Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
Kloki.arm7.elf

Overview

General Information

Sample name:Kloki.arm7.elf
Analysis ID:1584116
MD5:ae7a36135f22cb775840ca66044d457e
SHA1:cd3f8760416b8f1bf536237e9704b3d55c29570f
SHA256:af697660b27a6a01c5e5c1be4cdfd946a8dd6595d221acc7e5a07cbf68376c50
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:68
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Sample tries to kill multiple processes (SIGKILL)
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Found strings indicative of a multi-platform dropper
Sample and/or dropped files contains symbols with suspicious names
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Tries to resolve domain names, but no domain seems valid (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1584116
Start date and time:2025-01-04 09:31:41 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 3m 38s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:Kloki.arm7.elf
Detection:MAL
Classification:mal68.spre.troj.linELF@0/22@5/0

Runtime Messages

Command:/tmp/Kloki.arm7.elf
PID:6238
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
dear
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
Kloki.arm7.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security

    Memory Dumps

    SourceRuleDescriptionAuthorStrings
    6238.1.00007fe644017000.00007fe644030000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
      6243.1.00007fe644017000.00007fe644030000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security

        Suricata Signatures

        ⊘No Suricata rule has matched

        Joe Sandbox Signatures

        Click to jump to signature section

        Show All Signature Results

        AV Detection

        barindex
        Antivirus / Scanner detection for submitted sample
        Source: Kloki.arm7.elfAvira: detected
        Multi AV Scanner detection for submitted file
        Source: Kloki.arm7.elfReversingLabs: Detection: 47%
        Source: Kloki.arm7.elfString: %d/proc/self/exe/. ppid/proc/net/tcp/proc//exe/status/fd//dev/null/dev/consolesocket05self/bin/bash/bin/sh/bin/dashbashshftpwgettftpncnetcatnmaptcpdumpsocatcurlbusyboxpythonrebootechoinitcroniptablessshdtelnettelnetdtftpdrshdrexecdftpdxinetdpftp/bin/login|
        Source: global trafficTCP traffic: 192.168.2.23:44964 -> 210.99.80.198:13566
        Source: global trafficTCP traffic: 192.168.2.23:59148 -> 210.99.190.137:13566
        Source: global trafficTCP traffic: 192.168.2.23:56994 -> 210.99.207.252:13566
        Source: global trafficTCP traffic: 192.168.2.23:34852 -> 210.99.13.194:13566
        Source: global trafficTCP traffic: 192.168.2.23:42124 -> 210.99.213.179:13566
        Source: global trafficTCP traffic: 192.168.2.23:60576 -> 210.99.96.79:13566
        Source: global trafficTCP traffic: 192.168.2.23:41736 -> 210.99.91.108:13566
        Source: global trafficTCP traffic: 192.168.2.23:33000 -> 210.99.140.243:13566
        Source: global trafficTCP traffic: 192.168.2.23:35276 -> 210.99.94.8:13566
        Source: global trafficTCP traffic: 192.168.2.23:49254 -> 210.99.92.232:13566
        Source: global trafficTCP traffic: 192.168.2.23:48252 -> 210.99.178.105:13566
        Source: global trafficTCP traffic: 192.168.2.23:42370 -> 210.99.139.98:13566
        Source: global trafficTCP traffic: 192.168.2.23:54318 -> 210.99.202.89:13566
        Source: global trafficTCP traffic: 192.168.2.23:43330 -> 210.99.94.215:13566
        Source: global trafficTCP traffic: 192.168.2.23:42572 -> 83.222.191.90:13566
        Source: /tmp/Kloki.arm7.elf (PID: 6238)Socket: 127.0.0.1:8341Jump to behavior
        Source: global trafficTCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
        Source: global trafficTCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
        Source: global trafficTCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
        Source: unknownDNS traffic detected: query: secure-network-rebirthltd.ru replaycode: Name error (3)
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
        Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
        Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
        Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: unknownTCP traffic detected without corresponding DNS query: 83.222.191.90
        Source: global trafficDNS traffic detected: DNS query: secure-network-rebirthltd.ru
        Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
        Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443

        System Summary

        barindex
        Sample tries to kill multiple processes (SIGKILL)
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6247, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6264, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6265, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6266, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6267, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6268, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6269, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6270, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6271, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6272, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6273, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6274, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6275, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6276, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6277, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6278, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6279, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6316, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6330, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6342, result: successfulJump to behavior
        Source: Kloki.arm7.elfELF static info symbol of initial sample: __gnu_unwind_execute
        Source: Initial sampleString containing 'busybox' found: busybox
        Source: Initial sampleString containing 'busybox' found: %d/proc/self/exe/. ppid/proc/net/tcp/proc//exe/status/fd//dev/null/dev/consolesocket05self/bin/bash/bin/sh/bin/dashbashshftpwgettftpncnetcatnmaptcpdumpsocatcurlbusyboxpythonrebootechoinitcroniptablessshdtelnettelnetdtftpdrshdrexecdftpdxinetdpftp/bin/login|
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6247, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6264, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6265, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6266, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6267, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6268, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6269, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6270, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6271, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6272, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6273, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6274, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6275, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6276, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6277, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6278, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6279, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6316, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6330, result: successfulJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)SIGKILL sent: pid: 6342, result: successfulJump to behavior
        Source: classification engineClassification label: mal68.spre.troj.linELF@0/22@5/0
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6274/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6274/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6273/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6273/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6265/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6265/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6276/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6276/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6342/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6342/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6264/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6264/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6275/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6275/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6330/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6330/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6267/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6267/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6278/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6278/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6266/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6266/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6277/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6277/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6247/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6247/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6269/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6269/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6268/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6268/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6279/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6279/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6270/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6270/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6272/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6272/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6271/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6271/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6316/mapsJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6245)File opened: /proc/6316/cmdlineJump to behavior
        Source: /tmp/Kloki.arm7.elf (PID: 6238)Queries kernel information via 'uname': Jump to behavior
        Source: Kloki.arm7.elf, 6238.1.0000555c3dfea000.0000555c3e161000.rw-.sdmp, Kloki.arm7.elf, 6243.1.0000555c3dfea000.0000555c3e161000.rw-.sdmpBinary or memory string: >\U!/etc/qemu-binfmt/arm
        Source: Kloki.arm7.elf, 6238.1.00007ffce1508000.00007ffce1529000.rw-.sdmpBinary or memory string: n$:\U/tmp/qemu-open.vSNeSR:%;:\U
        Source: Kloki.arm7.elf, 6238.1.00007ffce1508000.00007ffce1529000.rw-.sdmp, Kloki.arm7.elf, 6243.1.00007ffce1508000.00007ffce1529000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/Kloki.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Kloki.arm7.elf
        Source: Kloki.arm7.elf, 6238.1.0000555c3dfea000.0000555c3e161000.rw-.sdmp, Kloki.arm7.elf, 6243.1.0000555c3dfea000.0000555c3e161000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
        Source: Kloki.arm7.elf, 6238.1.00007ffce1508000.00007ffce1529000.rw-.sdmp, Kloki.arm7.elf, 6243.1.00007ffce1508000.00007ffce1529000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
        Source: Kloki.arm7.elf, 6238.1.00007ffce1508000.00007ffce1529000.rw-.sdmpBinary or memory string: /tmp/qemu-open.vSNeSR

        Stealing of Sensitive Information

        barindex
        Yara detected Mirai
        Source: Yara matchFile source: Kloki.arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 6238.1.00007fe644017000.00007fe644030000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: 6243.1.00007fe644017000.00007fe644030000.r-x.sdmp, type: MEMORY

        Remote Access Functionality

        barindex
        Yara detected Mirai
        Source: Yara matchFile source: Kloki.arm7.elf, type: SAMPLE
        Source: Yara matchFile source: 6238.1.00007fe644017000.00007fe644030000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: 6243.1.00007fe644017000.00007fe644030000.r-x.sdmp, type: MEMORY

        Mitre Att&ck Matrix

        ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
        Gather Victim Identity Information1
        Scripting        		Valid AccountsWindows Management Instrumentation1
        Scripting        		Path Interception1
        Masquerading        		1
        OS Credential Dumping        		11
        Security Software Discovery        		Remote ServicesData from Local System1
        Encrypted Channel        		Exfiltration Over Other Network Medium1
        Service Stop
        CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
        Non-Standard Port        		Exfiltration Over BluetoothNetwork Denial of Service
        Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
        Non-Application Layer Protocol        		Automated ExfiltrationData Encrypted for Impact
        Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture2
        Application Layer Protocol        		Traffic DuplicationData Destruction

        Malware Configuration

        ⊘No configs have been found

        Behavior Graph

        Hide Legend

        Legend:

        • Process
        • Signature
        • Created File
        • DNS/IP Info
        • Is Dropped
        • Number of created Files
        • Is malicious
        • Internet
        behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1584116 Sample: Kloki.arm7.elf Startdate: 04/01/2025 Architecture: LINUX Score: 68 19 210.99.91.108, 13566, 41736 NICNETKoreaTelecomKR Korea Republic of 2->19 21 83.222.191.90, 13566, 42572 NET1-ASBG Bulgaria 2->21 23 17 other IPs or domains 2->23 25 Antivirus / Scanner detection for submitted sample 2->25 27 Multi AV Scanner detection for submitted file 2->27 29 Yara detected Mirai 2->29 8 Kloki.arm7.elf 2->8         started        signatures3 process4 process5 10 Kloki.arm7.elf 8->10         started        process6 12 Kloki.arm7.elf 10->12         started        15 Kloki.arm7.elf 10->15         started        17 Kloki.arm7.elf 10->17         started        signatures7 31 Sample tries to kill multiple processes (SIGKILL) 12->31

        Antivirus, Machine Learning and Genetic Malware Detection

        Initial Sample

        SourceDetectionScannerLabelLink
        Kloki.arm7.elf47%ReversingLabsLinux.Backdoor.Mirai
        Kloki.arm7.elf100%AviraEXP/ELF.Mirai.W

        Dropped Files

        ⊘No Antivirus matches

        Domains

        ⊘No Antivirus matches

        URLs

        ⊘No Antivirus matches

        Domains and IPs

        Contacted Domains

        NameIPActiveMaliciousAntivirus DetectionReputation
        secure-network-rebirthltd.ru
        		unknown
        		unknownfalse
          		high

          World Map of Contacted IPs

          • No. of IPs < 25%
          • 25% < No. of IPs < 50%
          • 50% < No. of IPs < 75%
          • 75% < No. of IPs

          Public IPs

          IPDomainCountryFlagASNASN NameMalicious
          210.99.91.108
          		unknownKorea Republic of
          		45400NICNETKoreaTelecomKRfalse
          83.222.191.90
          		unknownBulgaria
          		43561NET1-ASBGfalse
          210.99.96.79
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.92.232
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          109.202.202.202
          		unknownSwitzerland
          		13030INIT7CHfalse
          210.99.202.89
          		unknownKorea Republic of
          		9696EDAS-ASOscarEnterpriseKRfalse
          210.99.94.215
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.190.137
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.139.98
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.80.198
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.94.8
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.178.105
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.13.194
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.213.179
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          210.99.140.243
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          91.189.91.43
          		unknownUnited Kingdom
          		41231CANONICAL-ASGBfalse
          210.99.207.252
          		unknownKorea Republic of
          		4766KIXS-AS-KRKoreaTelecomKRfalse
          91.189.91.42
          		unknownUnited Kingdom
          		41231CANONICAL-ASGBfalse

          Joe Sandbox View / Context

          IPs

          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
          83.222.191.90Kloki.mpsl.elfGet hashmaliciousMiraiBrowse
            Kloki.ppc.elfGet hashmaliciousMiraiBrowse
              Kloki.spc.elfGet hashmaliciousUnknownBrowse
                Kloki.mips.elfGet hashmaliciousMiraiBrowse
                  Kloki.arm5.elfGet hashmaliciousMiraiBrowse
                    Kloki.arm4.elfGet hashmaliciousMiraiBrowse
                      mips.elfGet hashmaliciousUnknownBrowse
                        ppc.elfGet hashmaliciousUnknownBrowse
                          spc.elfGet hashmaliciousUnknownBrowse
                            x86_64.elfGet hashmaliciousUnknownBrowse
                              109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
                              • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
                              91.189.91.43Kloki.spc.elfGet hashmaliciousUnknownBrowse
                                Kloki.arm6.elfGet hashmaliciousMiraiBrowse
                                  Fantazy.arm5.elfGet hashmaliciousUnknownBrowse
                                    jefne64.elfGet hashmaliciousMiraiBrowse
                                      Fantazy.arc.elfGet hashmaliciousUnknownBrowse
                                        la.bot.powerpc.elfGet hashmaliciousMiraiBrowse
                                          la.bot.arc.elfGet hashmaliciousMiraiBrowse
                                            la.bot.m68k.elfGet hashmaliciousMiraiBrowse
                                              la.bot.sparc.elfGet hashmaliciousMiraiBrowse
                                                la.bot.arm5.elfGet hashmaliciousMiraiBrowse

                                                  Domains

                                                  ⊘No context

                                                  ASNs

                                                  MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                  KIXS-AS-KRKoreaTelecomKRKloki.mpsl.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.78.183
                                                  Kloki.ppc.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.222.217
                                                  Kloki.spc.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.222.86
                                                  Kloki.mips.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.235.154
                                                  Kloki.arm5.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.77.3
                                                  Kloki.arm4.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.83.44
                                                  Fantazy.i686.elfGet hashmaliciousUnknownBrowse
                                                  • 14.37.185.220
                                                  Fantazy.sh4.elfGet hashmaliciousUnknownBrowse
                                                  • 115.10.35.0
                                                  Fantazy.mips.elfGet hashmaliciousUnknownBrowse
                                                  • 222.118.184.250
                                                  Fantazy.spc.elfGet hashmaliciousUnknownBrowse
                                                  • 203.251.148.181
                                                  KIXS-AS-KRKoreaTelecomKRKloki.mpsl.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.78.183
                                                  Kloki.ppc.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.222.217
                                                  Kloki.spc.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.222.86
                                                  Kloki.mips.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.235.154
                                                  Kloki.arm5.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.77.3
                                                  Kloki.arm4.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.83.44
                                                  Fantazy.i686.elfGet hashmaliciousUnknownBrowse
                                                  • 14.37.185.220
                                                  Fantazy.sh4.elfGet hashmaliciousUnknownBrowse
                                                  • 115.10.35.0
                                                  Fantazy.mips.elfGet hashmaliciousUnknownBrowse
                                                  • 222.118.184.250
                                                  Fantazy.spc.elfGet hashmaliciousUnknownBrowse
                                                  • 203.251.148.181
                                                  NET1-ASBGKloki.mpsl.elfGet hashmaliciousMiraiBrowse
                                                  • 83.222.191.90
                                                  Kloki.ppc.elfGet hashmaliciousMiraiBrowse
                                                  • 83.222.191.90
                                                  Kloki.spc.elfGet hashmaliciousUnknownBrowse
                                                  • 83.222.191.90
                                                  Kloki.mips.elfGet hashmaliciousMiraiBrowse
                                                  • 83.222.191.90
                                                  Kloki.arm5.elfGet hashmaliciousMiraiBrowse
                                                  • 83.222.191.90
                                                  Kloki.arm4.elfGet hashmaliciousMiraiBrowse
                                                  • 83.222.191.90
                                                  mips.elfGet hashmaliciousUnknownBrowse
                                                  • 83.222.191.90
                                                  ppc.elfGet hashmaliciousUnknownBrowse
                                                  • 83.222.191.90
                                                  spc.elfGet hashmaliciousUnknownBrowse
                                                  • 83.222.191.90
                                                  x86_64.elfGet hashmaliciousUnknownBrowse
                                                  • 83.222.191.90
                                                  NICNETKoreaTelecomKRKloki.mpsl.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.173.104
                                                  Kloki.ppc.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.11.251
                                                  Kloki.spc.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.84.6
                                                  ppc.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.174.9
                                                  spc.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.154.16
                                                  x86_64.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.173.147
                                                  arm5.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.158.157
                                                  x86.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.91.209
                                                  arm7.elfGet hashmaliciousMiraiBrowse
                                                  • 210.99.103.22
                                                  arm4.elfGet hashmaliciousUnknownBrowse
                                                  • 210.99.173.201

                                                  JA3 Fingerprints

                                                  ⊘No context

                                                  Dropped Files

                                                  ⊘No context

                                                  Created / dropped Files

                                                  /tmp/qemu-open.1Rx5Po (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Reputation:low
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.2z7GBr (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Reputation:low
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.47pHMo (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Reputation:low
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.4lywgs (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Reputation:low
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.7zFiYr (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Reputation:low
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.DeNH3q (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.Dlsyco (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.LjWSKr (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.Ntg1Iq (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.OMfZrU (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):274
                                                  Entropy (8bit):3.6084775425272486
                                                  Encrypted:false
                                                  SSDEEP:6:XtDFPI3SY/VUd/vYDFP9ggY/VjmsVot/VOArB/VH:995ZdHQ99dl
                                                  MD5:016B5A49CAD6EA02F27A81E5211CCE77
                                                  SHA1:C291855B6A6500BCAC1ECC11C210EBE5568F32EF
                                                  SHA-256:CBFE96A2B83A853600D3A1ED8F8A1563348672F194D85D0338CDF2C0E620F795
                                                  SHA-512:DE37F24FCEF90F7721ACD1AC7931413CB129765CFAC6B02C318FED260429F7C290F6167606D0B316F26F210EA745FF37075CC1E82196D8AC887FE1D59843FCC4
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/Kloki.arm7.elf.28000-29000 rw-p 00018000 fd:00 531606 /tmp/Kloki.arm7.elf.29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.RKv8Vq (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.T4xtkr (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.a5NElo (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.eXhTHo (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.gGEOhr (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.lmDBTo (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.meYnes (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.nl6uOp (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.tYVDip (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.vSNeSR (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):274
                                                  Entropy (8bit):3.6084775425272486
                                                  Encrypted:false
                                                  SSDEEP:6:XtDFPI3SY/VUd/vYDFP9ggY/VjmsVot/VOArB/VH:995ZdHQ99dl
                                                  MD5:016B5A49CAD6EA02F27A81E5211CCE77
                                                  SHA1:C291855B6A6500BCAC1ECC11C210EBE5568F32EF
                                                  SHA-256:CBFE96A2B83A853600D3A1ED8F8A1563348672F194D85D0338CDF2C0E620F795
                                                  SHA-512:DE37F24FCEF90F7721ACD1AC7931413CB129765CFAC6B02C318FED260429F7C290F6167606D0B316F26F210EA745FF37075CC1E82196D8AC887FE1D59843FCC4
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/Kloki.arm7.elf.28000-29000 rw-p 00018000 fd:00 531606 /tmp/Kloki.arm7.elf.29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.wmSA3q (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  /tmp/qemu-open.yxp0Fo (deleted)

                                                  Download File
                                                  Process:/tmp/Kloki.arm7.elf
                                                  File Type:ASCII text
                                                  Category:dropped
                                                  Size (bytes):248
                                                  Entropy (8bit):3.25883298954145
                                                  Encrypted:false
                                                  SSDEEP:6:XtDF83SY/VUd/vYDFSgY/VjmsVot/VOArB/VH:9nZdHQJl
                                                  MD5:75EAB6E284DBCE5DD17C495AD6791B5C
                                                  SHA1:C75FBB16926F030EB2AB0DB04AEDBA09921464D3
                                                  SHA-256:B601B3CD87D4A91D70A94FA8AA62114FAE119C20C5C6A5C019C386090A7AD32E
                                                  SHA-512:84F05EF7D6CEFE25840BBE1989BA99F38F663C3969635B00D60F3EDCF6C79866B399C02CBAB7B233FD2E6A4F85C8A15242D9E27662253F46815EFBE6A8CE3F77
                                                  Malicious:false
                                                  Preview:8000-21000 r-xp 00000000 fd:00 531606 /tmp/..28000-29000 rw-p 00018000 fd:00 531606 /tmp/..29000-2f000 rw-p 00000000 00:00 0 .ff7ef000-ff7f0000 ---p 00000000 00:00 0 .ff7f0000-ffff0000 rw-p 00000000 00:00 0 [stack].

                                                  Static File Info

                                                  General

                                                  File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                                                  Entropy (8bit):5.992237579305455
                                                  TrID:
                                                  • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                  File name:Kloki.arm7.elf
                                                  File size:162'700 bytes
                                                  MD5:ae7a36135f22cb775840ca66044d457e
                                                  SHA1:cd3f8760416b8f1bf536237e9704b3d55c29570f
                                                  SHA256:af697660b27a6a01c5e5c1be4cdfd946a8dd6595d221acc7e5a07cbf68376c50
                                                  SHA512:7d8fb317e0765b9ffdd24bfe6b96010a45c6048ab38f9f51ac8766847b26c84818e9551800b4c61cf5129c6b0a49fafa5a010b3a609dcf4f6d95b4c0ec79de8e
                                                  SSDEEP:3072:5wNUV/DMtrlTt6EBemfWKtMa5cGYuOpYq85wFbMnEtj/4XM/9jz21:5wNUV/YtrlTtHN+EMayGYuOpz8uvtj/Y
                                                  TLSH:83F33C45EA414B13C0D6277AFA9F42453333AB64D3DB73029928AFB43F8679E4E63506
                                                  File Content Preview:.ELF..............(.........4...h.......4. ...(........p............8...8................................................................B..........................................Q.td..................................-...L..................@-.,@...0....S

                                                  Static ELF Info

                                                  ELF header

                                                  Class:ELF32
                                                  Data:2's complement, little endian
                                                  Version:1 (current)
                                                  Machine:ARM
                                                  Version Number:0x1
                                                  Type:EXEC (Executable file)
                                                  OS/ABI:UNIX - System V
                                                  ABI Version:0
                                                  Entry Point Address:0x8194
                                                  Flags:0x4000002
                                                  ELF Header Size:52
                                                  Program Header Offset:52
                                                  Program Header Size:32
                                                  Number of Program Headers:5
                                                  Section Header Offset:126568
                                                  Section Header Size:40
                                                  Number of Section Headers:29
                                                  Header String Table Index:26

                                                  Sections

                                                  NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                  NULL0x00x00x00x00x0000
                                                  .initPROGBITS0x80d40xd40x100x00x6AX004
                                                  .textPROGBITS0x80f00xf00x167f40x00x6AX0016
                                                  .finiPROGBITS0x1e8e40x168e40x100x00x6AX004
                                                  .rodataPROGBITS0x1e8f80x168f80x17900x00x2A008
                                                  .ARM.extabPROGBITS0x200880x180880x180x00x2A004
                                                  .ARM.exidxARM_EXIDX0x200a00x180a00x1380x00x82AL204
                                                  .eh_framePROGBITS0x281d80x181d80x40x00x3WA004
                                                  .tbssNOBITS0x281dc0x181dc0x80x00x403WAT004
                                                  .init_arrayINIT_ARRAY0x281dc0x181dc0x40x00x3WA004
                                                  .fini_arrayFINI_ARRAY0x281e00x181e00x40x00x3WA004
                                                  .jcrPROGBITS0x281e40x181e40x40x00x3WA004
                                                  .gotPROGBITS0x281e80x181e80xac0x40x3WA004
                                                  .dataPROGBITS0x282940x182940x2340x00x3WA004
                                                  .bssNOBITS0x284c80x184c80x3f980x00x3WA004
                                                  .commentPROGBITS0x00x184c80xd180x00x0001
                                                  .debug_arangesPROGBITS0x00x191e00x1400x00x0008
                                                  .debug_pubnamesPROGBITS0x00x193200x2130x00x0001
                                                  .debug_infoPROGBITS0x00x195330x20430x00x0001
                                                  .debug_abbrevPROGBITS0x00x1b5760x6e20x00x0001
                                                  .debug_linePROGBITS0x00x1bc580xe760x00x0001
                                                  .debug_framePROGBITS0x00x1cad00x2b80x00x0004
                                                  .debug_strPROGBITS0x00x1cd880x8ca0x10x30MS001
                                                  .debug_locPROGBITS0x00x1d6520x118f0x00x0001
                                                  .debug_rangesPROGBITS0x00x1e7e10x5580x00x0001
                                                  .ARM.attributesARM_ATTRIBUTES0x00x1ed390x160x00x0001
                                                  .shstrtabSTRTAB0x00x1ed4f0x1170x00x0001
                                                  .symtabSYMTAB0x00x1f2f00x5a300x100x0288364
                                                  .strtabSTRTAB0x00x24d200x2e6c0x00x0001

                                                  Program Segments

                                                  TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                  EXIDX0x180a00x200a00x200a00x1380x1384.48860x4R 0x4.ARM.exidx
                                                  LOAD0x00x80000x80000x181d80x181d86.11040x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                                                  LOAD0x181d80x281d80x281d80x2f00x42884.10230x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                                                  TLS0x181dc0x281dc0x281dc0x00x80.00000x4R 0x4.tbss
                                                  GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                                                  Symbols

                                                  NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                                                  .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  .symtab0x80d40SECTION<unknown>DEFAULT1
                                                  .symtab0x80f00SECTION<unknown>DEFAULT2
                                                  .symtab0x1e8e40SECTION<unknown>DEFAULT3
                                                  .symtab0x1e8f80SECTION<unknown>DEFAULT4
                                                  .symtab0x200880SECTION<unknown>DEFAULT5
                                                  .symtab0x200a00SECTION<unknown>DEFAULT6
                                                  .symtab0x281d80SECTION<unknown>DEFAULT7
                                                  .symtab0x281dc0SECTION<unknown>DEFAULT8
                                                  .symtab0x281dc0SECTION<unknown>DEFAULT9
                                                  .symtab0x281e00SECTION<unknown>DEFAULT10
                                                  .symtab0x281e40SECTION<unknown>DEFAULT11
                                                  .symtab0x281e80SECTION<unknown>DEFAULT12
                                                  .symtab0x282940SECTION<unknown>DEFAULT13
                                                  .symtab0x284c80SECTION<unknown>DEFAULT14
                                                  .symtab0x00SECTION<unknown>DEFAULT15
                                                  .symtab0x00SECTION<unknown>DEFAULT16
                                                  .symtab0x00SECTION<unknown>DEFAULT17
                                                  .symtab0x00SECTION<unknown>DEFAULT18
                                                  .symtab0x00SECTION<unknown>DEFAULT19
                                                  .symtab0x00SECTION<unknown>DEFAULT20
                                                  .symtab0x00SECTION<unknown>DEFAULT21
                                                  .symtab0x00SECTION<unknown>DEFAULT22
                                                  .symtab0x00SECTION<unknown>DEFAULT23
                                                  .symtab0x00SECTION<unknown>DEFAULT24
                                                  .symtab0x00SECTION<unknown>DEFAULT25
                                                  $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                                                  $a.symtab0x1e8e40NOTYPE<unknown>DEFAULT3
                                                  $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                                                  $a.symtab0x1e8f00NOTYPE<unknown>DEFAULT3
                                                  $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x81340NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x81940NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x82cc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x84240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x86400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x86ac0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x871c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x8aa80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x8af80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x8b9c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x8cdc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x93c80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x93f00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x94240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x944c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x948c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x94d80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x95240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x95a40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x96080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x96800NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x97200NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x99240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x9a880NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x9ba80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xa3400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xa3b00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xa41c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xa4ac0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xa5e00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xaae80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xab480NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xac4c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xb5600NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xb64c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbb500NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbb780NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbbc00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbbe40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbc080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbc740NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbcd00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbd640NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbdf40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbe740NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbef80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xbff40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xc2280NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xc3840NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xc4c00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xc5440NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xcf500NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xcfe80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xd06c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xd7000NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xdd1c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xdfbc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xe7700NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xee680NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xf5140NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0xfd940NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x100f00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1031c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x105bc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x10aa80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x10ac00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x10bd00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x10be00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x10c2c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x10c4c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x112000NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x114400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x11a540NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x11aa80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x11ab80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x11be40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x11df00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x11f200NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1206c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1213c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x121440NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x122d00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x125bc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x126d00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x126e40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x127300NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1277c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x127840NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x127880NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x127b40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x127c00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x127cc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x129ec0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x12b3c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x12b580NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x12bb80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x12c240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x12cdc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x12cfc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x12e400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x133880NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x133900NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x133980NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x133a00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1345c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x134a00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13bb40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13bfc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13c300NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13cb80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13cc40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13cd00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13d680NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13e5c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13e9c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13ed40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13ee80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x13f280NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x140080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x140400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x140780NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x140b80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x141180NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1415c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1419c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x141d40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x142140NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x142540NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1428c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x142c40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x142fc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x143400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x143c40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x144040NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x144900NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x144c00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x145d00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x146a00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x147640NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x148140NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x148fc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x149a80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x149b00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x149e40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x14a180NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x14ae80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x152b40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x153540NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x153980NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x155480NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1559c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15b0c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15b440NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15c000NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15c100NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15cb00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15d100NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15dcc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15e980NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15eb00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15fbc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x15fe40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x160280NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1609c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x160e00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x161240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x161980NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x161dc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x162240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x162640NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x162a80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x163180NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x163600NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x163e80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1642c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1649c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x164e80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x165700NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x165b80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x165fc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1664c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x166600NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x167240NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x167900NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x171400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x172800NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x176400NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17ae00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17b200NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17c480NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17c600NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17d040NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17dbc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17e7c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17f200NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x17fb00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x180880NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x181800NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1826c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1828c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x182a80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x184800NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x185440NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x186900NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x18cb40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x18d040NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x190d00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x191180NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x192080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x192540NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x192ac0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x192b40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x192e40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1933c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x193440NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x193740NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x193cc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x193d40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x194040NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1945c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x194640NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x194900NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x195180NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x195f40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x196b40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x197080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x197600NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19b4c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19bc80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19bf40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19c080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19c100NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19c780NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19cdc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19d7c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19da80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19dbc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19dd00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19de40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19e0c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19e440NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19e580NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19e980NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19edc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19f1c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19f880NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x19f9c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1a1140NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1a2000NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1a5a40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1a5f80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1a61c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1a6d80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1aa080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1aa280NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1ae880NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1afc80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1b0480NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1b1ac0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1b2880NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1b2b80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1b32c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1b3580NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1b4b40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1bca80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1bdec0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1bf080NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1c1b80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1c5640NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1c6900NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1c7300NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1cbc00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1cbd00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1cbf00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1cce00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1cdc00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1ceb00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1cf9c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1cfe00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d0300NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d07c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d0a00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d11c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d2140NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d28c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d2f40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d5480NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d5540NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d58c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d5e40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d63c0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d6480NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d7900NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d7b40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d9740NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1d9cc0NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1daa80NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1db700NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1dba00NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1dc440NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1dc800NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1dca40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1dce40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1dd540NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1de980NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1e2b40NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1e7500NOTYPE<unknown>DEFAULT2
                                                  $a.symtab0x1e8900NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x81280NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x281e00NOTYPE<unknown>DEFAULT10
                                                  $d.symtab0x81800NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x281dc0NOTYPE<unknown>DEFAULT9
                                                  $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x82c40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x84200NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x8a740NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x8cd00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x93880NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1e96f0NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x97180NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x991c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1ea780NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x9a7c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xa3080NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x282940NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x282980NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x2829c0NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0xa3a00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xa40c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xa49c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xa5d00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xac440NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xb4040NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xb6440NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xbb3c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xc21c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xc3780NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xcf400NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xcfdc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xd0580NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x2829d0NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x282bd0NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0xd6fc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xdd180NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xe76c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xee640NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xf5100NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0xfd740NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1efc40NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x1efe80NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x10aa40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x10bcc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x10c280NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x10c480NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x111fc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x114380NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x11a9c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x11bdc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x11de80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x11f180NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x120640NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x122c40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x125a40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x282cc0NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x00NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0x200NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0x260NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0x129d00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x133780NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0x00NOTYPE<unknown>DEFAULT23
                                                  $d.symtab0x2100NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                                                  $d.symtab0x13cac0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x13d600NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x13e4c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x13e980NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x13ed00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x13f240NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x13ff80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1403c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x140b40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x141100NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x141580NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x141980NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x141d00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x142100NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x142500NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x142880NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x142c00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x142f80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1433c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x143bc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x144000NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1448c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x145b40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x146980NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x147580NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1480c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1f0340NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x148e80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x149940NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x149e00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x14ae00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x152900NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1f0740NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x155440NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x155900NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x15adc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x282d40NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x1f07c0NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x15bfc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x15e900NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x15fac0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1f1000NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x160200NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x160940NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x160d80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1611c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x161900NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x161d40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1621c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x162600NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x162a00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x163100NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1635c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x163e00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x164240NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x164940NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x164e00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x165680NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x165b00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x165f40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x166480NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x167180NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1711c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x282d80NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x172640NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x176200NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x17ac40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x17b180NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x17c340NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x282f00NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x17ce80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x17da00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x17e600NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x17f040NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x283080NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x283a00NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x17fac0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1807c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x181700NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x182600NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1fc6c0NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x184700NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x185240NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x283b40NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x1866c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x18c880NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x18d000NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x190a80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x191fc0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1923c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x192500NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x192e00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x193700NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x194000NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x195ec0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x196a00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x197000NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x197540NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19b000NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x283cc0NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x19bc00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19bf00NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19c700NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19cd80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19d780NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19e040NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19e400NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19e940NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19ed80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19f180NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x19f800NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1a1ec0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1a59c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1a6d40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1a9f80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1ae540NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1b0380NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1b1900NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x283e40NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x283e00NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x1b2840NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1bc880NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x200400NOTYPE<unknown>DEFAULT4
                                                  $d.symtab0x1c19c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1c54c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1c6880NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1ccd80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1cdb80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1cea80NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1cf940NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d1180NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d20c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d2740NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d2e40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d5200NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d5800NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d6300NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d7880NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1d9700NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1daa40NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1db6c0NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1dc400NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x1dd500NOTYPE<unknown>DEFAULT2
                                                  $d.symtab0x28c0NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0x2ac0NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0x2b30NOTYPE<unknown>DEFAULT21
                                                  $d.symtab0x283d80NOTYPE<unknown>DEFAULT13
                                                  $d.symtab0x1fcf40NOTYPE<unknown>DEFAULT4
                                                  C.0.4553.symtab0x1ea78124OBJECT<unknown>DEFAULT4
                                                  C.11.5548.symtab0x1fcdc12OBJECT<unknown>DEFAULT4
                                                  C.20.4411.symtab0x1efe844OBJECT<unknown>DEFAULT4
                                                  C.21.4412.symtab0x1efc436OBJECT<unknown>DEFAULT4
                                                  C.5.5083.symtab0x1f03424OBJECT<unknown>DEFAULT4
                                                  C.7.5370.symtab0x1fce812OBJECT<unknown>DEFAULT4
                                                  C.7.6078.symtab0x1f04c12OBJECT<unknown>DEFAULT4
                                                  C.7.6109.symtab0x2001812OBJECT<unknown>DEFAULT4
                                                  C.7.6182.symtab0x1fff412OBJECT<unknown>DEFAULT4
                                                  C.8.6110.symtab0x2000c12OBJECT<unknown>DEFAULT4
                                                  C.9.6119.symtab0x2000012OBJECT<unknown>DEFAULT4
                                                  LOCAL_ADDR.symtab0x2c0284OBJECT<unknown>DEFAULT14
                                                  Laligned.symtab0x15cd80NOTYPE<unknown>DEFAULT2
                                                  Llastword.symtab0x15cf40NOTYPE<unknown>DEFAULT2
                                                  _Exit.symtab0x19c10104FUNC<unknown>DEFAULT2
                                                  _GLOBAL_OFFSET_TABLE_.symtab0x281e80OBJECT<unknown>HIDDEN12
                                                  _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _Unwind_Complete.symtab0x127844FUNC<unknown>HIDDEN2
                                                  _Unwind_DeleteException.symtab0x1278844FUNC<unknown>HIDDEN2
                                                  _Unwind_ForcedUnwind.symtab0x1343836FUNC<unknown>HIDDEN2
                                                  _Unwind_GetCFA.symtab0x1277c8FUNC<unknown>HIDDEN2
                                                  _Unwind_GetDataRelBase.symtab0x127c012FUNC<unknown>HIDDEN2
                                                  _Unwind_GetLanguageSpecificData.symtab0x1345c68FUNC<unknown>HIDDEN2
                                                  _Unwind_GetRegionStart.symtab0x13bfc52FUNC<unknown>HIDDEN2
                                                  _Unwind_GetTextRelBase.symtab0x127b412FUNC<unknown>HIDDEN2
                                                  _Unwind_RaiseException.symtab0x133cc36FUNC<unknown>HIDDEN2
                                                  _Unwind_Resume.symtab0x133f036FUNC<unknown>HIDDEN2
                                                  _Unwind_Resume_or_Rethrow.symtab0x1341436FUNC<unknown>HIDDEN2
                                                  _Unwind_VRS_Get.symtab0x126e476FUNC<unknown>HIDDEN2
                                                  _Unwind_VRS_Pop.symtab0x12cfc324FUNC<unknown>HIDDEN2
                                                  _Unwind_VRS_Set.symtab0x1273076FUNC<unknown>HIDDEN2
                                                  _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __C_ctype_b.symtab0x283d84OBJECT<unknown>DEFAULT13
                                                  __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __C_ctype_b_data.symtab0x1fcf4768OBJECT<unknown>DEFAULT4
                                                  __EH_FRAME_BEGIN__.symtab0x281d80OBJECT<unknown>DEFAULT7
                                                  __FRAME_END__.symtab0x281d80OBJECT<unknown>DEFAULT7
                                                  __GI___C_ctype_b.symtab0x283d84OBJECT<unknown>HIDDEN13
                                                  __GI___close.symtab0x19270100FUNC<unknown>HIDDEN2
                                                  __GI___close_nocancel.symtab0x1925424FUNC<unknown>HIDDEN2
                                                  __GI___ctype_b.symtab0x283dc4OBJECT<unknown>HIDDEN13
                                                  __GI___errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __GI___fcntl_nocancel.symtab0x13cd0152FUNC<unknown>HIDDEN2
                                                  __GI___fgetc_unlocked.symtab0x1c564300FUNC<unknown>HIDDEN2
                                                  __GI___glibc_strerror_r.symtab0x15e9824FUNC<unknown>HIDDEN2
                                                  __GI___libc_close.symtab0x19270100FUNC<unknown>HIDDEN2
                                                  __GI___libc_fcntl.symtab0x13d68244FUNC<unknown>HIDDEN2
                                                  __GI___libc_open.symtab0x19300100FUNC<unknown>HIDDEN2
                                                  __GI___libc_read.symtab0x19420100FUNC<unknown>HIDDEN2
                                                  __GI___libc_write.symtab0x19390100FUNC<unknown>HIDDEN2
                                                  __GI___longjmp.symtab0x19bf420FUNC<unknown>HIDDEN2
                                                  __GI___open.symtab0x19300100FUNC<unknown>HIDDEN2
                                                  __GI___open_nocancel.symtab0x192e424FUNC<unknown>HIDDEN2
                                                  __GI___pthread_cleanup_upto.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __GI___pthread_unwind.symtab0x11a5484FUNC<unknown>HIDDEN2
                                                  __GI___pthread_unwind_next.symtab0x11aa816FUNC<unknown>HIDDEN2
                                                  __GI___read.symtab0x19420100FUNC<unknown>HIDDEN2
                                                  __GI___read_nocancel.symtab0x1940424FUNC<unknown>HIDDEN2
                                                  __GI___sigaddset.symtab0x1674836FUNC<unknown>HIDDEN2
                                                  __GI___sigdelset.symtab0x1676c36FUNC<unknown>HIDDEN2
                                                  __GI___sigismember.symtab0x1672436FUNC<unknown>HIDDEN2
                                                  __GI___uClibc_fini.symtab0x19638124FUNC<unknown>HIDDEN2
                                                  __GI___uClibc_init.symtab0x1970888FUNC<unknown>HIDDEN2
                                                  __GI___write.symtab0x19390100FUNC<unknown>HIDDEN2
                                                  __GI___write_nocancel.symtab0x1937424FUNC<unknown>HIDDEN2
                                                  __GI___xpg_strerror_r.symtab0x15eb0268FUNC<unknown>HIDDEN2
                                                  __GI__exit.symtab0x19c10104FUNC<unknown>HIDDEN2
                                                  __GI_abort.symtab0x17b20296FUNC<unknown>HIDDEN2
                                                  __GI_accept.symtab0x16028116FUNC<unknown>HIDDEN2
                                                  __GI_atoi.symtab0x1826c32FUNC<unknown>HIDDEN2
                                                  __GI_bind.symtab0x1609c68FUNC<unknown>HIDDEN2
                                                  __GI_brk.symtab0x1d5e488FUNC<unknown>HIDDEN2
                                                  __GI_chdir.symtab0x13e9c56FUNC<unknown>HIDDEN2
                                                  __GI_close.symtab0x19270100FUNC<unknown>HIDDEN2
                                                  __GI_closedir.symtab0x144c0272FUNC<unknown>HIDDEN2
                                                  __GI_config_close.symtab0x1a52852FUNC<unknown>HIDDEN2
                                                  __GI_config_open.symtab0x1a55c72FUNC<unknown>HIDDEN2
                                                  __GI_config_read.symtab0x1a200808FUNC<unknown>HIDDEN2
                                                  __GI_connect.symtab0x16124116FUNC<unknown>HIDDEN2
                                                  __GI_exit.symtab0x18480196FUNC<unknown>HIDDEN2
                                                  __GI_fclose.symtab0x1a6d8816FUNC<unknown>HIDDEN2
                                                  __GI_fcntl.symtab0x13d68244FUNC<unknown>HIDDEN2
                                                  __GI_fflush_unlocked.symtab0x1c1b8940FUNC<unknown>HIDDEN2
                                                  __GI_fgetc.symtab0x1bca8324FUNC<unknown>HIDDEN2
                                                  __GI_fgetc_unlocked.symtab0x1c564300FUNC<unknown>HIDDEN2
                                                  __GI_fgets.symtab0x1bdec284FUNC<unknown>HIDDEN2
                                                  __GI_fgets_unlocked.symtab0x1c690160FUNC<unknown>HIDDEN2
                                                  __GI_fopen.symtab0x1aa0832FUNC<unknown>HIDDEN2
                                                  __GI_fork.symtab0x18d04972FUNC<unknown>HIDDEN2
                                                  __GI_fputs_unlocked.symtab0x15b0c56FUNC<unknown>HIDDEN2
                                                  __GI_fseek.symtab0x1d79036FUNC<unknown>HIDDEN2
                                                  __GI_fseeko64.symtab0x1d7b4448FUNC<unknown>HIDDEN2
                                                  __GI_fstat.symtab0x19c78100FUNC<unknown>HIDDEN2
                                                  __GI_fwrite_unlocked.symtab0x15b44188FUNC<unknown>HIDDEN2
                                                  __GI_getc_unlocked.symtab0x1c564300FUNC<unknown>HIDDEN2
                                                  __GI_getdtablesize.symtab0x19d7c44FUNC<unknown>HIDDEN2
                                                  __GI_getegid.symtab0x19da820FUNC<unknown>HIDDEN2
                                                  __GI_geteuid.symtab0x19dbc20FUNC<unknown>HIDDEN2
                                                  __GI_getgid.symtab0x19dd020FUNC<unknown>HIDDEN2
                                                  __GI_getpagesize.symtab0x19de440FUNC<unknown>HIDDEN2
                                                  __GI_getpid.symtab0x190d072FUNC<unknown>HIDDEN2
                                                  __GI_getrlimit.symtab0x19e0c56FUNC<unknown>HIDDEN2
                                                  __GI_getsockname.symtab0x1619868FUNC<unknown>HIDDEN2
                                                  __GI_gettimeofday.symtab0x13ee864FUNC<unknown>HIDDEN2
                                                  __GI_getuid.symtab0x19e4420FUNC<unknown>HIDDEN2
                                                  __GI_inet_addr.symtab0x15fbc40FUNC<unknown>HIDDEN2
                                                  __GI_inet_aton.symtab0x1d11c248FUNC<unknown>HIDDEN2
                                                  __GI_initstate_r.symtab0x18088248FUNC<unknown>HIDDEN2
                                                  __GI_ioctl.symtab0x13f28224FUNC<unknown>HIDDEN2
                                                  __GI_isatty.symtab0x1d07c36FUNC<unknown>HIDDEN2
                                                  __GI_kill.symtab0x1400856FUNC<unknown>HIDDEN2
                                                  __GI_listen.symtab0x1622464FUNC<unknown>HIDDEN2
                                                  __GI_lseek.symtab0x19e5864FUNC<unknown>HIDDEN2
                                                  __GI_lseek64.symtab0x1dce4112FUNC<unknown>HIDDEN2
                                                  __GI_memchr.symtab0x1cbf0240FUNC<unknown>HIDDEN2
                                                  __GI_memcpy.symtab0x15c004FUNC<unknown>HIDDEN2
                                                  __GI_memmove.symtab0x1cbc04FUNC<unknown>HIDDEN2
                                                  __GI_mempcpy.symtab0x1dc8036FUNC<unknown>HIDDEN2
                                                  __GI_memrchr.symtab0x1cce0224FUNC<unknown>HIDDEN2
                                                  __GI_memset.symtab0x15c10156FUNC<unknown>HIDDEN2
                                                  __GI_mmap.symtab0x19b4c124FUNC<unknown>HIDDEN2
                                                  __GI_mremap.symtab0x19e9868FUNC<unknown>HIDDEN2
                                                  __GI_munmap.symtab0x19edc64FUNC<unknown>HIDDEN2
                                                  __GI_nanosleep.symtab0x140b896FUNC<unknown>HIDDEN2
                                                  __GI_open.symtab0x19300100FUNC<unknown>HIDDEN2
                                                  __GI_opendir.symtab0x146a0196FUNC<unknown>HIDDEN2
                                                  __GI_raise.symtab0x19118240FUNC<unknown>HIDDEN2
                                                  __GI_random.symtab0x17c60164FUNC<unknown>HIDDEN2
                                                  __GI_random_r.symtab0x17f20144FUNC<unknown>HIDDEN2
                                                  __GI_read.symtab0x19420100FUNC<unknown>HIDDEN2
                                                  __GI_readdir.symtab0x14814232FUNC<unknown>HIDDEN2
                                                  __GI_readdir64.symtab0x1a114236FUNC<unknown>HIDDEN2
                                                  __GI_readlink.symtab0x1415c64FUNC<unknown>HIDDEN2
                                                  __GI_recv.symtab0x162a8112FUNC<unknown>HIDDEN2
                                                  __GI_recvfrom.symtab0x16360136FUNC<unknown>HIDDEN2
                                                  __GI_sbrk.symtab0x19f1c108FUNC<unknown>HIDDEN2
                                                  __GI_select.symtab0x14340132FUNC<unknown>HIDDEN2
                                                  __GI_send.symtab0x1642c112FUNC<unknown>HIDDEN2
                                                  __GI_sendto.symtab0x164e8136FUNC<unknown>HIDDEN2
                                                  __GI_setsid.symtab0x143c464FUNC<unknown>HIDDEN2
                                                  __GI_setsockopt.symtab0x1657072FUNC<unknown>HIDDEN2
                                                  __GI_setstate_r.symtab0x18180236FUNC<unknown>HIDDEN2
                                                  __GI_sigaction.symtab0x13c30136FUNC<unknown>HIDDEN2
                                                  __GI_sigaddset.symtab0x165fc80FUNC<unknown>HIDDEN2
                                                  __GI_sigemptyset.symtab0x1664c20FUNC<unknown>HIDDEN2
                                                  __GI_signal.symtab0x16660196FUNC<unknown>HIDDEN2
                                                  __GI_sigprocmask.symtab0x14404140FUNC<unknown>HIDDEN2
                                                  __GI_socket.symtab0x165b868FUNC<unknown>HIDDEN2
                                                  __GI_sprintf.symtab0x149e452FUNC<unknown>HIDDEN2
                                                  __GI_srandom_r.symtab0x17fb0216FUNC<unknown>HIDDEN2
                                                  __GI_strchr.symtab0x1cdc0240FUNC<unknown>HIDDEN2
                                                  __GI_strchrnul.symtab0x1ceb0236FUNC<unknown>HIDDEN2
                                                  __GI_strcmp.symtab0x1cbd028FUNC<unknown>HIDDEN2
                                                  __GI_strcoll.symtab0x1cbd028FUNC<unknown>HIDDEN2
                                                  __GI_strcspn.symtab0x1cf9c68FUNC<unknown>HIDDEN2
                                                  __GI_strlen.symtab0x15cb096FUNC<unknown>HIDDEN2
                                                  __GI_strncpy.symtab0x15d10188FUNC<unknown>HIDDEN2
                                                  __GI_strnlen.symtab0x15dcc204FUNC<unknown>HIDDEN2
                                                  __GI_strrchr.symtab0x1cfe080FUNC<unknown>HIDDEN2
                                                  __GI_strspn.symtab0x1d03076FUNC<unknown>HIDDEN2
                                                  __GI_strtol.symtab0x1828c28FUNC<unknown>HIDDEN2
                                                  __GI_sysconf.symtab0x186901572FUNC<unknown>HIDDEN2
                                                  __GI_tcgetattr.symtab0x1d0a0124FUNC<unknown>HIDDEN2
                                                  __GI_time.symtab0x1449048FUNC<unknown>HIDDEN2
                                                  __GI_times.symtab0x19f8820FUNC<unknown>HIDDEN2
                                                  __GI_vsnprintf.symtab0x14a18208FUNC<unknown>HIDDEN2
                                                  __GI_wcrtomb.symtab0x1a5a484FUNC<unknown>HIDDEN2
                                                  __GI_wcsnrtombs.symtab0x1a61c188FUNC<unknown>HIDDEN2
                                                  __GI_wcsrtombs.symtab0x1a5f836FUNC<unknown>HIDDEN2
                                                  __GI_write.symtab0x19390100FUNC<unknown>HIDDEN2
                                                  __JCR_END__.symtab0x281e40OBJECT<unknown>DEFAULT11
                                                  __JCR_LIST__.symtab0x281e40OBJECT<unknown>DEFAULT11
                                                  ___Unwind_ForcedUnwind.symtab0x1343836FUNC<unknown>HIDDEN2
                                                  ___Unwind_RaiseException.symtab0x133cc36FUNC<unknown>HIDDEN2
                                                  ___Unwind_Resume.symtab0x133f036FUNC<unknown>HIDDEN2
                                                  ___Unwind_Resume_or_Rethrow.symtab0x1341436FUNC<unknown>HIDDEN2
                                                  __adddf3.symtab0x1dea4784FUNC<unknown>HIDDEN2
                                                  __aeabi_cdcmpeq.symtab0x1e80024FUNC<unknown>HIDDEN2
                                                  __aeabi_cdcmple.symtab0x1e80024FUNC<unknown>HIDDEN2
                                                  __aeabi_cdrcmple.symtab0x1e7e452FUNC<unknown>HIDDEN2
                                                  __aeabi_d2uiz.symtab0x1e89084FUNC<unknown>HIDDEN2
                                                  __aeabi_dadd.symtab0x1dea4784FUNC<unknown>HIDDEN2
                                                  __aeabi_dcmpeq.symtab0x1e81824FUNC<unknown>HIDDEN2
                                                  __aeabi_dcmpge.symtab0x1e86024FUNC<unknown>HIDDEN2
                                                  __aeabi_dcmpgt.symtab0x1e87824FUNC<unknown>HIDDEN2
                                                  __aeabi_dcmple.symtab0x1e84824FUNC<unknown>HIDDEN2
                                                  __aeabi_dcmplt.symtab0x1e83024FUNC<unknown>HIDDEN2
                                                  __aeabi_ddiv.symtab0x1e544524FUNC<unknown>HIDDEN2
                                                  __aeabi_dmul.symtab0x1e2b4656FUNC<unknown>HIDDEN2
                                                  __aeabi_drsub.symtab0x1de980FUNC<unknown>HIDDEN2
                                                  __aeabi_dsub.symtab0x1dea0788FUNC<unknown>HIDDEN2
                                                  __aeabi_f2d.symtab0x1e20064FUNC<unknown>HIDDEN2
                                                  __aeabi_i2d.symtab0x1e1d840FUNC<unknown>HIDDEN2
                                                  __aeabi_idiv.symtab0x1dd540FUNC<unknown>HIDDEN2
                                                  __aeabi_idivmod.symtab0x1de8024FUNC<unknown>HIDDEN2
                                                  __aeabi_l2d.symtab0x1e25496FUNC<unknown>HIDDEN2
                                                  __aeabi_read_tp.symtab0x10bd08FUNC<unknown>HIDDEN2
                                                  __aeabi_ui2d.symtab0x1e1b436FUNC<unknown>HIDDEN2
                                                  __aeabi_uidiv.symtab0x125bc0FUNC<unknown>HIDDEN2
                                                  __aeabi_uidivmod.symtab0x126b824FUNC<unknown>HIDDEN2
                                                  __aeabi_ul2d.symtab0x1e240116FUNC<unknown>HIDDEN2
                                                  __aeabi_unwind_cpp_pr0.symtab0x133988FUNC<unknown>HIDDEN2
                                                  __aeabi_unwind_cpp_pr1.symtab0x133908FUNC<unknown>HIDDEN2
                                                  __aeabi_unwind_cpp_pr2.symtab0x133888FUNC<unknown>HIDDEN2
                                                  __app_fini.symtab0x29ab84OBJECT<unknown>HIDDEN14
                                                  __atexit_lock.symtab0x283b424OBJECT<unknown>DEFAULT13
                                                  __bss_end__.symtab0x2c4600NOTYPE<unknown>DEFAULTSHN_ABS
                                                  __bss_start.symtab0x284c80NOTYPE<unknown>DEFAULTSHN_ABS
                                                  __bss_start__.symtab0x284c80NOTYPE<unknown>DEFAULTSHN_ABS
                                                  __check_one_fd.symtab0x196b484FUNC<unknown>DEFAULT2
                                                  __close.symtab0x19270100FUNC<unknown>DEFAULT2
                                                  __close_nocancel.symtab0x1925424FUNC<unknown>DEFAULT2
                                                  __cmpdf2.symtab0x1e760132FUNC<unknown>HIDDEN2
                                                  __ctype_b.symtab0x283dc4OBJECT<unknown>DEFAULT13
                                                  __curbrk.symtab0x2c01c4OBJECT<unknown>HIDDEN14
                                                  __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __data_start.symtab0x282940NOTYPE<unknown>DEFAULT13
                                                  __default_rt_sa_restorer.symtab0x13cc80FUNC<unknown>DEFAULT2
                                                  __default_sa_restorer.symtab0x13cbc0FUNC<unknown>DEFAULT2
                                                  __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __div0.symtab0x126d020FUNC<unknown>HIDDEN2
                                                  __divdf3.symtab0x1e544524FUNC<unknown>HIDDEN2
                                                  __divsi3.symtab0x1dd54300FUNC<unknown>HIDDEN2
                                                  __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
                                                  __do_global_dtors_aux_fini_array_entry.symtab0x281e00OBJECT<unknown>DEFAULT10
                                                  __end__.symtab0x2c4600NOTYPE<unknown>DEFAULTSHN_ABS
                                                  __environ.symtab0x29ab04OBJECT<unknown>DEFAULT14
                                                  __eqdf2.symtab0x1e760132FUNC<unknown>HIDDEN2
                                                  __errno_location.symtab0x10c2c32FUNC<unknown>DEFAULT2
                                                  __exidx_end.symtab0x201d80NOTYPE<unknown>DEFAULTSHN_ABS
                                                  __exidx_start.symtab0x200a00NOTYPE<unknown>DEFAULTSHN_ABS
                                                  __exit_cleanup.symtab0x295604OBJECT<unknown>HIDDEN14
                                                  __extendsfdf2.symtab0x1e20064FUNC<unknown>HIDDEN2
                                                  __fcntl_nocancel.symtab0x13cd0152FUNC<unknown>DEFAULT2
                                                  __fgetc_unlocked.symtab0x1c564300FUNC<unknown>DEFAULT2
                                                  __fini_array_end.symtab0x281e40NOTYPE<unknown>HIDDEN10
                                                  __fini_array_start.symtab0x281e00NOTYPE<unknown>HIDDEN10
                                                  __fixunsdfsi.symtab0x1e89084FUNC<unknown>HIDDEN2
                                                  __floatdidf.symtab0x1e25496FUNC<unknown>HIDDEN2
                                                  __floatsidf.symtab0x1e1d840FUNC<unknown>HIDDEN2
                                                  __floatundidf.symtab0x1e240116FUNC<unknown>HIDDEN2
                                                  __floatunsidf.symtab0x1e1b436FUNC<unknown>HIDDEN2
                                                  __fork.symtab0x10aa824FUNC<unknown>DEFAULT2
                                                  __fork_generation_pointer.symtab0x2c42c4OBJECT<unknown>HIDDEN14
                                                  __fork_handlers.symtab0x2c4304OBJECT<unknown>HIDDEN14
                                                  __fork_lock.symtab0x295644OBJECT<unknown>HIDDEN14
                                                  __frame_dummy_init_array_entry.symtab0x281dc0OBJECT<unknown>DEFAULT9
                                                  __gedf2.symtab0x1e750148FUNC<unknown>HIDDEN2
                                                  __getdents.symtab0x19cdc160FUNC<unknown>HIDDEN2
                                                  __getdents64.symtab0x1d648328FUNC<unknown>HIDDEN2
                                                  __getpagesize.symtab0x19de440FUNC<unknown>DEFAULT2
                                                  __getpid.symtab0x190d072FUNC<unknown>DEFAULT2
                                                  __glibc_strerror_r.symtab0x15e9824FUNC<unknown>DEFAULT2
                                                  __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __gnu_Unwind_ForcedUnwind.symtab0x12b3c28FUNC<unknown>HIDDEN2
                                                  __gnu_Unwind_RaiseException.symtab0x12c24184FUNC<unknown>HIDDEN2
                                                  __gnu_Unwind_Restore_VFP.symtab0x133bc0FUNC<unknown>HIDDEN2
                                                  __gnu_Unwind_Resume.symtab0x12bb8108FUNC<unknown>HIDDEN2
                                                  __gnu_Unwind_Resume_or_Rethrow.symtab0x12cdc32FUNC<unknown>HIDDEN2
                                                  __gnu_Unwind_Save_VFP.symtab0x133c40FUNC<unknown>HIDDEN2
                                                  __gnu_unwind_execute.symtab0x134a01812FUNC<unknown>HIDDEN2
                                                  __gnu_unwind_frame.symtab0x13bb472FUNC<unknown>HIDDEN2
                                                  __gnu_unwind_pr_common.symtab0x12e401352FUNC<unknown>DEFAULT2
                                                  __gtdf2.symtab0x1e750148FUNC<unknown>HIDDEN2
                                                  __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __init_array_end.symtab0x281e00NOTYPE<unknown>HIDDEN9
                                                  __init_array_start.symtab0x281dc0NOTYPE<unknown>HIDDEN9
                                                  __init_sched_fifo_prio.symtab0x1228476FUNC<unknown>HIDDEN2
                                                  __is_smp.symtab0x2c0544OBJECT<unknown>HIDDEN14
                                                  __ledf2.symtab0x1e758140FUNC<unknown>HIDDEN2
                                                  __libc_accept.symtab0x16028116FUNC<unknown>DEFAULT2
                                                  __libc_close.symtab0x19270100FUNC<unknown>DEFAULT2
                                                  __libc_connect.symtab0x16124116FUNC<unknown>DEFAULT2
                                                  __libc_disable_asynccancel.symtab0x19490136FUNC<unknown>HIDDEN2
                                                  __libc_enable_asynccancel.symtab0x19518220FUNC<unknown>HIDDEN2
                                                  __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                                                  __libc_fcntl.symtab0x13d68244FUNC<unknown>DEFAULT2
                                                  __libc_fork.symtab0x18d04972FUNC<unknown>DEFAULT2
                                                  __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                                                  __libc_longjmp.symtab0x1404056FUNC<unknown>DEFAULT2
                                                  __libc_multiple_threads.symtab0x2c4344OBJECT<unknown>HIDDEN14
                                                  __libc_nanosleep.symtab0x140b896FUNC<unknown>DEFAULT2
                                                  __libc_open.symtab0x19300100FUNC<unknown>DEFAULT2
                                                  __libc_read.symtab0x19420100FUNC<unknown>DEFAULT2
                                                  __libc_recv.symtab0x162a8112FUNC<unknown>DEFAULT2
                                                  __libc_recvfrom.symtab0x16360136FUNC<unknown>DEFAULT2
                                                  __libc_select.symtab0x14340132FUNC<unknown>DEFAULT2
                                                  __libc_send.symtab0x1642c112FUNC<unknown>DEFAULT2
                                                  __libc_sendto.symtab0x164e8136FUNC<unknown>DEFAULT2
                                                  __libc_setup_tls.symtab0x1d318560FUNC<unknown>DEFAULT2
                                                  __libc_sigaction.symtab0x13c30136FUNC<unknown>DEFAULT2
                                                  __libc_siglongjmp.symtab0x1404056FUNC<unknown>DEFAULT2
                                                  __libc_stack_end.symtab0x29aac4OBJECT<unknown>DEFAULT14
                                                  __libc_write.symtab0x19390100FUNC<unknown>DEFAULT2
                                                  __lll_lock_wait.symtab0x11c7c156FUNC<unknown>HIDDEN2
                                                  __lll_lock_wait_private.symtab0x11be4152FUNC<unknown>HIDDEN2
                                                  __lll_robust_lock_wait.symtab0x1206c208FUNC<unknown>HIDDEN2
                                                  __lll_robust_timedlock_wait.symtab0x11f20332FUNC<unknown>HIDDEN2
                                                  __lll_timedlock_wait.symtab0x11df0304FUNC<unknown>HIDDEN2
                                                  __lll_timedwait_tid.symtab0x11d18216FUNC<unknown>HIDDEN2
                                                  __longjmp.symtab0x19bf420FUNC<unknown>DEFAULT2
                                                  __ltdf2.symtab0x1e758140FUNC<unknown>HIDDEN2
                                                  __malloc_consolidate.symtab0x176f0436FUNC<unknown>HIDDEN2
                                                  __malloc_largebin_index.symtab0x16790120FUNC<unknown>DEFAULT2
                                                  __malloc_lock.symtab0x282d824OBJECT<unknown>DEFAULT13
                                                  __malloc_state.symtab0x2c0b4888OBJECT<unknown>DEFAULT14
                                                  __malloc_trim.symtab0x17640176FUNC<unknown>DEFAULT2
                                                  __muldf3.symtab0x1e2b4656FUNC<unknown>HIDDEN2
                                                  __nedf2.symtab0x1e760132FUNC<unknown>HIDDEN2
                                                  __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __open.symtab0x19300100FUNC<unknown>DEFAULT2
                                                  __open_nocancel.symtab0x192e424FUNC<unknown>DEFAULT2
                                                  __pagesize.symtab0x29ab44OBJECT<unknown>DEFAULT14
                                                  __preinit_array_end.symtab0x281dc0NOTYPE<unknown>HIDDEN8
                                                  __preinit_array_start.symtab0x281dc0NOTYPE<unknown>HIDDEN8
                                                  __progname.symtab0x283d04OBJECT<unknown>DEFAULT13
                                                  __progname_full.symtab0x283d44OBJECT<unknown>DEFAULT13
                                                  __pthread_current_priority.symtab0x12144320FUNC<unknown>HIDDEN2
                                                  __pthread_initialize_minimal.symtab0x1d54812FUNC<unknown>DEFAULT2
                                                  __pthread_multiple_threads.symtab0x2c0584OBJECT<unknown>HIDDEN14
                                                  __pthread_mutex_init.symtab0x195fc8FUNC<unknown>DEFAULT2
                                                  __pthread_mutex_lock.symtab0x11200576FUNC<unknown>PROTECTED2
                                                  __pthread_mutex_lock_full.symtab0x10c4c1460FUNC<unknown>DEFAULT2
                                                  __pthread_mutex_lock_internal.symtab0x11200576FUNC<unknown>HIDDEN2
                                                  __pthread_mutex_trylock.symtab0x195f48FUNC<unknown>DEFAULT2
                                                  __pthread_mutex_unlock.symtab0x11a4c8FUNC<unknown>PROTECTED2
                                                  __pthread_mutex_unlock_full.symtab0x114401264FUNC<unknown>DEFAULT2
                                                  __pthread_mutex_unlock_internal.symtab0x11a4c8FUNC<unknown>HIDDEN2
                                                  __pthread_mutex_unlock_usercnt.symtab0x11930284FUNC<unknown>HIDDEN2
                                                  __pthread_return_0.symtab0x195f48FUNC<unknown>DEFAULT2
                                                  __pthread_tpp_change_priority.symtab0x122d0748FUNC<unknown>HIDDEN2
                                                  __pthread_unwind.symtab0x11a5484FUNC<unknown>DEFAULT2
                                                  __pthread_unwind_next.symtab0x11aa816FUNC<unknown>DEFAULT2
                                                  __read.symtab0x19420100FUNC<unknown>DEFAULT2
                                                  __read_nocancel.symtab0x1940424FUNC<unknown>DEFAULT2
                                                  __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                                                  __restore_core_regs.symtab0x133a028FUNC<unknown>HIDDEN2
                                                  __rtld_fini.symtab0x29abc4OBJECT<unknown>HIDDEN14
                                                  __sched_fifo_max_prio.symtab0x282d04OBJECT<unknown>HIDDEN13
                                                  __sched_fifo_min_prio.symtab0x282cc4OBJECT<unknown>HIDDEN13
                                                  __sigaction.symtab0x10be076FUNC<unknown>DEFAULT2
                                                  __sigaddset.symtab0x1674836FUNC<unknown>DEFAULT2
                                                  __sigdelset.symtab0x1676c36FUNC<unknown>DEFAULT2
                                                  __sigismember.symtab0x1672436FUNC<unknown>DEFAULT2
                                                  __sigjmp_save.symtab0x1dca464FUNC<unknown>HIDDEN2
                                                  __sigsetjmp.symtab0x1d63c12FUNC<unknown>DEFAULT2
                                                  __stdin.symtab0x283f04OBJECT<unknown>DEFAULT13
                                                  __stdio_READ.symtab0x1d97488FUNC<unknown>HIDDEN2
                                                  __stdio_WRITE.symtab0x1d9cc220FUNC<unknown>HIDDEN2
                                                  __stdio_adjust_position.symtab0x1daa8200FUNC<unknown>HIDDEN2
                                                  __stdio_fwrite.symtab0x1ae88320FUNC<unknown>HIDDEN2
                                                  __stdio_rfill.symtab0x1db7048FUNC<unknown>HIDDEN2
                                                  __stdio_seek.symtab0x1dc4460FUNC<unknown>HIDDEN2
                                                  __stdio_trans2r_o.symtab0x1dba0164FUNC<unknown>HIDDEN2
                                                  __stdio_trans2w_o.symtab0x1b1ac220FUNC<unknown>HIDDEN2
                                                  __stdio_wcommit.symtab0x1b28848FUNC<unknown>HIDDEN2
                                                  __stdout.symtab0x283f44OBJECT<unknown>DEFAULT13
                                                  __subdf3.symtab0x1dea0788FUNC<unknown>HIDDEN2
                                                  __sys_accept.symtab0x15fe468FUNC<unknown>DEFAULT2
                                                  __sys_connect.symtab0x160e068FUNC<unknown>DEFAULT2
                                                  __sys_recv.symtab0x1626468FUNC<unknown>DEFAULT2
                                                  __sys_recvfrom.symtab0x1631872FUNC<unknown>DEFAULT2
                                                  __sys_send.symtab0x163e868FUNC<unknown>DEFAULT2
                                                  __sys_sendto.symtab0x1649c76FUNC<unknown>DEFAULT2
                                                  __syscall_error.symtab0x19bc844FUNC<unknown>HIDDEN2
                                                  __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __syscall_nanosleep.symtab0x1407864FUNC<unknown>DEFAULT2
                                                  __syscall_rt_sigaction.symtab0x13e5c64FUNC<unknown>DEFAULT2
                                                  __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __syscall_select.symtab0x142fc68FUNC<unknown>DEFAULT2
                                                  __tls_get_addr.symtab0x1d2f436FUNC<unknown>DEFAULT2
                                                  __uClibc_fini.symtab0x19638124FUNC<unknown>DEFAULT2
                                                  __uClibc_init.symtab0x1970888FUNC<unknown>DEFAULT2
                                                  __uClibc_main.symtab0x197601004FUNC<unknown>DEFAULT2
                                                  __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __uclibc_progname.symtab0x283cc4OBJECT<unknown>HIDDEN13
                                                  __udivsi3.symtab0x125bc252FUNC<unknown>HIDDEN2
                                                  __write.symtab0x19390100FUNC<unknown>DEFAULT2
                                                  __write_nocancel.symtab0x1937424FUNC<unknown>DEFAULT2
                                                  __xpg_strerror_r.symtab0x15eb0268FUNC<unknown>DEFAULT2
                                                  __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  __xstat32_conv.symtab0x1a068172FUNC<unknown>HIDDEN2
                                                  __xstat64_conv.symtab0x19f9c204FUNC<unknown>HIDDEN2
                                                  _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _bss_custom_printf_spec.symtab0x2955010OBJECT<unknown>DEFAULT14
                                                  _bss_end__.symtab0x2c4600NOTYPE<unknown>DEFAULTSHN_ABS
                                                  _charpad.symtab0x14ae884FUNC<unknown>DEFAULT2
                                                  _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _custom_printf_arginfo.symtab0x2c05c40OBJECT<unknown>HIDDEN14
                                                  _custom_printf_handler.symtab0x2c08440OBJECT<unknown>HIDDEN14
                                                  _custom_printf_spec.symtab0x282d44OBJECT<unknown>HIDDEN13
                                                  _dl_aux_init.symtab0x1d55456FUNC<unknown>DEFAULT2
                                                  _dl_nothread_init_static_tls.symtab0x1d58c88FUNC<unknown>HIDDEN2
                                                  _dl_phdr.symtab0x2c4584OBJECT<unknown>DEFAULT14
                                                  _dl_phnum.symtab0x2c45c4OBJECT<unknown>DEFAULT14
                                                  _dl_tls_dtv_gaps.symtab0x2c44c1OBJECT<unknown>DEFAULT14
                                                  _dl_tls_dtv_slotinfo_list.symtab0x2c4484OBJECT<unknown>DEFAULT14
                                                  _dl_tls_generation.symtab0x2c4504OBJECT<unknown>DEFAULT14
                                                  _dl_tls_max_dtv_idx.symtab0x2c4404OBJECT<unknown>DEFAULT14
                                                  _dl_tls_setup.symtab0x1d28c104FUNC<unknown>DEFAULT2
                                                  _dl_tls_static_align.symtab0x2c43c4OBJECT<unknown>DEFAULT14
                                                  _dl_tls_static_nelem.symtab0x2c4544OBJECT<unknown>DEFAULT14
                                                  _dl_tls_static_size.symtab0x2c4444OBJECT<unknown>DEFAULT14
                                                  _dl_tls_static_used.symtab0x2c4384OBJECT<unknown>DEFAULT14
                                                  _edata.symtab0x284c80NOTYPE<unknown>DEFAULTSHN_ABS
                                                  _end.symtab0x2c4600NOTYPE<unknown>DEFAULTSHN_ABS
                                                  _exit.symtab0x19c10104FUNC<unknown>DEFAULT2
                                                  _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _fini.symtab0x1e8e40FUNC<unknown>DEFAULT3
                                                  _fixed_buffers.symtab0x29ae08192OBJECT<unknown>DEFAULT14
                                                  _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _fp_out_narrow.symtab0x14b3c132FUNC<unknown>DEFAULT2
                                                  _fpmaxtostr.symtab0x1b4b42036FUNC<unknown>HIDDEN2
                                                  _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _init.symtab0x80d40FUNC<unknown>DEFAULT1
                                                  _load_inttype.symtab0x1b2b8116FUNC<unknown>HIDDEN2
                                                  _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _longjmp.symtab0x1404056FUNC<unknown>DEFAULT2
                                                  _longjmp_unwind.symtab0x1920860FUNC<unknown>DEFAULT2
                                                  _memcpy.symtab0x1c7300FUNC<unknown>HIDDEN2
                                                  _ppfs_init.symtab0x152b4160FUNC<unknown>HIDDEN2
                                                  _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _ppfs_parsespec.symtab0x1559c1392FUNC<unknown>HIDDEN2
                                                  _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _ppfs_prepargs.symtab0x1535468FUNC<unknown>HIDDEN2
                                                  _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _ppfs_setargs.symtab0x15398432FUNC<unknown>HIDDEN2
                                                  _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _promoted_size.symtab0x1554884FUNC<unknown>DEFAULT2
                                                  _pthread_cleanup_pop_restore.symtab0x1960c44FUNC<unknown>DEFAULT2
                                                  _pthread_cleanup_push_defer.symtab0x196048FUNC<unknown>DEFAULT2
                                                  _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _setjmp.symtab0x19c088FUNC<unknown>DEFAULT2
                                                  _sigintr.symtab0x2c0ac8OBJECT<unknown>HIDDEN14
                                                  _start.symtab0x81940FUNC<unknown>DEFAULT2
                                                  _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _stdio_fopen.symtab0x1aa281120FUNC<unknown>HIDDEN2
                                                  _stdio_init.symtab0x1afc8128FUNC<unknown>HIDDEN2
                                                  _stdio_openlist.symtab0x283f84OBJECT<unknown>DEFAULT13
                                                  _stdio_openlist_add_lock.symtab0x29ac012OBJECT<unknown>DEFAULT14
                                                  _stdio_openlist_dec_use.symtab0x1bf08688FUNC<unknown>HIDDEN2
                                                  _stdio_openlist_del_count.symtab0x29adc4OBJECT<unknown>DEFAULT14
                                                  _stdio_openlist_del_lock.symtab0x29acc12OBJECT<unknown>DEFAULT14
                                                  _stdio_openlist_use_count.symtab0x29ad84OBJECT<unknown>DEFAULT14
                                                  _stdio_streams.symtab0x283fc204OBJECT<unknown>DEFAULT13
                                                  _stdio_term.symtab0x1b048356FUNC<unknown>HIDDEN2
                                                  _stdio_user_locking.symtab0x283e04OBJECT<unknown>DEFAULT13
                                                  _stdlib_strto_l.symtab0x182a8472FUNC<unknown>HIDDEN2
                                                  _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _store_inttype.symtab0x1b32c44FUNC<unknown>HIDDEN2
                                                  _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _strdup.symtab0xbe74132FUNC<unknown>DEFAULT2
                                                  _string_syserrmsgs.symtab0x1f1102906OBJECT<unknown>HIDDEN4
                                                  _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _uintmaxtostr.symtab0x1b358348FUNC<unknown>HIDDEN2
                                                  _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _vfprintf_internal.symtab0x14bc01780FUNC<unknown>HIDDEN2
                                                  _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  abort.symtab0x17b20296FUNC<unknown>DEFAULT2
                                                  abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                                                  accept.symtab0x16028116FUNC<unknown>DEFAULT2

                                                  Network Behavior

                                                  Network Port Distribution

                                                  TCP Packets

                                                  TimestampSource PortDest PortSource IPDest IP
                                                  Jan 4, 2025 09:32:25.604950905 CET4496413566192.168.2.23210.99.80.198
                                                  Jan 4, 2025 09:32:25.608043909 CET5914813566192.168.2.23210.99.190.137
                                                  Jan 4, 2025 09:32:25.609807014 CET1356644964210.99.80.198192.168.2.23
                                                  Jan 4, 2025 09:32:25.609880924 CET4496413566192.168.2.23210.99.80.198
                                                  Jan 4, 2025 09:32:25.611208916 CET5699413566192.168.2.23210.99.207.252
                                                  Jan 4, 2025 09:32:25.612838030 CET1356659148210.99.190.137192.168.2.23
                                                  Jan 4, 2025 09:32:25.612885952 CET5914813566192.168.2.23210.99.190.137
                                                  Jan 4, 2025 09:32:25.613517046 CET3485213566192.168.2.23210.99.13.194
                                                  Jan 4, 2025 09:32:25.616027117 CET1356656994210.99.207.252192.168.2.23
                                                  Jan 4, 2025 09:32:25.616080046 CET5699413566192.168.2.23210.99.207.252
                                                  Jan 4, 2025 09:32:25.616667986 CET4212413566192.168.2.23210.99.213.179
                                                  Jan 4, 2025 09:32:25.618340969 CET1356634852210.99.13.194192.168.2.23
                                                  Jan 4, 2025 09:32:25.618391037 CET3485213566192.168.2.23210.99.13.194
                                                  Jan 4, 2025 09:32:25.620063066 CET6057613566192.168.2.23210.99.96.79
                                                  Jan 4, 2025 09:32:25.621402979 CET1356642124210.99.213.179192.168.2.23
                                                  Jan 4, 2025 09:32:25.621443987 CET4212413566192.168.2.23210.99.213.179
                                                  Jan 4, 2025 09:32:25.622737885 CET4173613566192.168.2.23210.99.91.108
                                                  Jan 4, 2025 09:32:25.624862909 CET1356660576210.99.96.79192.168.2.23
                                                  Jan 4, 2025 09:32:25.624912977 CET6057613566192.168.2.23210.99.96.79
                                                  Jan 4, 2025 09:32:25.625140905 CET3300013566192.168.2.23210.99.140.243
                                                  Jan 4, 2025 09:32:25.627496958 CET1356641736210.99.91.108192.168.2.23
                                                  Jan 4, 2025 09:32:25.627532959 CET4173613566192.168.2.23210.99.91.108
                                                  Jan 4, 2025 09:32:25.627809048 CET3527613566192.168.2.23210.99.94.8
                                                  Jan 4, 2025 09:32:25.629909039 CET1356633000210.99.140.243192.168.2.23
                                                  Jan 4, 2025 09:32:25.629951954 CET3300013566192.168.2.23210.99.140.243
                                                  Jan 4, 2025 09:32:25.630085945 CET4925413566192.168.2.23210.99.92.232
                                                  Jan 4, 2025 09:32:25.632601976 CET1356635276210.99.94.8192.168.2.23
                                                  Jan 4, 2025 09:32:25.632646084 CET3527613566192.168.2.23210.99.94.8
                                                  Jan 4, 2025 09:32:25.632838011 CET4825213566192.168.2.23210.99.178.105
                                                  Jan 4, 2025 09:32:25.634896040 CET1356649254210.99.92.232192.168.2.23
                                                  Jan 4, 2025 09:32:25.634969950 CET4925413566192.168.2.23210.99.92.232
                                                  Jan 4, 2025 09:32:25.635241032 CET4237013566192.168.2.23210.99.139.98
                                                  Jan 4, 2025 09:32:25.637634993 CET1356648252210.99.178.105192.168.2.23
                                                  Jan 4, 2025 09:32:25.637680054 CET4825213566192.168.2.23210.99.178.105
                                                  Jan 4, 2025 09:32:25.637872934 CET5431813566192.168.2.23210.99.202.89
                                                  Jan 4, 2025 09:32:25.640022993 CET1356642370210.99.139.98192.168.2.23
                                                  Jan 4, 2025 09:32:25.640064955 CET4237013566192.168.2.23210.99.139.98
                                                  Jan 4, 2025 09:32:25.640175104 CET4333013566192.168.2.23210.99.94.215
                                                  Jan 4, 2025 09:32:25.642692089 CET1356654318210.99.202.89192.168.2.23
                                                  Jan 4, 2025 09:32:25.642734051 CET5431813566192.168.2.23210.99.202.89
                                                  Jan 4, 2025 09:32:25.644933939 CET1356643330210.99.94.215192.168.2.23
                                                  Jan 4, 2025 09:32:25.644973993 CET4333013566192.168.2.23210.99.94.215
                                                  Jan 4, 2025 09:32:25.699954033 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:32:25.704732895 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:32:25.704798937 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:32:25.707606077 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:32:25.712398052 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:32:25.712444067 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:32:25.717272997 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:32:27.199203968 CET43928443192.168.2.2391.189.91.42
                                                  Jan 4, 2025 09:32:32.574331999 CET42836443192.168.2.2391.189.91.43
                                                  Jan 4, 2025 09:32:34.110122919 CET4251680192.168.2.23109.202.202.202
                                                  Jan 4, 2025 09:32:35.714023113 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:32:35.718977928 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:32:35.919390917 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:32:35.919454098 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:32:36.294646025 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:32:36.294723034 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:32:48.956060886 CET43928443192.168.2.2391.189.91.42
                                                  Jan 4, 2025 09:32:59.194781065 CET42836443192.168.2.2391.189.91.43
                                                  Jan 4, 2025 09:33:05.337922096 CET4251680192.168.2.23109.202.202.202
                                                  Jan 4, 2025 09:33:29.910454988 CET43928443192.168.2.2391.189.91.42
                                                  Jan 4, 2025 09:33:36.335722923 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:33:36.510808945 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:33:36.710771084 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:33:36.710865974 CET4257213566192.168.2.2383.222.191.90
                                                  Jan 4, 2025 09:33:37.294858932 CET135664257283.222.191.90192.168.2.23
                                                  Jan 4, 2025 09:33:37.295011044 CET4257213566192.168.2.2383.222.191.90

                                                  UDP Packets

                                                  TimestampSource PortDest PortSource IPDest IP
                                                  Jan 4, 2025 09:32:25.652472973 CET5674653192.168.2.238.8.8.8
                                                  Jan 4, 2025 09:32:25.659789085 CET53567468.8.8.8192.168.2.23
                                                  Jan 4, 2025 09:32:25.662827969 CET3922853192.168.2.238.8.8.8
                                                  Jan 4, 2025 09:32:25.670032024 CET53392288.8.8.8192.168.2.23
                                                  Jan 4, 2025 09:32:25.672427893 CET3864153192.168.2.238.8.8.8
                                                  Jan 4, 2025 09:32:25.679330111 CET53386418.8.8.8192.168.2.23
                                                  Jan 4, 2025 09:32:25.682092905 CET3899153192.168.2.238.8.8.8
                                                  Jan 4, 2025 09:32:25.689250946 CET53389918.8.8.8192.168.2.23
                                                  Jan 4, 2025 09:32:25.691864014 CET5605253192.168.2.238.8.8.8
                                                  Jan 4, 2025 09:32:25.698942900 CET53560528.8.8.8192.168.2.23

                                                  DNS Queries

                                                  TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                  Jan 4, 2025 09:32:25.652472973 CET192.168.2.238.8.8.80x9e4fStandard query (0)secure-network-rebirthltd.ruA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.662827969 CET192.168.2.238.8.8.80x9e4fStandard query (0)secure-network-rebirthltd.ruA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.672427893 CET192.168.2.238.8.8.80x9e4fStandard query (0)secure-network-rebirthltd.ruA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.682092905 CET192.168.2.238.8.8.80x9e4fStandard query (0)secure-network-rebirthltd.ruA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.691864014 CET192.168.2.238.8.8.80x9e4fStandard query (0)secure-network-rebirthltd.ruA (IP address)IN (0x0001)false

                                                  DNS Answers

                                                  TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                  Jan 4, 2025 09:32:25.659789085 CET8.8.8.8192.168.2.230x9e4fName error (3)secure-network-rebirthltd.runonenoneA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.670032024 CET8.8.8.8192.168.2.230x9e4fName error (3)secure-network-rebirthltd.runonenoneA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.679330111 CET8.8.8.8192.168.2.230x9e4fName error (3)secure-network-rebirthltd.runonenoneA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.689250946 CET8.8.8.8192.168.2.230x9e4fName error (3)secure-network-rebirthltd.runonenoneA (IP address)IN (0x0001)false
                                                  Jan 4, 2025 09:32:25.698942900 CET8.8.8.8192.168.2.230x9e4fName error (3)secure-network-rebirthltd.runonenoneA (IP address)IN (0x0001)false

                                                  System Behavior

                                                  General

                                                  Start time (UTC):08:32:23
                                                  Start date (UTC):04/01/2025
                                                  Path:/tmp/Kloki.arm7.elf
                                                  Arguments:/tmp/Kloki.arm7.elf
                                                  File size:4956856 bytes
                                                  MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                  Chronological Activities


                                                  General

                                                  Start time (UTC):08:32:24
                                                  Start date (UTC):04/01/2025
                                                  Path:/tmp/Kloki.arm7.elf
                                                  Arguments:-
                                                  File size:4956856 bytes
                                                  MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                  Chronological Activities


                                                  General

                                                  Start time (UTC):08:32:24
                                                  Start date (UTC):04/01/2025
                                                  Path:/tmp/Kloki.arm7.elf
                                                  Arguments:-
                                                  File size:4956856 bytes
                                                  MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                  Chronological Activities


                                                  General

                                                  Start time (UTC):08:32:25
                                                  Start date (UTC):04/01/2025
                                                  Path:/tmp/Kloki.arm7.elf
                                                  Arguments:-
                                                  File size:4956856 bytes
                                                  MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                  Chronological Activities


                                                  General

                                                  Start time (UTC):08:32:25
                                                  Start date (UTC):04/01/2025
                                                  Path:/tmp/Kloki.arm7.elf
                                                  Arguments:-
                                                  File size:4956856 bytes
                                                  MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                                                  Chronological Activities