Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
s.elf

Overview

General Information

Sample name:s.elf
Analysis ID:1584349
MD5:09748a86923870171d1821e84a4ae778
SHA1:b583e96c59f11380bf6286904cb925c279f16378
SHA256:ea358ee792f3c08a4b8c34cf10d1c04c9003c13d21d195d348173aa78ec4c75c
Tags:elfuser-abuse_ch
Infos:

Detection

Gafgyt
Score:80
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Gafgyt
Connects to many ports of the same IP (likely port scanning)
Opens /proc/net/* files useful for finding connected devices and routers
Detected TCP or UDP traffic on non-standard ports
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1584349
Start date and time:2025-01-05 08:57:19 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 59s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:s.elf
Detection:MAL
Classification:mal80.spre.troj.linELF@0/0@2/0

Runtime Messages

Command:/tmp/s.elf
PID:5498
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
gosh that chinese family at the other table sure ate alot
Standard Error:

Process Tree

  • system is lnxubuntu20
  • s.elf (PID: 5498, Parent: 5422, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/s.elf
    • s.elf New Fork (PID: 5500, Parent: 5498)
    • s.elf New Fork (PID: 5501, Parent: 5498)
      • s.elf New Fork (PID: 5504, Parent: 5501)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
Bashlite, GafgytBashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
s.elfJoeSecurity_GafgytYara detected GafgytJoe Security
    s.elfLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1b9e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    s.elfLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x1aae:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00

    Memory Dumps

    SourceRuleDescriptionAuthorStrings
    5498.1.00007feb30017000.00007feb3002f000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1b9e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    5498.1.00007feb30017000.00007feb3002f000.r-x.sdmpLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x1aae:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
    5500.1.00007feb30017000.00007feb3002f000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1b9e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    5500.1.00007feb30017000.00007feb3002f000.r-x.sdmpLinux_Trojan_Gafgyt_d2953f92unknownunknown
    • 0x1aae:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
    5501.1.00007feb30017000.00007feb3002f000.r-x.sdmpLinux_Trojan_Gafgyt_6a510422unknownunknown
    • 0x1b9e:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
    Click to see the 1 entries

    Suricata Signatures

    ⊘No Suricata rule has matched

    Joe Sandbox Signatures

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Antivirus / Scanner detection for submitted sample
    Source: s.elfAvira: detected
    Multi AV Scanner detection for submitted file
    Source: s.elfVirustotal: Detection: 61%Perma Link
    Source: s.elfReversingLabs: Detection: 65%

    Spreading

    barindex
    Opens /proc/net/* files useful for finding connected devices and routers
    Source: /tmp/s.elf (PID: 5498)Opens: /proc/net/routeJump to behavior

    Networking

    barindex
    Connects to many ports of the same IP (likely port scanning)
    Source: global trafficTCP traffic: 195.133.52.175 ports 65489,4,5,6,8,9
    Source: global trafficTCP traffic: 192.168.2.14:54462 -> 195.133.52.175:65489
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: unknownTCP traffic detected without corresponding DNS query: 195.133.52.175
    Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

    System Summary

    barindex
    Malicious sample detected (through community Yara rule)
    Source: s.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: s.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5498.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5498.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5500.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5500.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: 5501.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
    Source: 5501.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
    Source: s.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: s.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5498.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5498.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5500.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5500.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: 5501.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
    Source: 5501.1.00007feb30017000.00007feb3002f000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
    Source: classification engineClassification label: mal80.spre.troj.linELF@0/0@2/0
    Source: s.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: s.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: s.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: s.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: s.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: s.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: s.elfELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
    Source: /tmp/s.elf (PID: 5498)Queries kernel information via 'uname': Jump to behavior
    Source: s.elf, 5498.1.00005635d665c000.00005635d67ab000.rw-.sdmp, s.elf, 5500.1.00005635d665c000.00005635d678a000.rw-.sdmp, s.elf, 5501.1.00005635d665c000.00005635d67ab000.rw-.sdmpBinary or memory string: 5V!/etc/qemu-binfmt/arm
    Source: s.elf, 5498.1.00007fff80da4000.00007fff80dc5000.rw-.sdmp, s.elf, 5500.1.00007fff80da4000.00007fff80dc5000.rw-.sdmp, s.elf, 5501.1.00007fff80da4000.00007fff80dc5000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/s.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/s.elf
    Source: s.elf, 5498.1.00005635d665c000.00005635d67ab000.rw-.sdmp, s.elf, 5500.1.00005635d665c000.00005635d678a000.rw-.sdmp, s.elf, 5501.1.00005635d665c000.00005635d67ab000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
    Source: s.elf, 5498.1.00007fff80da4000.00007fff80dc5000.rw-.sdmp, s.elf, 5500.1.00007fff80da4000.00007fff80dc5000.rw-.sdmp, s.elf, 5501.1.00007fff80da4000.00007fff80dc5000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

    Stealing of Sensitive Information

    barindex
    Yara detected Gafgyt
    Source: Yara matchFile source: s.elf, type: SAMPLE

    Remote Access Functionality

    barindex
    Yara detected Gafgyt
    Source: Yara matchFile source: s.elf, type: SAMPLE

    Mitre Att&ck Matrix

    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
    Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume AccessOS Credential Dumping11
    Security Software Discovery    		Remote ServicesData from Local System1
    Non-Standard Port    		Exfiltration Over Other Network MediumAbuse Accessibility Features
    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory1
    Remote System Discovery    		Remote Desktop ProtocolData from Removable Media1
    Non-Application Layer Protocol    		Exfiltration Over BluetoothNetwork Denial of Service
    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
    Application Layer Protocol    		Automated ExfiltrationData Encrypted for Impact

    Malware Configuration

    ⊘No configs have been found

    Behavior Graph

    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Number of created Files
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1584349 Sample: s.elf Startdate: 05/01/2025 Architecture: LINUX Score: 80 17 195.133.52.175, 54462, 54464, 54466 FLEX-ASRU Russian Federation 2->17 19 daisy.ubuntu.com 2->19 21 Malicious sample detected (through community Yara rule) 2->21 23 Antivirus / Scanner detection for submitted sample 2->23 25 Multi AV Scanner detection for submitted file 2->25 27 2 other signatures 2->27 8 s.elf 2->8         started        signatures3 process4 signatures5 29 Opens /proc/net/* files useful for finding connected devices and routers 8->29 11 s.elf 8->11         started        13 s.elf 8->13         started        process6 process7 15 s.elf 11->15         started       

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    s.elf62%VirustotalBrowse
    s.elf66%ReversingLabsLinux.Backdoor.Gafgyt
    s.elf100%AviraLINUX/Gafgyt.opnd

    Dropped Files

    ⊘No Antivirus matches

    Domains

    ⊘No Antivirus matches

    URLs

    ⊘No Antivirus matches

    Domains and IPs

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    daisy.ubuntu.com
    		162.213.35.25
    		truefalse
      		high

      World Map of Contacted IPs

      • No. of IPs < 25%
      • 25% < No. of IPs < 50%
      • 50% < No. of IPs < 75%
      • 75% < No. of IPs

      Public IPs

      IPDomainCountryFlagASNASN NameMalicious
      195.133.52.175
      		unknownRussian Federation
      		21453FLEX-ASRUtrue

      Joe Sandbox View / Context

      IPs

      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
      195.133.52.175t.elfGet hashmaliciousGafgytBrowse
        l.elfGet hashmaliciousGafgytBrowse
          y.elfGet hashmaliciousGafgytBrowse
            c.elfGet hashmaliciousGafgytBrowse
              e.elfGet hashmaliciousGafgytBrowse
                x.elfGet hashmaliciousGafgytBrowse
                  a.elfGet hashmaliciousGafgytBrowse
                    i.elfGet hashmaliciousGafgytBrowse
                      176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse

                        Domains

                        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                        daisy.ubuntu.comt.elfGet hashmaliciousGafgytBrowse
                        • 162.213.35.25
                        l.elfGet hashmaliciousGafgytBrowse
                        • 162.213.35.24
                        y.elfGet hashmaliciousGafgytBrowse
                        • 162.213.35.24
                        e.elfGet hashmaliciousGafgytBrowse
                        • 162.213.35.24
                        x.elfGet hashmaliciousGafgytBrowse
                        • 162.213.35.24
                        a.elfGet hashmaliciousGafgytBrowse
                        • 162.213.35.25
                        la.bot.powerpc.elfGet hashmaliciousMiraiBrowse
                        • 162.213.35.25
                        spc.elfGet hashmaliciousMiraiBrowse
                        • 162.213.35.25
                        176.119.150.11-i-2025-01-04T15_20_35.elfGet hashmaliciousGafgyt, MiraiBrowse
                        • 162.213.35.25
                        la.bot.arm7.elfGet hashmaliciousMiraiBrowse
                        • 162.213.35.25

                        ASNs

                        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                        FLEX-ASRUt.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175
                        l.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175
                        y.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175
                        c.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175
                        e.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175
                        x.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175
                        a.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175
                        17360626254f6ab0798f0d71fe81e2d058a575b873a7088f40695d7fd8031d0961d3a3694a780.dat-decoded.exeGet hashmaliciousRemcosBrowse
                        • 195.133.78.18
                        Tax_Refund_Claim_2024_Australian_Taxation_Office.jsGet hashmaliciousRemcosBrowse
                        • 195.133.78.18
                        i.elfGet hashmaliciousGafgytBrowse
                        • 195.133.52.175

                        JA3 Fingerprints

                        ⊘No context

                        Dropped Files

                        ⊘No context

                        Created / dropped Files

                        ⊘No created / dropped files found

                        Static File Info

                        General

                        File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                        Entropy (8bit):5.942918998446949
                        TrID:
                        • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                        File name:s.elf
                        File size:139'201 bytes
                        MD5:09748a86923870171d1821e84a4ae778
                        SHA1:b583e96c59f11380bf6286904cb925c279f16378
                        SHA256:ea358ee792f3c08a4b8c34cf10d1c04c9003c13d21d195d348173aa78ec4c75c
                        SHA512:9b2cc8d791b76c901c290792161b104ea006587bb5b4d6d9595327c269c0c9bda02bbe0bd215fd1e916f029eea7a66a0c05b9fd157313b46f43e111eeee05fb6
                        SSDEEP:3072:sh+Radi7iaPw5388shgZl1pzqcZRQNeN0eaLmhxQu72m/RZ:qXaPw5Rl1pzqY0eaLmhxQu72m/RZ
                        TLSH:F2D30A04D460975BC2E323BAEB9E425D33332FA493DB33155938BAB41BE279D1E39521
                        File Content Preview:.ELF..............(.........4...........4. ...(........p.w...........................................w...w..........................0....j..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

                        Static ELF Info

                        ELF header

                        Class:ELF32
                        Data:2's complement, little endian
                        Version:1 (current)
                        Machine:ARM
                        Version Number:0x1
                        Type:EXEC (Executable file)
                        OS/ABI:UNIX - System V
                        ABI Version:0
                        Entry Point Address:0x81b0
                        Flags:0x4000002
                        ELF Header Size:52
                        Program Header Offset:52
                        Program Header Size:32
                        Number of Program Headers:4
                        Section Header Offset:105940
                        Section Header Size:40
                        Number of Section Headers:24
                        Header String Table Index:21

                        Sections

                        NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                        NULL0x00x00x00x00x0000
                        .initPROGBITS0x80b40xb40x100x00x6AX004
                        .textPROGBITS0x80d00xd00x14dc40x00x6AX0016
                        .finiPROGBITS0x1ce940x14e940x100x00x6AX004
                        .rodataPROGBITS0x1cea80x14ea80x28d40x00x2A008
                        .ARM.extabPROGBITS0x1f77c0x1777c0x180x00x2A004
                        .ARM.exidxARM_EXIDX0x1f7940x177940x100x00x82AL204
                        .eh_framePROGBITS0x200000x180000x40x00x3WA004
                        .init_arrayINIT_ARRAY0x200040x180040x40x00x3WA004
                        .fini_arrayFINI_ARRAY0x200080x180080x40x00x3WA004
                        .jcrPROGBITS0x2000c0x1800c0x40x00x3WA004
                        .gotPROGBITS0x200100x180100x780x40x3WA004
                        .dataPROGBITS0x200880x180880x2a80x00x3WA004
                        .bssNOBITS0x203300x183300x67640x00x3WA008
                        .commentPROGBITS0x00x183300xce20x00x0001
                        .debug_arangesPROGBITS0x00x190180xe00x00x0008
                        .debug_infoPROGBITS0x00x190f80x4b00x00x0001
                        .debug_abbrevPROGBITS0x00x195a80x8c0x00x0001
                        .debug_linePROGBITS0x00x196340x6550x00x0001
                        .debug_framePROGBITS0x00x19c8c0x580x00x0004
                        .ARM.attributesARM_ATTRIBUTES0x00x19ce40x100x00x0001
                        .shstrtabSTRTAB0x00x19cf40xdd0x00x0001
                        .symtabSYMTAB0x00x1a1940x52500x100x0237044
                        .strtabSTRTAB0x00x1f3e40x2bdd0x00x0001

                        Program Segments

                        TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                        EXIDX0x177940x1f7940x1f7940x100x102.40560x4R 0x4.ARM.exidx
                        LOAD0x00x80000x80000x177a40x177a46.05280x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                        LOAD0x180000x200000x200000x3300x6a943.69980x6RW 0x8000.eh_frame .init_array .fini_array .jcr .got .data .bss
                        GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                        Symbols

                        NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                        .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                        .symtab0x80b40SECTION<unknown>DEFAULT1
                        .symtab0x80d00SECTION<unknown>DEFAULT2
                        .symtab0x1ce940SECTION<unknown>DEFAULT3
                        .symtab0x1cea80SECTION<unknown>DEFAULT4
                        .symtab0x1f77c0SECTION<unknown>DEFAULT5
                        .symtab0x1f7940SECTION<unknown>DEFAULT6
                        .symtab0x200000SECTION<unknown>DEFAULT7
                        .symtab0x200040SECTION<unknown>DEFAULT8
                        .symtab0x200080SECTION<unknown>DEFAULT9
                        .symtab0x2000c0SECTION<unknown>DEFAULT10
                        .symtab0x200100SECTION<unknown>DEFAULT11
                        .symtab0x200880SECTION<unknown>DEFAULT12
                        .symtab0x203300SECTION<unknown>DEFAULT13
                        .symtab0x00SECTION<unknown>DEFAULT14
                        .symtab0x00SECTION<unknown>DEFAULT15
                        .symtab0x00SECTION<unknown>DEFAULT16
                        .symtab0x00SECTION<unknown>DEFAULT17
                        .symtab0x00SECTION<unknown>DEFAULT18
                        .symtab0x00SECTION<unknown>DEFAULT19
                        .symtab0x00SECTION<unknown>DEFAULT20
                        .symtab0x00SECTION<unknown>DEFAULT21
                        .symtab0x00SECTION<unknown>DEFAULT22
                        .symtab0x00SECTION<unknown>DEFAULT23
                        $a.symtab0x80b40NOTYPE<unknown>DEFAULT1
                        $a.symtab0x1ce940NOTYPE<unknown>DEFAULT3
                        $a.symtab0x80c00NOTYPE<unknown>DEFAULT1
                        $a.symtab0x1cea00NOTYPE<unknown>DEFAULT3
                        $a.symtab0x810c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x81500NOTYPE<unknown>DEFAULT2
                        $a.symtab0x81b00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x81ec0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x86140NOTYPE<unknown>DEFAULT2
                        $a.symtab0x87600NOTYPE<unknown>DEFAULT2
                        $a.symtab0x88380NOTYPE<unknown>DEFAULT2
                        $a.symtab0x89900NOTYPE<unknown>DEFAULT2
                        $a.symtab0x8ad40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x93c80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x97a80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x99300NOTYPE<unknown>DEFAULT2
                        $a.symtab0x9a880NOTYPE<unknown>DEFAULT2
                        $a.symtab0x9db40NOTYPE<unknown>DEFAULT2
                        $a.symtab0xa08c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0xa4a80NOTYPE<unknown>DEFAULT2
                        $a.symtab0xa50c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0xafc00NOTYPE<unknown>DEFAULT2
                        $a.symtab0xb6800NOTYPE<unknown>DEFAULT2
                        $a.symtab0xbcf40NOTYPE<unknown>DEFAULT2
                        $a.symtab0xbf480NOTYPE<unknown>DEFAULT2
                        $a.symtab0xc1200NOTYPE<unknown>DEFAULT2
                        $a.symtab0xc2440NOTYPE<unknown>DEFAULT2
                        $a.symtab0xc8d80NOTYPE<unknown>DEFAULT2
                        $a.symtab0xcd000NOTYPE<unknown>DEFAULT2
                        $a.symtab0xdd140NOTYPE<unknown>DEFAULT2
                        $a.symtab0xea3c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0xecf80NOTYPE<unknown>DEFAULT2
                        $a.symtab0xf6300NOTYPE<unknown>DEFAULT2
                        $a.symtab0xf6c40NOTYPE<unknown>DEFAULT2
                        $a.symtab0xf7980NOTYPE<unknown>DEFAULT2
                        $a.symtab0xf9200NOTYPE<unknown>DEFAULT2
                        $a.symtab0x103c00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x105a40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x105f00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1063c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x106a80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x107340NOTYPE<unknown>DEFAULT2
                        $a.symtab0x108bc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11d380NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11e4c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11e600NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11ea00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11ed40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11ee80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11f480NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11f7c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11f900NOTYPE<unknown>DEFAULT2
                        $a.symtab0x11fc00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x120000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x120140NOTYPE<unknown>DEFAULT2
                        $a.symtab0x120480NOTYPE<unknown>DEFAULT2
                        $a.symtab0x120640NOTYPE<unknown>DEFAULT2
                        $a.symtab0x120980NOTYPE<unknown>DEFAULT2
                        $a.symtab0x120d80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1210c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x121380NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1216c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x121a00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x122780NOTYPE<unknown>DEFAULT2
                        $a.symtab0x122ac0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x123000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1232c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x123640NOTYPE<unknown>DEFAULT2
                        $a.symtab0x123980NOTYPE<unknown>DEFAULT2
                        $a.symtab0x123c80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x123e40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x124180NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1244c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x125000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x125680NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1259c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x126700NOTYPE<unknown>DEFAULT2
                        $a.symtab0x126a00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x12e600NOTYPE<unknown>DEFAULT2
                        $a.symtab0x12f000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x12f440NOTYPE<unknown>DEFAULT2
                        $a.symtab0x130f40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x131480NOTYPE<unknown>DEFAULT2
                        $a.symtab0x136b80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x136f00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x137a00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x138400NOTYPE<unknown>DEFAULT2
                        $a.symtab0x138a00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x138b00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x138d00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x138e00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x138f00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x139ec0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13ab80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13adc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13b980NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13c880NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13ca00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13cd00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13dd00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13df40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13e700NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13ed00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13ef80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13f140NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13f7c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13fb40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x13fec0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x140300NOTYPE<unknown>DEFAULT2
                        $a.symtab0x140680NOTYPE<unknown>DEFAULT2
                        $a.symtab0x140a40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x140dc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1411c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x141600NOTYPE<unknown>DEFAULT2
                        $a.symtab0x141980NOTYPE<unknown>DEFAULT2
                        $a.symtab0x141b40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x141f80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1420c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x142c40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x143300NOTYPE<unknown>DEFAULT2
                        $a.symtab0x14cc80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x14dfc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x151b00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x156500NOTYPE<unknown>DEFAULT2
                        $a.symtab0x156900NOTYPE<unknown>DEFAULT2
                        $a.symtab0x157b80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x157d00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x158740NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1592c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x159ec0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15a900NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15b740NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15c040NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15cdc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15dc00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15de00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15dfc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x15fbc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x160740NOTYPE<unknown>DEFAULT2
                        $a.symtab0x161200NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1626c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x168440NOTYPE<unknown>DEFAULT2
                        $a.symtab0x168f00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x169400NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16a000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16a540NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16ac00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16d940NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16dfc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16e1c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16ea40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16eb00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16ebc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16ef00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16f240NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16f4c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16f600NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16f940NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16fc80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x16fdc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x170480NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1705c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x170900NOTYPE<unknown>DEFAULT2
                        $a.symtab0x170c40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x171040NOTYPE<unknown>DEFAULT2
                        $a.symtab0x171180NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1714c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x172440NOTYPE<unknown>DEFAULT2
                        $a.symtab0x173140NOTYPE<unknown>DEFAULT2
                        $a.symtab0x173c00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x174580NOTYPE<unknown>DEFAULT2
                        $a.symtab0x175440NOTYPE<unknown>DEFAULT2
                        $a.symtab0x175600NOTYPE<unknown>DEFAULT2
                        $a.symtab0x179040NOTYPE<unknown>DEFAULT2
                        $a.symtab0x179580NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1797c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x17a2c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x17be00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x17c000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x17cb40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x17fbc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x180fc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x181cc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1823c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x182680NOTYPE<unknown>DEFAULT2
                        $a.symtab0x183c40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x18bb80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x18c940NOTYPE<unknown>DEFAULT2
                        $a.symtab0x18d500NOTYPE<unknown>DEFAULT2
                        $a.symtab0x18ed80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x190e40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x192100NOTYPE<unknown>DEFAULT2
                        $a.symtab0x192b00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x193a00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x194180NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1945c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1950c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x195ec0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x196380NOTYPE<unknown>DEFAULT2
                        $a.symtab0x196880NOTYPE<unknown>DEFAULT2
                        $a.symtab0x196ac0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x197980NOTYPE<unknown>DEFAULT2
                        $a.symtab0x197d80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x198d00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19b700NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19ba80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19bf40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19c000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19c580NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19e880NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19fcc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x19ff00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1a1400NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1a1980NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1a25c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1a28c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1a3240NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1a3600NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1a64c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1aa140NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1ab0c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1b2f40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1b3480NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1b3a00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1b7fc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1b8940NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1b8e00NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bbd80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bc0c0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bc840NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bcdc0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bd400NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bd500NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bd840NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1be700NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bf240NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bf840NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1bfb40NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1c1b80NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1c1ec0NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1c2580NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1c3040NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1c4480NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1c8640NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1cd000NOTYPE<unknown>DEFAULT2
                        $a.symtab0x1ce400NOTYPE<unknown>DEFAULT2
                        $d.symtab0x81440NOTYPE<unknown>DEFAULT2
                        $d.symtab0x200080NOTYPE<unknown>DEFAULT9
                        $d.symtab0x819c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x200040NOTYPE<unknown>DEFAULT8
                        $d.symtab0x2008c0NOTYPE<unknown>DEFAULT12
                        $d.symtab0x81e00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x200900NOTYPE<unknown>DEFAULT12
                        $d.symtab0x875c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x88300NOTYPE<unknown>DEFAULT2
                        $d.symtab0x898c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x8ac80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x93c40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x97980NOTYPE<unknown>DEFAULT2
                        $d.symtab0x992c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1d17c0NOTYPE<unknown>DEFAULT4
                        $d.symtab0x9a840NOTYPE<unknown>DEFAULT2
                        $d.symtab0x9db00NOTYPE<unknown>DEFAULT2
                        $d.symtab0xa0880NOTYPE<unknown>DEFAULT2
                        $d.symtab0xa4a00NOTYPE<unknown>DEFAULT2
                        $d.symtab0xa5080NOTYPE<unknown>DEFAULT2
                        $d.symtab0xafbc0NOTYPE<unknown>DEFAULT2
                        $d.symtab0xb6640NOTYPE<unknown>DEFAULT2
                        $d.symtab0xbcf00NOTYPE<unknown>DEFAULT2
                        $d.symtab0xbf3c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0xc1180NOTYPE<unknown>DEFAULT2
                        $d.symtab0xc2400NOTYPE<unknown>DEFAULT2
                        $d.symtab0xc8d40NOTYPE<unknown>DEFAULT2
                        $d.symtab0xccec0NOTYPE<unknown>DEFAULT2
                        $d.symtab0xdcc40NOTYPE<unknown>DEFAULT2
                        $d.symtab0xea1c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0xece40NOTYPE<unknown>DEFAULT2
                        $d.symtab0xf6000NOTYPE<unknown>DEFAULT2
                        $d.symtab0xf6b40NOTYPE<unknown>DEFAULT2
                        $d.symtab0xf7880NOTYPE<unknown>DEFAULT2
                        $d.symtab0xf91c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x200d00NOTYPE<unknown>DEFAULT12
                        $d.symtab0x105480NOTYPE<unknown>DEFAULT2
                        $d.symtab0x105ec0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x106380NOTYPE<unknown>DEFAULT2
                        $d.symtab0x106a40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x107300NOTYPE<unknown>DEFAULT2
                        $d.symtab0x108b40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x123c00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x200d40NOTYPE<unknown>DEFAULT12
                        $d.symtab0x200dc0NOTYPE<unknown>DEFAULT12
                        $d.symtab0x123dc0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x124140NOTYPE<unknown>DEFAULT2
                        $d.symtab0x125600NOTYPE<unknown>DEFAULT2
                        $d.symtab0x125940NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1265c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x201180NOTYPE<unknown>DEFAULT12
                        $d.symtab0x200e40NOTYPE<unknown>DEFAULT12
                        $d.symtab0x1e6d40NOTYPE<unknown>DEFAULT4
                        $d.symtab0x12e400NOTYPE<unknown>DEFAULT2
                        $d.symtab0x130f00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1313c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x136880NOTYPE<unknown>DEFAULT2
                        $d.symtab0x202200NOTYPE<unknown>DEFAULT12
                        $d.symtab0x13ab00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x13c800NOTYPE<unknown>DEFAULT2
                        $d.symtab0x13cc80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x13dc40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x13e6c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x13f700NOTYPE<unknown>DEFAULT2
                        $d.symtab0x13fb00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x13fe80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1402c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x140640NOTYPE<unknown>DEFAULT2
                        $d.symtab0x140d80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x141180NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1415c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x141940NOTYPE<unknown>DEFAULT2
                        $d.symtab0x142bc0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x14cac0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x202240NOTYPE<unknown>DEFAULT12
                        $d.symtab0x14de40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x151940NOTYPE<unknown>DEFAULT2
                        $d.symtab0x156340NOTYPE<unknown>DEFAULT2
                        $d.symtab0x156880NOTYPE<unknown>DEFAULT2
                        $d.symtab0x157a40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x2023c0NOTYPE<unknown>DEFAULT12
                        $d.symtab0x158580NOTYPE<unknown>DEFAULT2
                        $d.symtab0x159100NOTYPE<unknown>DEFAULT2
                        $d.symtab0x159d00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x15a740NOTYPE<unknown>DEFAULT2
                        $d.symtab0x202540NOTYPE<unknown>DEFAULT12
                        $d.symtab0x202ec0NOTYPE<unknown>DEFAULT12
                        $d.symtab0x15b6c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x15c000NOTYPE<unknown>DEFAULT2
                        $d.symtab0x15cd00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x15db80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1f3000NOTYPE<unknown>DEFAULT4
                        $d.symtab0x15fb40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x160540NOTYPE<unknown>DEFAULT2
                        $d.symtab0x203000NOTYPE<unknown>DEFAULT12
                        $d.symtab0x1611c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x162480NOTYPE<unknown>DEFAULT2
                        $d.symtab0x168200NOTYPE<unknown>DEFAULT2
                        $d.symtab0x168e80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1693c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x169ec0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x16a4c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x16ab00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x16d540NOTYPE<unknown>DEFAULT2
                        $d.symtab0x203180NOTYPE<unknown>DEFAULT12
                        $d.symtab0x16e980NOTYPE<unknown>DEFAULT2
                        $d.symtab0x16f440NOTYPE<unknown>DEFAULT2
                        $d.symtab0x170400NOTYPE<unknown>DEFAULT2
                        $d.symtab0x172300NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1730c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x173bc0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1f37c0NOTYPE<unknown>DEFAULT4
                        $d.symtab0x175300NOTYPE<unknown>DEFAULT2
                        $d.symtab0x265800NOTYPE<unknown>DEFAULT13
                        $d.symtab0x175580NOTYPE<unknown>DEFAULT2
                        $d.symtab0x178fc0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x17bc00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x17f880NOTYPE<unknown>DEFAULT2
                        $d.symtab0x18b980NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1f3b00NOTYPE<unknown>DEFAULT4
                        $d.symtab0x18c800NOTYPE<unknown>DEFAULT2
                        $d.symtab0x18d3c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x18eac0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x190c00NOTYPE<unknown>DEFAULT2
                        $d.symtab0x192080NOTYPE<unknown>DEFAULT2
                        $d.symtab0x193980NOTYPE<unknown>DEFAULT2
                        $d.symtab0x195040NOTYPE<unknown>DEFAULT2
                        $d.symtab0x195e40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x197900NOTYPE<unknown>DEFAULT2
                        $d.symtab0x198c80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x19b9c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x19bec0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1a12c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1a6400NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1aa080NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1b2b80NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1b3400NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1b3980NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1b7b40NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1b87c0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1bfac0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1c1ac0NOTYPE<unknown>DEFAULT2
                        $d.symtab0x1c2500NOTYPE<unknown>DEFAULT2
                        $d.symtab0x203280NOTYPE<unknown>DEFAULT12
                        $t.symtab0x80d00NOTYPE<unknown>DEFAULT2
                        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        C.1.3506.symtab0x1f37c24OBJECT<unknown>DEFAULT4
                        C.152.6215.symtab0x1d87436OBJECT<unknown>DEFAULT4
                        C.156.6257.symtab0x1dc1424OBJECT<unknown>DEFAULT4
                        C.186.6536.symtab0x1de3820OBJECT<unknown>DEFAULT4
                        Hexed.symtab0xbb78380FUNC<unknown>DEFAULT2
                        KHcommSOCK.symtab0x203504OBJECT<unknown>DEFAULT13
                        KHserverHACKER.symtab0x200c04OBJECT<unknown>DEFAULT12
                        LOCAL_ADDR.symtab0x265ac4OBJECT<unknown>DEFAULT13
                        Laligned.symtab0x138680NOTYPE<unknown>DEFAULT2
                        Llastword.symtab0x138840NOTYPE<unknown>DEFAULT2
                        Percocet_bp.symtab0x200a04OBJECT<unknown>DEFAULT12
                        Q.symtab0x2036c16384OBJECT<unknown>DEFAULT13
                        RSF.symtab0xbcf4596FUNC<unknown>DEFAULT2
                        SendHttpRand.symtab0xcad4556FUNC<unknown>DEFAULT2
                        UDPBYPASS.symtab0xae70336FUNC<unknown>DEFAULT2
                        UserAgents.symtab0x200b412OBJECT<unknown>DEFAULT12
                        _Exit.symtab0x1230044FUNC<unknown>DEFAULT2
                        _GLOBAL_OFFSET_TABLE_.symtab0x200100OBJECT<unknown>HIDDEN11
                        _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                        _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __C_ctype_b.symtab0x200d44OBJECT<unknown>DEFAULT12
                        __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __C_ctype_b_data.symtab0x1e0d4768OBJECT<unknown>DEFAULT4
                        __C_ctype_tolower.symtab0x203284OBJECT<unknown>DEFAULT12
                        __C_ctype_tolower.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __C_ctype_tolower_data.symtab0x1f47c768OBJECT<unknown>DEFAULT4
                        __C_ctype_toupper.symtab0x200dc4OBJECT<unknown>DEFAULT12
                        __C_ctype_toupper.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __C_ctype_toupper_data.symtab0x1e3d4768OBJECT<unknown>DEFAULT4
                        __EH_FRAME_BEGIN__.symtab0x200000OBJECT<unknown>DEFAULT7
                        __FRAME_END__.symtab0x200000OBJECT<unknown>DEFAULT7
                        __GI___C_ctype_b.symtab0x200d44OBJECT<unknown>HIDDEN12
                        __GI___C_ctype_tolower.symtab0x203284OBJECT<unknown>HIDDEN12
                        __GI___C_ctype_toupper.symtab0x200dc4OBJECT<unknown>HIDDEN12
                        __GI___ctype_b.symtab0x200d84OBJECT<unknown>HIDDEN12
                        __GI___ctype_tolower.symtab0x2032c4OBJECT<unknown>HIDDEN12
                        __GI___ctype_toupper.symtab0x200e04OBJECT<unknown>HIDDEN12
                        __GI___errno_location.symtab0x123c828FUNC<unknown>HIDDEN2
                        __GI___fcntl_nocancel.symtab0x1220c108FUNC<unknown>HIDDEN2
                        __GI___fgetc_unlocked.symtab0x190e4300FUNC<unknown>HIDDEN2
                        __GI___glibc_strerror_r.symtab0x13c8824FUNC<unknown>HIDDEN2
                        __GI___h_errno_location.symtab0x1754428FUNC<unknown>HIDDEN2
                        __GI___libc_fcntl.symtab0x121a0108FUNC<unknown>HIDDEN2
                        __GI___sigaddset.symtab0x142e836FUNC<unknown>HIDDEN2
                        __GI___sigdelset.symtab0x1430c36FUNC<unknown>HIDDEN2
                        __GI___sigismember.symtab0x142c436FUNC<unknown>HIDDEN2
                        __GI___uClibc_fini.symtab0x16984124FUNC<unknown>HIDDEN2
                        __GI___uClibc_init.symtab0x16a54108FUNC<unknown>HIDDEN2
                        __GI___xpg_strerror_r.symtab0x13cd0256FUNC<unknown>HIDDEN2
                        __GI__exit.symtab0x1230044FUNC<unknown>HIDDEN2
                        __GI_abort.symtab0x15690296FUNC<unknown>HIDDEN2
                        __GI_atoi.symtab0x15dc032FUNC<unknown>HIDDEN2
                        __GI_brk.symtab0x19ba876FUNC<unknown>HIDDEN2
                        __GI_clock_getres.symtab0x16f6052FUNC<unknown>HIDDEN2
                        __GI_close.symtab0x1236452FUNC<unknown>HIDDEN2
                        __GI_closedir.symtab0x1714c248FUNC<unknown>HIDDEN2
                        __GI_config_close.symtab0x1788852FUNC<unknown>HIDDEN2
                        __GI_config_open.symtab0x178bc72FUNC<unknown>HIDDEN2
                        __GI_config_read.symtab0x17560808FUNC<unknown>HIDDEN2
                        __GI_connect.symtab0x13f7c56FUNC<unknown>HIDDEN2
                        __GI_dup2.symtab0x11ea052FUNC<unknown>HIDDEN2
                        __GI_errno.symtab0x265804OBJECT<unknown>HIDDEN13
                        __GI_execl.symtab0x16844172FUNC<unknown>HIDDEN2
                        __GI_execve.symtab0x16ef052FUNC<unknown>HIDDEN2
                        __GI_exit.symtab0x15fbc184FUNC<unknown>HIDDEN2
                        __GI_fclose.symtab0x17a2c436FUNC<unknown>HIDDEN2
                        __GI_fcntl.symtab0x121a0108FUNC<unknown>HIDDEN2
                        __GI_fflush_unlocked.symtab0x18ed8524FUNC<unknown>HIDDEN2
                        __GI_fgetc.symtab0x18bb8220FUNC<unknown>HIDDEN2
                        __GI_fgetc_unlocked.symtab0x190e4300FUNC<unknown>HIDDEN2
                        __GI_fgets.symtab0x18c94188FUNC<unknown>HIDDEN2
                        __GI_fgets_unlocked.symtab0x19210160FUNC<unknown>HIDDEN2
                        __GI_fopen.symtab0x17be032FUNC<unknown>HIDDEN2
                        __GI_fork.symtab0x1201452FUNC<unknown>HIDDEN2
                        __GI_fputs_unlocked.symtab0x136b856FUNC<unknown>HIDDEN2
                        __GI_fseek.symtab0x19fcc36FUNC<unknown>HIDDEN2
                        __GI_fseeko64.symtab0x19ff0336FUNC<unknown>HIDDEN2
                        __GI_fstat.symtab0x19c0088FUNC<unknown>HIDDEN2
                        __GI_fwrite_unlocked.symtab0x136f0176FUNC<unknown>HIDDEN2
                        __GI_getc_unlocked.symtab0x190e4300FUNC<unknown>HIDDEN2
                        __GI_getdtablesize.symtab0x1210c44FUNC<unknown>HIDDEN2
                        __GI_getegid.symtab0x16fc820FUNC<unknown>HIDDEN2
                        __GI_geteuid.symtab0x1200020FUNC<unknown>HIDDEN2
                        __GI_getgid.symtab0x1704820FUNC<unknown>HIDDEN2
                        __GI_gethostbyname.symtab0x13ef828FUNC<unknown>HIDDEN2
                        __GI_gethostbyname2.symtab0x13f14104FUNC<unknown>HIDDEN2
                        __GI_gethostbyname2_r.symtab0x198d0672FUNC<unknown>HIDDEN2
                        __GI_gethostbyname_r.symtab0x1b8e0760FUNC<unknown>HIDDEN2
                        __GI_gethostname.symtab0x1bc0c120FUNC<unknown>HIDDEN2
                        __GI_getpagesize.symtab0x16f2440FUNC<unknown>HIDDEN2
                        __GI_getpid.symtab0x11f7c20FUNC<unknown>HIDDEN2
                        __GI_getrlimit.symtab0x16f9452FUNC<unknown>HIDDEN2
                        __GI_getsockname.symtab0x13fb456FUNC<unknown>HIDDEN2
                        __GI_gettimeofday.symtab0x1216c52FUNC<unknown>HIDDEN2
                        __GI_getuid.symtab0x16f4c20FUNC<unknown>HIDDEN2
                        __GI_h_errno.symtab0x265844OBJECT<unknown>HIDDEN13
                        __GI_htonl.symtab0x13e8032FUNC<unknown>HIDDEN2
                        __GI_htons.symtab0x13e7016FUNC<unknown>HIDDEN2
                        __GI_inet_addr.symtab0x13ed040FUNC<unknown>HIDDEN2
                        __GI_inet_aton.symtab0x197d8248FUNC<unknown>HIDDEN2
                        __GI_inet_ntop.symtab0x1a790644FUNC<unknown>HIDDEN2
                        __GI_inet_pton.symtab0x1a430540FUNC<unknown>HIDDEN2
                        __GI_initstate_r.symtab0x15cdc228FUNC<unknown>HIDDEN2
                        __GI_ioctl.symtab0x122ac84FUNC<unknown>HIDDEN2
                        __GI_isatty.symtab0x13dd036FUNC<unknown>HIDDEN2
                        __GI_kill.symtab0x1213852FUNC<unknown>HIDDEN2
                        __GI_lseek64.symtab0x1bcdc100FUNC<unknown>HIDDEN2
                        __GI_memchr.symtab0x192b0240FUNC<unknown>HIDDEN2
                        __GI_memcpy.symtab0x138d04FUNC<unknown>HIDDEN2
                        __GI_memmove.symtab0x1bd404FUNC<unknown>HIDDEN2
                        __GI_mempcpy.symtab0x1968836FUNC<unknown>HIDDEN2
                        __GI_memrchr.symtab0x1950c224FUNC<unknown>HIDDEN2
                        __GI_memset.symtab0x137a0156FUNC<unknown>HIDDEN2
                        __GI_mmap.symtab0x16d94104FUNC<unknown>HIDDEN2
                        __GI_mremap.symtab0x170c464FUNC<unknown>HIDDEN2
                        __GI_munmap.symtab0x1705c52FUNC<unknown>HIDDEN2
                        __GI_nanosleep.symtab0x1709052FUNC<unknown>HIDDEN2
                        __GI_ntohl.symtab0x13eb032FUNC<unknown>HIDDEN2
                        __GI_ntohs.symtab0x13ea016FUNC<unknown>HIDDEN2
                        __GI_open.symtab0x11ee896FUNC<unknown>HIDDEN2
                        __GI_opendir.symtab0x17314172FUNC<unknown>HIDDEN2
                        __GI_pipe.symtab0x11f4852FUNC<unknown>HIDDEN2
                        __GI_poll.symtab0x1bbd852FUNC<unknown>HIDDEN2
                        __GI_raise.symtab0x1419828FUNC<unknown>HIDDEN2
                        __GI_random.symtab0x157d0164FUNC<unknown>HIDDEN2
                        __GI_random_r.symtab0x15b74144FUNC<unknown>HIDDEN2
                        __GI_rawmemchr.symtab0x1945c176FUNC<unknown>HIDDEN2
                        __GI_read.symtab0x120d852FUNC<unknown>HIDDEN2
                        __GI_readdir64.symtab0x17458236FUNC<unknown>HIDDEN2
                        __GI_recv.symtab0x1403056FUNC<unknown>HIDDEN2
                        __GI_recvfrom.symtab0x1406860FUNC<unknown>HIDDEN2
                        __GI_sbrk.symtab0x16fdc108FUNC<unknown>HIDDEN2
                        __GI_select.symtab0x1209864FUNC<unknown>HIDDEN2
                        __GI_send.symtab0x140a456FUNC<unknown>HIDDEN2
                        __GI_sendto.symtab0x140dc64FUNC<unknown>HIDDEN2
                        __GI_setsockopt.symtab0x1411c68FUNC<unknown>HIDDEN2
                        __GI_setstate_r.symtab0x15a90228FUNC<unknown>HIDDEN2
                        __GI_sigaction.symtab0x16e1c136FUNC<unknown>HIDDEN2
                        __GI_sigaddset.symtab0x141b468FUNC<unknown>HIDDEN2
                        __GI_sigemptyset.symtab0x141f820FUNC<unknown>HIDDEN2
                        __GI_signal.symtab0x1420c184FUNC<unknown>HIDDEN2
                        __GI_sigprocmask.symtab0x1232c56FUNC<unknown>HIDDEN2
                        __GI_sleep.symtab0x16074172FUNC<unknown>HIDDEN2
                        __GI_socket.symtab0x1416056FUNC<unknown>HIDDEN2
                        __GI_sprintf.symtab0x1241852FUNC<unknown>HIDDEN2
                        __GI_srandom_r.symtab0x15c04216FUNC<unknown>HIDDEN2
                        __GI_stat.symtab0x1bc8488FUNC<unknown>HIDDEN2
                        __GI_strcasecmp.symtab0x1c1ec108FUNC<unknown>HIDDEN2
                        __GI_strchr.symtab0x13b98240FUNC<unknown>HIDDEN2
                        __GI_strchrnul.symtab0x196ac236FUNC<unknown>HIDDEN2
                        __GI_strcmp.symtab0x138b028FUNC<unknown>HIDDEN2
                        __GI_strcoll.symtab0x138b028FUNC<unknown>HIDDEN2
                        __GI_strcpy.symtab0x13ab836FUNC<unknown>HIDDEN2
                        __GI_strcspn.symtab0x1941868FUNC<unknown>HIDDEN2
                        __GI_strdup.symtab0x1bd5052FUNC<unknown>HIDDEN2
                        __GI_strlen.symtab0x1384096FUNC<unknown>HIDDEN2
                        __GI_strncpy.symtab0x13adc188FUNC<unknown>HIDDEN2
                        __GI_strnlen.symtab0x139ec204FUNC<unknown>HIDDEN2
                        __GI_strpbrk.symtab0x1979864FUNC<unknown>HIDDEN2
                        __GI_strrchr.symtab0x1963880FUNC<unknown>HIDDEN2
                        __GI_strspn.symtab0x195ec76FUNC<unknown>HIDDEN2
                        __GI_strstr.symtab0x138f0252FUNC<unknown>HIDDEN2
                        __GI_strtok.symtab0x13ca048FUNC<unknown>HIDDEN2
                        __GI_strtok_r.symtab0x193a0120FUNC<unknown>HIDDEN2
                        __GI_strtol.symtab0x15de028FUNC<unknown>HIDDEN2
                        __GI_sysconf.symtab0x1626c1496FUNC<unknown>HIDDEN2
                        __GI_tcgetattr.symtab0x13df4124FUNC<unknown>HIDDEN2
                        __GI_time.symtab0x11f9048FUNC<unknown>HIDDEN2
                        __GI_times.symtab0x1710420FUNC<unknown>HIDDEN2
                        __GI_toupper.symtab0x1239848FUNC<unknown>HIDDEN2
                        __GI_uname.symtab0x1c1b852FUNC<unknown>HIDDEN2
                        __GI_vfork.symtab0x11e6064FUNC<unknown>HIDDEN2
                        __GI_vsnprintf.symtab0x1244c180FUNC<unknown>HIDDEN2
                        __GI_wait4.symtab0x16ebc52FUNC<unknown>HIDDEN2
                        __GI_waitpid.symtab0x1204828FUNC<unknown>HIDDEN2
                        __GI_wcrtomb.symtab0x1790484FUNC<unknown>HIDDEN2
                        __GI_wcsnrtombs.symtab0x1797c176FUNC<unknown>HIDDEN2
                        __GI_wcsrtombs.symtab0x1795836FUNC<unknown>HIDDEN2
                        __GI_write.symtab0x1227852FUNC<unknown>HIDDEN2
                        __JCR_END__.symtab0x2000c0OBJECT<unknown>DEFAULT10
                        __JCR_LIST__.symtab0x2000c0OBJECT<unknown>DEFAULT10
                        __adddf3.symtab0x1c454784FUNC<unknown>HIDDEN2
                        __aeabi_cdcmpeq.symtab0x1cdb024FUNC<unknown>HIDDEN2
                        __aeabi_cdcmple.symtab0x1cdb024FUNC<unknown>HIDDEN2
                        __aeabi_cdrcmple.symtab0x1cd9452FUNC<unknown>HIDDEN2
                        __aeabi_d2uiz.symtab0x1ce4084FUNC<unknown>HIDDEN2
                        __aeabi_dadd.symtab0x1c454784FUNC<unknown>HIDDEN2
                        __aeabi_dcmpeq.symtab0x1cdc824FUNC<unknown>HIDDEN2
                        __aeabi_dcmpge.symtab0x1ce1024FUNC<unknown>HIDDEN2
                        __aeabi_dcmpgt.symtab0x1ce2824FUNC<unknown>HIDDEN2
                        __aeabi_dcmple.symtab0x1cdf824FUNC<unknown>HIDDEN2
                        __aeabi_dcmplt.symtab0x1cde024FUNC<unknown>HIDDEN2
                        __aeabi_ddiv.symtab0x1caf4524FUNC<unknown>HIDDEN2
                        __aeabi_dmul.symtab0x1c864656FUNC<unknown>HIDDEN2
                        __aeabi_drsub.symtab0x1c4480FUNC<unknown>HIDDEN2
                        __aeabi_dsub.symtab0x1c450788FUNC<unknown>HIDDEN2
                        __aeabi_f2d.symtab0x1c7b064FUNC<unknown>HIDDEN2
                        __aeabi_i2d.symtab0x1c78840FUNC<unknown>HIDDEN2
                        __aeabi_idiv.symtab0x1c3040FUNC<unknown>HIDDEN2
                        __aeabi_idivmod.symtab0x1c43024FUNC<unknown>HIDDEN2
                        __aeabi_l2d.symtab0x1c80496FUNC<unknown>HIDDEN2
                        __aeabi_ui2d.symtab0x1c76436FUNC<unknown>HIDDEN2
                        __aeabi_uidiv.symtab0x11d380FUNC<unknown>HIDDEN2
                        __aeabi_uidivmod.symtab0x11e3424FUNC<unknown>HIDDEN2
                        __aeabi_ul2d.symtab0x1c7f0116FUNC<unknown>HIDDEN2
                        __aeabi_unwind_cpp_pr0.symtab0x19bf44FUNC<unknown>DEFAULT2
                        __aeabi_unwind_cpp_pr1.symtab0x19bf84FUNC<unknown>DEFAULT2
                        __aeabi_unwind_cpp_pr2.symtab0x19bfc4FUNC<unknown>DEFAULT2
                        __app_fini.symtab0x265784OBJECT<unknown>HIDDEN13
                        __atexit_lock.symtab0x2030024OBJECT<unknown>DEFAULT12
                        __bss_end__.symtab0x26a940NOTYPE<unknown>DEFAULTSHN_ABS
                        __bss_start.symtab0x203300NOTYPE<unknown>DEFAULTSHN_ABS
                        __bss_start__.symtab0x203300NOTYPE<unknown>DEFAULTSHN_ABS
                        __check_one_fd.symtab0x16a0084FUNC<unknown>DEFAULT2
                        __close_nameservers.symtab0x1b7fc152FUNC<unknown>HIDDEN2
                        __cmpdf2.symtab0x1cd10132FUNC<unknown>HIDDEN2
                        __ctype_b.symtab0x200d84OBJECT<unknown>DEFAULT12
                        __ctype_tolower.symtab0x2032c4OBJECT<unknown>DEFAULT12
                        __ctype_toupper.symtab0x200e04OBJECT<unknown>DEFAULT12
                        __curbrk.symtab0x265884OBJECT<unknown>HIDDEN13
                        __data_start.symtab0x200880NOTYPE<unknown>DEFAULT12
                        __decode_dotted.symtab0x1aa14248FUNC<unknown>HIDDEN2
                        __decode_header.symtab0x1be70180FUNC<unknown>HIDDEN2
                        __default_rt_sa_restorer.symtab0x16eb40FUNC<unknown>DEFAULT2
                        __default_sa_restorer.symtab0x16ea80FUNC<unknown>DEFAULT2
                        __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                        __div0.symtab0x11e4c20FUNC<unknown>HIDDEN2
                        __divdf3.symtab0x1caf4524FUNC<unknown>HIDDEN2
                        __divsi3.symtab0x1c304300FUNC<unknown>HIDDEN2
                        __dns_lookup.symtab0x1ab0c2024FUNC<unknown>HIDDEN2
                        __do_global_dtors_aux.symtab0x810c0FUNC<unknown>DEFAULT2
                        __do_global_dtors_aux_fini_array_entry.symtab0x200080OBJECT<unknown>DEFAULT9
                        __dso_handle.symtab0x200880OBJECT<unknown>HIDDEN12
                        __encode_dotted.symtab0x1c258172FUNC<unknown>HIDDEN2
                        __encode_header.symtab0x1bd84236FUNC<unknown>HIDDEN2
                        __encode_question.symtab0x1bf2496FUNC<unknown>HIDDEN2
                        __end__.symtab0x26a940NOTYPE<unknown>DEFAULTSHN_ABS
                        __environ.symtab0x265704OBJECT<unknown>DEFAULT13
                        __eqdf2.symtab0x1cd10132FUNC<unknown>HIDDEN2
                        __errno_location.symtab0x123c828FUNC<unknown>DEFAULT2
                        __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __error.symtab0x11e9c0NOTYPE<unknown>DEFAULT2
                        __exidx_end.symtab0x1f7a40NOTYPE<unknown>DEFAULTSHN_ABS
                        __exidx_start.symtab0x1f7940NOTYPE<unknown>DEFAULTSHN_ABS
                        __exit_cleanup.symtab0x265684OBJECT<unknown>HIDDEN13
                        __extendsfdf2.symtab0x1c7b064FUNC<unknown>HIDDEN2
                        __fcntl_nocancel.symtab0x1220c108FUNC<unknown>DEFAULT2
                        __fgetc_unlocked.symtab0x190e4300FUNC<unknown>DEFAULT2
                        __fini_array_end.symtab0x2000c0NOTYPE<unknown>HIDDEN9
                        __fini_array_start.symtab0x200080NOTYPE<unknown>HIDDEN9
                        __fixunsdfsi.symtab0x1ce4084FUNC<unknown>HIDDEN2
                        __floatdidf.symtab0x1c80496FUNC<unknown>HIDDEN2
                        __floatsidf.symtab0x1c78840FUNC<unknown>HIDDEN2
                        __floatundidf.symtab0x1c7f0116FUNC<unknown>HIDDEN2
                        __floatunsidf.symtab0x1c76436FUNC<unknown>HIDDEN2
                        __frame_dummy_init_array_entry.symtab0x200040OBJECT<unknown>DEFAULT8
                        __gedf2.symtab0x1cd00148FUNC<unknown>HIDDEN2
                        __get_hosts_byname_r.symtab0x1b89476FUNC<unknown>HIDDEN2
                        __getdents64.symtab0x19e88324FUNC<unknown>HIDDEN2
                        __getpagesize.symtab0x16f2440FUNC<unknown>DEFAULT2
                        __glibc_strerror_r.symtab0x13c8824FUNC<unknown>DEFAULT2
                        __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __gtdf2.symtab0x1cd00148FUNC<unknown>HIDDEN2
                        __h_errno_location.symtab0x1754428FUNC<unknown>DEFAULT2
                        __h_errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __init_array_end.symtab0x200080NOTYPE<unknown>HIDDEN8
                        __init_array_start.symtab0x200040NOTYPE<unknown>HIDDEN8
                        __ledf2.symtab0x1cd08140FUNC<unknown>HIDDEN2
                        __libc_close.symtab0x1236452FUNC<unknown>DEFAULT2
                        __libc_connect.symtab0x13f7c56FUNC<unknown>DEFAULT2
                        __libc_fcntl.symtab0x121a0108FUNC<unknown>DEFAULT2
                        __libc_fork.symtab0x1201452FUNC<unknown>DEFAULT2
                        __libc_lseek64.symtab0x1bcdc100FUNC<unknown>DEFAULT2
                        __libc_nanosleep.symtab0x1709052FUNC<unknown>DEFAULT2
                        __libc_open.symtab0x11ee896FUNC<unknown>DEFAULT2
                        __libc_read.symtab0x120d852FUNC<unknown>DEFAULT2
                        __libc_recv.symtab0x1403056FUNC<unknown>DEFAULT2
                        __libc_recvfrom.symtab0x1406860FUNC<unknown>DEFAULT2
                        __libc_select.symtab0x1209864FUNC<unknown>DEFAULT2
                        __libc_send.symtab0x140a456FUNC<unknown>DEFAULT2
                        __libc_sendto.symtab0x140dc64FUNC<unknown>DEFAULT2
                        __libc_sigaction.symtab0x16e1c136FUNC<unknown>DEFAULT2
                        __libc_stack_end.symtab0x2656c4OBJECT<unknown>DEFAULT13
                        __libc_waitpid.symtab0x1204828FUNC<unknown>DEFAULT2
                        __libc_write.symtab0x1227852FUNC<unknown>DEFAULT2
                        __local_nameserver.symtab0x1f45c16OBJECT<unknown>HIDDEN4
                        __ltdf2.symtab0x1cd08140FUNC<unknown>HIDDEN2
                        __malloc_consolidate.symtab0x15260436FUNC<unknown>HIDDEN2
                        __malloc_largebin_index.symtab0x14330120FUNC<unknown>DEFAULT2
                        __malloc_lock.symtab0x2022424OBJECT<unknown>DEFAULT12
                        __malloc_state.symtab0x26700888OBJECT<unknown>DEFAULT13
                        __malloc_trim.symtab0x151b0176FUNC<unknown>DEFAULT2
                        __muldf3.symtab0x1c864656FUNC<unknown>HIDDEN2
                        __nameserver.symtab0x26a884OBJECT<unknown>HIDDEN13
                        __nameservers.symtab0x26a8c4OBJECT<unknown>HIDDEN13
                        __nedf2.symtab0x1cd10132FUNC<unknown>HIDDEN2
                        __open_etc_hosts.symtab0x1bf8448FUNC<unknown>HIDDEN2
                        __open_nameservers.symtab0x1b3a01116FUNC<unknown>HIDDEN2
                        __pagesize.symtab0x265744OBJECT<unknown>DEFAULT13
                        __preinit_array_end.symtab0x200040NOTYPE<unknown>HIDDENSHN_ABS
                        __preinit_array_start.symtab0x200040NOTYPE<unknown>HIDDENSHN_ABS
                        __progname.symtab0x2031c4OBJECT<unknown>DEFAULT12
                        __progname_full.symtab0x203204OBJECT<unknown>DEFAULT12
                        __pthread_initialize_minimal.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                        __pthread_mutex_init.symtab0x169488FUNC<unknown>DEFAULT2
                        __pthread_mutex_lock.symtab0x169408FUNC<unknown>DEFAULT2
                        __pthread_mutex_trylock.symtab0x169408FUNC<unknown>DEFAULT2
                        __pthread_mutex_unlock.symtab0x169408FUNC<unknown>DEFAULT2
                        __pthread_return_0.symtab0x169408FUNC<unknown>DEFAULT2
                        __read_etc_hosts_r.symtab0x1bfb4516FUNC<unknown>HIDDEN2
                        __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                        __res_sync.symtab0x26a804OBJECT<unknown>HIDDEN13
                        __resolv_attempts.symtab0x203271OBJECT<unknown>HIDDEN12
                        __resolv_lock.symtab0x2659024OBJECT<unknown>DEFAULT13
                        __resolv_timeout.symtab0x203261OBJECT<unknown>HIDDEN12
                        __rtld_fini.symtab0x2657c4OBJECT<unknown>HIDDEN13
                        __searchdomain.symtab0x26a844OBJECT<unknown>HIDDEN13
                        __searchdomains.symtab0x26a904OBJECT<unknown>HIDDEN13
                        __sigaddset.symtab0x142e836FUNC<unknown>DEFAULT2
                        __sigdelset.symtab0x1430c36FUNC<unknown>DEFAULT2
                        __sigismember.symtab0x142c436FUNC<unknown>DEFAULT2
                        __stdin.symtab0x201244OBJECT<unknown>DEFAULT12
                        __stdio_READ.symtab0x1a14088FUNC<unknown>HIDDEN2
                        __stdio_WRITE.symtab0x17c00180FUNC<unknown>HIDDEN2
                        __stdio_adjust_position.symtab0x1a198196FUNC<unknown>HIDDEN2
                        __stdio_fwrite.symtab0x17fbc320FUNC<unknown>HIDDEN2
                        __stdio_init_mutex.symtab0x1256852FUNC<unknown>HIDDEN2
                        __stdio_mutex_initializer.4636.symtab0x1e6d424OBJECT<unknown>DEFAULT4
                        __stdio_rfill.symtab0x1a25c48FUNC<unknown>HIDDEN2
                        __stdio_seek.symtab0x1a32460FUNC<unknown>HIDDEN2
                        __stdio_trans2r_o.symtab0x1a28c152FUNC<unknown>HIDDEN2
                        __stdio_trans2w_o.symtab0x180fc208FUNC<unknown>HIDDEN2
                        __stdio_wcommit.symtab0x1267048FUNC<unknown>HIDDEN2
                        __stdout.symtab0x201284OBJECT<unknown>DEFAULT12
                        __subdf3.symtab0x1c450788FUNC<unknown>HIDDEN2
                        __syscall_error.symtab0x16dfc32FUNC<unknown>HIDDEN2
                        __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __syscall_rt_sigaction.symtab0x1711852FUNC<unknown>DEFAULT2
                        __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __uClibc_fini.symtab0x16984124FUNC<unknown>DEFAULT2
                        __uClibc_init.symtab0x16a54108FUNC<unknown>DEFAULT2
                        __uClibc_main.symtab0x16ac0724FUNC<unknown>DEFAULT2
                        __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __uclibc_progname.symtab0x203184OBJECT<unknown>HIDDEN12
                        __udivsi3.symtab0x11d38252FUNC<unknown>HIDDEN2
                        __vfork.symtab0x11e6064FUNC<unknown>HIDDEN2
                        __xpg_strerror_r.symtab0x13cd0256FUNC<unknown>DEFAULT2
                        __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        __xstat32_conv.symtab0x19d24172FUNC<unknown>HIDDEN2
                        __xstat64_conv.symtab0x19c58204FUNC<unknown>HIDDEN2
                        __xstat_conv.symtab0x19dd0184FUNC<unknown>HIDDEN2
                        _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _bss_custom_printf_spec.symtab0x2638810OBJECT<unknown>DEFAULT13
                        _bss_end__.symtab0x26a940NOTYPE<unknown>DEFAULTSHN_ABS
                        _call_via_fp.symtab0x80fd4FUNC<unknown>HIDDEN2
                        _call_via_ip.symtab0x81014FUNC<unknown>HIDDEN2
                        _call_via_lr.symtab0x81094FUNC<unknown>HIDDEN2
                        _call_via_r0.symtab0x80d14FUNC<unknown>HIDDEN2
                        _call_via_r1.symtab0x80d54FUNC<unknown>HIDDEN2
                        _call_via_r2.symtab0x80d94FUNC<unknown>HIDDEN2
                        _call_via_r3.symtab0x80dd4FUNC<unknown>HIDDEN2
                        _call_via_r4.symtab0x80e14FUNC<unknown>HIDDEN2
                        _call_via_r5.symtab0x80e54FUNC<unknown>HIDDEN2
                        _call_via_r6.symtab0x80e94FUNC<unknown>HIDDEN2
                        _call_via_r7.symtab0x80ed4FUNC<unknown>HIDDEN2
                        _call_via_r8.symtab0x80f14FUNC<unknown>HIDDEN2
                        _call_via_r9.symtab0x80f54FUNC<unknown>HIDDEN2
                        _call_via_sl.symtab0x80f94FUNC<unknown>HIDDEN2
                        _call_via_sp.symtab0x81054FUNC<unknown>HIDDEN2
                        _charpad.symtab0x126a084FUNC<unknown>DEFAULT2
                        _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _custom_printf_arginfo.symtab0x266a840OBJECT<unknown>HIDDEN13
                        _custom_printf_handler.symtab0x266d040OBJECT<unknown>HIDDEN13
                        _custom_printf_spec.symtab0x202204OBJECT<unknown>HIDDEN12
                        _dl_aux_init.symtab0x19b7056FUNC<unknown>DEFAULT2
                        _dl_phdr.symtab0x26a784OBJECT<unknown>DEFAULT13
                        _dl_phnum.symtab0x26a7c4OBJECT<unknown>DEFAULT13
                        _edata.symtab0x203300NOTYPE<unknown>DEFAULTSHN_ABS
                        _end.symtab0x26a940NOTYPE<unknown>DEFAULTSHN_ABS
                        _endswith.symtab0x118f4236FUNC<unknown>DEFAULT2
                        _errno.symtab0x265804OBJECT<unknown>DEFAULT13
                        _exit.symtab0x1230044FUNC<unknown>DEFAULT2
                        _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _fini.symtab0x1ce940FUNC<unknown>DEFAULT3
                        _fixed_buffers.symtab0x243888192OBJECT<unknown>DEFAULT13
                        _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _fp_out_narrow.symtab0x126f4132FUNC<unknown>DEFAULT2
                        _fpmaxtostr.symtab0x183c42036FUNC<unknown>HIDDEN2
                        _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _h_errno.symtab0x265844OBJECT<unknown>DEFAULT13
                        _init.symtab0x80b40FUNC<unknown>DEFAULT1
                        _load_inttype.symtab0x181cc112FUNC<unknown>HIDDEN2
                        _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _memcpy.symtab0x114a4124FUNC<unknown>DEFAULT2
                        _memmove.symtab0x11520160FUNC<unknown>DEFAULT2
                        _memset.symtab0x115c0104FUNC<unknown>DEFAULT2
                        _ppfs_init.symtab0x12e60160FUNC<unknown>HIDDEN2
                        _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _ppfs_parsespec.symtab0x131481392FUNC<unknown>HIDDEN2
                        _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _ppfs_prepargs.symtab0x12f0068FUNC<unknown>HIDDEN2
                        _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _ppfs_setargs.symtab0x12f44432FUNC<unknown>HIDDEN2
                        _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _promoted_size.symtab0x130f484FUNC<unknown>DEFAULT2
                        _pthread_cleanup_pop_restore.symtab0x1695844FUNC<unknown>DEFAULT2
                        _pthread_cleanup_push_defer.symtab0x169508FUNC<unknown>DEFAULT2
                        _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _sigintr.symtab0x266f88OBJECT<unknown>HIDDEN13
                        _start.symtab0x81b00FUNC<unknown>DEFAULT2
                        _startswith.symtab0x11860148FUNC<unknown>DEFAULT2
                        _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _stdio_fopen.symtab0x17cb4776FUNC<unknown>HIDDEN2
                        _stdio_init.symtab0x12500104FUNC<unknown>HIDDEN2
                        _stdio_openlist.symtab0x2012c4OBJECT<unknown>DEFAULT12
                        _stdio_openlist_add_lock.symtab0x200e424OBJECT<unknown>DEFAULT12
                        _stdio_openlist_dec_use.symtab0x18d50392FUNC<unknown>HIDDEN2
                        _stdio_openlist_del_count.symtab0x243844OBJECT<unknown>DEFAULT13
                        _stdio_openlist_del_lock.symtab0x200fc24OBJECT<unknown>DEFAULT12
                        _stdio_openlist_use_count.symtab0x243804OBJECT<unknown>DEFAULT13
                        _stdio_streams.symtab0x20130240OBJECT<unknown>DEFAULT12
                        _stdio_term.symtab0x1259c212FUNC<unknown>HIDDEN2
                        _stdio_user_locking.symtab0x201144OBJECT<unknown>DEFAULT12
                        _stdlib_strto_l.symtab0x15dfc448FUNC<unknown>HIDDEN2
                        _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _store_inttype.symtab0x1823c44FUNC<unknown>HIDDEN2
                        _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _strcat.symtab0x116a4148FUNC<unknown>DEFAULT2
                        _strcmp.symtab0x113d0212FUNC<unknown>DEFAULT2
                        _strcpy.symtab0x11628124FUNC<unknown>DEFAULT2
                        _strdup.symtab0x1173888FUNC<unknown>DEFAULT2
                        _string_syserrmsgs.symtab0x1e7a42906OBJECT<unknown>HIDDEN4
                        _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _strlen.symtab0x1137888FUNC<unknown>DEFAULT2
                        _strstr.symtab0x11790208FUNC<unknown>DEFAULT2
                        _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _uintmaxtostr.symtab0x18268348FUNC<unknown>HIDDEN2
                        _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _vfprintf_internal.symtab0x127781768FUNC<unknown>HIDDEN2
                        _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        abort.symtab0x15690296FUNC<unknown>DEFAULT2
                        abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        access.symtab0x1206452FUNC<unknown>DEFAULT2
                        access.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        acnc.symtab0xc8d8208FUNC<unknown>DEFAULT2
                        add_entry.symtab0x106a8140FUNC<unknown>DEFAULT2
                        aeabi_unwind_cpp_pr1.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        atoi.symtab0x15dc032FUNC<unknown>DEFAULT2
                        atol.symtab0x15dc032FUNC<unknown>DEFAULT2
                        atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        bcopy.symtab0x138a016FUNC<unknown>DEFAULT2
                        been_there_done_that.symtab0x265644OBJECT<unknown>DEFAULT13
                        brk.symtab0x19ba876FUNC<unknown>DEFAULT2
                        brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        bsd_signal.symtab0x1420c184FUNC<unknown>DEFAULT2
                        buf.5444.symtab0x26398440OBJECT<unknown>DEFAULT13
                        bzero.symtab0x138e012FUNC<unknown>DEFAULT2
                        c.symtab0x200c84OBJECT<unknown>DEFAULT12
                        calloc.symtab0x14cc8308FUNC<unknown>DEFAULT2
                        calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        checksum_generic.symtab0x81ec216FUNC<unknown>DEFAULT2
                        checksum_tcp_udp.symtab0x82c4424FUNC<unknown>DEFAULT2
                        checksum_tcpudp.symtab0x846c424FUNC<unknown>DEFAULT2
                        clock.symtab0x123e452FUNC<unknown>DEFAULT2
                        clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        clock_getres.symtab0x16f6052FUNC<unknown>DEFAULT2
                        clock_getres.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        close.symtab0x1236452FUNC<unknown>DEFAULT2
                        close.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        closedir.symtab0x1714c248FUNC<unknown>DEFAULT2
                        closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        closenameservers.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        completed.4959.symtab0x203301OBJECT<unknown>DEFAULT13
                        connect.symtab0x13f7c56FUNC<unknown>DEFAULT2
                        connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        connectTimeout.symtab0xa08c628FUNC<unknown>DEFAULT2
                        crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        csum.symtab0xa50c340FUNC<unknown>DEFAULT2
                        data_start.symtab0x2008c0NOTYPE<unknown>DEFAULT12
                        decoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        decodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        dnslookup.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        dup2.symtab0x11ea052FUNC<unknown>DEFAULT2
                        dup2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        encoded.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        encodeh.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        encodeq.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        environ.symtab0x265704OBJECT<unknown>DEFAULT13
                        errno.symtab0x265804OBJECT<unknown>DEFAULT13
                        errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        execl.symtab0x16844172FUNC<unknown>DEFAULT2
                        execl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        execve.symtab0x16ef052FUNC<unknown>DEFAULT2
                        execve.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        exit.symtab0x15fbc184FUNC<unknown>DEFAULT2
                        exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        exp10_table.symtab0x1f3b072OBJECT<unknown>DEFAULT4
                        fclose.symtab0x17a2c436FUNC<unknown>DEFAULT2
                        fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fcntl.symtab0x121a0108FUNC<unknown>DEFAULT2
                        fd_to_DIR.symtab0x17244208FUNC<unknown>DEFAULT2
                        fdgets.symtab0x9930212FUNC<unknown>DEFAULT2
                        fdopen_pids.symtab0x2436c4OBJECT<unknown>DEFAULT13
                        fdopendir.symtab0x173c0152FUNC<unknown>DEFAULT2
                        fdpclose.symtab0x97a8392FUNC<unknown>DEFAULT2
                        fdpopen.symtab0x9520648FUNC<unknown>DEFAULT2
                        fflush_unlocked.symtab0x18ed8524FUNC<unknown>DEFAULT2
                        fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fgetc.symtab0x18bb8220FUNC<unknown>DEFAULT2
                        fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fgetc_unlocked.symtab0x190e4300FUNC<unknown>DEFAULT2
                        fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fgets.symtab0x18c94188FUNC<unknown>DEFAULT2
                        fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fgets_unlocked.symtab0x19210160FUNC<unknown>DEFAULT2
                        fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        findRandIP.symtab0xa4a8100FUNC<unknown>DEFAULT2
                        fmt.symtab0x1f39820OBJECT<unknown>DEFAULT4
                        fopen.symtab0x17be032FUNC<unknown>DEFAULT2
                        fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fork.symtab0x1201452FUNC<unknown>DEFAULT2
                        fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fputs_unlocked.symtab0x136b856FUNC<unknown>DEFAULT2
                        fputs_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        frame_dummy.symtab0x81500FUNC<unknown>DEFAULT2
                        free.symtab0x15414572FUNC<unknown>DEFAULT2
                        free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fseek.symtab0x19fcc36FUNC<unknown>DEFAULT2
                        fseeko.symtab0x19fcc36FUNC<unknown>DEFAULT2
                        fseeko.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fseeko64.symtab0x19ff0336FUNC<unknown>DEFAULT2
                        fseeko64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fstat.symtab0x19c0088FUNC<unknown>DEFAULT2
                        fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        fwrite_unlocked.symtab0x136f0176FUNC<unknown>DEFAULT2
                        fwrite_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getBuild.symtab0xecf824FUNC<unknown>DEFAULT2
                        getHost.symtab0x9c34104FUNC<unknown>DEFAULT2
                        getOurIP.symtab0xea3c700FUNC<unknown>DEFAULT2
                        get_hosts_byname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getc.symtab0x18bb8220FUNC<unknown>DEFAULT2
                        getc_unlocked.symtab0x190e4300FUNC<unknown>DEFAULT2
                        getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getdtablesize.symtab0x1210c44FUNC<unknown>DEFAULT2
                        getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getegid.symtab0x16fc820FUNC<unknown>DEFAULT2
                        getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        geteuid.symtab0x1200020FUNC<unknown>DEFAULT2
                        geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getgid.symtab0x1704820FUNC<unknown>DEFAULT2
                        getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        gethostbyname.symtab0x13ef828FUNC<unknown>DEFAULT2
                        gethostbyname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        gethostbyname2.symtab0x13f14104FUNC<unknown>DEFAULT2
                        gethostbyname2.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        gethostbyname2_r.symtab0x198d0672FUNC<unknown>DEFAULT2
                        gethostbyname2_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        gethostbyname_r.symtab0x1b8e0760FUNC<unknown>DEFAULT2
                        gethostbyname_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        gethostname.symtab0x1bc0c120FUNC<unknown>DEFAULT2
                        gethostname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getpagesize.symtab0x16f2440FUNC<unknown>DEFAULT2
                        getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getpid.symtab0x11f7c20FUNC<unknown>DEFAULT2
                        getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getppid.symtab0x11ed420FUNC<unknown>DEFAULT2
                        getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getrlimit.symtab0x16f9452FUNC<unknown>DEFAULT2
                        getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getsockname.symtab0x13fb456FUNC<unknown>DEFAULT2
                        getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getsockopt.symtab0x13fec68FUNC<unknown>DEFAULT2
                        getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        gettimeofday.symtab0x1216c52FUNC<unknown>DEFAULT2
                        gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        getuid.symtab0x16f4c20FUNC<unknown>DEFAULT2
                        getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        h_errno.symtab0x265844OBJECT<unknown>DEFAULT13
                        hacks.symtab0x200904OBJECT<unknown>DEFAULT12
                        hacks2.symtab0x200944OBJECT<unknown>DEFAULT12
                        hacks3.symtab0x200984OBJECT<unknown>DEFAULT12
                        hacks4.symtab0x2009c4OBJECT<unknown>DEFAULT12
                        hextable.symtab0x1d17c1024OBJECT<unknown>DEFAULT4
                        hoste.5443.symtab0x2655020OBJECT<unknown>DEFAULT13
                        htonl.symtab0x13e8032FUNC<unknown>DEFAULT2
                        htons.symtab0x13e7016FUNC<unknown>DEFAULT2
                        i.4930.symtab0x200cc4OBJECT<unknown>DEFAULT12
                        index.symtab0x13b98240FUNC<unknown>DEFAULT2
                        inet_addr.symtab0x13ed040FUNC<unknown>DEFAULT2
                        inet_aton.symtab0x197d8248FUNC<unknown>DEFAULT2
                        inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                        inet_ntop.symtab0x1a790644FUNC<unknown>DEFAULT2
                        inet_ntop4.symtab0x1a64c324FUNC<unknown>DEFAULT2

                        Network Behavior

                        Network Port Distribution

                        TCP Packets

                        TimestampSource PortDest PortSource IPDest IP
                        Jan 5, 2025 08:58:03.305335999 CET5446265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:03.310300112 CET6548954462195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:03.310343027 CET5446265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:03.313000917 CET5446265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:03.317842960 CET6548954462195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:04.013211012 CET6548954462195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:04.013281107 CET6548954462195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:04.013449907 CET5446265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:04.014456987 CET5446265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:04.019206047 CET6548954462195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:19.018176079 CET5446465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:19.023185015 CET6548954464195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:19.023260117 CET5446465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:19.023416042 CET5446465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:19.028186083 CET6548954464195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:19.751852036 CET6548954464195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:19.752115011 CET5446465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:19.752247095 CET6548954464195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:19.752393007 CET5446465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:19.757170916 CET6548954464195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:34.756165981 CET5446665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:34.761066914 CET6548954466195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:34.761142969 CET5446665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:34.761193037 CET5446665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:34.765981913 CET6548954466195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:35.493788004 CET6548954466195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:35.493810892 CET6548954466195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:35.493942022 CET5446665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:35.494048119 CET5446665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:35.500179052 CET6548954466195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:50.498250008 CET5446865489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:50.503155947 CET6548954468195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:50.503285885 CET5446865489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:50.503285885 CET5446865489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:50.508178949 CET6548954468195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:51.202169895 CET6548954468195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:51.202239990 CET6548954468195.133.52.175192.168.2.14
                        Jan 5, 2025 08:58:51.202318907 CET5446865489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:51.202368975 CET5446865489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:58:51.207165956 CET6548954468195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:06.206538916 CET5447065489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:06.211617947 CET6548954470195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:06.211697102 CET5447065489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:06.211766958 CET5447065489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:06.216582060 CET6548954470195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:06.943774939 CET6548954470195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:06.943885088 CET6548954470195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:06.943918943 CET5447065489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:06.944056034 CET5447065489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:06.950361967 CET6548954470195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:21.948231936 CET5447265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:21.953037977 CET6548954472195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:21.953094959 CET5447265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:21.953124046 CET5447265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:21.957964897 CET6548954472195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:22.662801981 CET6548954472195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:22.662832022 CET6548954472195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:22.662972927 CET5447265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:22.663079977 CET5447265489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:22.667881966 CET6548954472195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:37.667300940 CET5447465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:37.672132969 CET6548954474195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:37.672199965 CET5447465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:37.672234058 CET5447465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:37.677043915 CET6548954474195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:38.410244942 CET6548954474195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:38.410320044 CET6548954474195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:38.410378933 CET5447465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:38.410485029 CET5447465489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:38.415298939 CET6548954474195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:53.415579081 CET5447665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:53.420479059 CET6548954476195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:53.420577049 CET5447665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:53.420641899 CET5447665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:53.425430059 CET6548954476195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:54.143153906 CET6548954476195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:54.143193960 CET6548954476195.133.52.175192.168.2.14
                        Jan 5, 2025 08:59:54.143349886 CET5447665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:54.143349886 CET5447665489192.168.2.14195.133.52.175
                        Jan 5, 2025 08:59:54.148281097 CET6548954476195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:09.147905111 CET5447865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:09.152950048 CET6548954478195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:09.153050900 CET5447865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:09.153052092 CET5447865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:09.157892942 CET6548954478195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:09.890271902 CET6548954478195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:09.890352964 CET6548954478195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:09.890515089 CET5447865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:09.890616894 CET5447865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:09.895426989 CET6548954478195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:24.895741940 CET5448065489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:24.901341915 CET6548954480195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:24.901420116 CET5448065489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:24.901544094 CET5448065489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:24.907133102 CET6548954480195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:25.708019972 CET6548954480195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:25.708045006 CET6548954480195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:25.708054066 CET6548954480195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:25.708261013 CET5448065489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:25.708261013 CET5448065489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:25.708322048 CET5448065489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:25.713083982 CET6548954480195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:40.712033033 CET5448265489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:40.717096090 CET6548954482195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:40.717154026 CET5448265489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:40.717228889 CET5448265489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:40.722033024 CET6548954482195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:41.417701960 CET6548954482195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:41.417813063 CET5448265489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:41.417834044 CET6548954482195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:41.417918921 CET5448265489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:41.422672987 CET6548954482195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:56.420989990 CET5448465489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:56.425909996 CET6548954484195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:56.425993919 CET5448465489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:56.426016092 CET5448465489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:56.430779934 CET6548954484195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:57.145725965 CET6548954484195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:57.145822048 CET6548954484195.133.52.175192.168.2.14
                        Jan 5, 2025 09:00:57.145857096 CET5448465489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:57.145909071 CET5448465489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:00:57.150676012 CET6548954484195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:12.150441885 CET5448665489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:12.155375957 CET6548954486195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:12.155458927 CET5448665489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:12.155515909 CET5448665489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:12.160311937 CET6548954486195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:12.852356911 CET6548954486195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:12.852431059 CET6548954486195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:12.852673054 CET5448665489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:12.852823973 CET5448665489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:12.857598066 CET6548954486195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:27.857198954 CET5448865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:27.862215996 CET6548954488195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:27.862364054 CET5448865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:27.862447977 CET5448865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:27.867228985 CET6548954488195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:28.578136921 CET6548954488195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:28.578191996 CET6548954488195.133.52.175192.168.2.14
                        Jan 5, 2025 09:01:28.578376055 CET5448865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:28.578464031 CET5448865489192.168.2.14195.133.52.175
                        Jan 5, 2025 09:01:28.583208084 CET6548954488195.133.52.175192.168.2.14

                        UDP Packets

                        TimestampSource PortDest PortSource IPDest IP
                        Jan 5, 2025 09:00:49.961705923 CET5498753192.168.2.141.1.1.1
                        Jan 5, 2025 09:00:49.961771011 CET5963853192.168.2.141.1.1.1
                        Jan 5, 2025 09:00:49.968882084 CET53596381.1.1.1192.168.2.14
                        Jan 5, 2025 09:00:49.968904972 CET53549871.1.1.1192.168.2.14

                        DNS Queries

                        TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                        Jan 5, 2025 09:00:49.961705923 CET192.168.2.141.1.1.10x48b2Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                        Jan 5, 2025 09:00:49.961771011 CET192.168.2.141.1.1.10xd641Standard query (0)daisy.ubuntu.com28IN (0x0001)false

                        DNS Answers

                        TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                        Jan 5, 2025 09:00:49.968904972 CET1.1.1.1192.168.2.140x48b2No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false
                        Jan 5, 2025 09:00:49.968904972 CET1.1.1.1192.168.2.140x48b2No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false

                        System Behavior

                        General

                        Start time (UTC):07:58:02
                        Start date (UTC):05/01/2025
                        Path:/tmp/s.elf
                        Arguments:/tmp/s.elf
                        File size:4956856 bytes
                        MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                        Chronological Activities


                        General

                        Start time (UTC):07:58:02
                        Start date (UTC):05/01/2025
                        Path:/tmp/s.elf
                        Arguments:-
                        File size:4956856 bytes
                        MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                        Chronological Activities


                        General

                        Start time (UTC):07:58:02
                        Start date (UTC):05/01/2025
                        Path:/tmp/s.elf
                        Arguments:-
                        File size:4956856 bytes
                        MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                        Chronological Activities


                        General

                        Start time (UTC):07:58:02
                        Start date (UTC):05/01/2025
                        Path:/tmp/s.elf
                        Arguments:-
                        File size:4956856 bytes
                        MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                        Chronological Activities