Edit tour

Linux Analysis Report
boatnet.arm7.elf

Overview

General Information

Sample name:boatnet.arm7.elf
Analysis ID:1636844
MD5:43d96262b05c44c653c415765e7d9b63
SHA1:91fcecda378611aacbe36d390d69c242c016c510
SHA256:310985b3f1da8403dff24b7a9710a3d24f0571f81758499bbc758fdc61ee84f5
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:88
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Mirai
Contains symbols with names commonly found in malware
Sample tries to kill multiple processes (SIGKILL)
Creates hidden files and/or directories
Detected TCP or UDP traffic on non-standard ports
Document contains embedded VBA macros
Document misses a certain OLE stream usually present in this Microsoft Office document type
Enumerates processes within the "proc" file system
Sample and/or dropped files contains symbols with suspicious names
Sample tries to kill a process (SIGKILL)
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1636844
Start date and time:2025-03-13 08:01:09 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 16s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:boatnet.arm7.elf
Detection:MAL
Classification:mal88.spre.troj.linELF@0/1@2/0
Command:/tmp/boatnet.arm7.elf
PID:5741
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
lzrd cock fest"/proc/"/exe
Standard Error:
  • system is lnxubuntu20
  • wrapper-2.0 (PID: 5752, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
  • wrapper-2.0 (PID: 5753, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
  • wrapper-2.0 (PID: 5754, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
  • wrapper-2.0 (PID: 5755, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
    • xfpm-power-backlight-helper (PID: 5772, Parent: 5755, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness
  • wrapper-2.0 (PID: 5756, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
  • wrapper-2.0 (PID: 5757, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
  • xfconfd (PID: 5774, Parent: 5773, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
  • systemd New Fork (PID: 5783, Parent: 3044)
  • xfce4-notifyd (PID: 5783, Parent: 3044, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
boatnet.arm7.elfJoeSecurity_Mirai_5Yara detected MiraiJoe Security
    boatnet.arm7.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      boatnet.arm7.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
      • 0x17ebc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17ed0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17ee4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17ef8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17f98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17fac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17fc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17fd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17fe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x17ffc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x18010:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x18024:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x18038:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      • 0x1804c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
      boatnet.arm7.elfLinux_Trojan_Gafgyt_ea92cca8unknownunknown
      • 0x18414:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
      boatnet.arm7.elfMirai_Botnet_MalwareDetects Mirai Botnet MalwareFlorian Roth
      • 0x17e38:$x1: POST /cdn-cgi/
      • 0x18c34:$s1: LCOGQGPTGP
      Click to see the 1 entries
      SourceRuleDescriptionAuthorStrings
      5741.1.00007fd688017000.00007fd688031000.r-x.sdmpJoeSecurity_Mirai_5Yara detected MiraiJoe Security
        5741.1.00007fd688017000.00007fd688031000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
          5741.1.00007fd688017000.00007fd688031000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
          • 0x17ebc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17ed0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17ee4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17ef8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17f98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17fac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17fc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17fd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17fe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x17ffc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x18010:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x18024:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x18038:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          • 0x1804c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
          5741.1.00007fd688017000.00007fd688031000.r-x.sdmpLinux_Trojan_Gafgyt_ea92cca8unknownunknown
          • 0x18414:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
          5741.1.00007fd688017000.00007fd688031000.r-x.sdmpMirai_Botnet_MalwareDetects Mirai Botnet MalwareFlorian Roth
          • 0x17e38:$x1: POST /cdn-cgi/
          • 0x18c34:$s1: LCOGQGPTGP
          Click to see the 22 entries
          No Suricata rule has matched

          Click to jump to signature section

          Show All Signature Results

          AV Detection

          barindex
          Source: boatnet.arm7.elfAvira: detected
          Source: boatnet.arm7.elfVirustotal: Detection: 67%Perma Link
          Source: boatnet.arm7.elfReversingLabs: Detection: 73%
          Source: global trafficTCP traffic: 192.168.2.15:40726 -> 5.181.159.16:3778
          Source: unknownTCP traffic detected without corresponding DNS query: 5.181.159.16
          Source: unknownTCP traffic detected without corresponding DNS query: 5.181.159.16
          Source: unknownTCP traffic detected without corresponding DNS query: 5.181.159.16
          Source: unknownTCP traffic detected without corresponding DNS query: 5.181.159.16
          Source: unknownTCP traffic detected without corresponding DNS query: 5.181.159.16
          Source: unknownTCP traffic detected without corresponding DNS query: 5.181.159.16
          Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

          System Summary

          barindex
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: Detects Mirai Botnet Malware Author: Florian Roth
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: Detects ELF malware Mirai related Author: Florian Roth
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Detects Mirai Botnet Malware Author: Florian Roth
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Detects ELF malware Mirai related Author: Florian Roth
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Detects Mirai Botnet Malware Author: Florian Roth
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Detects ELF malware Mirai related Author: Florian Roth
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Detects Mirai Botnet Malware Author: Florian Roth
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Detects ELF malware Mirai related Author: Florian Roth
          Source: Process Memory Space: boatnet.arm7.elf PID: 5741, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
          Source: Process Memory Space: boatnet.arm7.elf PID: 5741, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
          Source: Process Memory Space: boatnet.arm7.elf PID: 5744, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
          Source: Process Memory Space: boatnet.arm7.elf PID: 5744, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
          Source: Process Memory Space: boatnet.arm7.elf PID: 5747, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
          Source: Process Memory Space: boatnet.arm7.elf PID: 5747, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
          Source: ELF static info symbol of initial sampleName: attack.c
          Source: ELF static info symbol of initial sampleName: attack_app.c
          Source: ELF static info symbol of initial sampleName: attack_app_cfnull
          Source: ELF static info symbol of initial sampleName: attack_app_http
          Source: ELF static info symbol of initial sampleName: attack_get_opt_int
          Source: ELF static info symbol of initial sampleName: attack_get_opt_ip
          Source: ELF static info symbol of initial sampleName: attack_get_opt_str
          Source: ELF static info symbol of initial sampleName: attack_init
          Source: ELF static info symbol of initial sampleName: attack_method_dns
          Source: ELF static info symbol of initial sampleName: attack_method_greeth
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3192, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3249, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3250, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3251, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3252, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3253, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3255, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3272, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3274, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3298, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5747, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5752, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5753, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5754, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5755, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5756, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5757, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5774, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5783, result: successfulJump to behavior
          Source: xfce4-panel.xml.new.31.drOLE indicator, VBA macros: true
          Source: xfce4-panel.xml.new.31.drOLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
          Source: boatnet.arm7.elfELF static info symbol of initial sample: __gnu_unwind_execute
          Source: boatnet.arm7.elfELF static info symbol of initial sample: hexPayload
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3192, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3249, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3250, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3251, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3252, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3253, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3255, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3272, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3274, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 3298, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5747, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5752, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5753, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5754, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5755, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5756, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5757, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5774, result: successfulJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)SIGKILL sent: pid: 5783, result: successfulJump to behavior
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
          Source: boatnet.arm7.elf, type: SAMPLEMatched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
          Source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
          Source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
          Source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORYMatched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
          Source: Process Memory Space: boatnet.arm7.elf PID: 5741, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
          Source: Process Memory Space: boatnet.arm7.elf PID: 5741, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
          Source: Process Memory Space: boatnet.arm7.elf PID: 5744, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
          Source: Process Memory Space: boatnet.arm7.elf PID: 5744, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
          Source: Process Memory Space: boatnet.arm7.elf PID: 5747, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
          Source: Process Memory Space: boatnet.arm7.elf PID: 5747, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
          Source: classification engineClassification label: mal88.spre.troj.linELF@0/1@2/0
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5752)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /home/saturnino/.fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/X11/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /home/saturnino/.fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/X11/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /home/saturnino/.fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/X11/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /home/saturnino/.fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/X11/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /home/saturnino/.cacheJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /home/saturnino/.localJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Directory: /home/saturnino/.configJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /home/saturnino/.fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/X11/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5774)Directory: /home/saturnino/.cacheJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5774)Directory: /home/saturnino/.localJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5774)Directory: /home/saturnino/.configJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5774)Directory: /home/saturnino/.configJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5783)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5783)Directory: /home/saturnino/.cacheJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5783)Directory: /home/saturnino/.localJump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5783)Directory: /home/saturnino/.configJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/5783/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1185/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3241/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3483/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1732/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3915/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1730/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1333/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1695/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3235/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3234/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/5896/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/911/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/515/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/914/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1617/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1615/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/917/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3255/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3253/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1591/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3252/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3251/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3250/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1623/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1588/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3249/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/764/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3368/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1585/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3246/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3488/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/766/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/800/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/888/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/802/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1509/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/803/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/804/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3800/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3801/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1867/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3407/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1484/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/490/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1514/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1634/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1479/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1875/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/654/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3379/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/655/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/656/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/777/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/931/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1595/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/657/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/812/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/779/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/658/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/933/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/418/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/419/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3419/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/5691/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3310/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3275/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3274/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3273/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3394/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3272/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/782/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3303/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1762/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3027/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1486/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/789/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1806/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/5725/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/5726/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/5586/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1660/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3440/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/793/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/794/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3316/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/674/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/796/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/675/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/676/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1498/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1497/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1496/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3157/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3278/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3399/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3798/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3799/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/1659/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/5752/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3332/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3210/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3298/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3055/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5743)File opened: /proc/3052/cmdlineJump to behavior
          Source: /tmp/boatnet.arm7.elf (PID: 5741)Queries kernel information via 'uname': Jump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5752)Queries kernel information via 'uname': Jump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5753)Queries kernel information via 'uname': Jump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5754)Queries kernel information via 'uname': Jump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5755)Queries kernel information via 'uname': Jump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5756)Queries kernel information via 'uname': Jump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5757)Queries kernel information via 'uname': Jump to behavior
          Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5783)Queries kernel information via 'uname': Jump to behavior
          Source: boatnet.arm7.elf, 5741.1.00005652c995f000.00005652c9ab1000.rw-.sdmp, boatnet.arm7.elf, 5744.1.00005652c995f000.00005652c9a8d000.rw-.sdmp, boatnet.arm7.elf, 5747.1.00005652c995f000.00005652c9a8d000.rw-.sdmpBinary or memory string: RV!/etc/qemu-binfmt/arm
          Source: boatnet.arm7.elf, 5741.1.00005652c995f000.00005652c9ab1000.rw-.sdmp, boatnet.arm7.elf, 5744.1.00005652c995f000.00005652c9a8d000.rw-.sdmp, boatnet.arm7.elf, 5747.1.00005652c995f000.00005652c9a8d000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
          Source: boatnet.arm7.elf, 5741.1.00007fffa526f000.00007fffa5290000.rw-.sdmp, boatnet.arm7.elf, 5744.1.00007fffa526f000.00007fffa5290000.rw-.sdmp, boatnet.arm7.elf, 5747.1.00007fffa526f000.00007fffa5290000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
          Source: boatnet.arm7.elf, 5741.1.00007fffa526f000.00007fffa5290000.rw-.sdmp, boatnet.arm7.elf, 5744.1.00007fffa526f000.00007fffa5290000.rw-.sdmp, boatnet.arm7.elf, 5747.1.00007fffa526f000.00007fffa5290000.rw-.sdmpBinary or memory string: jx86_64/usr/bin/qemu-arm/tmp/boatnet.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/boatnet.arm7.elf

          Stealing of Sensitive Information

          barindex
          Source: Yara matchFile source: boatnet.arm7.elf, type: SAMPLE
          Source: Yara matchFile source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: Process Memory Space: boatnet.arm7.elf PID: 5741, type: MEMORYSTR
          Source: Yara matchFile source: Process Memory Space: boatnet.arm7.elf PID: 5744, type: MEMORYSTR
          Source: Yara matchFile source: Process Memory Space: boatnet.arm7.elf PID: 5747, type: MEMORYSTR

          Remote Access Functionality

          barindex
          Source: Yara matchFile source: boatnet.arm7.elf, type: SAMPLE
          Source: Yara matchFile source: 5741.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 5744.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: 5747.1.00007fd688017000.00007fd688031000.r-x.sdmp, type: MEMORY
          Source: Yara matchFile source: Process Memory Space: boatnet.arm7.elf PID: 5741, type: MEMORYSTR
          Source: Yara matchFile source: Process Memory Space: boatnet.arm7.elf PID: 5744, type: MEMORYSTR
          Source: Yara matchFile source: Process Memory Space: boatnet.arm7.elf PID: 5747, type: MEMORYSTR
          ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
          Gather Victim Identity Information1
          Scripting
          Valid AccountsWindows Management Instrumentation1
          Scripting
          Path Interception1
          Masquerading
          1
          OS Credential Dumping
          11
          Security Software Discovery
          Remote ServicesData from Local System1
          Non-Standard Port
          Exfiltration Over Other Network Medium1
          Service Stop
          CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
          Hidden Files and Directories
          LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
          Non-Application Layer Protocol
          Exfiltration Over BluetoothNetwork Denial of Service
          Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
          Application Layer Protocol
          Automated ExfiltrationData Encrypted for Impact
          No configs have been found
          Hide Legend

          Legend:

          • Process
          • Signature
          • Created File
          • DNS/IP Info
          • Is Dropped
          • Number of created Files
          • Is malicious
          • Internet
          behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1636844 Sample: boatnet.arm7.elf Startdate: 13/03/2025 Architecture: LINUX Score: 88 24 5.181.159.16, 3778, 40726 MIVOCLOUDMD Moldova Republic of 2->24 26 daisy.ubuntu.com 2->26 28 Malicious sample detected (through community Yara rule) 2->28 30 Antivirus / Scanner detection for submitted sample 2->30 32 Multi AV Scanner detection for submitted file 2->32 34 2 other signatures 2->34 7 boatnet.arm7.elf 2->7         started        9 xfce4-panel wrapper-2.0 2->9         started        11 xfce4-panel wrapper-2.0 2->11         started        13 6 other processes 2->13 signatures3 process4 process5 15 boatnet.arm7.elf 7->15         started        18 boatnet.arm7.elf 7->18         started        20 boatnet.arm7.elf 7->20         started        22 wrapper-2.0 xfpm-power-backlight-helper 9->22         started        signatures6 36 Sample tries to kill multiple processes (SIGKILL) 15->36

          This section contains all screenshots as thumbnails, including those not shown in the slideshow.


          windows-stand
          SourceDetectionScannerLabelLink
          boatnet.arm7.elf67%VirustotalBrowse
          boatnet.arm7.elf74%ReversingLabsLinux.Backdoor.Mirai
          boatnet.arm7.elf100%AviraEXP/ELF.Gafgyt.Z.F
          No Antivirus matches
          No Antivirus matches
          No Antivirus matches

          Download Network PCAP: filteredfull

          NameIPActiveMaliciousAntivirus DetectionReputation
          daisy.ubuntu.com
          162.213.35.25
          truefalse
            high
            • No. of IPs < 25%
            • 25% < No. of IPs < 50%
            • 50% < No. of IPs < 75%
            • 75% < No. of IPs
            IPDomainCountryFlagASNASN NameMalicious
            5.181.159.16
            unknownMoldova Republic of
            39798MIVOCLOUDMDfalse
            MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
            5.181.159.16boatnet.arm6.elfGet hashmaliciousMiraiBrowse
              camp.x86_64.elfGet hashmaliciousMiraiBrowse
                camp.arm7.elfGet hashmaliciousMiraiBrowse
                  camp.sh4.elfGet hashmaliciousMiraiBrowse
                    camp.i686.elfGet hashmaliciousMiraiBrowse
                      camp.m68k.elfGet hashmaliciousMiraiBrowse
                        camp.spc.elfGet hashmaliciousMiraiBrowse
                          camp.ppc.elfGet hashmaliciousMiraiBrowse
                            camp.mpsl.elfGet hashmaliciousMiraiBrowse
                              camp.arm.elfGet hashmaliciousMiraiBrowse
                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                daisy.ubuntu.comboatnet.ppc.elfGet hashmaliciousMiraiBrowse
                                • 162.213.35.24
                                boatnet.m68k.elfGet hashmaliciousMiraiBrowse
                                • 162.213.35.25
                                boatnet.sh4.elfGet hashmaliciousMiraiBrowse
                                • 162.213.35.24
                                boatnet.mpsl.elfGet hashmaliciousMiraiBrowse
                                • 162.213.35.25
                                boatnet.spc.elfGet hashmaliciousMiraiBrowse
                                • 162.213.35.24
                                boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                • 162.213.35.24
                                i.elfGet hashmaliciousUnknownBrowse
                                • 162.213.35.25
                                sshd.elfGet hashmaliciousUnknownBrowse
                                • 162.213.35.25
                                miner.elfGet hashmaliciousUnknownBrowse
                                • 162.213.35.24
                                .i.elfGet hashmaliciousUnknownBrowse
                                • 162.213.35.25
                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                MIVOCLOUDMDboatnet.arm6.elfGet hashmaliciousMiraiBrowse
                                • 5.181.159.16
                                mips.elfGet hashmaliciousMiraiBrowse
                                • 5.252.177.18
                                U0443.pdf.jsGet hashmaliciousRMSRemoteAdminBrowse
                                • 194.180.158.11
                                43 15.pdf.jsGet hashmaliciousRMSRemoteAdminBrowse
                                • 194.180.158.11
                                https://040030025.blob.core.windows.net/factura/index.htmlGet hashmaliciousPhisherBrowse
                                • 185.225.19.22
                                scan_doc_000_132.jsGet hashmaliciousNetSupport RATBrowse
                                • 5.181.159.212
                                Update 5581.jsGet hashmaliciousNetSupport RATBrowse
                                • 5.181.159.62
                                Payment_358.jsGet hashmaliciousNetSupport RATBrowse
                                • 5.181.158.24
                                Payment_368.jsGet hashmaliciousNetSupport RATBrowse
                                • 5.181.158.24
                                x86.elfGet hashmaliciousUnknownBrowse
                                • 94.158.245.27
                                No context
                                No context
                                Process:/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
                                File Type:XML 1.0 document, ASCII text
                                Category:dropped
                                Size (bytes):5128
                                Entropy (8bit):4.457618060812407
                                Encrypted:false
                                SSDEEP:96:R14GBdYLSNUH+ZAFQrSRR6dn0tWlTDFwIfM/vfzPpjT9I3jZ/qeH2Wg:74GnYLSNUH+ZAyrSRRYn0taTDKIfMPzv
                                MD5:2A2A7C34B585CDAE5E123F3C5100C253
                                SHA1:E814B1B1531B25581DB76CB813C85E53E1390BA4
                                SHA-256:BCA18B654D038B69B25ACDF84CFF99BF521A1B54F482F1DE2B54CE13AC219A04
                                SHA-512:CEC7A3A7A6AD6C2A6D101A3BF6D89A01EBDCEB0121AA3DE1CEA024268410B39E4E9188382439C7C3FD734C66764B66B13F1D277700B00A2FCB35CB67E31996DD
                                Malicious:false
                                Reputation:moderate, very likely benign file
                                Preview:<?xml version="1.0" encoding="UTF-8"?>..<channel name="xfce4-panel" version="1.0">. <property name="configver" type="int" value="2"/>. <property name="panels" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <property name="panel-1" type="empty">. <property name="position" type="string" value="p=6;x=0;y=0"/>. <property name="length" type="uint" value="100"/>. <property name="position-locked" type="bool" value="true"/>. <property name="icon-size" type="uint" value="16"/>. <property name="size" type="uint" value="26"/>. <property name="plugin-ids" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <value type="int" value="3"/>. <value type="int" value="4"/>. <value type="int" value="5"/>. <value type="int" value="6"/>. <value type="int" value="7"/>. <value type="int" value="8"/>. <value type="int" value="9"/>. <value type="in
                                File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                                Entropy (8bit):6.068580354772153
                                TrID:
                                • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                File name:boatnet.arm7.elf
                                File size:157'399 bytes
                                MD5:43d96262b05c44c653c415765e7d9b63
                                SHA1:91fcecda378611aacbe36d390d69c242c016c510
                                SHA256:310985b3f1da8403dff24b7a9710a3d24f0571f81758499bbc758fdc61ee84f5
                                SHA512:7030b1dce90926670eccf85b8a326046249c722c77325d19b7654a5b881c4ae7503aca27ef9fc408cf3fcac9ff2b88883966ca6ee4d05f94a87cb303eb18559c
                                SSDEEP:3072:9IKa0t08BiM4TZGL0/uXtxgSKQ5noxtZt2r2Xd9aSspypM/9kSsQvamq:9IKaO08BiM4TZGL0YtxAQ5noxtf2rYXV
                                TLSH:60F35C46EA414A13C0D6177ABAAF428E3322A79593DB33069D185FB43FC675F0E73A05
                                File Content Preview:.ELF..............(.........4...........4. ...(........p.................................................................................4..........................................Q.td..................................-...L..................@-.,@...0....S

                                ELF header

                                Class:ELF32
                                Data:2's complement, little endian
                                Version:1 (current)
                                Machine:ARM
                                Version Number:0x1
                                Type:EXEC (Executable file)
                                OS/ABI:UNIX - System V
                                ABI Version:0
                                Entry Point Address:0x8194
                                Flags:0x4000002
                                ELF Header Size:52
                                Program Header Offset:52
                                Program Header Size:32
                                Number of Program Headers:5
                                Section Header Offset:129440
                                Section Header Size:40
                                Number of Section Headers:29
                                Header String Table Index:26
                                NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                NULL0x00x00x00x00x0000
                                .initPROGBITS0x80d40xd40x100x00x6AX004
                                .textPROGBITS0x80f00xf00x17d380x00x6AX0016
                                .finiPROGBITS0x1fe280x17e280x100x00x6AX004
                                .rodataPROGBITS0x1fe380x17e380x1a580x00x2A004
                                .ARM.extabPROGBITS0x218900x198900x180x00x2A004
                                .ARM.exidxARM_EXIDX0x218a80x198a80x1180x00x82AL204
                                .eh_framePROGBITS0x299c00x199c00x40x00x3WA004
                                .tbssNOBITS0x299c40x199c40x80x00x403WAT004
                                .init_arrayINIT_ARRAY0x299c40x199c40x40x00x3WA004
                                .fini_arrayFINI_ARRAY0x299c80x199c80x40x00x3WA004
                                .jcrPROGBITS0x299cc0x199cc0x40x00x3WA004
                                .gotPROGBITS0x299d00x199d00xa80x40x3WA004
                                .dataPROGBITS0x29a780x19a780x2040x00x3WA004
                                .bssNOBITS0x29c7c0x19c7c0x31d00x00x3WA004
                                .commentPROGBITS0x00x19c7c0x93a0x00x0001
                                .debug_arangesPROGBITS0x00x1a5b80xc00x00x0008
                                .debug_pubnamesPROGBITS0x00x1a6780x2130x00x0001
                                .debug_infoPROGBITS0x00x1a88b0x1d230x00x0001
                                .debug_abbrevPROGBITS0x00x1c5ae0x6920x00x0001
                                .debug_linePROGBITS0x00x1cc400x9c70x00x0001
                                .debug_framePROGBITS0x00x1d6080x2b80x00x0004
                                .debug_strPROGBITS0x00x1d8c00x8ca0x10x30MS001
                                .debug_locPROGBITS0x00x1e18a0x118f0x00x0001
                                .debug_rangesPROGBITS0x00x1f3190x5580x00x0001
                                .ARM.attributesARM_ATTRIBUTES0x00x1f8710x160x00x0001
                                .shstrtabSTRTAB0x00x1f8870x1170x00x0001
                                .symtabSYMTAB0x00x1fe280x46200x100x0286484
                                .strtabSTRTAB0x00x244480x228f0x00x0001
                                TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                EXIDX0x198a80x218a80x218a80x1180x1184.44070x4R 0x4.ARM.exidx
                                LOAD0x00x80000x80000x199c00x199c06.15130x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                                LOAD0x199c00x299c00x299c00x2bc0x348c3.95960x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                                TLS0x199c40x299c40x299c40x00x80.00000x4R 0x4.tbss
                                GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                                NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                .symtab0x80d40SECTION<unknown>DEFAULT1
                                .symtab0x80f00SECTION<unknown>DEFAULT2
                                .symtab0x1fe280SECTION<unknown>DEFAULT3
                                .symtab0x1fe380SECTION<unknown>DEFAULT4
                                .symtab0x218900SECTION<unknown>DEFAULT5
                                .symtab0x218a80SECTION<unknown>DEFAULT6
                                .symtab0x299c00SECTION<unknown>DEFAULT7
                                .symtab0x299c40SECTION<unknown>DEFAULT8
                                .symtab0x299c40SECTION<unknown>DEFAULT9
                                .symtab0x299c80SECTION<unknown>DEFAULT10
                                .symtab0x299cc0SECTION<unknown>DEFAULT11
                                .symtab0x299d00SECTION<unknown>DEFAULT12
                                .symtab0x29a780SECTION<unknown>DEFAULT13
                                .symtab0x29c7c0SECTION<unknown>DEFAULT14
                                .symtab0x00SECTION<unknown>DEFAULT15
                                .symtab0x00SECTION<unknown>DEFAULT16
                                .symtab0x00SECTION<unknown>DEFAULT17
                                .symtab0x00SECTION<unknown>DEFAULT18
                                .symtab0x00SECTION<unknown>DEFAULT19
                                .symtab0x00SECTION<unknown>DEFAULT20
                                .symtab0x00SECTION<unknown>DEFAULT21
                                .symtab0x00SECTION<unknown>DEFAULT22
                                .symtab0x00SECTION<unknown>DEFAULT23
                                .symtab0x00SECTION<unknown>DEFAULT24
                                .symtab0x00SECTION<unknown>DEFAULT25
                                $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                                $a.symtab0x1fe280NOTYPE<unknown>DEFAULT3
                                $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                                $a.symtab0x1fe340NOTYPE<unknown>DEFAULT3
                                $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x81340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x81940NOTYPE<unknown>DEFAULT2
                                $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x83780NOTYPE<unknown>DEFAULT2
                                $a.symtab0x8eb00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x92040NOTYPE<unknown>DEFAULT2
                                $a.symtab0x9d300NOTYPE<unknown>DEFAULT2
                                $a.symtab0xae200NOTYPE<unknown>DEFAULT2
                                $a.symtab0xae7c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0xaf780NOTYPE<unknown>DEFAULT2
                                $a.symtab0xb1940NOTYPE<unknown>DEFAULT2
                                $a.symtab0xb2000NOTYPE<unknown>DEFAULT2
                                $a.symtab0xb2700NOTYPE<unknown>DEFAULT2
                                $a.symtab0xbafc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0xc2b00NOTYPE<unknown>DEFAULT2
                                $a.symtab0xc5500NOTYPE<unknown>DEFAULT2
                                $a.symtab0xc7f00NOTYPE<unknown>DEFAULT2
                                $a.symtab0xcaa00NOTYPE<unknown>DEFAULT2
                                $a.symtab0xcd540NOTYPE<unknown>DEFAULT2
                                $a.symtab0xd4000NOTYPE<unknown>DEFAULT2
                                $a.symtab0xdaf80NOTYPE<unknown>DEFAULT2
                                $a.symtab0xe1f00NOTYPE<unknown>DEFAULT2
                                $a.symtab0xe89c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0xef300NOTYPE<unknown>DEFAULT2
                                $a.symtab0xf54c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0xfbf80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x103580NOTYPE<unknown>DEFAULT2
                                $a.symtab0x107900NOTYPE<unknown>DEFAULT2
                                $a.symtab0x10e240NOTYPE<unknown>DEFAULT2
                                $a.symtab0x116b40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x119180NOTYPE<unknown>DEFAULT2
                                $a.symtab0x11b740NOTYPE<unknown>DEFAULT2
                                $a.symtab0x11ea80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x122040NOTYPE<unknown>DEFAULT2
                                $a.symtab0x124e40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x12c980NOTYPE<unknown>DEFAULT2
                                $a.symtab0x131380NOTYPE<unknown>DEFAULT2
                                $a.symtab0x137a00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x137f40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x13e780NOTYPE<unknown>DEFAULT2
                                $a.symtab0x13ec80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x13f6c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x14b540NOTYPE<unknown>DEFAULT2
                                $a.symtab0x14b6c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x14bb40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x14df40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x155580NOTYPE<unknown>DEFAULT2
                                $a.symtab0x155b40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1561c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1576c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x158480NOTYPE<unknown>DEFAULT2
                                $a.symtab0x158700NOTYPE<unknown>DEFAULT2
                                $a.symtab0x158940NOTYPE<unknown>DEFAULT2
                                $a.symtab0x159340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x159d40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x168b40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x168dc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x169240NOTYPE<unknown>DEFAULT2
                                $a.symtab0x169480NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1696c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x169d80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x16b140NOTYPE<unknown>DEFAULT2
                                $a.symtab0x16ba80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x16c380NOTYPE<unknown>DEFAULT2
                                $a.symtab0x16cb80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x16d4c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x16e480NOTYPE<unknown>DEFAULT2
                                $a.symtab0x16f5c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x170a00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x170b40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1714c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x172400NOTYPE<unknown>DEFAULT2
                                $a.symtab0x172540NOTYPE<unknown>DEFAULT2
                                $a.symtab0x173340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1736c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x173b00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x174340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x174740NOTYPE<unknown>DEFAULT2
                                $a.symtab0x175000NOTYPE<unknown>DEFAULT2
                                $a.symtab0x175300NOTYPE<unknown>DEFAULT2
                                $a.symtab0x176400NOTYPE<unknown>DEFAULT2
                                $a.symtab0x177100NOTYPE<unknown>DEFAULT2
                                $a.symtab0x177d40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x178840NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1796c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1798c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x179c00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x179d00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x179e00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17a800NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17ae00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17b080NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17b4c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17bc00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17c040NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17c480NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17cbc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17d000NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17d480NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17d8c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17dfc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17e440NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17ecc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17f100NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17f800NOTYPE<unknown>DEFAULT2
                                $a.symtab0x17fcc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x180540NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1809c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x180e00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x181300NOTYPE<unknown>DEFAULT2
                                $a.symtab0x181440NOTYPE<unknown>DEFAULT2
                                $a.symtab0x182080NOTYPE<unknown>DEFAULT2
                                $a.symtab0x182740NOTYPE<unknown>DEFAULT2
                                $a.symtab0x18c240NOTYPE<unknown>DEFAULT2
                                $a.symtab0x18d640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x191240NOTYPE<unknown>DEFAULT2
                                $a.symtab0x195c40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x196040NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1972c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x197440NOTYPE<unknown>DEFAULT2
                                $a.symtab0x197e80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x198a00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x199600NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19a040NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19a940NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19b6c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19c640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19d500NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19d700NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19d8c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x19f640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1a0280NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1a1740NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1a7980NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ab640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1abfc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ac440NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ad340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ae640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1aebc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1aec40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1aef40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1af4c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1af540NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1af840NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1afdc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1afe40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b0140NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b06c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b0740NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b0a00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b1280NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b2040NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b2c40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b3180NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b3700NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b75c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b7d80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b8040NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b88c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b8940NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b8a00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b8b00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b8c00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b9000NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b9680NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1b9cc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ba6c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ba980NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1baac0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bac00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bad40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bafc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bb340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bb740NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bb880NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bbcc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bc0c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bc4c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bcac0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bd180NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bd2c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bea40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1bf900NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1c3340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1c6640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1c6840NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1cae40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1cb640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ccc80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ccf80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ce3c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1cf580NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1d2080NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1d5b40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1d6e00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1d7800NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1dc100NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1dc300NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1dd200NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1de0c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1de500NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1dea00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1deec0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1df100NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1df8c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e0840NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e0fc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e1640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e3b80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e3c40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e3fc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e4540NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e4ac0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e4b80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e6000NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e6580NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e7340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e7640NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e8080NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e82c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e86c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e8dc0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e9280NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e9740NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e97c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e9800NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e9ac0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e9b80NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1e9c40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ebe40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ed340NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ed500NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1edb00NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1ee1c0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1eed40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1eef40NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1f0380NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1f5800NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1f5880NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1f5900NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1f5980NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1f6540NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1f6980NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1fdac0NOTYPE<unknown>DEFAULT2
                                $a.symtab0x1fdf40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x81280NOTYPE<unknown>DEFAULT2
                                $d.symtab0x299c80NOTYPE<unknown>DEFAULT10
                                $d.symtab0x81800NOTYPE<unknown>DEFAULT2
                                $d.symtab0x299c40NOTYPE<unknown>DEFAULT9
                                $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x833c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x8e940NOTYPE<unknown>DEFAULT2
                                $d.symtab0x91c80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x9cf00NOTYPE<unknown>DEFAULT2
                                $d.symtab0xaf700NOTYPE<unknown>DEFAULT2
                                $d.symtab0xba880NOTYPE<unknown>DEFAULT2
                                $d.symtab0xc2ac0NOTYPE<unknown>DEFAULT2
                                $d.symtab0xca9c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0xcd500NOTYPE<unknown>DEFAULT2
                                $d.symtab0xd3fc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0xdaf40NOTYPE<unknown>DEFAULT2
                                $d.symtab0xe1ec0NOTYPE<unknown>DEFAULT2
                                $d.symtab0xe8980NOTYPE<unknown>DEFAULT2
                                $d.symtab0xef2c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0xf5480NOTYPE<unknown>DEFAULT2
                                $d.symtab0xfbf40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x103540NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1078c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x10e200NOTYPE<unknown>DEFAULT2
                                $d.symtab0x119140NOTYPE<unknown>DEFAULT2
                                $d.symtab0x11e900NOTYPE<unknown>DEFAULT2
                                $d.symtab0x122000NOTYPE<unknown>DEFAULT2
                                $d.symtab0x124e00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x12c940NOTYPE<unknown>DEFAULT2
                                $d.symtab0x131340NOTYPE<unknown>DEFAULT2
                                $d.symtab0x137900NOTYPE<unknown>DEFAULT2
                                $d.symtab0x137ec0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x13e200NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29a780NOTYPE<unknown>DEFAULT13
                                $d.symtab0x14b4c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x14b640NOTYPE<unknown>DEFAULT2
                                $d.symtab0x14bac0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x14df00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x155200NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29a7c0NOTYPE<unknown>DEFAULT13
                                $d.symtab0x29a800NOTYPE<unknown>DEFAULT13
                                $d.symtab0x29a840NOTYPE<unknown>DEFAULT13
                                $d.symtab0x155a40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1560c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x157580NOTYPE<unknown>DEFAULT2
                                $d.symtab0x158380NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1586c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x158900NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1592c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x159cc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1673c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29a880NOTYPE<unknown>DEFAULT13
                                $d.symtab0x00NOTYPE<unknown>DEFAULT21
                                $d.symtab0x200NOTYPE<unknown>DEFAULT21
                                $d.symtab0x260NOTYPE<unknown>DEFAULT21
                                $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                                $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
                                $d.symtab0x530NOTYPE<unknown>DEFAULT21
                                $d.symtab0x171440NOTYPE<unknown>DEFAULT2
                                $d.symtab0x172300NOTYPE<unknown>DEFAULT2
                                $d.symtab0x173240NOTYPE<unknown>DEFAULT2
                                $d.symtab0x173680NOTYPE<unknown>DEFAULT2
                                $d.symtab0x173ac0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1742c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x174700NOTYPE<unknown>DEFAULT2
                                $d.symtab0x174fc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x176240NOTYPE<unknown>DEFAULT2
                                $d.symtab0x177080NOTYPE<unknown>DEFAULT2
                                $d.symtab0x177c80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1787c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x214b80NOTYPE<unknown>DEFAULT4
                                $d.symtab0x179580NOTYPE<unknown>DEFAULT2
                                $d.symtab0x179880NOTYPE<unknown>DEFAULT2
                                $d.symtab0x179bc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17b440NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17bb80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17bfc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17c400NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17cb40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17cf80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17d400NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17d840NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17df40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17e400NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17ec40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17f080NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17f780NOTYPE<unknown>DEFAULT2
                                $d.symtab0x17fc40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1804c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x180940NOTYPE<unknown>DEFAULT2
                                $d.symtab0x180d80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1812c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x181fc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x18c000NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29a8c0NOTYPE<unknown>DEFAULT13
                                $d.symtab0x18d480NOTYPE<unknown>DEFAULT2
                                $d.symtab0x191040NOTYPE<unknown>DEFAULT2
                                $d.symtab0x195a80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x195fc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x197180NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29aa40NOTYPE<unknown>DEFAULT13
                                $d.symtab0x197cc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x198840NOTYPE<unknown>DEFAULT2
                                $d.symtab0x199440NOTYPE<unknown>DEFAULT2
                                $d.symtab0x199e80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29abc0NOTYPE<unknown>DEFAULT13
                                $d.symtab0x29b540NOTYPE<unknown>DEFAULT13
                                $d.symtab0x19a900NOTYPE<unknown>DEFAULT2
                                $d.symtab0x19b600NOTYPE<unknown>DEFAULT2
                                $d.symtab0x19c540NOTYPE<unknown>DEFAULT2
                                $d.symtab0x19d440NOTYPE<unknown>DEFAULT2
                                $d.symtab0x214d00NOTYPE<unknown>DEFAULT4
                                $d.symtab0x19f540NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1a0080NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29b680NOTYPE<unknown>DEFAULT13
                                $d.symtab0x1a1500NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1a76c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1ab3c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1ad280NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1ae540NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1ae600NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1aef00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1af800NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b0100NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b1fc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b2b00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b3100NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b3640NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b7100NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29b800NOTYPE<unknown>DEFAULT13
                                $d.symtab0x1b7d00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b8000NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b8800NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b8fc0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b9600NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1b9c80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1ba680NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1baf40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bb300NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bb700NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bbc80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bc080NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bc480NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bca40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bd100NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1bf7c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1c32c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1c6540NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1cab00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1cb540NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1ccac0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x29b980NOTYPE<unknown>DEFAULT13
                                $d.symtab0x29b940NOTYPE<unknown>DEFAULT13
                                $d.symtab0x1d1ec0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1d59c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1d6d80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1dd180NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1de040NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1df880NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e07c0NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e0e40NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e1540NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e3900NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e3f00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e4a00NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e5f80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e7300NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e8040NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1e8d80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1ebc80NOTYPE<unknown>DEFAULT2
                                $d.symtab0x1f5700NOTYPE<unknown>DEFAULT2
                                $d.symtab0x580NOTYPE<unknown>DEFAULT21
                                $d.symtab0x00NOTYPE<unknown>DEFAULT23
                                $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
                                $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                                $d.symtab0x29b8c0NOTYPE<unknown>DEFAULT13
                                $d.symtab0x2155e0NOTYPE<unknown>DEFAULT4
                                C.11.5548.symtab0x2153c12OBJECT<unknown>DEFAULT4
                                C.5.5083.symtab0x214b824OBJECT<unknown>DEFAULT4
                                C.7.5370.symtab0x2154812OBJECT<unknown>DEFAULT4
                                C.7.6109.symtab0x2188412OBJECT<unknown>DEFAULT4
                                C.7.6182.symtab0x2186012OBJECT<unknown>DEFAULT4
                                C.8.6110.symtab0x2187812OBJECT<unknown>DEFAULT4
                                C.9.6119.symtab0x2186c12OBJECT<unknown>DEFAULT4
                                LOCAL_ADDR.symtab0x2c77c4OBJECT<unknown>DEFAULT14
                                Laligned.symtab0x17aa80NOTYPE<unknown>DEFAULT2
                                Llastword.symtab0x17ac40NOTYPE<unknown>DEFAULT2
                                _Exit.symtab0x1b900104FUNC<unknown>DEFAULT2
                                _GLOBAL_OFFSET_TABLE_.symtab0x299d00OBJECT<unknown>HIDDEN12
                                _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                _Unwind_Complete.symtab0x1e97c4FUNC<unknown>HIDDEN2
                                _Unwind_DeleteException.symtab0x1e98044FUNC<unknown>HIDDEN2
                                _Unwind_ForcedUnwind.symtab0x1f63036FUNC<unknown>HIDDEN2
                                _Unwind_GetCFA.symtab0x1e9748FUNC<unknown>HIDDEN2
                                _Unwind_GetDataRelBase.symtab0x1e9b812FUNC<unknown>HIDDEN2
                                _Unwind_GetLanguageSpecificData.symtab0x1f65468FUNC<unknown>HIDDEN2
                                _Unwind_GetRegionStart.symtab0x1fdf452FUNC<unknown>HIDDEN2
                                _Unwind_GetTextRelBase.symtab0x1e9ac12FUNC<unknown>HIDDEN2
                                _Unwind_RaiseException.symtab0x1f5c436FUNC<unknown>HIDDEN2
                                _Unwind_Resume.symtab0x1f5e836FUNC<unknown>HIDDEN2
                                _Unwind_Resume_or_Rethrow.symtab0x1f60c36FUNC<unknown>HIDDEN2
                                _Unwind_VRS_Get.symtab0x1e8dc76FUNC<unknown>HIDDEN2
                                _Unwind_VRS_Pop.symtab0x1eef4324FUNC<unknown>HIDDEN2
                                _Unwind_VRS_Set.symtab0x1e92876FUNC<unknown>HIDDEN2
                                _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                __C_ctype_b.symtab0x29b8c4OBJECT<unknown>DEFAULT13
                                __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                __C_ctype_b_data.symtab0x2155e768OBJECT<unknown>DEFAULT4
                                __EH_FRAME_BEGIN__.symtab0x299c00OBJECT<unknown>DEFAULT7
                                __FRAME_END__.symtab0x299c00OBJECT<unknown>DEFAULT7
                                __GI___C_ctype_b.symtab0x29b8c4OBJECT<unknown>HIDDEN13
                                __GI___close.symtab0x1ae80100FUNC<unknown>HIDDEN2
                                __GI___close_nocancel.symtab0x1ae6424FUNC<unknown>HIDDEN2
                                __GI___ctype_b.symtab0x29b904OBJECT<unknown>HIDDEN13
                                __GI___errno_location.symtab0x1796c32FUNC<unknown>HIDDEN2
                                __GI___fcntl_nocancel.symtab0x170b4152FUNC<unknown>HIDDEN2
                                __GI___fgetc_unlocked.symtab0x1d5b4300FUNC<unknown>HIDDEN2
                                __GI___libc_close.symtab0x1ae80100FUNC<unknown>HIDDEN2
                                __GI___libc_fcntl.symtab0x1714c244FUNC<unknown>HIDDEN2
                                __GI___libc_open.symtab0x1af10100FUNC<unknown>HIDDEN2
                                __GI___libc_read.symtab0x1b030100FUNC<unknown>HIDDEN2
                                __GI___libc_write.symtab0x1afa0100FUNC<unknown>HIDDEN2
                                __GI___open.symtab0x1af10100FUNC<unknown>HIDDEN2
                                __GI___open_nocancel.symtab0x1aef424FUNC<unknown>HIDDEN2
                                __GI___read.symtab0x1b030100FUNC<unknown>HIDDEN2
                                __GI___read_nocancel.symtab0x1b01424FUNC<unknown>HIDDEN2
                                __GI___sigaddset.symtab0x1822c36FUNC<unknown>HIDDEN2
                                __GI___sigdelset.symtab0x1825036FUNC<unknown>HIDDEN2
                                __GI___sigismember.symtab0x1820836FUNC<unknown>HIDDEN2
                                __GI___uClibc_fini.symtab0x1b248124FUNC<unknown>HIDDEN2
                                __GI___uClibc_init.symtab0x1b31888FUNC<unknown>HIDDEN2
                                __GI___write.symtab0x1afa0100FUNC<unknown>HIDDEN2
                                __GI___write_nocancel.symtab0x1af8424FUNC<unknown>HIDDEN2
                                __GI__exit.symtab0x1b900104FUNC<unknown>HIDDEN2
                                __GI_abort.symtab0x19604296FUNC<unknown>HIDDEN2
                                __GI_accept.symtab0x17b4c116FUNC<unknown>HIDDEN2
                                __GI_atoi.symtab0x19d5032FUNC<unknown>HIDDEN2
                                __GI_bind.symtab0x17bc068FUNC<unknown>HIDDEN2
                                __GI_brk.symtab0x1e45488FUNC<unknown>HIDDEN2
                                __GI_close.symtab0x1ae80100FUNC<unknown>HIDDEN2
                                __GI_closedir.symtab0x17530272FUNC<unknown>HIDDEN2
                                __GI_config_close.symtab0x1c2b852FUNC<unknown>HIDDEN2
                                __GI_config_open.symtab0x1c2ec72FUNC<unknown>HIDDEN2
                                __GI_config_read.symtab0x1bf90808FUNC<unknown>HIDDEN2
                                __GI_connect.symtab0x17c48116FUNC<unknown>HIDDEN2
                                __GI_exit.symtab0x19f64196FUNC<unknown>HIDDEN2
                                __GI_fclose.symtab0x1c334816FUNC<unknown>HIDDEN2
                                __GI_fcntl.symtab0x1714c244FUNC<unknown>HIDDEN2
                                __GI_fflush_unlocked.symtab0x1d208940FUNC<unknown>HIDDEN2
                                __GI_fgetc.symtab0x1ccf8324FUNC<unknown>HIDDEN2
                                __GI_fgetc_unlocked.symtab0x1d5b4300FUNC<unknown>HIDDEN2
                                __GI_fgets.symtab0x1ce3c284FUNC<unknown>HIDDEN2
                                __GI_fgets_unlocked.symtab0x1d6e0160FUNC<unknown>HIDDEN2
                                __GI_fopen.symtab0x1c66432FUNC<unknown>HIDDEN2
                                __GI_fork.symtab0x1a798972FUNC<unknown>HIDDEN2
                                __GI_fstat.symtab0x1b968100FUNC<unknown>HIDDEN2
                                __GI_getc_unlocked.symtab0x1d5b4300FUNC<unknown>HIDDEN2
                                __GI_getdtablesize.symtab0x1ba6c44FUNC<unknown>HIDDEN2
                                __GI_getegid.symtab0x1ba9820FUNC<unknown>HIDDEN2
                                __GI_geteuid.symtab0x1baac20FUNC<unknown>HIDDEN2
                                __GI_getgid.symtab0x1bac020FUNC<unknown>HIDDEN2
                                __GI_getpagesize.symtab0x1bad440FUNC<unknown>HIDDEN2
                                __GI_getpid.symtab0x1abfc72FUNC<unknown>HIDDEN2
                                __GI_getrlimit.symtab0x1bafc56FUNC<unknown>HIDDEN2
                                __GI_getsockname.symtab0x17cbc68FUNC<unknown>HIDDEN2
                                __GI_gettimeofday.symtab0x1bb3464FUNC<unknown>HIDDEN2
                                __GI_getuid.symtab0x1bb7420FUNC<unknown>HIDDEN2
                                __GI_inet_addr.symtab0x17ae040FUNC<unknown>HIDDEN2
                                __GI_inet_aton.symtab0x1df8c248FUNC<unknown>HIDDEN2
                                __GI_initstate_r.symtab0x19b6c248FUNC<unknown>HIDDEN2
                                __GI_ioctl.symtab0x17254224FUNC<unknown>HIDDEN2
                                __GI_isatty.symtab0x1deec36FUNC<unknown>HIDDEN2
                                __GI_kill.symtab0x1733456FUNC<unknown>HIDDEN2
                                __GI_lseek64.symtab0x1e86c112FUNC<unknown>HIDDEN2
                                __GI_memcpy.symtab0x179c04FUNC<unknown>HIDDEN2
                                __GI_memmove.symtab0x179d04FUNC<unknown>HIDDEN2
                                __GI_mempcpy.symtab0x1e80836FUNC<unknown>HIDDEN2
                                __GI_memset.symtab0x179e0156FUNC<unknown>HIDDEN2
                                __GI_mmap.symtab0x1b75c124FUNC<unknown>HIDDEN2
                                __GI_mremap.symtab0x1bb8868FUNC<unknown>HIDDEN2
                                __GI_munmap.symtab0x1bbcc64FUNC<unknown>HIDDEN2
                                __GI_nanosleep.symtab0x1bc4c96FUNC<unknown>HIDDEN2
                                __GI_open.symtab0x1af10100FUNC<unknown>HIDDEN2
                                __GI_opendir.symtab0x17710196FUNC<unknown>HIDDEN2
                                __GI_raise.symtab0x1ac44240FUNC<unknown>HIDDEN2
                                __GI_random.symtab0x19744164FUNC<unknown>HIDDEN2
                                __GI_random_r.symtab0x19a04144FUNC<unknown>HIDDEN2
                                __GI_read.symtab0x1b030100FUNC<unknown>HIDDEN2
                                __GI_readdir.symtab0x17884232FUNC<unknown>HIDDEN2
                                __GI_readdir64.symtab0x1bea4236FUNC<unknown>HIDDEN2
                                __GI_recv.symtab0x17d8c112FUNC<unknown>HIDDEN2
                                __GI_recvfrom.symtab0x17e44136FUNC<unknown>HIDDEN2
                                __GI_sbrk.symtab0x1bcac108FUNC<unknown>HIDDEN2
                                __GI_select.symtab0x173b0132FUNC<unknown>HIDDEN2
                                __GI_send.symtab0x17f10112FUNC<unknown>HIDDEN2
                                __GI_sendto.symtab0x17fcc136FUNC<unknown>HIDDEN2
                                __GI_setsid.symtab0x1743464FUNC<unknown>HIDDEN2
                                __GI_setsockopt.symtab0x1805472FUNC<unknown>HIDDEN2
                                __GI_setstate_r.symtab0x19c64236FUNC<unknown>HIDDEN2
                                __GI_sigaction.symtab0x1b804136FUNC<unknown>HIDDEN2
                                __GI_sigaddset.symtab0x180e080FUNC<unknown>HIDDEN2
                                __GI_sigemptyset.symtab0x1813020FUNC<unknown>HIDDEN2
                                __GI_signal.symtab0x18144196FUNC<unknown>HIDDEN2
                                __GI_sigprocmask.symtab0x17474140FUNC<unknown>HIDDEN2
                                __GI_sleep.symtab0x1ad34300FUNC<unknown>HIDDEN2
                                __GI_socket.symtab0x1809c68FUNC<unknown>HIDDEN2
                                __GI_srandom_r.symtab0x19a94216FUNC<unknown>HIDDEN2
                                __GI_strchr.symtab0x1dc30240FUNC<unknown>HIDDEN2
                                __GI_strchrnul.symtab0x1dd20236FUNC<unknown>HIDDEN2
                                __GI_strcmp.symtab0x1dc1028FUNC<unknown>HIDDEN2
                                __GI_strcoll.symtab0x1dc1028FUNC<unknown>HIDDEN2
                                __GI_strcspn.symtab0x1de0c68FUNC<unknown>HIDDEN2
                                __GI_strlen.symtab0x17a8096FUNC<unknown>HIDDEN2
                                __GI_strrchr.symtab0x1de5080FUNC<unknown>HIDDEN2
                                __GI_strspn.symtab0x1dea076FUNC<unknown>HIDDEN2
                                __GI_strtol.symtab0x19d7028FUNC<unknown>HIDDEN2
                                __GI_sysconf.symtab0x1a1741572FUNC<unknown>HIDDEN2
                                __GI_tcgetattr.symtab0x1df10124FUNC<unknown>HIDDEN2
                                __GI_time.symtab0x1750048FUNC<unknown>HIDDEN2
                                __GI_times.symtab0x1bd1820FUNC<unknown>HIDDEN2
                                __GI_write.symtab0x1afa0100FUNC<unknown>HIDDEN2
                                __JCR_END__.symtab0x299cc0OBJECT<unknown>DEFAULT11
                                __JCR_LIST__.symtab0x299cc0OBJECT<unknown>DEFAULT11
                                ___Unwind_ForcedUnwind.symtab0x1f63036FUNC<unknown>HIDDEN2
                                ___Unwind_RaiseException.symtab0x1f5c436FUNC<unknown>HIDDEN2
                                ___Unwind_Resume.symtab0x1f5e836FUNC<unknown>HIDDEN2
                                ___Unwind_Resume_or_Rethrow.symtab0x1f60c36FUNC<unknown>HIDDEN2
                                __aeabi_idiv.symtab0x16f5c0FUNC<unknown>HIDDEN2
                                __aeabi_idivmod.symtab0x1708824FUNC<unknown>HIDDEN2
                                __aeabi_read_tp.symtab0x1b8b08FUNC<unknown>DEFAULT2
                                __aeabi_uidiv.symtab0x16e480FUNC<unknown>HIDDEN2
                                __aeabi_uidivmod.symtab0x16f4424FUNC<unknown>HIDDEN2
                                __aeabi_unwind_cpp_pr0.symtab0x1f5908FUNC<unknown>HIDDEN2
                                __aeabi_unwind_cpp_pr1.symtab0x1f5888FUNC<unknown>HIDDEN2
                                __aeabi_unwind_cpp_pr2.symtab0x1f5808FUNC<unknown>HIDDEN2
                                __app_fini.symtab0x2a2144OBJECT<unknown>HIDDEN14
                                __atexit_lock.symtab0x29b6824OBJECT<unknown>DEFAULT13
                                __bss_end__.symtab0x2ce4c0NOTYPE<unknown>DEFAULTSHN_ABS
                                __bss_start.symtab0x29c7c0NOTYPE<unknown>DEFAULTSHN_ABS
                                __bss_start__.symtab0x29c7c0NOTYPE<unknown>DEFAULTSHN_ABS
                                __check_one_fd.symtab0x1b2c484FUNC<unknown>DEFAULT2
                                __close.symtab0x1ae80100FUNC<unknown>DEFAULT2
                                __close_nocancel.symtab0x1ae6424FUNC<unknown>DEFAULT2
                                __ctype_b.symtab0x29b904OBJECT<unknown>DEFAULT13
                                __curbrk.symtab0x2c7784OBJECT<unknown>HIDDEN14
                                __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __data_start.symtab0x29a780NOTYPE<unknown>DEFAULT13
                                __default_rt_sa_restorer.symtab0x1b8a40FUNC<unknown>DEFAULT2
                                __default_sa_restorer.symtab0x1b8980FUNC<unknown>DEFAULT2
                                __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __div0.symtab0x170a020FUNC<unknown>HIDDEN2
                                __divsi3.symtab0x16f5c300FUNC<unknown>HIDDEN2
                                __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
                                __do_global_dtors_aux_fini_array_entry.symtab0x299c80OBJECT<unknown>DEFAULT10
                                __end__.symtab0x2ce4c0NOTYPE<unknown>DEFAULTSHN_ABS
                                __environ.symtab0x2a20c4OBJECT<unknown>DEFAULT14
                                __errno_location.symtab0x1796c32FUNC<unknown>DEFAULT2
                                __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                __exidx_end.symtab0x219c00NOTYPE<unknown>DEFAULTSHN_ABS
                                __exidx_start.symtab0x218a80NOTYPE<unknown>DEFAULTSHN_ABS
                                __exit_cleanup.symtab0x29cbc4OBJECT<unknown>HIDDEN14
                                __fcntl_nocancel.symtab0x170b4152FUNC<unknown>DEFAULT2
                                __fgetc_unlocked.symtab0x1d5b4300FUNC<unknown>DEFAULT2
                                __fini_array_end.symtab0x299cc0NOTYPE<unknown>HIDDEN10
                                __fini_array_start.symtab0x299c80NOTYPE<unknown>HIDDEN10
                                __fork.symtab0x1a798972FUNC<unknown>DEFAULT2
                                __fork_generation_pointer.symtab0x2ce184OBJECT<unknown>HIDDEN14
                                __fork_handlers.symtab0x2ce1c4OBJECT<unknown>HIDDEN14
                                __fork_lock.symtab0x29cc04OBJECT<unknown>HIDDEN14
                                __frame_dummy_init_array_entry.symtab0x299c40OBJECT<unknown>DEFAULT9
                                __getdents.symtab0x1b9cc160FUNC<unknown>HIDDEN2
                                __getdents64.symtab0x1e4b8328FUNC<unknown>HIDDEN2
                                __getpagesize.symtab0x1bad440FUNC<unknown>DEFAULT2
                                __getpid.symtab0x1abfc72FUNC<unknown>DEFAULT2
                                __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __gnu_Unwind_ForcedUnwind.symtab0x1ed3428FUNC<unknown>HIDDEN2
                                __gnu_Unwind_RaiseException.symtab0x1ee1c184FUNC<unknown>HIDDEN2
                                __gnu_Unwind_Restore_VFP.symtab0x1f5b40FUNC<unknown>HIDDEN2
                                __gnu_Unwind_Resume.symtab0x1edb0108FUNC<unknown>HIDDEN2
                                __gnu_Unwind_Resume_or_Rethrow.symtab0x1eed432FUNC<unknown>HIDDEN2
                                __gnu_Unwind_Save_VFP.symtab0x1f5bc0FUNC<unknown>HIDDEN2
                                __gnu_unwind_execute.symtab0x1f6981812FUNC<unknown>HIDDEN2
                                __gnu_unwind_frame.symtab0x1fdac72FUNC<unknown>HIDDEN2
                                __gnu_unwind_pr_common.symtab0x1f0381352FUNC<unknown>DEFAULT2
                                __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __init_array_end.symtab0x299c80NOTYPE<unknown>HIDDEN9
                                __init_array_start.symtab0x299c40NOTYPE<unknown>HIDDEN9
                                __libc_accept.symtab0x17b4c116FUNC<unknown>DEFAULT2
                                __libc_close.symtab0x1ae80100FUNC<unknown>DEFAULT2
                                __libc_connect.symtab0x17c48116FUNC<unknown>DEFAULT2
                                __libc_disable_asynccancel.symtab0x1b0a0136FUNC<unknown>HIDDEN2
                                __libc_enable_asynccancel.symtab0x1b128220FUNC<unknown>HIDDEN2
                                __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                                __libc_fcntl.symtab0x1714c244FUNC<unknown>DEFAULT2
                                __libc_fork.symtab0x1a798972FUNC<unknown>DEFAULT2
                                __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                                __libc_multiple_threads.symtab0x2ce204OBJECT<unknown>HIDDEN14
                                __libc_nanosleep.symtab0x1bc4c96FUNC<unknown>DEFAULT2
                                __libc_open.symtab0x1af10100FUNC<unknown>DEFAULT2
                                __libc_read.symtab0x1b030100FUNC<unknown>DEFAULT2
                                __libc_recv.symtab0x17d8c112FUNC<unknown>DEFAULT2
                                __libc_recvfrom.symtab0x17e44136FUNC<unknown>DEFAULT2
                                __libc_select.symtab0x173b0132FUNC<unknown>DEFAULT2
                                __libc_send.symtab0x17f10112FUNC<unknown>DEFAULT2
                                __libc_sendto.symtab0x17fcc136FUNC<unknown>DEFAULT2
                                __libc_setup_tls.symtab0x1e188560FUNC<unknown>DEFAULT2
                                __libc_sigaction.symtab0x1b804136FUNC<unknown>DEFAULT2
                                __libc_stack_end.symtab0x2a2084OBJECT<unknown>DEFAULT14
                                __libc_write.symtab0x1afa0100FUNC<unknown>DEFAULT2
                                __lll_lock_wait_private.symtab0x1ab64152FUNC<unknown>HIDDEN2
                                __malloc_consolidate.symtab0x191d4436FUNC<unknown>HIDDEN2
                                __malloc_largebin_index.symtab0x18274120FUNC<unknown>DEFAULT2
                                __malloc_lock.symtab0x29a8c24OBJECT<unknown>DEFAULT13
                                __malloc_state.symtab0x2caa0888OBJECT<unknown>DEFAULT14
                                __malloc_trim.symtab0x19124176FUNC<unknown>DEFAULT2
                                __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __open.symtab0x1af10100FUNC<unknown>DEFAULT2
                                __open_nocancel.symtab0x1aef424FUNC<unknown>DEFAULT2
                                __pagesize.symtab0x2a2104OBJECT<unknown>DEFAULT14
                                __preinit_array_end.symtab0x299c40NOTYPE<unknown>HIDDEN8
                                __preinit_array_start.symtab0x299c40NOTYPE<unknown>HIDDEN8
                                __progname.symtab0x29b844OBJECT<unknown>DEFAULT13
                                __progname_full.symtab0x29b884OBJECT<unknown>DEFAULT13
                                __pthread_initialize_minimal.symtab0x1e3b812FUNC<unknown>DEFAULT2
                                __pthread_mutex_init.symtab0x1b20c8FUNC<unknown>DEFAULT2
                                __pthread_mutex_lock.symtab0x1b2048FUNC<unknown>DEFAULT2
                                __pthread_mutex_trylock.symtab0x1b2048FUNC<unknown>DEFAULT2
                                __pthread_mutex_unlock.symtab0x1b2048FUNC<unknown>DEFAULT2
                                __pthread_return_0.symtab0x1b2048FUNC<unknown>DEFAULT2
                                __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __read.symtab0x1b030100FUNC<unknown>DEFAULT2
                                __read_nocancel.symtab0x1b01424FUNC<unknown>DEFAULT2
                                __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                __restore_core_regs.symtab0x1f59828FUNC<unknown>HIDDEN2
                                __rtld_fini.symtab0x2a2184OBJECT<unknown>HIDDEN14
                                __sigaddset.symtab0x1822c36FUNC<unknown>DEFAULT2
                                __sigdelset.symtab0x1825036FUNC<unknown>DEFAULT2
                                __sigismember.symtab0x1820836FUNC<unknown>DEFAULT2
                                __sigjmp_save.symtab0x1e82c64FUNC<unknown>HIDDEN2
                                __sigsetjmp.symtab0x1e4ac12FUNC<unknown>DEFAULT2
                                __stdin.symtab0x29ba44OBJECT<unknown>DEFAULT13
                                __stdio_READ.symtab0x1e60088FUNC<unknown>HIDDEN2
                                __stdio_WRITE.symtab0x1e658220FUNC<unknown>HIDDEN2
                                __stdio_rfill.symtab0x1e73448FUNC<unknown>HIDDEN2
                                __stdio_trans2r_o.symtab0x1e764164FUNC<unknown>HIDDEN2
                                __stdio_wcommit.symtab0x1ccc848FUNC<unknown>HIDDEN2
                                __stdout.symtab0x29ba84OBJECT<unknown>DEFAULT13
                                __sys_accept.symtab0x17b0868FUNC<unknown>DEFAULT2
                                __sys_connect.symtab0x17c0468FUNC<unknown>DEFAULT2
                                __sys_recv.symtab0x17d4868FUNC<unknown>DEFAULT2
                                __sys_recvfrom.symtab0x17dfc72FUNC<unknown>DEFAULT2
                                __sys_send.symtab0x17ecc68FUNC<unknown>DEFAULT2
                                __sys_sendto.symtab0x17f8076FUNC<unknown>DEFAULT2
                                __syscall_error.symtab0x1b7d844FUNC<unknown>HIDDEN2
                                __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                __syscall_nanosleep.symtab0x1bc0c64FUNC<unknown>DEFAULT2
                                __syscall_rt_sigaction.symtab0x1b8c064FUNC<unknown>DEFAULT2
                                __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                __syscall_select.symtab0x1736c68FUNC<unknown>DEFAULT2
                                __tls_get_addr.symtab0x1e16436FUNC<unknown>DEFAULT2
                                __uClibc_fini.symtab0x1b248124FUNC<unknown>DEFAULT2
                                __uClibc_init.symtab0x1b31888FUNC<unknown>DEFAULT2
                                __uClibc_main.symtab0x1b3701004FUNC<unknown>DEFAULT2
                                __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                __uclibc_progname.symtab0x29b804OBJECT<unknown>HIDDEN13
                                __udivsi3.symtab0x16e48252FUNC<unknown>HIDDEN2
                                __write.symtab0x1afa0100FUNC<unknown>DEFAULT2
                                __write_nocancel.symtab0x1af8424FUNC<unknown>DEFAULT2
                                __xstat32_conv.symtab0x1bdf8172FUNC<unknown>HIDDEN2
                                __xstat64_conv.symtab0x1bd2c204FUNC<unknown>HIDDEN2
                                _bss_end__.symtab0x2ce4c0NOTYPE<unknown>DEFAULTSHN_ABS
                                _dl_aux_init.symtab0x1e3c456FUNC<unknown>DEFAULT2
                                _dl_nothread_init_static_tls.symtab0x1e3fc88FUNC<unknown>HIDDEN2
                                _dl_phdr.symtab0x2ce444OBJECT<unknown>DEFAULT14
                                _dl_phnum.symtab0x2ce484OBJECT<unknown>DEFAULT14
                                _dl_tls_dtv_gaps.symtab0x2ce381OBJECT<unknown>DEFAULT14
                                _dl_tls_dtv_slotinfo_list.symtab0x2ce344OBJECT<unknown>DEFAULT14
                                _dl_tls_generation.symtab0x2ce3c4OBJECT<unknown>DEFAULT14
                                _dl_tls_max_dtv_idx.symtab0x2ce2c4OBJECT<unknown>DEFAULT14
                                _dl_tls_setup.symtab0x1e0fc104FUNC<unknown>DEFAULT2
                                _dl_tls_static_align.symtab0x2ce284OBJECT<unknown>DEFAULT14
                                _dl_tls_static_nelem.symtab0x2ce404OBJECT<unknown>DEFAULT14
                                _dl_tls_static_size.symtab0x2ce304OBJECT<unknown>DEFAULT14
                                _dl_tls_static_used.symtab0x2ce244OBJECT<unknown>DEFAULT14
                                _edata.symtab0x29c7c0NOTYPE<unknown>DEFAULTSHN_ABS
                                _end.symtab0x2ce4c0NOTYPE<unknown>DEFAULTSHN_ABS
                                _exit.symtab0x1b900104FUNC<unknown>DEFAULT2
                                _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                _fini.symtab0x1fe280FUNC<unknown>DEFAULT3
                                _fixed_buffers.symtab0x2a23c8192OBJECT<unknown>DEFAULT14
                                _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                _init.symtab0x80d40FUNC<unknown>DEFAULT1
                                _memcpy.symtab0x1d7800FUNC<unknown>HIDDEN2
                                _pthread_cleanup_pop_restore.symtab0x1b21c44FUNC<unknown>DEFAULT2
                                _pthread_cleanup_push_defer.symtab0x1b2148FUNC<unknown>DEFAULT2
                                _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                _setjmp.symtab0x1b88c8FUNC<unknown>DEFAULT2
                                _sigintr.symtab0x2ca988OBJECT<unknown>HIDDEN14
                                _start.symtab0x81940FUNC<unknown>DEFAULT2
                                _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                _stdio_fopen.symtab0x1c6841120FUNC<unknown>HIDDEN2
                                _stdio_init.symtab0x1cae4128FUNC<unknown>HIDDEN2
                                _stdio_openlist.symtab0x29bac4OBJECT<unknown>DEFAULT13
                                _stdio_openlist_add_lock.symtab0x2a21c12OBJECT<unknown>DEFAULT14
                                _stdio_openlist_dec_use.symtab0x1cf58688FUNC<unknown>HIDDEN2
                                _stdio_openlist_del_count.symtab0x2a2384OBJECT<unknown>DEFAULT14
                                _stdio_openlist_del_lock.symtab0x2a22812OBJECT<unknown>DEFAULT14
                                _stdio_openlist_use_count.symtab0x2a2344OBJECT<unknown>DEFAULT14
                                _stdio_streams.symtab0x29bb0204OBJECT<unknown>DEFAULT13
                                _stdio_term.symtab0x1cb64356FUNC<unknown>HIDDEN2
                                _stdio_user_locking.symtab0x29b944OBJECT<unknown>DEFAULT13
                                _stdlib_strto_l.symtab0x19d8c472FUNC<unknown>HIDDEN2
                                _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                abort.symtab0x19604296FUNC<unknown>DEFAULT2
                                abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                accept.symtab0x17b4c116FUNC<unknown>DEFAULT2
                                accept.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                anti_gdb_entry.symtab0x14b5424FUNC<unknown>DEFAULT2
                                antidebug.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                atoi.symtab0x19d5032FUNC<unknown>DEFAULT2
                                atol.symtab0x19d5032FUNC<unknown>DEFAULT2
                                atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                attack.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                attack_app.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                attack_app_cfnull.symtab0x81d03296FUNC<unknown>DEFAULT2
                                attack_app_http.symtab0x8eb08048FUNC<unknown>DEFAULT2
                                attack_get_opt_int.symtab0xb200112FUNC<unknown>DEFAULT2
                                attack_get_opt_ip.symtab0xb194108FUNC<unknown>DEFAULT2
                                attack_get_opt_str.symtab0xae2092FUNC<unknown>DEFAULT2
                                attack_init.symtab0xb2702188FUNC<unknown>DEFAULT2
                                attack_method_dns.symtab0x131381724FUNC<unknown>DEFAULT2
                                attack_method_greeth.symtab0x107901684FUNC<unknown>DEFAULT2
                                attack_method_greip.symtab0xef301564FUNC<unknown>DEFAULT2
                                attack_method_hexflood.symtab0xc7f0688FUNC<unknown>DEFAULT2
                                attack_method_nfo.symtab0x10e242192FUNC<unknown>DEFAULT2
                                attack_method_nudp.symtab0x137f41668FUNC<unknown>DEFAULT2
                                attack_method_ovh.symtab0xf54c1708FUNC<unknown>DEFAULT2
                                attack_method_ovhdrop.symtab0x11b74820FUNC<unknown>DEFAULT2
                                attack_method_raw.symtab0xe89c1684FUNC<unknown>DEFAULT2
                                attack_method_std.symtab0xc550672FUNC<unknown>DEFAULT2
                                attack_method_stdhex.symtab0x12204736FUNC<unknown>DEFAULT2
                                attack_method_stdplain.symtab0x11918604FUNC<unknown>DEFAULT2
                                attack_method_tcp.symtab0xcd541708FUNC<unknown>DEFAULT2
                                attack_method_tcpxmas.symtab0x124e41972FUNC<unknown>DEFAULT2
                                attack_method_udpbypass.symtab0x116b4612FUNC<unknown>DEFAULT2
                                attack_method_udphex.symtab0xcaa0692FUNC<unknown>DEFAULT2
                                attack_parse.symtab0xaf78540FUNC<unknown>DEFAULT2
                                attack_start.symtab0xae7c252FUNC<unknown>DEFAULT2
                                attack_tcp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                attack_tcp_ack.symtab0xd4001784FUNC<unknown>DEFAULT2
                                attack_tcp_bypass.symtab0xe1f01708FUNC<unknown>DEFAULT2
                                attack_tcp_legit.symtab0xdaf81784FUNC<unknown>DEFAULT2
                                attack_tcp_socket.symtab0x11ea8860FUNC<unknown>DEFAULT2
                                attack_tcp_stomp.symtab0xbafc1972FUNC<unknown>DEFAULT2
                                attack_tcp_syn.symtab0xfbf81888FUNC<unknown>DEFAULT2
                                attack_udp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                attack_udp_custom.symtab0x12c981184FUNC<unknown>DEFAULT2
                                attack_udp_plain.symtab0xc2b0672FUNC<unknown>DEFAULT2
                                attack_udp_vse.symtab0x103581080FUNC<unknown>DEFAULT2
                                been_there_done_that.symtab0x29cb84OBJECT<unknown>DEFAULT14
                                bind.symtab0x17bc068FUNC<unknown>DEFAULT2
                                bind.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                brk.symtab0x1e45488FUNC<unknown>DEFAULT2
                                brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                bsd_signal.symtab0x18144196FUNC<unknown>DEFAULT2
                                calloc.symtab0x18c24320FUNC<unknown>DEFAULT2
                                calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                checksum_generic.symtab0x13e7880FUNC<unknown>DEFAULT2
                                checksum_tcpudp.symtab0x13ec8164FUNC<unknown>DEFAULT2
                                clock.symtab0x1798c52FUNC<unknown>DEFAULT2
                                clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                close.symtab0x1ae80100FUNC<unknown>DEFAULT2
                                closedir.symtab0x17530272FUNC<unknown>DEFAULT2
                                closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                completed.5105.symtab0x29c7c1OBJECT<unknown>DEFAULT14
                                conn_table.symtab0x2c7984OBJECT<unknown>DEFAULT14
                                connect.symtab0x17c48116FUNC<unknown>DEFAULT2
                                connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                environ.symtab0x2a20c4OBJECT<unknown>DEFAULT14
                                errno.symtab0x04TLS<unknown>DEFAULT8
                                errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                exit.symtab0x19f64196FUNC<unknown>DEFAULT2
                                exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fclose.symtab0x1c334816FUNC<unknown>DEFAULT2
                                fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fcntl.symtab0x1714c244FUNC<unknown>DEFAULT2
                                fd_ctrl.symtab0x29a7c4OBJECT<unknown>DEFAULT13
                                fd_serv.symtab0x29a804OBJECT<unknown>DEFAULT13
                                fd_to_DIR.symtab0x17640208FUNC<unknown>DEFAULT2
                                fdopendir.symtab0x177d4176FUNC<unknown>DEFAULT2
                                fflush_unlocked.symtab0x1d208940FUNC<unknown>DEFAULT2
                                fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fgetc.symtab0x1ccf8324FUNC<unknown>DEFAULT2
                                fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fgetc_unlocked.symtab0x1d5b4300FUNC<unknown>DEFAULT2
                                fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fgets.symtab0x1ce3c284FUNC<unknown>DEFAULT2
                                fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fgets_unlocked.symtab0x1d6e0160FUNC<unknown>DEFAULT2
                                fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fopen.symtab0x1c66432FUNC<unknown>DEFAULT2
                                fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fork.symtab0x1a798972FUNC<unknown>DEFAULT2
                                fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fork_handler_pool.symtab0x29cc41348OBJECT<unknown>DEFAULT14
                                frame_dummy.symtab0x81340FUNC<unknown>DEFAULT2
                                free.symtab0x19388572FUNC<unknown>DEFAULT2
                                free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                fstat.symtab0x1b968100FUNC<unknown>DEFAULT2
                                fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                get_eit_entry.symtab0x1e9c4544FUNC<unknown>DEFAULT2
                                getc.symtab0x1ccf8324FUNC<unknown>DEFAULT2
                                getc_unlocked.symtab0x1d5b4300FUNC<unknown>DEFAULT2
                                getdents.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getdtablesize.symtab0x1ba6c44FUNC<unknown>DEFAULT2
                                getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getegid.symtab0x1ba9820FUNC<unknown>DEFAULT2
                                getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                geteuid.symtab0x1baac20FUNC<unknown>DEFAULT2
                                geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getgid.symtab0x1bac020FUNC<unknown>DEFAULT2
                                getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getpagesize.symtab0x1bad440FUNC<unknown>DEFAULT2
                                getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getpid.symtab0x1abfc72FUNC<unknown>DEFAULT2
                                getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getppid.symtab0x1724020FUNC<unknown>DEFAULT2
                                getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getrlimit.symtab0x1bafc56FUNC<unknown>DEFAULT2
                                getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getsockname.symtab0x17cbc68FUNC<unknown>DEFAULT2
                                getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getsockopt.symtab0x17d0072FUNC<unknown>DEFAULT2
                                getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                gettimeofday.symtab0x1bb3464FUNC<unknown>DEFAULT2
                                gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                getuid.symtab0x1bb7420FUNC<unknown>DEFAULT2
                                getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                h_errno.symtab0x44TLS<unknown>DEFAULT8
                                hexPayload.symtab0x29a784OBJECT<unknown>DEFAULT13
                                index.symtab0x1dc30240FUNC<unknown>DEFAULT2
                                inet_addr.symtab0x17ae040FUNC<unknown>DEFAULT2
                                inet_aton.symtab0x1df8c248FUNC<unknown>DEFAULT2
                                inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                init_static_tls.symtab0x1e084120FUNC<unknown>DEFAULT2
                                initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                initstate.symtab0x198a0192FUNC<unknown>DEFAULT2
                                initstate_r.symtab0x19b6c248FUNC<unknown>DEFAULT2
                                ioctl.symtab0x17254224FUNC<unknown>DEFAULT2
                                ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                isatty.symtab0x1deec36FUNC<unknown>DEFAULT2
                                isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                kill.symtab0x1733456FUNC<unknown>DEFAULT2
                                kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                killer.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                killer_init.symtab0x13f6c3048FUNC<unknown>DEFAULT2
                                killer_pid.symtab0x2c7844OBJECT<unknown>DEFAULT14
                                killer_realpath.symtab0x2c7804OBJECT<unknown>DEFAULT14
                                libc-cancellation.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                libc-lowlevellock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                libc-tls.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                libc_multiple_threads.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                lseek64.symtab0x1e86c112FUNC<unknown>DEFAULT2
                                main.symtab0x14df41892FUNC<unknown>DEFAULT2
                                main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                malloc.symtab0x182ec2360FUNC<unknown>DEFAULT2
                                malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                malloc_trim.symtab0x195c464FUNC<unknown>DEFAULT2
                                memcpy.symtab0x179c04FUNC<unknown>DEFAULT2
                                memmove.symtab0x179d04FUNC<unknown>DEFAULT2
                                mempcpy.symtab0x1e80836FUNC<unknown>DEFAULT2
                                mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                memset.symtab0x179e0156FUNC<unknown>DEFAULT2
                                methods.symtab0x29c9c4OBJECT<unknown>DEFAULT14
                                methods_len.symtab0x29c981OBJECT<unknown>DEFAULT14
                                mmap.symtab0x1b75c124FUNC<unknown>DEFAULT2
                                mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                mremap.symtab0x1bb8868FUNC<unknown>DEFAULT2
                                mremap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                munmap.symtab0x1bbcc64FUNC<unknown>DEFAULT2
                                munmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                mylock.symtab0x29aa424OBJECT<unknown>DEFAULT13
                                mylock.symtab0x29abc24OBJECT<unknown>DEFAULT13
                                nanosleep.symtab0x1bc4c96FUNC<unknown>DEFAULT2
                                nanosleep.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                nprocessors_onln.symtab0x1a028332FUNC<unknown>DEFAULT2
                                object.5113.symtab0x29c8024OBJECT<unknown>DEFAULT14
                                open.symtab0x1af10100FUNC<unknown>DEFAULT2
                                opendir.symtab0x17710196FUNC<unknown>DEFAULT2
                                opendir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                parse_config.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                pending_connection.symtab0x29ca41OBJECT<unknown>DEFAULT14
                                pr-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                program_invocation_name.symtab0x29b884OBJECT<unknown>DEFAULT13
                                program_invocation_short_name.symtab0x29b844OBJECT<unknown>DEFAULT13
                                ptrace.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                raise.symtab0x1ac44240FUNC<unknown>DEFAULT2
                                raise.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                rand.symtab0x1972c24FUNC<unknown>DEFAULT2
                                rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                rand.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                rand_alphastr.symtab0x1561c336FUNC<unknown>DEFAULT2
                                rand_init.symtab0x155b4104FUNC<unknown>DEFAULT2
                                rand_next.symtab0x1555892FUNC<unknown>DEFAULT2
                                rand_str.symtab0x1576c220FUNC<unknown>DEFAULT2
                                random.symtab0x19744164FUNC<unknown>DEFAULT2
                                random.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                random_poly_info.symtab0x214d040OBJECT<unknown>DEFAULT4
                                random_r.symtab0x19a04144FUNC<unknown>DEFAULT2
                                random_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                randtbl.symtab0x29ad4128OBJECT<unknown>DEFAULT13
                                read.symtab0x1b030100FUNC<unknown>DEFAULT2
                                readdir.symtab0x17884232FUNC<unknown>DEFAULT2
                                readdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                readdir64.symtab0x1bea4236FUNC<unknown>DEFAULT2
                                readdir64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                readlink.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                realloc.symtab0x18d64960FUNC<unknown>DEFAULT2
                                realloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                recv.symtab0x17d8c112FUNC<unknown>DEFAULT2
                                recv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                recvfrom.symtab0x17e44136FUNC<unknown>DEFAULT2
                                recvfrom.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                register-atfork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                resolv.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                resolve_cnc_addr.symtab0x14b6c72FUNC<unknown>DEFAULT2
                                resolve_func.symtab0x29a844OBJECT<unknown>DEFAULT13
                                restore_core_regs.symtab0x1f59828FUNC<unknown>HIDDEN2
                                rindex.symtab0x1de5080FUNC<unknown>DEFAULT2
                                rsck.symtab0x2c79c4OBJECT<unknown>DEFAULT14
                                rsck_out.symtab0x2c7a44OBJECT<unknown>DEFAULT14
                                sbrk.symtab0x1bcac108FUNC<unknown>DEFAULT2

                                Download Network PCAP: filteredfull

                                • Total Packets: 12
                                • 3778 undefined
                                • 53 (DNS)
                                TimestampSource PortDest PortSource IPDest IP
                                Mar 13, 2025 08:02:09.871792078 CET407263778192.168.2.155.181.159.16
                                Mar 13, 2025 08:02:09.876615047 CET3778407265.181.159.16192.168.2.15
                                Mar 13, 2025 08:02:09.876709938 CET407263778192.168.2.155.181.159.16
                                Mar 13, 2025 08:02:09.925457001 CET407263778192.168.2.155.181.159.16
                                Mar 13, 2025 08:02:09.930094957 CET3778407265.181.159.16192.168.2.15
                                Mar 13, 2025 08:02:09.930136919 CET407263778192.168.2.155.181.159.16
                                Mar 13, 2025 08:02:09.934761047 CET3778407265.181.159.16192.168.2.15
                                Mar 13, 2025 08:02:15.311585903 CET407263778192.168.2.155.181.159.16
                                Mar 13, 2025 08:02:15.360848904 CET3778407265.181.159.16192.168.2.15
                                Mar 13, 2025 08:02:31.245002985 CET3778407265.181.159.16192.168.2.15
                                Mar 13, 2025 08:02:31.245212078 CET407263778192.168.2.155.181.159.16
                                Mar 13, 2025 08:04:56.191759109 CET5576253192.168.2.158.8.8.8
                                Mar 13, 2025 08:04:56.196408033 CET53557628.8.8.8192.168.2.15
                                Mar 13, 2025 08:04:56.196455002 CET5576253192.168.2.158.8.8.8
                                Mar 13, 2025 08:04:56.196471930 CET5576253192.168.2.158.8.8.8
                                Mar 13, 2025 08:04:56.196494102 CET5576253192.168.2.158.8.8.8
                                Mar 13, 2025 08:04:56.201158047 CET53557628.8.8.8192.168.2.15
                                Mar 13, 2025 08:04:56.201169014 CET53557628.8.8.8192.168.2.15
                                Mar 13, 2025 08:04:56.648036003 CET53557628.8.8.8192.168.2.15
                                Mar 13, 2025 08:04:56.648673058 CET5576253192.168.2.158.8.8.8
                                Mar 13, 2025 08:04:58.648237944 CET53557628.8.8.8192.168.2.15
                                Mar 13, 2025 08:04:58.648415089 CET5576253192.168.2.158.8.8.8
                                Mar 13, 2025 08:04:58.653095961 CET53557628.8.8.8192.168.2.15
                                TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                Mar 13, 2025 08:04:56.196471930 CET192.168.2.158.8.8.80xe76aStandard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                                Mar 13, 2025 08:04:56.196494102 CET192.168.2.158.8.8.80xa54cStandard query (0)daisy.ubuntu.com28IN (0x0001)false
                                TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                Mar 13, 2025 08:04:56.648036003 CET8.8.8.8192.168.2.150xe76aNo error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false
                                Mar 13, 2025 08:04:56.648036003 CET8.8.8.8192.168.2.150xe76aNo error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false

                                System Behavior

                                Start time (UTC):07:02:09
                                Start date (UTC):13/03/2025
                                Path:/tmp/boatnet.arm7.elf
                                Arguments:/tmp/boatnet.arm7.elf
                                File size:4956856 bytes
                                MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                Start time (UTC):07:02:09
                                Start date (UTC):13/03/2025
                                Path:/tmp/boatnet.arm7.elf
                                Arguments:-
                                File size:4956856 bytes
                                MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                Start time (UTC):07:02:09
                                Start date (UTC):13/03/2025
                                Path:/tmp/boatnet.arm7.elf
                                Arguments:-
                                File size:4956856 bytes
                                MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                Start time (UTC):07:02:09
                                Start date (UTC):13/03/2025
                                Path:/tmp/boatnet.arm7.elf
                                Arguments:-
                                File size:4956856 bytes
                                MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/bin/xfce4-panel
                                Arguments:-
                                File size:375768 bytes
                                MD5 hash:a15b657c7d54ac1385f1f15004ea6784

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
                                File size:35136 bytes
                                MD5 hash:ac0b8a906f359a8ae102244738682e76

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/bin/xfce4-panel
                                Arguments:-
                                File size:375768 bytes
                                MD5 hash:a15b657c7d54ac1385f1f15004ea6784

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
                                File size:35136 bytes
                                MD5 hash:ac0b8a906f359a8ae102244738682e76

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/bin/xfce4-panel
                                Arguments:-
                                File size:375768 bytes
                                MD5 hash:a15b657c7d54ac1385f1f15004ea6784

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
                                File size:35136 bytes
                                MD5 hash:ac0b8a906f359a8ae102244738682e76

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/bin/xfce4-panel
                                Arguments:-
                                File size:375768 bytes
                                MD5 hash:a15b657c7d54ac1385f1f15004ea6784

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
                                File size:35136 bytes
                                MD5 hash:ac0b8a906f359a8ae102244738682e76

                                Start time (UTC):07:02:19
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
                                Arguments:-
                                File size:35136 bytes
                                MD5 hash:ac0b8a906f359a8ae102244738682e76

                                Start time (UTC):07:02:19
                                Start date (UTC):13/03/2025
                                Path:/usr/sbin/xfpm-power-backlight-helper
                                Arguments:/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
                                File size:14656 bytes
                                MD5 hash:3d221ad23f28ca3259f599b1664e2427

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/bin/xfce4-panel
                                Arguments:-
                                File size:375768 bytes
                                MD5 hash:a15b657c7d54ac1385f1f15004ea6784

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
                                File size:35136 bytes
                                MD5 hash:ac0b8a906f359a8ae102244738682e76

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/bin/xfce4-panel
                                Arguments:-
                                File size:375768 bytes
                                MD5 hash:a15b657c7d54ac1385f1f15004ea6784

                                Start time (UTC):07:02:14
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
                                File size:35136 bytes
                                MD5 hash:ac0b8a906f359a8ae102244738682e76

                                Start time (UTC):07:02:19
                                Start date (UTC):13/03/2025
                                Path:/usr/bin/dbus-daemon
                                Arguments:-
                                File size:249032 bytes
                                MD5 hash:3089d47e3f3ab84cd81c48fd406d7a8c

                                Start time (UTC):07:02:19
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
                                File size:112880 bytes
                                MD5 hash:4c7a0d6d258bb970905b19b84abcd8e9

                                Start time (UTC):07:02:23
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/systemd/systemd
                                Arguments:-
                                File size:1620224 bytes
                                MD5 hash:9b2bec7092a40488108543f9334aab75

                                Start time (UTC):07:02:23
                                Start date (UTC):13/03/2025
                                Path:/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
                                Arguments:/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
                                File size:112872 bytes
                                MD5 hash:eee956f1b227c1d5031f9c61223255d1