2
                    _call_via_r5.symtab0x81054FUNC<unknown>HIDDEN2
                    _call_via_r6.symtab0x81094FUNC<unknown>HIDDEN2
                    _call_via_r7.symtab0x810d4FUNC<unknown>HIDDEN2
                    _call_via_r8.symtab0x81114FUNC<unknown>HIDDEN2
                    _call_via_r9.symtab0x81154FUNC<unknown>HIDDEN2
                    _call_via_sl.symtab0x81194FUNC<unknown>HIDDEN2
                    _call_via_sp.symtab0x81254FUNC<unknown>HIDDEN2
                    _charpad.symtab0x126a484FUNC<unknown>DEFAULT2
                    _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _custom_printf_arginfo.symtab0x3212440OBJECT<unknown>HIDDEN14
                    _custom_printf_handler.symtab0x3214c40OBJECT<unknown>HIDDEN14
                    _custom_printf_spec.symtab0x2b11c4OBJECT<unknown>HIDDEN13
                    _dl_aux_init.symtab0x1b7a056FUNC<unknown>DEFAULT2
                    _dl_init_static_tls.symtab0x2b3084OBJECT<unknown>DEFAULT13
                    _dl_nothread_init_static_tls.symtab0x1b7d888FUNC<unknown>HIDDEN2
                    _dl_phdr.symtab0x325204OBJECT<unknown>DEFAULT14
                    _dl_phnum.symtab0x325244OBJECT<unknown>DEFAULT14
                    _dl_tls_dtv_gaps.symtab0x325141OBJECT<unknown>DEFAULT14
                    _dl_tls_dtv_slotinfo_list.symtab0x325104OBJECT<unknown>DEFAULT14
                    _dl_tls_generation.symtab0x325184OBJECT<unknown>DEFAULT14
                    _dl_tls_max_dtv_idx.symtab0x325084OBJECT<unknown>DEFAULT14
                    _dl_tls_setup.symtab0x1b4d8104FUNC<unknown>DEFAULT2
                    _dl_tls_static_align.symtab0x325044OBJECT<unknown>DEFAULT14
                    _dl_tls_static_nelem.symtab0x3251c4OBJECT<unknown>DEFAULT14
                    _dl_tls_static_size.symtab0x3250c4OBJECT<unknown>DEFAULT14
                    _dl_tls_static_used.symtab0x325004OBJECT<unknown>DEFAULT14
                    _edata.symtab0x2b3180NOTYPE<unknown>DEFAULTSHN_ABS
                    _end.symtab0x3253c0NOTYPE<unknown>DEFAULTSHN_ABS
                    _endswith.symtab0x11914236FUNC<unknown>DEFAULT2
                    _exit.symtab0x1200c104FUNC<unknown>DEFAULT2
                    _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                    _fini.symtab0x203b00FUNC<unknown>DEFAULT3
                    _fixed_buffers.symtab0x2fac88192OBJECT<unknown>DEFAULT14

                    Network Behavior

                    Network Port Distribution

                    TCP Packets

                    TimestampSource PortDest PortSource IPDest IP
                    Jan 5, 2025 08:52:50.916582108 CET5669865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:52:50.921483040 CET6548956698195.133.52.175192.168.2.15
                    Jan 5, 2025 08:52:50.921533108 CET5669865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:52:50.921993971 CET5669865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:52:50.926827908 CET6548956698195.133.52.175192.168.2.15
                    Jan 5, 2025 08:52:51.635998011 CET6548956698195.133.52.175192.168.2.15
                    Jan 5, 2025 08:52:51.636077881 CET6548956698195.133.52.175192.168.2.15
                    Jan 5, 2025 08:52:51.636125088 CET5669865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:52:51.636526108 CET5669865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:52:51.641391993 CET6548956698195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:06.640217066 CET5670065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:06.645241022 CET6548956700195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:06.645315886 CET5670065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:06.645457029 CET5670065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:06.650249004 CET6548956700195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:07.365508080 CET6548956700195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:07.365648985 CET6548956700195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:07.365719080 CET5670065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:07.365902901 CET5670065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:07.372656107 CET6548956700195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:22.369718075 CET5670265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:22.374576092 CET6548956702195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:22.374660015 CET5670265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:22.374680042 CET5670265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:22.379478931 CET6548956702195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:23.083545923 CET6548956702195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:23.083647966 CET5670265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:23.083704948 CET6548956702195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:23.083800077 CET5670265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:23.088567972 CET6548956702195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:38.087753057 CET5670465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:38.092644930 CET6548956704195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:38.092721939 CET5670465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:38.092778921 CET5670465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:38.097544909 CET6548956704195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:38.803188086 CET6548956704195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:38.803353071 CET6548956704195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:38.803433895 CET5670465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:38.803514957 CET5670465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:38.808307886 CET6548956704195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:53.806653976 CET5670665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:53.811570883 CET6548956706195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:53.811670065 CET5670665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:53.811738968 CET5670665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:53.816482067 CET6548956706195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:54.530224085 CET6548956706195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:54.530373096 CET6548956706195.133.52.175192.168.2.15
                    Jan 5, 2025 08:53:54.530371904 CET5670665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:54.530430079 CET5670665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:53:54.535168886 CET6548956706195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:09.534034967 CET5670865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:09.538861036 CET6548956708195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:09.538949013 CET5670865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:09.539016962 CET5670865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:09.543812037 CET6548956708195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:13.263673067 CET6548956708195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:13.263804913 CET6548956708195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:13.263833046 CET5670865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:13.264092922 CET5670865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:13.268910885 CET6548956708195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:28.268234968 CET5671065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:28.273051023 CET6548956710195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:28.273175001 CET5671065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:28.273230076 CET5671065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:28.278464079 CET6548956710195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:29.004111052 CET6548956710195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:29.004237890 CET5671065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:29.004285097 CET6548956710195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:29.004435062 CET5671065489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:29.009202003 CET6548956710195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:44.008759975 CET5671265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:44.013557911 CET6548956712195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:44.013652086 CET5671265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:44.013674974 CET5671265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:44.018465996 CET6548956712195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:44.722875118 CET6548956712195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:44.722935915 CET6548956712195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:44.723123074 CET5671265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:44.723287106 CET5671265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:44.727967978 CET6548956712195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:59.726922989 CET5671465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:59.731832027 CET6548956714195.133.52.175192.168.2.15
                    Jan 5, 2025 08:54:59.731905937 CET5671465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:59.731930017 CET5671465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:54:59.736733913 CET6548956714195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:00.436264992 CET6548956714195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:00.436336994 CET5671465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:00.436479092 CET6548956714195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:00.436542034 CET5671465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:00.441272020 CET6548956714195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:15.439553976 CET5671665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:15.444380999 CET6548956716195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:15.444473982 CET5671665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:15.444509983 CET5671665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:15.449579000 CET6548956716195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:16.154889107 CET6548956716195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:16.155033112 CET5671665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:16.155118942 CET6548956716195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:16.155215979 CET5671665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:16.159984112 CET6548956716195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:31.158759117 CET5671865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:31.166078091 CET6548956718195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:31.166202068 CET5671865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:31.166260004 CET5671865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:31.173393965 CET6548956718195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:31.878781080 CET6548956718195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:31.878906012 CET6548956718195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:31.878918886 CET5671865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:31.879002094 CET5671865489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:31.884520054 CET6548956718195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:36.711384058 CET5579053192.168.2.158.8.8.8
                    Jan 5, 2025 08:55:36.780040979 CET53557908.8.8.8192.168.2.15
                    Jan 5, 2025 08:55:36.780370951 CET5579053192.168.2.158.8.8.8
                    Jan 5, 2025 08:55:36.780370951 CET5579053192.168.2.158.8.8.8
                    Jan 5, 2025 08:55:36.781150103 CET5579053192.168.2.158.8.8.8
                    Jan 5, 2025 08:55:36.785351038 CET53557908.8.8.8192.168.2.15
                    Jan 5, 2025 08:55:36.785923958 CET53557908.8.8.8192.168.2.15
                    Jan 5, 2025 08:55:37.244666100 CET53557908.8.8.8192.168.2.15
                    Jan 5, 2025 08:55:37.244777918 CET5579053192.168.2.158.8.8.8
                    Jan 5, 2025 08:55:37.378047943 CET53557908.8.8.8192.168.2.15
                    Jan 5, 2025 08:55:37.378377914 CET5579053192.168.2.158.8.8.8
                    Jan 5, 2025 08:55:39.255640030 CET53557908.8.8.8192.168.2.15
                    Jan 5, 2025 08:55:39.256031036 CET5579053192.168.2.158.8.8.8
                    Jan 5, 2025 08:55:39.261008978 CET53557908.8.8.8192.168.2.15
                    Jan 5, 2025 08:55:46.882747889 CET5672265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:46.887636900 CET6548956722195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:46.887691975 CET5672265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:46.887727976 CET5672265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:46.892520905 CET6548956722195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:47.588071108 CET6548956722195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:47.588211060 CET5672265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:47.588222980 CET6548956722195.133.52.175192.168.2.15
                    Jan 5, 2025 08:55:47.588290930 CET5672265489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:55:47.593102932 CET6548956722195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:02.592421055 CET5672465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:02.597218037 CET6548956724195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:02.597327948 CET5672465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:02.597354889 CET5672465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:02.602170944 CET6548956724195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:03.299463987 CET6548956724195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:03.299571991 CET6548956724195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:03.299627066 CET5672465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:03.299700975 CET5672465489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:03.304480076 CET6548956724195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:18.303453922 CET5672665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:18.308223963 CET6548956726195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:18.308321953 CET5672665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:18.308347940 CET5672665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:18.313052893 CET6548956726195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:19.025100946 CET6548956726195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:19.025306940 CET5672665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:19.025372028 CET6548956726195.133.52.175192.168.2.15
                    Jan 5, 2025 08:56:19.025499105 CET5672665489192.168.2.15195.133.52.175
                    Jan 5, 2025 08:56:19.030214071 CET6548956726195.133.52.175192.168.2.15

                    DNS Queries

                    TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                    Jan 5, 2025 08:55:36.780370951 CET192.168.2.158.8.8.80x209Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                    Jan 5, 2025 08:55:36.781150103 CET192.168.2.158.8.8.80xfd82Standard query (0)daisy.ubuntu.com28IN (0x0001)false

                    DNS Answers

                    TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                    Jan 5, 2025 08:55:37.378047943 CET8.8.8.8192.168.2.150x209No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false
                    Jan 5, 2025 08:55:37.378047943 CET8.8.8.8192.168.2.150x209No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false

                    System Behavior

                    General

                    Start time (UTC):07:52:49
                    Start date (UTC):05/01/2025
                    Path:/tmp/t.elf
                    Arguments:/tmp/t.elf
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    Chronological Activities


                    General

                    Start time (UTC):07:52:49
                    Start date (UTC):05/01/2025
                    Path:/tmp/t.elf
                    Arguments:-
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    Chronological Activities


                    General

                    Start time (UTC):07:52:49
                    Start date (UTC):05/01/2025
                    Path:/tmp/t.elf
                    Arguments:-
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    Chronological Activities


                    General

                    Start time (UTC):07:52:49
                    Start date (UTC):05/01/2025
                    Path:/tmp/t.elf
                    Arguments:-
                    File size:4956856 bytes
                    MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                    Chronological Activities