Joe Sandbox Cloud Basic Analysis Report
Create Interactive Tour

Linux Analysis Report
Kloki.arm7.elf

Overview

General Information

Sample name:Kloki.arm7.elf
Analysis ID:1594473
MD5:dd9474810886453fbe32c5b8c47654d4
SHA1:037a0f04d37d757552beb41865cc70b1b27f8c1c
SHA256:f9d20ac6ca870e6ed03705e064dc92fcd683dd1395faf4441100529f68095662
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:72
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Contains symbols with names commonly found in malware
Sample tries to kill multiple processes (SIGKILL)
Detected TCP or UDP traffic on non-standard ports
Found strings indicative of a multi-platform dropper
Sample and/or dropped files contains symbols with suspicious names
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Suricata IDS alerts with low severity for network traffic
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1594473
Start date and time:2025-01-19 02:52:06 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 48s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:Kloki.arm7.elf
Detection:MAL
Classification:mal72.spre.troj.linELF@0/0@1/0

Runtime Messages

Command:/tmp/Kloki.arm7.elf
PID:6269
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
suka
Standard Error:

Process Tree

  • system is lnxubuntu20
  • sh (PID: 6297, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
  • gnome-shell (PID: 6297, Parent: 1477, MD5: da7a257239677622fe4b3a65972c9e87) Arguments: /usr/bin/gnome-shell
  • sh (PID: 6299, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-print-notifications
  • sh (PID: 6302, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
  • gdm3 New Fork (PID: 6303, Parent: 1320)
  • Default (PID: 6303, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default
  • gdm3 New Fork (PID: 6307, Parent: 1320)
  • Default (PID: 6307, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
Kloki.arm7.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security

    Suricata Signatures

    TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
    2025-01-19T02:53:01.195443+010025000342Misc Attack83.222.191.9013566192.168.2.2342752TCP

    Joe Sandbox Signatures

    • • AV Detection
    • • Spreading
    • • Networking
    • • System Summary
    • • Malware Analysis System Evasion
    • • Stealing of Sensitive Information
    • • Remote Access Functionality

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Source: Kloki.arm7.elfAvira: detected
    Source: Kloki.arm7.elfVirustotal: Detection: 30%Perma Link
    Source: Kloki.arm7.elfReversingLabs: Detection: 39%
    Source: Kloki.arm7.elfString: ppid/proc/net/tcp/proc/self/exe/proc//status/fd//dev/null/dev/consolesocket05/proc/%d/exepkillkillkillallechowgetcurlpsbusyboxiptablesrebootshutdownhaltpoweroffinitsystemctltelinitcatgrepshashbashzshcshkshdashfish
    Source: global trafficTCP traffic: 192.168.2.23:46362 -> 83.222.170.166:13566
    Source: global trafficTCP traffic: 192.168.2.23:33756 -> 83.222.3.229:13566
    Source: global trafficTCP traffic: 192.168.2.23:48042 -> 83.222.25.76:13566
    Source: global trafficTCP traffic: 192.168.2.23:32812 -> 83.222.86.72:13566
    Source: global trafficTCP traffic: 192.168.2.23:54326 -> 83.222.26.78:13566
    Source: global trafficTCP traffic: 192.168.2.23:59486 -> 83.222.173.82:13566
    Source: global trafficTCP traffic: 192.168.2.23:54816 -> 83.222.222.50:13566
    Source: global trafficTCP traffic: 192.168.2.23:34812 -> 83.222.231.172:13566
    Source: global trafficTCP traffic: 192.168.2.23:49020 -> 83.222.243.186:13566
    Source: global trafficTCP traffic: 192.168.2.23:35116 -> 83.222.44.224:13566
    Source: global trafficTCP traffic: 192.168.2.23:33996 -> 83.222.219.40:13566
    Source: global trafficTCP traffic: 192.168.2.23:47968 -> 83.222.0.78:13566
    Source: global trafficTCP traffic: 192.168.2.23:51894 -> 83.222.202.246:13566
    Source: global trafficTCP traffic: 192.168.2.23:38840 -> 83.222.82.217:13566
    Source: global trafficTCP traffic: 192.168.2.23:55968 -> 83.222.174.228:13566
    Source: global trafficTCP traffic: 192.168.2.23:45872 -> 83.222.66.88:13566
    Source: global trafficTCP traffic: 192.168.2.23:44506 -> 83.222.138.69:13566
    Source: global trafficTCP traffic: 192.168.2.23:42942 -> 83.222.61.164:13566
    Source: global trafficTCP traffic: 192.168.2.23:55774 -> 83.222.145.148:13566
    Source: global trafficTCP traffic: 192.168.2.23:44924 -> 83.222.236.171:13566
    Source: global trafficTCP traffic: 192.168.2.23:56046 -> 83.222.226.153:13566
    Source: global trafficTCP traffic: 192.168.2.23:33980 -> 83.222.253.193:13566
    Source: global trafficTCP traffic: 192.168.2.23:40472 -> 83.222.203.228:13566
    Source: global trafficTCP traffic: 192.168.2.23:37412 -> 83.222.109.190:13566
    Source: global trafficTCP traffic: 192.168.2.23:35728 -> 83.222.158.153:13566
    Source: global trafficTCP traffic: 192.168.2.23:37424 -> 83.222.159.121:13566
    Source: global trafficTCP traffic: 192.168.2.23:57518 -> 83.222.194.159:13566
    Source: global trafficTCP traffic: 192.168.2.23:39046 -> 83.222.199.140:13566
    Source: global trafficTCP traffic: 192.168.2.23:48396 -> 83.222.149.26:13566
    Source: global trafficTCP traffic: 192.168.2.23:38662 -> 83.222.101.68:13566
    Source: global trafficTCP traffic: 192.168.2.23:57344 -> 83.222.254.167:13566
    Source: global trafficTCP traffic: 192.168.2.23:42368 -> 83.222.156.137:13566
    Source: global trafficTCP traffic: 192.168.2.23:53226 -> 83.222.236.218:13566
    Source: global trafficTCP traffic: 192.168.2.23:38768 -> 83.222.45.125:13566
    Source: global trafficTCP traffic: 192.168.2.23:35548 -> 83.222.110.25:13566
    Source: global trafficTCP traffic: 192.168.2.23:51614 -> 83.222.40.80:13566
    Source: global trafficTCP traffic: 192.168.2.23:41160 -> 83.222.178.38:13566
    Source: global trafficTCP traffic: 192.168.2.23:37754 -> 83.222.17.125:13566
    Source: global trafficTCP traffic: 192.168.2.23:56536 -> 83.222.10.127:13566
    Source: global trafficTCP traffic: 192.168.2.23:37560 -> 83.222.60.169:13566
    Source: global trafficTCP traffic: 192.168.2.23:60970 -> 83.222.24.219:13566
    Source: global trafficTCP traffic: 192.168.2.23:45658 -> 83.222.34.218:13566
    Source: global trafficTCP traffic: 192.168.2.23:41090 -> 83.222.122.234:13566
    Source: global trafficTCP traffic: 192.168.2.23:54942 -> 83.222.103.15:13566
    Source: global trafficTCP traffic: 192.168.2.23:46478 -> 83.222.4.204:13566
    Source: global trafficTCP traffic: 192.168.2.23:36050 -> 83.222.83.2:13566
    Source: global trafficTCP traffic: 192.168.2.23:55858 -> 83.222.116.240:13566
    Source: global trafficTCP traffic: 192.168.2.23:35630 -> 83.222.139.96:13566
    Source: global trafficTCP traffic: 192.168.2.23:54928 -> 83.222.202.184:13566
    Source: global trafficTCP traffic: 192.168.2.23:36224 -> 83.222.222.56:13566
    Source: global trafficTCP traffic: 192.168.2.23:51492 -> 83.222.209.6:13566
    Source: global trafficTCP traffic: 192.168.2.23:39026 -> 83.222.136.131:13566
    Source: global trafficTCP traffic: 192.168.2.23:52062 -> 83.222.44.154:13566
    Source: global trafficTCP traffic: 192.168.2.23:49470 -> 83.222.1.55:13566
    Source: global trafficTCP traffic: 192.168.2.23:50858 -> 83.222.25.61:13566
    Source: global trafficTCP traffic: 192.168.2.23:54720 -> 83.222.224.49:13566
    Source: global trafficTCP traffic: 192.168.2.23:49598 -> 83.222.24.2:13566
    Source: global trafficTCP traffic: 192.168.2.23:42024 -> 83.222.12.146:13566
    Source: global trafficTCP traffic: 192.168.2.23:39448 -> 83.222.236.115:13566
    Source: global trafficTCP traffic: 192.168.2.23:56094 -> 83.222.161.240:13566
    Source: global trafficTCP traffic: 192.168.2.23:55516 -> 83.222.63.245:13566
    Source: global trafficTCP traffic: 192.168.2.23:59668 -> 83.222.243.179:13566
    Source: global trafficTCP traffic: 192.168.2.23:40340 -> 83.222.229.126:13566
    Source: global trafficTCP traffic: 192.168.2.23:49940 -> 83.222.20.175:13566
    Source: global trafficTCP traffic: 192.168.2.23:44658 -> 83.222.55.242:13566
    Source: global trafficTCP traffic: 192.168.2.23:36570 -> 83.222.231.8:13566
    Source: global trafficTCP traffic: 192.168.2.23:58506 -> 83.222.248.111:13566
    Source: global trafficTCP traffic: 192.168.2.23:49746 -> 83.222.140.37:13566
    Source: global trafficTCP traffic: 192.168.2.23:37130 -> 83.222.9.141:13566
    Source: global trafficTCP traffic: 192.168.2.23:59636 -> 83.222.92.34:13566
    Source: global trafficTCP traffic: 192.168.2.23:45320 -> 83.222.202.60:13566
    Source: global trafficTCP traffic: 192.168.2.23:40024 -> 83.222.84.226:13566
    Source: global trafficTCP traffic: 192.168.2.23:51258 -> 83.222.62.96:13566
    Source: global trafficTCP traffic: 192.168.2.23:58158 -> 83.222.116.43:13566
    Source: global trafficTCP traffic: 192.168.2.23:48922 -> 83.222.211.21:13566
    Source: global trafficTCP traffic: 192.168.2.23:50346 -> 83.222.27.18:13566
    Source: global trafficTCP traffic: 192.168.2.23:51774 -> 83.222.10.14:13566
    Source: global trafficTCP traffic: 192.168.2.23:50444 -> 83.222.198.239:13566
    Source: global trafficTCP traffic: 192.168.2.23:49512 -> 83.222.141.218:13566
    Source: global trafficTCP traffic: 192.168.2.23:38284 -> 83.222.158.196:13566
    Source: global trafficTCP traffic: 192.168.2.23:43974 -> 83.222.204.133:13566
    Source: global trafficTCP traffic: 192.168.2.23:42760 -> 83.222.204.196:13566
    Source: global trafficTCP traffic: 192.168.2.23:51500 -> 83.222.245.88:13566
    Source: global trafficTCP traffic: 192.168.2.23:39208 -> 83.222.233.254:13566
    Source: global trafficTCP traffic: 192.168.2.23:48972 -> 83.222.229.69:13566
    Source: global trafficTCP traffic: 192.168.2.23:40448 -> 83.222.33.175:13566
    Source: global trafficTCP traffic: 192.168.2.23:43172 -> 83.222.129.117:13566
    Source: global trafficTCP traffic: 192.168.2.23:55572 -> 83.222.145.192:13566
    Source: global trafficTCP traffic: 192.168.2.23:33514 -> 83.222.213.5:13566
    Source: global trafficTCP traffic: 192.168.2.23:34184 -> 83.222.235.168:13566
    Source: global trafficTCP traffic: 192.168.2.23:35216 -> 83.222.27.6:13566
    Source: global trafficTCP traffic: 192.168.2.23:47496 -> 83.222.186.37:13566
    Source: global trafficTCP traffic: 192.168.2.23:46698 -> 83.222.21.128:13566
    Source: global trafficTCP traffic: 192.168.2.23:34118 -> 83.222.21.162:13566
    Source: global trafficTCP traffic: 192.168.2.23:53040 -> 83.222.90.179:13566
    Source: global trafficTCP traffic: 192.168.2.23:57978 -> 83.222.102.38:13566
    Source: global trafficTCP traffic: 192.168.2.23:33312 -> 83.222.57.50:13566
    Source: global trafficTCP traffic: 192.168.2.23:44040 -> 83.222.235.46:13566
    Source: global trafficTCP traffic: 192.168.2.23:49156 -> 83.222.139.212:13566
    Source: global trafficTCP traffic: 192.168.2.23:44672 -> 83.222.44.112:13566
    Source: global trafficTCP traffic: 192.168.2.23:56324 -> 83.222.26.77:13566
    Source: global trafficTCP traffic: 192.168.2.23:42626 -> 83.222.32.155:13566
    Source: global trafficTCP traffic: 192.168.2.23:59888 -> 83.222.194.177:13566
    Source: global trafficTCP traffic: 192.168.2.23:51096 -> 83.222.91.151:13566
    Source: global trafficTCP traffic: 192.168.2.23:59796 -> 83.222.183.70:13566
    Source: global trafficTCP traffic: 192.168.2.23:42752 -> 83.222.191.90:13566
    Source: /tmp/Kloki.arm7.elf (PID: 6269)Socket: 127.0.0.1:14435Jump to behavior
    Source: Network trafficSuricata IDS: 2500034 - Severity 2 - ET COMPROMISED Known Compromised or Hostile Host Traffic group 18 : 83.222.191.90:13566 -> 192.168.2.23:42752
    Source: global trafficTCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
    Source: global trafficTCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
    Source: global trafficTCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.170.166
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.170.166
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.170.166
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.3.229
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.170.166
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.3.229
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.25.76
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.25.76
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.25.76
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.86.72
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.25.76
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.26.78
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.86.72
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.26.78
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.26.78
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.173.82
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.26.78
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.222.50
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.173.82
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.231.172
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.222.50
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.243.186
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.231.172
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.243.186
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.44.224
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.219.40
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.44.224
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.0.78
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.219.40
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.202.246
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.0.78
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.202.246
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.82.217
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.174.228
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.82.217
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.66.88
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.174.228
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.66.88
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.138.69
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.61.164
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.138.69
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.61.164
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.145.148
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.145.148
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.236.171
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.236.171
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.226.153
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.226.153
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.226.153
    Source: unknownTCP traffic detected without corresponding DNS query: 83.222.253.193
    Source: global trafficDNS traffic detected: DNS query: secure-network-rebirthltd.ru
    Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443

    System Summary

    barindex
    Source: ELF static info symbol of initial sampleName: attack.c
    Source: ELF static info symbol of initial sampleName: attack_get_opt_int
    Source: ELF static info symbol of initial sampleName: attack_get_opt_ip
    Source: ELF static info symbol of initial sampleName: attack_gre.c
    Source: ELF static info symbol of initial sampleName: attack_gre_eth
    Source: ELF static info symbol of initial sampleName: attack_gre_ip
    Source: ELF static info symbol of initial sampleName: attack_init
    Source: ELF static info symbol of initial sampleName: attack_kill_all
    Source: ELF static info symbol of initial sampleName: attack_ongoing
    Source: ELF static info symbol of initial sampleName: attack_parse
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 904, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 912, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 918, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 936, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1532, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1622, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1633, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1638, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1983, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 2146, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 2302, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6250, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6295, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6297, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6299, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6302, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6307, result: successfulJump to behavior
    Source: Kloki.arm7.elfELF static info symbol of initial sample: __gnu_unwind_execute
    Source: Initial sampleString containing 'busybox' found: busybox
    Source: Initial sampleString containing 'busybox' found: ppid/proc/net/tcp/proc/self/exe/proc//status/fd//dev/null/dev/consolesocket05/proc/%d/exepkillkillkillallechowgetcurlpsbusyboxiptablesrebootshutdownhaltpoweroffinitsystemctltelinitcatgrepshashbashzshcshkshdashfish
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 904, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 912, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 918, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 936, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1532, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1622, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1633, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1638, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 1983, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 2146, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 2302, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6250, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6295, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6297, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6299, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6302, result: successfulJump to behavior
    Source: /tmp/Kloki.arm7.elf (PID: 6275)SIGKILL sent: pid: 6307, result: successfulJump to behavior
    Source: classification engineClassification label: mal72.spre.troj.linELF@0/0@1/0
    Source: /tmp/Kloki.arm7.elf (PID: 6269)Queries kernel information via 'uname': Jump to behavior
    Source: Kloki.arm7.elf, 6269.1.000055b3c32ec000.000055b3c3442000.rw-.sdmp, Kloki.arm7.elf, 6271.1.000055b3c32ec000.000055b3c341a000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
    Source: Kloki.arm7.elf, 6269.1.00007fff6815d000.00007fff6817e000.rw-.sdmp, Kloki.arm7.elf, 6271.1.00007fff6815d000.00007fff6817e000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/Kloki.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Kloki.arm7.elf
    Source: Kloki.arm7.elf, 6269.1.000055b3c32ec000.000055b3c3442000.rw-.sdmp, Kloki.arm7.elf, 6271.1.000055b3c32ec000.000055b3c341a000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
    Source: Kloki.arm7.elf, 6269.1.00007fff6815d000.00007fff6817e000.rw-.sdmp, Kloki.arm7.elf, 6271.1.00007fff6815d000.00007fff6817e000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

    Stealing of Sensitive Information

    barindex
    Source: Yara matchFile source: Kloki.arm7.elf, type: SAMPLE

    Remote Access Functionality

    barindex
    Source: Yara matchFile source: Kloki.arm7.elf, type: SAMPLE

    Mitre Att&ck Matrix

    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
    Gather Victim Identity Information1
    Scripting    		Valid AccountsWindows Management Instrumentation1
    Scripting    		Path Interception1
    Masquerading    		OS Credential Dumping11
    Security Software Discovery    		Remote ServicesData from Local System1
    Encrypted Channel    		Exfiltration Over Other Network Medium1
    Service Stop
    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
    Non-Standard Port    		Exfiltration Over BluetoothNetwork Denial of Service
    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
    Non-Application Layer Protocol    		Automated ExfiltrationData Encrypted for Impact
    Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture2
    Application Layer Protocol    		Traffic DuplicationData Destruction

    Malware Configuration

    ⊘No configs have been found

    Behavior Graph

    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Number of created Files
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1594473 Sample: Kloki.arm7.elf Startdate: 19/01/2025 Architecture: LINUX Score: 72 23 83.222.194.159, 13566, 57518 SYNTERRA-ASRU Russian Federation 2->23 25 83.222.194.177, 13566, 59888 SYNTERRA-ASRU Russian Federation 2->25 27 98 other IPs or domains 2->27 29 Antivirus / Scanner detection for submitted sample 2->29 31 Multi AV Scanner detection for submitted file 2->31 33 Yara detected Mirai 2->33 35 Contains symbols with names commonly found in malware 2->35 8 Kloki.arm7.elf 2->8         started        10 gnome-session-binary sh gnome-shell 2->10         started        12 gnome-session-binary sh 2->12         started        14 4 other processes 2->14 signatures3 process4 process5 16 Kloki.arm7.elf 8->16         started        18 Kloki.arm7.elf 8->18         started        process6 20 Kloki.arm7.elf 16->20         started        signatures7 37 Sample tries to kill multiple processes (SIGKILL) 20->37

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    Kloki.arm7.elf30%VirustotalBrowse
    Kloki.arm7.elf39%ReversingLabsLinux.Backdoor.Mirai
    Kloki.arm7.elf100%AviraEXP/ELF.Mirai.W

    Dropped Files

    ⊘No Antivirus matches

    Domains

    ⊘No Antivirus matches

    URLs

    ⊘No Antivirus matches

    Domains and IPs

    Download Network PCAP: filtered – full

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    secure-network-rebirthltd.ru
    		83.222.191.90
    		truefalse
      		high

      World Map of Contacted IPs

      • No. of IPs < 25%
      • 25% < No. of IPs < 50%
      • 50% < No. of IPs < 75%
      • 75% < No. of IPs

      Public IPs

      IPDomainCountryFlagASNASN NameMalicious
      83.222.101.68
      		unknownRussian Federation
      		42632MNOGOBYTE-ASMoscowRussiaRUfalse
      83.222.102.38
      		unknownRussian Federation
      		42632MNOGOBYTE-ASMoscowRussiaRUfalse
      83.222.24.219
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.27.6
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.27.18
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.86.72
      		unknownRussian Federation
      		16285ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRUfalse
      83.222.235.168
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.219.40
      		unknownRussian Federation
      		25159SONICDUO-ASRUfalse
      83.222.129.117
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.138.69
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.44.112
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.140.37
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.186.37
      		unknownBulgaria
      		43561NET1-ASBGfalse
      83.222.10.14
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.170.166
      		unknownBulgaria
      		49040KIG-UNISAT-TVBGfalse
      83.222.21.128
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.40.80
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.141.218
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.161.240
      		unknownBulgaria
      		12615GCN-ASGCNAD-SofiaBulgariaBGfalse
      83.222.62.96
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      91.189.91.43
      		unknownUnited Kingdom
      		41231CANONICAL-ASGBfalse
      91.189.91.42
      		unknownUnited Kingdom
      		41231CANONICAL-ASGBfalse
      83.222.103.15
      		unknownRussian Federation
      		42632MNOGOBYTE-ASMoscowRussiaRUfalse
      83.222.236.115
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.213.5
      		unknownRussian Federation
      		25159SONICDUO-ASRUfalse
      83.222.194.177
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.198.239
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.20.175
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.145.192
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.222.56
      		unknownRussian Federation
      		25159SONICDUO-ASRUfalse
      83.222.34.218
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.44.224
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.109.190
      		unknownRussian Federation
      		42632MNOGOBYTE-ASMoscowRussiaRUfalse
      83.222.222.50
      		unknownRussian Federation
      		25159SONICDUO-ASRUfalse
      83.222.116.43
      		unknownRussian Federation
      		42632MNOGOBYTE-ASMoscowRussiaRUfalse
      83.222.233.254
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.229.69
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.91.151
      		unknownRussian Federation
      		16285ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRUfalse
      83.222.158.196
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.57.50
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.24.2
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.199.140
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.25.61
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.224.49
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.253.193
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.202.184
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.1.55
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.204.196
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.17.125
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.174.228
      		unknownBulgaria
      		12615GCN-ASGCNAD-SofiaBulgariaBGfalse
      83.222.231.172
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.45.125
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.191.90
      		secure-network-rebirthltd.ruBulgaria
      		43561NET1-ASBGfalse
      83.222.61.164
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.236.171
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.211.21
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.156.137
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.25.76
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.236.218
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.92.34
      		unknownRussian Federation
      		16285ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRUfalse
      83.222.21.162
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.235.46
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.226.153
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.4.204
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.44.154
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.183.70
      		unknownBulgaria
      		12615GCN-ASGCNAD-SofiaBulgariaBGfalse
      83.222.245.88
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.55.242
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.204.133
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.202.246
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.254.167
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.178.38
      		unknownBulgaria
      		12615GCN-ASGCNAD-SofiaBulgariaBGfalse
      83.222.145.148
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.82.217
      		unknownRussian Federation
      		16285ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRUfalse
      83.222.110.25
      		unknownRussian Federation
      		42632MNOGOBYTE-ASMoscowRussiaRUfalse
      83.222.9.141
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.33.175
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.229.126
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.0.78
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.10.127
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.243.186
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.66.88
      		unknownRussian Federation
      		16285ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRUfalse
      83.222.136.131
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.202.60
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.149.26
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.32.155
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.158.153
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.209.6
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse
      83.222.83.2
      		unknownRussian Federation
      		16285ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRUfalse
      83.222.248.111
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.139.96
      		unknownSwitzerland
      		31736SENSELAN-ASsenseLANGmbHCHfalse
      83.222.26.78
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.60.169
      		unknownLuxembourg
      		8632LOL-ASluLUfalse
      83.222.12.146
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.26.77
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.3.229
      		unknownRussian Federation
      		25532MASTERHOST-ASMoscowRussiaRUfalse
      83.222.243.179
      		unknownUnited Kingdom
      		13768COGECO-PEER1CAfalse
      83.222.84.226
      		unknownRussian Federation
      		16285ASN-UMNTechnicheskayaStr18bYekaterinburgRussiaRUfalse
      109.202.202.202
      		unknownSwitzerland
      		13030INIT7CHfalse
      83.222.194.159
      		unknownRussian Federation
      		6854SYNTERRA-ASRUfalse

      Joe Sandbox View / Context

      IPs

      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
      83.222.27.18Kloki.x86.elfGet hashmaliciousUnknownBrowse
        83.222.86.72dbg.x86.elfGet hashmaliciousUnknownBrowse
          91.189.91.43arm7.elfGet hashmaliciousUnknownBrowse
            ppc.elfGet hashmaliciousUnknownBrowse
              arm.elfGet hashmaliciousUnknownBrowse
                mips.elfGet hashmaliciousUnknownBrowse
                  arm6.elfGet hashmaliciousUnknownBrowse
                    na.elfGet hashmaliciousPrometeiBrowse
                      na.elfGet hashmaliciousPrometeiBrowse
                        bin.sh.elfGet hashmaliciousMiraiBrowse
                          sshd.elfGet hashmaliciousUnknownBrowse
                            na.elfGet hashmaliciousPrometeiBrowse

                              Domains

                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                              secure-network-rebirthltd.ruKloki.i686.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              loki.spc.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              loki.arm4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              loki.mpsl.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              loki.m68k.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              loki.arm5.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              loki.mips.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              Kloki.i486.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              loki.x86_64.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90
                              Kloki.sh4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.191.90

                              ASNs

                              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                              MASTERHOST-ASMoscowRussiaRUKloki.i686.elfGet hashmaliciousUnknownBrowse
                              • 83.222.17.31
                              loki.spc.elfGet hashmaliciousUnknownBrowse
                              • 83.222.22.234
                              loki.arm4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.3.82
                              loki.mpsl.elfGet hashmaliciousUnknownBrowse
                              • 83.222.3.82
                              loki.m68k.elfGet hashmaliciousUnknownBrowse
                              • 83.222.20.187
                              loki.arm5.elfGet hashmaliciousUnknownBrowse
                              • 83.222.29.119
                              loki.mips.elfGet hashmaliciousUnknownBrowse
                              • 83.222.10.102
                              Kloki.i486.elfGet hashmaliciousUnknownBrowse
                              • 83.222.25.216
                              loki.x86_64.elfGet hashmaliciousUnknownBrowse
                              • 83.222.22.35
                              Kloki.sh4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.27.127
                              MNOGOBYTE-ASMoscowRussiaRUKloki.i686.elfGet hashmaliciousUnknownBrowse
                              • 83.222.109.253
                              loki.spc.elfGet hashmaliciousUnknownBrowse
                              • 83.222.112.175
                              loki.arm4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.122.108
                              loki.mpsl.elfGet hashmaliciousUnknownBrowse
                              • 83.222.122.108
                              loki.m68k.elfGet hashmaliciousUnknownBrowse
                              • 83.222.102.216
                              loki.arm5.elfGet hashmaliciousUnknownBrowse
                              • 83.222.101.249
                              loki.mips.elfGet hashmaliciousUnknownBrowse
                              • 83.222.110.103
                              Kloki.i486.elfGet hashmaliciousUnknownBrowse
                              • 83.222.115.11
                              loki.x86_64.elfGet hashmaliciousUnknownBrowse
                              • 83.222.108.131
                              Kloki.sh4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.112.133
                              MNOGOBYTE-ASMoscowRussiaRUKloki.i686.elfGet hashmaliciousUnknownBrowse
                              • 83.222.109.253
                              loki.spc.elfGet hashmaliciousUnknownBrowse
                              • 83.222.112.175
                              loki.arm4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.122.108
                              loki.mpsl.elfGet hashmaliciousUnknownBrowse
                              • 83.222.122.108
                              loki.m68k.elfGet hashmaliciousUnknownBrowse
                              • 83.222.102.216
                              loki.arm5.elfGet hashmaliciousUnknownBrowse
                              • 83.222.101.249
                              loki.mips.elfGet hashmaliciousUnknownBrowse
                              • 83.222.110.103
                              Kloki.i486.elfGet hashmaliciousUnknownBrowse
                              • 83.222.115.11
                              loki.x86_64.elfGet hashmaliciousUnknownBrowse
                              • 83.222.108.131
                              Kloki.sh4.elfGet hashmaliciousUnknownBrowse
                              • 83.222.112.133

                              JA3 Fingerprints

                              ⊘No context

                              Dropped Files

                              ⊘No context

                              Created / dropped Files

                              ⊘No created / dropped files found

                              Static File Info

                              General

                              File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
                              Entropy (8bit):5.986147771079338
                              TrID:
                              • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                              File name:Kloki.arm7.elf
                              File size:148'433 bytes
                              MD5:dd9474810886453fbe32c5b8c47654d4
                              SHA1:037a0f04d37d757552beb41865cc70b1b27f8c1c
                              SHA256:f9d20ac6ca870e6ed03705e064dc92fcd683dd1395faf4441100529f68095662
                              SHA512:f015fc2212de35429d013412c7b52f365731ddf342b5bb56f4a79f3221440effaeee49693b9276da25206ff45c3ee38c460bc80db1c23f83799b308a1ea2f5b7
                              SSDEEP:3072:Pmnff1g/Nd4Kta5fBfQlf7eSbkTT4vNDJ8mBM/94oK6I:PmnH1g/Ndlta5fBfQlzePMvNDJ8YM/9i
                              TLSH:70E33B46EA404B13C4D6177ABADF42453323A764D3DB73069928AFF43F8679E0E63605
                              File Content Preview:.ELF..............(.........4...h.......4. ...(........p.U...........................................W...W...............W...W...W......@B...............W...W...W..................Q.td..................................-...L..................@-.,@...0....S

                              Static ELF Info

                              ELF header

                              Class:ELF32
                              Data:2's complement, little endian
                              Version:1 (current)
                              Machine:ARM
                              Version Number:0x1
                              Type:EXEC (Executable file)
                              OS/ABI:UNIX - System V
                              ABI Version:0
                              Entry Point Address:0x8194
                              Flags:0x4000002
                              ELF Header Size:52
                              Program Header Offset:52
                              Program Header Size:32
                              Number of Program Headers:5
                              Section Header Offset:115304
                              Section Header Size:40
                              Number of Section Headers:29
                              Header String Table Index:26

                              Sections

                              NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                              NULL0x00x00x00x00x0000
                              .initPROGBITS0x80d40xd40x100x00x6AX004
                              .textPROGBITS0x80f00xf00x141100x00x6AX0016
                              .finiPROGBITS0x1c2000x142000x100x00x6AX004
                              .rodataPROGBITS0x1c2100x142100x13c00x00x2A008
                              .ARM.extabPROGBITS0x1d5d00x155d00x180x00x2A004
                              .ARM.exidxARM_EXIDX0x1d5e80x155e80x1180x00x82AL204
                              .eh_framePROGBITS0x257000x157000x40x00x3WA004
                              .tbssNOBITS0x257040x157040x80x00x403WAT004
                              .init_arrayINIT_ARRAY0x257040x157040x40x00x3WA004
                              .fini_arrayFINI_ARRAY0x257080x157080x40x00x3WA004
                              .jcrPROGBITS0x2570c0x1570c0x40x00x3WA004
                              .gotPROGBITS0x257100x157100xa80x40x3WA004
                              .dataPROGBITS0x257b80x157b80x22c0x00x3WA004
                              .bssNOBITS0x259e40x159e40x3f5c0x00x3WA004
                              .commentPROGBITS0x00x159e40xbf80x00x0001
                              .debug_arangesPROGBITS0x00x165e00x1400x00x0008
                              .debug_pubnamesPROGBITS0x00x167200x2130x00x0001
                              .debug_infoPROGBITS0x00x169330x20430x00x0001
                              .debug_abbrevPROGBITS0x00x189760x6e20x00x0001
                              .debug_linePROGBITS0x00x190580xe760x00x0001
                              .debug_framePROGBITS0x00x19ed00x2b80x00x0004
                              .debug_strPROGBITS0x00x1a1880x8ca0x10x30MS001
                              .debug_locPROGBITS0x00x1aa520x118f0x00x0001
                              .debug_rangesPROGBITS0x00x1bbe10x5580x00x0001
                              .ARM.attributesARM_ATTRIBUTES0x00x1c1390x160x00x0001
                              .shstrtabSTRTAB0x00x1c14f0x1170x00x0001
                              .symtabSYMTAB0x00x1c6f00x53100x100x0287644
                              .strtabSTRTAB0x00x21a000x29d10x00x0001

                              Program Segments

                              TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                              EXIDX0x155e80x1d5e80x1d5e80x1180x1184.39500x4R 0x4.ARM.exidx
                              LOAD0x00x80000x80000x157000x157006.11590x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
                              LOAD0x157000x257000x257000x2e40x42404.09510x6RW 0x8000.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
                              TLS0x157040x257040x257040x00x80.00000x4R 0x4.tbss
                              GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                              Symbols

                              NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
                              .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              .symtab0x80d40SECTION<unknown>DEFAULT1
                              .symtab0x80f00SECTION<unknown>DEFAULT2
                              .symtab0x1c2000SECTION<unknown>DEFAULT3
                              .symtab0x1c2100SECTION<unknown>DEFAULT4
                              .symtab0x1d5d00SECTION<unknown>DEFAULT5
                              .symtab0x1d5e80SECTION<unknown>DEFAULT6
                              .symtab0x257000SECTION<unknown>DEFAULT7
                              .symtab0x257040SECTION<unknown>DEFAULT8
                              .symtab0x257040SECTION<unknown>DEFAULT9
                              .symtab0x257080SECTION<unknown>DEFAULT10
                              .symtab0x2570c0SECTION<unknown>DEFAULT11
                              .symtab0x257100SECTION<unknown>DEFAULT12
                              .symtab0x257b80SECTION<unknown>DEFAULT13
                              .symtab0x259e40SECTION<unknown>DEFAULT14
                              .symtab0x00SECTION<unknown>DEFAULT15
                              .symtab0x00SECTION<unknown>DEFAULT16
                              .symtab0x00SECTION<unknown>DEFAULT17
                              .symtab0x00SECTION<unknown>DEFAULT18
                              .symtab0x00SECTION<unknown>DEFAULT19
                              .symtab0x00SECTION<unknown>DEFAULT20
                              .symtab0x00SECTION<unknown>DEFAULT21
                              .symtab0x00SECTION<unknown>DEFAULT22
                              .symtab0x00SECTION<unknown>DEFAULT23
                              .symtab0x00SECTION<unknown>DEFAULT24
                              .symtab0x00SECTION<unknown>DEFAULT25
                              $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
                              $a.symtab0x1c2000NOTYPE<unknown>DEFAULT3
                              $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
                              $a.symtab0x1c20c0NOTYPE<unknown>DEFAULT3
                              $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x81340NOTYPE<unknown>DEFAULT2
                              $a.symtab0x81940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x82cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x84240NOTYPE<unknown>DEFAULT2
                              $a.symtab0x86400NOTYPE<unknown>DEFAULT2
                              $a.symtab0x86ac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x871c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x8af80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x918c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x97a80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x9a480NOTYPE<unknown>DEFAULT2
                              $a.symtab0xa1fc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xa8f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0xafa00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xb2fc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xbb800NOTYPE<unknown>DEFAULT2
                              $a.symtab0xbdac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xc04c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xc5380NOTYPE<unknown>DEFAULT2
                              $a.symtab0xc9640NOTYPE<unknown>DEFAULT2
                              $a.symtab0xc9e80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xd3f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0xd48c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xd57c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xd5cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xd6700NOTYPE<unknown>DEFAULT2
                              $a.symtab0xdd5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xdd840NOTYPE<unknown>DEFAULT2
                              $a.symtab0xddc40NOTYPE<unknown>DEFAULT2
                              $a.symtab0xde100NOTYPE<unknown>DEFAULT2
                              $a.symtab0xde5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xdedc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xdf040NOTYPE<unknown>DEFAULT2
                              $a.symtab0xdf680NOTYPE<unknown>DEFAULT2
                              $a.symtab0xdfe00NOTYPE<unknown>DEFAULT2
                              $a.symtab0xe00c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xe15c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xe2bc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xe3dc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xeb780NOTYPE<unknown>DEFAULT2
                              $a.symtab0xec4c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xecbc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xed280NOTYPE<unknown>DEFAULT2
                              $a.symtab0xedb80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xeeec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xef140NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf41c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf9200NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf9480NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf9900NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf9b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0xf9d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfa340NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfac80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfb580NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfc540NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfd900NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfea40NOTYPE<unknown>DEFAULT2
                              $a.symtab0xfeb80NOTYPE<unknown>DEFAULT2
                              $a.symtab0xff500NOTYPE<unknown>DEFAULT2
                              $a.symtab0x100440NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1007c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x100900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x101700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x101a80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x101ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1022c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x102640NOTYPE<unknown>DEFAULT2
                              $a.symtab0x102a80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1032c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1036c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x103f80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x104280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x105380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x106080NOTYPE<unknown>DEFAULT2
                              $a.symtab0x106cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1077c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x108640NOTYPE<unknown>DEFAULT2
                              $a.symtab0x109100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x109180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x109380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1096c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1099c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x10a6c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x112380NOTYPE<unknown>DEFAULT2
                              $a.symtab0x112d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1131c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x114cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x115200NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11a900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11ac80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11b900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11ba00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11c400NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11ca00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11d5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11e280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11f240NOTYPE<unknown>DEFAULT2
                              $a.symtab0x11f3c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x120480NOTYPE<unknown>DEFAULT2
                              $a.symtab0x120700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x120b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x121280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1216c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x121b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x122240NOTYPE<unknown>DEFAULT2
                              $a.symtab0x122680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x122b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x122f00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x123340NOTYPE<unknown>DEFAULT2
                              $a.symtab0x123a40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x123ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x124740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x124b80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x125280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x125740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x125fc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x126440NOTYPE<unknown>DEFAULT2
                              $a.symtab0x126880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x126d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x126ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x127b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1281c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x131cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1330c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x136cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13b6c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13bac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13cd40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13cec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13d900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13e480NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13f080NOTYPE<unknown>DEFAULT2
                              $a.symtab0x13fac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1403c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x141140NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1420c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x142f80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x143180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x143340NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1450c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x145d00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1471c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14d400NOTYPE<unknown>DEFAULT2
                              $a.symtab0x14d900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1515c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x151f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1523c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1532c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x154640NOTYPE<unknown>DEFAULT2
                              $a.symtab0x154bc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x154c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x154f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1554c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x155540NOTYPE<unknown>DEFAULT2
                              $a.symtab0x155840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x155dc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x155e40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x156140NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1566c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x156740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x156a00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x157280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x158040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x158c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x159180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x159700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15d5c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15dd80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15e040NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15e8c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15e940NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15ea00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15eb00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15ec00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15f000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15f680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x15fcc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1606c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x160980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x160ac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x160c00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x160d40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x160fc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x161340NOTYPE<unknown>DEFAULT2
                              $a.symtab0x161740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x161880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x161c80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1620c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1624c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1628c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x162ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x163580NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1636c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x164e40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x165d00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x169740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x169c80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x169ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16aa80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16dd80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x16df80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x172580NOTYPE<unknown>DEFAULT2
                              $a.symtab0x173980NOTYPE<unknown>DEFAULT2
                              $a.symtab0x174180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1757c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x176580NOTYPE<unknown>DEFAULT2
                              $a.symtab0x176880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x176fc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x177280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x178840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x180780NOTYPE<unknown>DEFAULT2
                              $a.symtab0x181bc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x182d80NOTYPE<unknown>DEFAULT2
                              $a.symtab0x185880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x189340NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18a600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18b000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18f900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18fa00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x18fc00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x190b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x191900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x192800NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1936c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x193b00NOTYPE<unknown>DEFAULT2
                              $a.symtab0x194000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1944c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x194700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x194ec0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x195e40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1965c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x196c40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x199180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x199240NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1995c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x199b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19a0c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19a180NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19b600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19b840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19d440NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19d9c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19e780NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19f400NOTYPE<unknown>DEFAULT2
                              $a.symtab0x19f700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a0140NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a0500NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a0740NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a0b40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a1240NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a2680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1a6840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ab200NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ac600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1acb40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ad000NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ad4c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ad540NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ad580NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ad840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ad900NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ad9c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1afbc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b10c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b1280NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b1880NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b1f40NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b2ac0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b2cc0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b4100NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b9580NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b9600NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b9680NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1b9700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ba2c0NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1ba700NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c1840NOTYPE<unknown>DEFAULT2
                              $a.symtab0x1c1cc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x81280NOTYPE<unknown>DEFAULT2
                              $d.symtab0x257080NOTYPE<unknown>DEFAULT10
                              $d.symtab0x81800NOTYPE<unknown>DEFAULT2
                              $d.symtab0x257040NOTYPE<unknown>DEFAULT9
                              $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x82c40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x84200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x8ac00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x91880NOTYPE<unknown>DEFAULT2
                              $d.symtab0x97a40NOTYPE<unknown>DEFAULT2
                              $d.symtab0xa1f80NOTYPE<unknown>DEFAULT2
                              $d.symtab0xa8f00NOTYPE<unknown>DEFAULT2
                              $d.symtab0xaf9c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xbb600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c22c0NOTYPE<unknown>DEFAULT4
                              $d.symtab0x1c2500NOTYPE<unknown>DEFAULT4
                              $d.symtab0xc5340NOTYPE<unknown>DEFAULT2
                              $d.symtab0xc95c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xd3e40NOTYPE<unknown>DEFAULT2
                              $d.symtab0xd4800NOTYPE<unknown>DEFAULT2
                              $d.symtab0xd5500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x257b80NOTYPE<unknown>DEFAULT13
                              $d.symtab0x257d80NOTYPE<unknown>DEFAULT13
                              $d.symtab0xdd1c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c3ff0NOTYPE<unknown>DEFAULT4
                              $d.symtab0xe0080NOTYPE<unknown>DEFAULT2
                              $d.symtab0xe14c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c4d80NOTYPE<unknown>DEFAULT4
                              $d.symtab0xe2b00NOTYPE<unknown>DEFAULT2
                              $d.symtab0xe3d80NOTYPE<unknown>DEFAULT2
                              $d.symtab0xeb400NOTYPE<unknown>DEFAULT2
                              $d.symtab0x257e40NOTYPE<unknown>DEFAULT13
                              $d.symtab0x257e80NOTYPE<unknown>DEFAULT13
                              $d.symtab0x257ec0NOTYPE<unknown>DEFAULT13
                              $d.symtab0xec440NOTYPE<unknown>DEFAULT2
                              $d.symtab0xecac0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xed180NOTYPE<unknown>DEFAULT2
                              $d.symtab0xeda80NOTYPE<unknown>DEFAULT2
                              $d.symtab0xeedc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0xf90c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x00NOTYPE<unknown>DEFAULT21
                              $d.symtab0x200NOTYPE<unknown>DEFAULT21
                              $d.symtab0x260NOTYPE<unknown>DEFAULT21
                              $d.symtab0xff480NOTYPE<unknown>DEFAULT2
                              $d.symtab0x100340NOTYPE<unknown>DEFAULT2
                              $d.symtab0x100780NOTYPE<unknown>DEFAULT2
                              $d.symtab0x101600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x101a40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x101e80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x102280NOTYPE<unknown>DEFAULT2
                              $d.symtab0x102600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x102a40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x103240NOTYPE<unknown>DEFAULT2
                              $d.symtab0x103680NOTYPE<unknown>DEFAULT2
                              $d.symtab0x103f40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1051c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x106000NOTYPE<unknown>DEFAULT2
                              $d.symtab0x106c00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x107740NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c5800NOTYPE<unknown>DEFAULT4
                              $d.symtab0x108500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x108fc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x109340NOTYPE<unknown>DEFAULT2
                              $d.symtab0x109680NOTYPE<unknown>DEFAULT2
                              $d.symtab0x10a640NOTYPE<unknown>DEFAULT2
                              $d.symtab0x112140NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c5c00NOTYPE<unknown>DEFAULT4
                              $d.symtab0x114c80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x115140NOTYPE<unknown>DEFAULT2
                              $d.symtab0x11a600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x257f00NOTYPE<unknown>DEFAULT13
                              $d.symtab0x1c5c80NOTYPE<unknown>DEFAULT4
                              $d.symtab0x11b800NOTYPE<unknown>DEFAULT2
                              $d.symtab0x11e200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x120380NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1c64c0NOTYPE<unknown>DEFAULT4
                              $d.symtab0x120ac0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x121200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x121640NOTYPE<unknown>DEFAULT2
                              $d.symtab0x121a80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1221c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x122600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x122a80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x122ec0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1232c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1239c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x123e80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1246c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x124b00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x125200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1256c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x125f40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1263c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x126800NOTYPE<unknown>DEFAULT2
                              $d.symtab0x126d40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x127a40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x131a80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x257f40NOTYPE<unknown>DEFAULT13
                              $d.symtab0x132f00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x136ac0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x13b500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x13ba40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x13cc00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x2580c0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x13d740NOTYPE<unknown>DEFAULT2
                              $d.symtab0x13e2c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x13eec0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x13f900NOTYPE<unknown>DEFAULT2
                              $d.symtab0x258240NOTYPE<unknown>DEFAULT13
                              $d.symtab0x258bc0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x140380NOTYPE<unknown>DEFAULT2
                              $d.symtab0x141080NOTYPE<unknown>DEFAULT2
                              $d.symtab0x141fc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x142ec0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1d1b80NOTYPE<unknown>DEFAULT4
                              $d.symtab0x144fc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x145b00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x258d00NOTYPE<unknown>DEFAULT13
                              $d.symtab0x146f80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14d140NOTYPE<unknown>DEFAULT2
                              $d.symtab0x14d8c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x151340NOTYPE<unknown>DEFAULT2
                              $d.symtab0x153200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1544c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x154600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x154f00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x155800NOTYPE<unknown>DEFAULT2
                              $d.symtab0x156100NOTYPE<unknown>DEFAULT2
                              $d.symtab0x157fc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x158b00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x159100NOTYPE<unknown>DEFAULT2
                              $d.symtab0x159640NOTYPE<unknown>DEFAULT2
                              $d.symtab0x15d100NOTYPE<unknown>DEFAULT2
                              $d.symtab0x258e80NOTYPE<unknown>DEFAULT13
                              $d.symtab0x15dd00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x15e000NOTYPE<unknown>DEFAULT2
                              $d.symtab0x15e800NOTYPE<unknown>DEFAULT2
                              $d.symtab0x15efc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x15f600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x15fc80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x160680NOTYPE<unknown>DEFAULT2
                              $d.symtab0x160f40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x161300NOTYPE<unknown>DEFAULT2
                              $d.symtab0x161700NOTYPE<unknown>DEFAULT2
                              $d.symtab0x161c40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x162080NOTYPE<unknown>DEFAULT2
                              $d.symtab0x162480NOTYPE<unknown>DEFAULT2
                              $d.symtab0x162880NOTYPE<unknown>DEFAULT2
                              $d.symtab0x162e40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x163500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x165bc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1696c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x16aa40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x16dc80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x172240NOTYPE<unknown>DEFAULT2
                              $d.symtab0x174080NOTYPE<unknown>DEFAULT2
                              $d.symtab0x175600NOTYPE<unknown>DEFAULT2
                              $d.symtab0x259000NOTYPE<unknown>DEFAULT13
                              $d.symtab0x258fc0NOTYPE<unknown>DEFAULT13
                              $d.symtab0x176540NOTYPE<unknown>DEFAULT2
                              $d.symtab0x180580NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1d5880NOTYPE<unknown>DEFAULT4
                              $d.symtab0x1856c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1891c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x18a580NOTYPE<unknown>DEFAULT2
                              $d.symtab0x190a80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x191880NOTYPE<unknown>DEFAULT2
                              $d.symtab0x192780NOTYPE<unknown>DEFAULT2
                              $d.symtab0x193640NOTYPE<unknown>DEFAULT2
                              $d.symtab0x194e80NOTYPE<unknown>DEFAULT2
                              $d.symtab0x195dc0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x196440NOTYPE<unknown>DEFAULT2
                              $d.symtab0x196b40NOTYPE<unknown>DEFAULT2
                              $d.symtab0x198f00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x199500NOTYPE<unknown>DEFAULT2
                              $d.symtab0x19a000NOTYPE<unknown>DEFAULT2
                              $d.symtab0x19b580NOTYPE<unknown>DEFAULT2
                              $d.symtab0x19d400NOTYPE<unknown>DEFAULT2
                              $d.symtab0x19e740NOTYPE<unknown>DEFAULT2
                              $d.symtab0x19f3c0NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1a0100NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1a1200NOTYPE<unknown>DEFAULT2
                              $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
                              $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
                              $d.symtab0x530NOTYPE<unknown>DEFAULT21
                              $d.symtab0x1afa00NOTYPE<unknown>DEFAULT2
                              $d.symtab0x1b9480NOTYPE<unknown>DEFAULT2
                              $d.symtab0x580NOTYPE<unknown>DEFAULT21
                              $d.symtab0x00NOTYPE<unknown>DEFAULT23
                              $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
                              $d.symtab0xe390NOTYPE<unknown>DEFAULT23
                              $d.symtab0x258f40NOTYPE<unknown>DEFAULT13
                              $d.symtab0x1d2400NOTYPE<unknown>DEFAULT4
                              C.1.4926.symtab0x1c4d8104OBJECT<unknown>DEFAULT4
                              C.11.5548.symtab0x1d22812OBJECT<unknown>DEFAULT4
                              C.14.4255.symtab0x1c25044OBJECT<unknown>DEFAULT4
                              C.15.4256.symtab0x1c22c36OBJECT<unknown>DEFAULT4
                              C.5.5083.symtab0x1c58024OBJECT<unknown>DEFAULT4
                              C.7.5370.symtab0x1d23412OBJECT<unknown>DEFAULT4
                              C.7.6078.symtab0x1c59812OBJECT<unknown>DEFAULT4
                              C.7.6109.symtab0x1d56412OBJECT<unknown>DEFAULT4
                              C.7.6182.symtab0x1d54012OBJECT<unknown>DEFAULT4
                              C.8.6110.symtab0x1d55812OBJECT<unknown>DEFAULT4
                              C.9.6119.symtab0x1d54c12OBJECT<unknown>DEFAULT4
                              LOCAL_ADDR.symtab0x295284OBJECT<unknown>DEFAULT14
                              Laligned.symtab0x11c680NOTYPE<unknown>DEFAULT2
                              Llastword.symtab0x11c840NOTYPE<unknown>DEFAULT2
                              _Exit.symtab0x15f00104FUNC<unknown>DEFAULT2
                              _GLOBAL_OFFSET_TABLE_.symtab0x257100OBJECT<unknown>HIDDEN12
                              _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _Unwind_Complete.symtab0x1ad544FUNC<unknown>HIDDEN2
                              _Unwind_DeleteException.symtab0x1ad5844FUNC<unknown>HIDDEN2
                              _Unwind_ForcedUnwind.symtab0x1ba0836FUNC<unknown>HIDDEN2
                              _Unwind_GetCFA.symtab0x1ad4c8FUNC<unknown>HIDDEN2
                              _Unwind_GetDataRelBase.symtab0x1ad9012FUNC<unknown>HIDDEN2
                              _Unwind_GetLanguageSpecificData.symtab0x1ba2c68FUNC<unknown>HIDDEN2
                              _Unwind_GetRegionStart.symtab0x1c1cc52FUNC<unknown>HIDDEN2
                              _Unwind_GetTextRelBase.symtab0x1ad8412FUNC<unknown>HIDDEN2
                              _Unwind_RaiseException.symtab0x1b99c36FUNC<unknown>HIDDEN2
                              _Unwind_Resume.symtab0x1b9c036FUNC<unknown>HIDDEN2
                              _Unwind_Resume_or_Rethrow.symtab0x1b9e436FUNC<unknown>HIDDEN2
                              _Unwind_VRS_Get.symtab0x1acb476FUNC<unknown>HIDDEN2
                              _Unwind_VRS_Pop.symtab0x1b2cc324FUNC<unknown>HIDDEN2
                              _Unwind_VRS_Set.symtab0x1ad0076FUNC<unknown>HIDDEN2
                              _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __C_ctype_b.symtab0x258f44OBJECT<unknown>DEFAULT13
                              __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __C_ctype_b_data.symtab0x1d240768OBJECT<unknown>DEFAULT4
                              __EH_FRAME_BEGIN__.symtab0x257000OBJECT<unknown>DEFAULT7
                              __FRAME_END__.symtab0x257000OBJECT<unknown>DEFAULT7
                              __GI___C_ctype_b.symtab0x258f44OBJECT<unknown>HIDDEN13
                              __GI___close.symtab0x15480100FUNC<unknown>HIDDEN2
                              __GI___close_nocancel.symtab0x1546424FUNC<unknown>HIDDEN2
                              __GI___ctype_b.symtab0x258f84OBJECT<unknown>HIDDEN13
                              __GI___errno_location.symtab0x1091832FUNC<unknown>HIDDEN2
                              __GI___fcntl_nocancel.symtab0xfeb8152FUNC<unknown>HIDDEN2
                              __GI___fgetc_unlocked.symtab0x18934300FUNC<unknown>HIDDEN2
                              __GI___glibc_strerror_r.symtab0x11f2424FUNC<unknown>HIDDEN2
                              __GI___libc_close.symtab0x15480100FUNC<unknown>HIDDEN2
                              __GI___libc_fcntl.symtab0xff50244FUNC<unknown>HIDDEN2
                              __GI___libc_open.symtab0x15510100FUNC<unknown>HIDDEN2
                              __GI___libc_read.symtab0x15630100FUNC<unknown>HIDDEN2
                              __GI___libc_write.symtab0x155a0100FUNC<unknown>HIDDEN2
                              __GI___open.symtab0x15510100FUNC<unknown>HIDDEN2
                              __GI___open_nocancel.symtab0x154f424FUNC<unknown>HIDDEN2
                              __GI___read.symtab0x15630100FUNC<unknown>HIDDEN2
                              __GI___read_nocancel.symtab0x1561424FUNC<unknown>HIDDEN2
                              __GI___sigaddset.symtab0x127d436FUNC<unknown>HIDDEN2
                              __GI___sigdelset.symtab0x127f836FUNC<unknown>HIDDEN2
                              __GI___sigismember.symtab0x127b036FUNC<unknown>HIDDEN2
                              __GI___uClibc_fini.symtab0x15848124FUNC<unknown>HIDDEN2
                              __GI___uClibc_init.symtab0x1591888FUNC<unknown>HIDDEN2
                              __GI___write.symtab0x155a0100FUNC<unknown>HIDDEN2
                              __GI___write_nocancel.symtab0x1558424FUNC<unknown>HIDDEN2
                              __GI___xpg_strerror_r.symtab0x11f3c268FUNC<unknown>HIDDEN2
                              __GI__exit.symtab0x15f00104FUNC<unknown>HIDDEN2
                              __GI_abort.symtab0x13bac296FUNC<unknown>HIDDEN2
                              __GI_accept.symtab0x120b4116FUNC<unknown>HIDDEN2
                              __GI_atoi.symtab0x142f832FUNC<unknown>HIDDEN2
                              __GI_bind.symtab0x1212868FUNC<unknown>HIDDEN2
                              __GI_brk.symtab0x199b488FUNC<unknown>HIDDEN2
                              __GI_chdir.symtab0x1004456FUNC<unknown>HIDDEN2
                              __GI_close.symtab0x15480100FUNC<unknown>HIDDEN2
                              __GI_closedir.symtab0x10428272FUNC<unknown>HIDDEN2
                              __GI_config_close.symtab0x168f852FUNC<unknown>HIDDEN2
                              __GI_config_open.symtab0x1692c72FUNC<unknown>HIDDEN2
                              __GI_config_read.symtab0x165d0808FUNC<unknown>HIDDEN2
                              __GI_connect.symtab0x121b0116FUNC<unknown>HIDDEN2
                              __GI_exit.symtab0x1450c196FUNC<unknown>HIDDEN2
                              __GI_fclose.symtab0x16aa8816FUNC<unknown>HIDDEN2
                              __GI_fcntl.symtab0xff50244FUNC<unknown>HIDDEN2
                              __GI_fflush_unlocked.symtab0x18588940FUNC<unknown>HIDDEN2
                              __GI_fgetc.symtab0x18078324FUNC<unknown>HIDDEN2
                              __GI_fgetc_unlocked.symtab0x18934300FUNC<unknown>HIDDEN2
                              __GI_fgets.symtab0x181bc284FUNC<unknown>HIDDEN2
                              __GI_fgets_unlocked.symtab0x18a60160FUNC<unknown>HIDDEN2
                              __GI_fopen.symtab0x16dd832FUNC<unknown>HIDDEN2
                              __GI_fork.symtab0x14d90972FUNC<unknown>HIDDEN2
                              __GI_fputs_unlocked.symtab0x11a9056FUNC<unknown>HIDDEN2
                              __GI_fseek.symtab0x19b6036FUNC<unknown>HIDDEN2
                              __GI_fseeko64.symtab0x19b84448FUNC<unknown>HIDDEN2
                              __GI_fstat.symtab0x15f68100FUNC<unknown>HIDDEN2
                              __GI_fwrite_unlocked.symtab0x11ac8188FUNC<unknown>HIDDEN2
                              __GI_getc_unlocked.symtab0x18934300FUNC<unknown>HIDDEN2
                              __GI_getdtablesize.symtab0x1606c44FUNC<unknown>HIDDEN2
                              __GI_getegid.symtab0x1609820FUNC<unknown>HIDDEN2
                              __GI_geteuid.symtab0x160ac20FUNC<unknown>HIDDEN2
                              __GI_getgid.symtab0x160c020FUNC<unknown>HIDDEN2
                              __GI_getpagesize.symtab0x160d440FUNC<unknown>HIDDEN2
                              __GI_getpid.symtab0x151f472FUNC<unknown>HIDDEN2
                              __GI_getrlimit.symtab0x160fc56FUNC<unknown>HIDDEN2
                              __GI_getsockname.symtab0x1222468FUNC<unknown>HIDDEN2
                              __GI_gettimeofday.symtab0x1613464FUNC<unknown>HIDDEN2
                              __GI_getuid.symtab0x1617420FUNC<unknown>HIDDEN2
                              __GI_inet_addr.symtab0x1204840FUNC<unknown>HIDDEN2
                              __GI_inet_aton.symtab0x194ec248FUNC<unknown>HIDDEN2
                              __GI_initstate_r.symtab0x14114248FUNC<unknown>HIDDEN2
                              __GI_ioctl.symtab0x10090224FUNC<unknown>HIDDEN2
                              __GI_isatty.symtab0x1944c36FUNC<unknown>HIDDEN2
                              __GI_kill.symtab0x1017056FUNC<unknown>HIDDEN2
                              __GI_listen.symtab0x122b064FUNC<unknown>HIDDEN2
                              __GI_lseek.symtab0x1618864FUNC<unknown>HIDDEN2
                              __GI_lseek64.symtab0x1a0b4112FUNC<unknown>HIDDEN2
                              __GI_memchr.symtab0x18fc0240FUNC<unknown>HIDDEN2
                              __GI_memcpy.symtab0x11b904FUNC<unknown>HIDDEN2
                              __GI_memmove.symtab0x18f904FUNC<unknown>HIDDEN2
                              __GI_mempcpy.symtab0x1a05036FUNC<unknown>HIDDEN2
                              __GI_memrchr.symtab0x190b0224FUNC<unknown>HIDDEN2
                              __GI_memset.symtab0x11ba0156FUNC<unknown>HIDDEN2
                              __GI_mmap.symtab0x15d5c124FUNC<unknown>HIDDEN2
                              __GI_mremap.symtab0x161c868FUNC<unknown>HIDDEN2
                              __GI_munmap.symtab0x1620c64FUNC<unknown>HIDDEN2
                              __GI_nanosleep.symtab0x1628c96FUNC<unknown>HIDDEN2
                              __GI_open.symtab0x15510100FUNC<unknown>HIDDEN2
                              __GI_opendir.symtab0x10608196FUNC<unknown>HIDDEN2
                              __GI_raise.symtab0x1523c240FUNC<unknown>HIDDEN2
                              __GI_random.symtab0x13cec164FUNC<unknown>HIDDEN2
                              __GI_random_r.symtab0x13fac144FUNC<unknown>HIDDEN2
                              __GI_read.symtab0x15630100FUNC<unknown>HIDDEN2
                              __GI_readdir.symtab0x1077c232FUNC<unknown>HIDDEN2
                              __GI_readdir64.symtab0x164e4236FUNC<unknown>HIDDEN2
                              __GI_readlink.symtab0x101ec64FUNC<unknown>HIDDEN2
                              __GI_recv.symtab0x12334112FUNC<unknown>HIDDEN2
                              __GI_recvfrom.symtab0x123ec136FUNC<unknown>HIDDEN2
                              __GI_sbrk.symtab0x162ec108FUNC<unknown>HIDDEN2
                              __GI_select.symtab0x102a8132FUNC<unknown>HIDDEN2
                              __GI_send.symtab0x124b8112FUNC<unknown>HIDDEN2
                              __GI_sendto.symtab0x12574136FUNC<unknown>HIDDEN2
                              __GI_setsid.symtab0x1032c64FUNC<unknown>HIDDEN2
                              __GI_setsockopt.symtab0x125fc72FUNC<unknown>HIDDEN2
                              __GI_setstate_r.symtab0x1420c236FUNC<unknown>HIDDEN2
                              __GI_sigaction.symtab0x15e04136FUNC<unknown>HIDDEN2
                              __GI_sigaddset.symtab0x1268880FUNC<unknown>HIDDEN2
                              __GI_sigemptyset.symtab0x126d820FUNC<unknown>HIDDEN2
                              __GI_signal.symtab0x126ec196FUNC<unknown>HIDDEN2
                              __GI_sigprocmask.symtab0x1036c140FUNC<unknown>HIDDEN2
                              __GI_sleep.symtab0x1532c300FUNC<unknown>HIDDEN2
                              __GI_snprintf.symtab0x1096c48FUNC<unknown>HIDDEN2
                              __GI_socket.symtab0x1264468FUNC<unknown>HIDDEN2
                              __GI_srandom_r.symtab0x1403c216FUNC<unknown>HIDDEN2
                              __GI_strchr.symtab0x19190240FUNC<unknown>HIDDEN2
                              __GI_strchrnul.symtab0x19280236FUNC<unknown>HIDDEN2
                              __GI_strcmp.symtab0x18fa028FUNC<unknown>HIDDEN2
                              __GI_strcoll.symtab0x18fa028FUNC<unknown>HIDDEN2
                              __GI_strcspn.symtab0x1936c68FUNC<unknown>HIDDEN2
                              __GI_strlen.symtab0x11c4096FUNC<unknown>HIDDEN2
                              __GI_strncpy.symtab0x11ca0188FUNC<unknown>HIDDEN2
                              __GI_strnlen.symtab0x11d5c204FUNC<unknown>HIDDEN2
                              __GI_strrchr.symtab0x193b080FUNC<unknown>HIDDEN2
                              __GI_strspn.symtab0x1940076FUNC<unknown>HIDDEN2
                              __GI_strstr.symtab0x11e28252FUNC<unknown>HIDDEN2
                              __GI_strtol.symtab0x1431828FUNC<unknown>HIDDEN2
                              __GI_sysconf.symtab0x1471c1572FUNC<unknown>HIDDEN2
                              __GI_tcgetattr.symtab0x19470124FUNC<unknown>HIDDEN2
                              __GI_time.symtab0x103f848FUNC<unknown>HIDDEN2
                              __GI_times.symtab0x1635820FUNC<unknown>HIDDEN2
                              __GI_vsnprintf.symtab0x1099c208FUNC<unknown>HIDDEN2
                              __GI_wcrtomb.symtab0x1697484FUNC<unknown>HIDDEN2
                              __GI_wcsnrtombs.symtab0x169ec188FUNC<unknown>HIDDEN2
                              __GI_wcsrtombs.symtab0x169c836FUNC<unknown>HIDDEN2
                              __GI_write.symtab0x155a0100FUNC<unknown>HIDDEN2
                              __JCR_END__.symtab0x2570c0OBJECT<unknown>DEFAULT11
                              __JCR_LIST__.symtab0x2570c0OBJECT<unknown>DEFAULT11
                              ___Unwind_ForcedUnwind.symtab0x1ba0836FUNC<unknown>HIDDEN2
                              ___Unwind_RaiseException.symtab0x1b99c36FUNC<unknown>HIDDEN2
                              ___Unwind_Resume.symtab0x1b9c036FUNC<unknown>HIDDEN2
                              ___Unwind_Resume_or_Rethrow.symtab0x1b9e436FUNC<unknown>HIDDEN2
                              __adddf3.symtab0x1a274784FUNC<unknown>HIDDEN2
                              __aeabi_cdcmpeq.symtab0x1abd024FUNC<unknown>HIDDEN2
                              __aeabi_cdcmple.symtab0x1abd024FUNC<unknown>HIDDEN2
                              __aeabi_cdrcmple.symtab0x1abb452FUNC<unknown>HIDDEN2
                              __aeabi_d2uiz.symtab0x1ac6084FUNC<unknown>HIDDEN2
                              __aeabi_dadd.symtab0x1a274784FUNC<unknown>HIDDEN2
                              __aeabi_dcmpeq.symtab0x1abe824FUNC<unknown>HIDDEN2
                              __aeabi_dcmpge.symtab0x1ac3024FUNC<unknown>HIDDEN2
                              __aeabi_dcmpgt.symtab0x1ac4824FUNC<unknown>HIDDEN2
                              __aeabi_dcmple.symtab0x1ac1824FUNC<unknown>HIDDEN2
                              __aeabi_dcmplt.symtab0x1ac0024FUNC<unknown>HIDDEN2
                              __aeabi_ddiv.symtab0x1a914524FUNC<unknown>HIDDEN2
                              __aeabi_dmul.symtab0x1a684656FUNC<unknown>HIDDEN2
                              __aeabi_drsub.symtab0x1a2680FUNC<unknown>HIDDEN2
                              __aeabi_dsub.symtab0x1a270788FUNC<unknown>HIDDEN2
                              __aeabi_f2d.symtab0x1a5d064FUNC<unknown>HIDDEN2
                              __aeabi_i2d.symtab0x1a5a840FUNC<unknown>HIDDEN2
                              __aeabi_idiv.symtab0x1a1240FUNC<unknown>HIDDEN2
                              __aeabi_idivmod.symtab0x1a25024FUNC<unknown>HIDDEN2
                              __aeabi_l2d.symtab0x1a62496FUNC<unknown>HIDDEN2
                              __aeabi_read_tp.symtab0x15eb08FUNC<unknown>DEFAULT2
                              __aeabi_ui2d.symtab0x1a58436FUNC<unknown>HIDDEN2
                              __aeabi_uidiv.symtab0xfd900FUNC<unknown>HIDDEN2
                              __aeabi_uidivmod.symtab0xfe8c24FUNC<unknown>HIDDEN2
                              __aeabi_ul2d.symtab0x1a610116FUNC<unknown>HIDDEN2
                              __aeabi_unwind_cpp_pr0.symtab0x1b9688FUNC<unknown>HIDDEN2
                              __aeabi_unwind_cpp_pr1.symtab0x1b9608FUNC<unknown>HIDDEN2
                              __aeabi_unwind_cpp_pr2.symtab0x1b9588FUNC<unknown>HIDDEN2
                              __app_fini.symtab0x26fb04OBJECT<unknown>HIDDEN14
                              __atexit_lock.symtab0x258d024OBJECT<unknown>DEFAULT13
                              __bss_end__.symtab0x299400NOTYPE<unknown>DEFAULTSHN_ABS
                              __bss_start.symtab0x259e40NOTYPE<unknown>DEFAULTSHN_ABS
                              __bss_start__.symtab0x259e40NOTYPE<unknown>DEFAULTSHN_ABS
                              __check_one_fd.symtab0x158c484FUNC<unknown>DEFAULT2
                              __close.symtab0x15480100FUNC<unknown>DEFAULT2
                              __close_nocancel.symtab0x1546424FUNC<unknown>DEFAULT2
                              __cmpdf2.symtab0x1ab30132FUNC<unknown>HIDDEN2
                              __ctype_b.symtab0x258f84OBJECT<unknown>DEFAULT13
                              __curbrk.symtab0x295144OBJECT<unknown>HIDDEN14
                              __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __data_start.symtab0x257b80NOTYPE<unknown>DEFAULT13
                              __default_rt_sa_restorer.symtab0x15ea40FUNC<unknown>DEFAULT2
                              __default_sa_restorer.symtab0x15e980FUNC<unknown>DEFAULT2
                              __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __div0.symtab0xfea420FUNC<unknown>HIDDEN2
                              __divdf3.symtab0x1a914524FUNC<unknown>HIDDEN2
                              __divsi3.symtab0x1a124300FUNC<unknown>HIDDEN2
                              __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
                              __do_global_dtors_aux_fini_array_entry.symtab0x257080OBJECT<unknown>DEFAULT10
                              __end__.symtab0x299400NOTYPE<unknown>DEFAULTSHN_ABS
                              __environ.symtab0x26fa84OBJECT<unknown>DEFAULT14
                              __eqdf2.symtab0x1ab30132FUNC<unknown>HIDDEN2
                              __errno_location.symtab0x1091832FUNC<unknown>DEFAULT2
                              __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __exidx_end.symtab0x1d7000NOTYPE<unknown>DEFAULTSHN_ABS
                              __exidx_start.symtab0x1d5e80NOTYPE<unknown>DEFAULTSHN_ABS
                              __exit_cleanup.symtab0x26a584OBJECT<unknown>HIDDEN14
                              __extendsfdf2.symtab0x1a5d064FUNC<unknown>HIDDEN2
                              __fcntl_nocancel.symtab0xfeb8152FUNC<unknown>DEFAULT2
                              __fgetc_unlocked.symtab0x18934300FUNC<unknown>DEFAULT2
                              __fini_array_end.symtab0x2570c0NOTYPE<unknown>HIDDEN10
                              __fini_array_start.symtab0x257080NOTYPE<unknown>HIDDEN10
                              __fixunsdfsi.symtab0x1ac6084FUNC<unknown>HIDDEN2
                              __floatdidf.symtab0x1a62496FUNC<unknown>HIDDEN2
                              __floatsidf.symtab0x1a5a840FUNC<unknown>HIDDEN2
                              __floatundidf.symtab0x1a610116FUNC<unknown>HIDDEN2
                              __floatunsidf.symtab0x1a58436FUNC<unknown>HIDDEN2
                              __fork.symtab0x14d90972FUNC<unknown>DEFAULT2
                              __fork_generation_pointer.symtab0x2990c4OBJECT<unknown>HIDDEN14
                              __fork_handlers.symtab0x299104OBJECT<unknown>HIDDEN14
                              __fork_lock.symtab0x26a5c4OBJECT<unknown>HIDDEN14
                              __frame_dummy_init_array_entry.symtab0x257040OBJECT<unknown>DEFAULT9
                              __gedf2.symtab0x1ab20148FUNC<unknown>HIDDEN2
                              __getdents.symtab0x15fcc160FUNC<unknown>HIDDEN2
                              __getdents64.symtab0x19a18328FUNC<unknown>HIDDEN2
                              __getpagesize.symtab0x160d440FUNC<unknown>DEFAULT2
                              __getpid.symtab0x151f472FUNC<unknown>DEFAULT2
                              __glibc_strerror_r.symtab0x11f2424FUNC<unknown>DEFAULT2
                              __glibc_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __gnu_Unwind_ForcedUnwind.symtab0x1b10c28FUNC<unknown>HIDDEN2
                              __gnu_Unwind_RaiseException.symtab0x1b1f4184FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Restore_VFP.symtab0x1b98c0FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Resume.symtab0x1b188108FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Resume_or_Rethrow.symtab0x1b2ac32FUNC<unknown>HIDDEN2
                              __gnu_Unwind_Save_VFP.symtab0x1b9940FUNC<unknown>HIDDEN2
                              __gnu_unwind_execute.symtab0x1ba701812FUNC<unknown>HIDDEN2
                              __gnu_unwind_frame.symtab0x1c18472FUNC<unknown>HIDDEN2
                              __gnu_unwind_pr_common.symtab0x1b4101352FUNC<unknown>DEFAULT2
                              __gtdf2.symtab0x1ab20148FUNC<unknown>HIDDEN2
                              __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __init_array_end.symtab0x257080NOTYPE<unknown>HIDDEN9
                              __init_array_start.symtab0x257040NOTYPE<unknown>HIDDEN9
                              __ledf2.symtab0x1ab28140FUNC<unknown>HIDDEN2
                              __libc_accept.symtab0x120b4116FUNC<unknown>DEFAULT2
                              __libc_close.symtab0x15480100FUNC<unknown>DEFAULT2
                              __libc_connect.symtab0x121b0116FUNC<unknown>DEFAULT2
                              __libc_disable_asynccancel.symtab0x156a0136FUNC<unknown>HIDDEN2
                              __libc_enable_asynccancel.symtab0x15728220FUNC<unknown>HIDDEN2
                              __libc_errno.symtab0x04TLS<unknown>HIDDEN8
                              __libc_fcntl.symtab0xff50244FUNC<unknown>DEFAULT2
                              __libc_fork.symtab0x14d90972FUNC<unknown>DEFAULT2
                              __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
                              __libc_multiple_threads.symtab0x299144OBJECT<unknown>HIDDEN14
                              __libc_nanosleep.symtab0x1628c96FUNC<unknown>DEFAULT2
                              __libc_open.symtab0x15510100FUNC<unknown>DEFAULT2
                              __libc_read.symtab0x15630100FUNC<unknown>DEFAULT2
                              __libc_recv.symtab0x12334112FUNC<unknown>DEFAULT2
                              __libc_recvfrom.symtab0x123ec136FUNC<unknown>DEFAULT2
                              __libc_select.symtab0x102a8132FUNC<unknown>DEFAULT2
                              __libc_send.symtab0x124b8112FUNC<unknown>DEFAULT2
                              __libc_sendto.symtab0x12574136FUNC<unknown>DEFAULT2
                              __libc_setup_tls.symtab0x196e8560FUNC<unknown>DEFAULT2
                              __libc_sigaction.symtab0x15e04136FUNC<unknown>DEFAULT2
                              __libc_stack_end.symtab0x26fa44OBJECT<unknown>DEFAULT14
                              __libc_write.symtab0x155a0100FUNC<unknown>DEFAULT2
                              __lll_lock_wait_private.symtab0x1515c152FUNC<unknown>HIDDEN2
                              __ltdf2.symtab0x1ab28140FUNC<unknown>HIDDEN2
                              __malloc_consolidate.symtab0x1377c436FUNC<unknown>HIDDEN2
                              __malloc_largebin_index.symtab0x1281c120FUNC<unknown>DEFAULT2
                              __malloc_lock.symtab0x257f424OBJECT<unknown>DEFAULT13
                              __malloc_state.symtab0x29594888OBJECT<unknown>DEFAULT14
                              __malloc_trim.symtab0x136cc176FUNC<unknown>DEFAULT2
                              __muldf3.symtab0x1a684656FUNC<unknown>HIDDEN2
                              __nedf2.symtab0x1ab30132FUNC<unknown>HIDDEN2
                              __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __open.symtab0x15510100FUNC<unknown>DEFAULT2
                              __open_nocancel.symtab0x154f424FUNC<unknown>DEFAULT2
                              __pagesize.symtab0x26fac4OBJECT<unknown>DEFAULT14
                              __preinit_array_end.symtab0x257040NOTYPE<unknown>HIDDEN8
                              __preinit_array_start.symtab0x257040NOTYPE<unknown>HIDDEN8
                              __progname.symtab0x258ec4OBJECT<unknown>DEFAULT13
                              __progname_full.symtab0x258f04OBJECT<unknown>DEFAULT13
                              __pthread_initialize_minimal.symtab0x1991812FUNC<unknown>DEFAULT2
                              __pthread_mutex_init.symtab0x1580c8FUNC<unknown>DEFAULT2
                              __pthread_mutex_lock.symtab0x158048FUNC<unknown>DEFAULT2
                              __pthread_mutex_trylock.symtab0x158048FUNC<unknown>DEFAULT2
                              __pthread_mutex_unlock.symtab0x158048FUNC<unknown>DEFAULT2
                              __pthread_return_0.symtab0x158048FUNC<unknown>DEFAULT2
                              __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __read.symtab0x15630100FUNC<unknown>DEFAULT2
                              __read_nocancel.symtab0x1561424FUNC<unknown>DEFAULT2
                              __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
                              __restore_core_regs.symtab0x1b97028FUNC<unknown>HIDDEN2
                              __rtld_fini.symtab0x26fb44OBJECT<unknown>HIDDEN14
                              __sigaddset.symtab0x127d436FUNC<unknown>DEFAULT2
                              __sigdelset.symtab0x127f836FUNC<unknown>DEFAULT2
                              __sigismember.symtab0x127b036FUNC<unknown>DEFAULT2
                              __sigjmp_save.symtab0x1a07464FUNC<unknown>HIDDEN2
                              __sigsetjmp.symtab0x19a0c12FUNC<unknown>DEFAULT2
                              __stdin.symtab0x2590c4OBJECT<unknown>DEFAULT13
                              __stdio_READ.symtab0x19d4488FUNC<unknown>HIDDEN2
                              __stdio_WRITE.symtab0x19d9c220FUNC<unknown>HIDDEN2
                              __stdio_adjust_position.symtab0x19e78200FUNC<unknown>HIDDEN2
                              __stdio_fwrite.symtab0x17258320FUNC<unknown>HIDDEN2
                              __stdio_rfill.symtab0x19f4048FUNC<unknown>HIDDEN2
                              __stdio_seek.symtab0x1a01460FUNC<unknown>HIDDEN2
                              __stdio_trans2r_o.symtab0x19f70164FUNC<unknown>HIDDEN2
                              __stdio_trans2w_o.symtab0x1757c220FUNC<unknown>HIDDEN2
                              __stdio_wcommit.symtab0x1765848FUNC<unknown>HIDDEN2
                              __stdout.symtab0x259104OBJECT<unknown>DEFAULT13
                              __subdf3.symtab0x1a270788FUNC<unknown>HIDDEN2
                              __sys_accept.symtab0x1207068FUNC<unknown>DEFAULT2
                              __sys_connect.symtab0x1216c68FUNC<unknown>DEFAULT2
                              __sys_recv.symtab0x122f068FUNC<unknown>DEFAULT2
                              __sys_recvfrom.symtab0x123a472FUNC<unknown>DEFAULT2
                              __sys_send.symtab0x1247468FUNC<unknown>DEFAULT2
                              __sys_sendto.symtab0x1252876FUNC<unknown>DEFAULT2
                              __syscall_error.symtab0x15dd844FUNC<unknown>HIDDEN2
                              __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __syscall_nanosleep.symtab0x1624c64FUNC<unknown>DEFAULT2
                              __syscall_rt_sigaction.symtab0x15ec064FUNC<unknown>DEFAULT2
                              __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __syscall_select.symtab0x1026468FUNC<unknown>DEFAULT2
                              __tls_get_addr.symtab0x196c436FUNC<unknown>DEFAULT2
                              __uClibc_fini.symtab0x15848124FUNC<unknown>DEFAULT2
                              __uClibc_init.symtab0x1591888FUNC<unknown>DEFAULT2
                              __uClibc_main.symtab0x159701004FUNC<unknown>DEFAULT2
                              __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __uclibc_progname.symtab0x258e84OBJECT<unknown>HIDDEN13
                              __udivsi3.symtab0xfd90252FUNC<unknown>HIDDEN2
                              __write.symtab0x155a0100FUNC<unknown>DEFAULT2
                              __write_nocancel.symtab0x1558424FUNC<unknown>DEFAULT2
                              __xpg_strerror_r.symtab0x11f3c268FUNC<unknown>DEFAULT2
                              __xpg_strerror_r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              __xstat32_conv.symtab0x16438172FUNC<unknown>HIDDEN2
                              __xstat64_conv.symtab0x1636c204FUNC<unknown>HIDDEN2
                              _adjust_pos.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _bss_custom_printf_spec.symtab0x26a4810OBJECT<unknown>DEFAULT14
                              _bss_end__.symtab0x299400NOTYPE<unknown>DEFAULTSHN_ABS
                              _charpad.symtab0x10a6c84FUNC<unknown>DEFAULT2
                              _cs_funcs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _custom_printf_arginfo.symtab0x2953c40OBJECT<unknown>HIDDEN14
                              _custom_printf_handler.symtab0x2956440OBJECT<unknown>HIDDEN14
                              _custom_printf_spec.symtab0x257f04OBJECT<unknown>HIDDEN13
                              _dl_aux_init.symtab0x1992456FUNC<unknown>DEFAULT2
                              _dl_nothread_init_static_tls.symtab0x1995c88FUNC<unknown>HIDDEN2
                              _dl_phdr.symtab0x299384OBJECT<unknown>DEFAULT14
                              _dl_phnum.symtab0x2993c4OBJECT<unknown>DEFAULT14
                              _dl_tls_dtv_gaps.symtab0x2992c1OBJECT<unknown>DEFAULT14
                              _dl_tls_dtv_slotinfo_list.symtab0x299284OBJECT<unknown>DEFAULT14
                              _dl_tls_generation.symtab0x299304OBJECT<unknown>DEFAULT14
                              _dl_tls_max_dtv_idx.symtab0x299204OBJECT<unknown>DEFAULT14
                              _dl_tls_setup.symtab0x1965c104FUNC<unknown>DEFAULT2
                              _dl_tls_static_align.symtab0x2991c4OBJECT<unknown>DEFAULT14
                              _dl_tls_static_nelem.symtab0x299344OBJECT<unknown>DEFAULT14
                              _dl_tls_static_size.symtab0x299244OBJECT<unknown>DEFAULT14
                              _dl_tls_static_used.symtab0x299184OBJECT<unknown>DEFAULT14
                              _edata.symtab0x259e40NOTYPE<unknown>DEFAULTSHN_ABS
                              _end.symtab0x299400NOTYPE<unknown>DEFAULTSHN_ABS
                              _exit.symtab0x15f00104FUNC<unknown>DEFAULT2
                              _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _fini.symtab0x1c2000FUNC<unknown>DEFAULT3
                              _fixed_buffers.symtab0x26fd88192OBJECT<unknown>DEFAULT14
                              _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _fp_out_narrow.symtab0x10ac0132FUNC<unknown>DEFAULT2
                              _fpmaxtostr.symtab0x178842036FUNC<unknown>HIDDEN2
                              _fpmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _fwrite.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _init.symtab0x80d40FUNC<unknown>DEFAULT1
                              _load_inttype.symtab0x17688116FUNC<unknown>HIDDEN2
                              _load_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _memcpy.symtab0x18b000FUNC<unknown>HIDDEN2
                              _ppfs_init.symtab0x11238160FUNC<unknown>HIDDEN2
                              _ppfs_init.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _ppfs_parsespec.symtab0x115201392FUNC<unknown>HIDDEN2
                              _ppfs_parsespec.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _ppfs_prepargs.symtab0x112d868FUNC<unknown>HIDDEN2
                              _ppfs_prepargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _ppfs_setargs.symtab0x1131c432FUNC<unknown>HIDDEN2
                              _ppfs_setargs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _promoted_size.symtab0x114cc84FUNC<unknown>DEFAULT2
                              _pthread_cleanup_pop_restore.symtab0x1581c44FUNC<unknown>DEFAULT2
                              _pthread_cleanup_push_defer.symtab0x158148FUNC<unknown>DEFAULT2
                              _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _setjmp.symtab0x15e8c8FUNC<unknown>DEFAULT2
                              _sigintr.symtab0x2958c8OBJECT<unknown>HIDDEN14
                              _start.symtab0x81940FUNC<unknown>DEFAULT2
                              _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _stdio_fopen.symtab0x16df81120FUNC<unknown>HIDDEN2
                              _stdio_init.symtab0x17398128FUNC<unknown>HIDDEN2
                              _stdio_openlist.symtab0x259144OBJECT<unknown>DEFAULT13
                              _stdio_openlist_add_lock.symtab0x26fb812OBJECT<unknown>DEFAULT14
                              _stdio_openlist_dec_use.symtab0x182d8688FUNC<unknown>HIDDEN2
                              _stdio_openlist_del_count.symtab0x26fd44OBJECT<unknown>DEFAULT14
                              _stdio_openlist_del_lock.symtab0x26fc412OBJECT<unknown>DEFAULT14
                              _stdio_openlist_use_count.symtab0x26fd04OBJECT<unknown>DEFAULT14
                              _stdio_streams.symtab0x25918204OBJECT<unknown>DEFAULT13
                              _stdio_term.symtab0x17418356FUNC<unknown>HIDDEN2
                              _stdio_user_locking.symtab0x258fc4OBJECT<unknown>DEFAULT13
                              _stdlib_strto_l.symtab0x14334472FUNC<unknown>HIDDEN2
                              _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _store_inttype.symtab0x176fc44FUNC<unknown>HIDDEN2
                              _store_inttype.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _string_syserrmsgs.symtab0x1c65c2906OBJECT<unknown>HIDDEN4
                              _string_syserrmsgs.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _trans2w.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _uintmaxtostr.symtab0x17728348FUNC<unknown>HIDDEN2
                              _uintmaxtostr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _vfprintf_internal.symtab0x10b441780FUNC<unknown>HIDDEN2
                              _vfprintf_internal.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              abort.symtab0x13bac296FUNC<unknown>DEFAULT2
                              abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              accept.symtab0x120b4116FUNC<unknown>DEFAULT2
                              accept.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              atoi.symtab0x142f832FUNC<unknown>DEFAULT2
                              atol.symtab0x142f832FUNC<unknown>DEFAULT2
                              atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack_get_opt_int.symtab0x86ac112FUNC<unknown>DEFAULT2
                              attack_get_opt_ip.symtab0x8640108FUNC<unknown>DEFAULT2
                              attack_gre.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack_gre_eth.symtab0x8af81684FUNC<unknown>DEFAULT2
                              attack_gre_ip.symtab0x918c1564FUNC<unknown>DEFAULT2
                              attack_init.symtab0x871c988FUNC<unknown>DEFAULT2
                              attack_kill_all.symtab0x82cc344FUNC<unknown>DEFAULT2
                              attack_ongoing.symtab0x25a0832OBJECT<unknown>DEFAULT14
                              attack_parse.symtab0x8424540FUNC<unknown>DEFAULT2
                              attack_start.symtab0x81d0252FUNC<unknown>DEFAULT2
                              attack_std.symtab0x97a8672FUNC<unknown>DEFAULT2
                              attack_std.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack_tcp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack_tcp_ack.symtab0xa1fc1784FUNC<unknown>DEFAULT2
                              attack_tcp_bypass.symtab0xafa0860FUNC<unknown>DEFAULT2
                              attack_tcp_stomp.symtab0x9a481972FUNC<unknown>DEFAULT2
                              attack_tcp_syn.symtab0xa8f41708FUNC<unknown>DEFAULT2
                              attack_tcp_wra.symtab0xb2fc2180FUNC<unknown>DEFAULT2
                              attack_udp.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              attack_udp_bypass.symtab0xbb80556FUNC<unknown>DEFAULT2
                              attack_udp_generic.symtab0xc04c1260FUNC<unknown>DEFAULT2
                              attack_udp_plain.symtab0xbdac672FUNC<unknown>DEFAULT2
                              attack_udp_vse.symtab0xc5381068FUNC<unknown>DEFAULT2
                              been_there_done_that.symtab0x26a544OBJECT<unknown>DEFAULT14
                              bind.symtab0x1212868FUNC<unknown>DEFAULT2
                              bind.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              brk.symtab0x199b488FUNC<unknown>DEFAULT2
                              brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              bsd_signal.symtab0x126ec196FUNC<unknown>DEFAULT2
                              calloc.symtab0x131cc320FUNC<unknown>DEFAULT2
                              calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              chacha20.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              chacha20_quarterround.symtab0xc964132FUNC<unknown>DEFAULT2
                              chacha20_table.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              chacha20_xor.symtab0xc9e82572FUNC<unknown>DEFAULT2
                              chdir.symtab0x1004456FUNC<unknown>DEFAULT2
                              chdir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              checksum_generic.symtab0xd57c80FUNC<unknown>DEFAULT2
                              checksum_tcpudp.symtab0xd5cc164FUNC<unknown>DEFAULT2
                              clock.symtab0x1093852FUNC<unknown>DEFAULT2
                              clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              close.symtab0x15480100FUNC<unknown>DEFAULT2
                              closedir.symtab0x10428272FUNC<unknown>DEFAULT2
                              closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              completed.5105.symtab0x259e41OBJECT<unknown>DEFAULT14
                              connect.symtab0x121b0116FUNC<unknown>DEFAULT2
                              connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              enc.symtab0x25a284OBJECT<unknown>DEFAULT14
                              ensure_single_instance.symtab0xe15c352FUNC<unknown>DEFAULT2
                              environ.symtab0x26fa84OBJECT<unknown>DEFAULT14
                              errno.symtab0x04TLS<unknown>DEFAULT8
                              errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              exit.symtab0x1450c196FUNC<unknown>DEFAULT2
                              exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              exp10_table.symtab0x1d58872OBJECT<unknown>DEFAULT4
                              fclose.symtab0x16aa8816FUNC<unknown>DEFAULT2
                              fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              fcntl.symtab0xff50244FUNC<unknown>DEFAULT2
                              fd_ctrl.symtab0x257e44OBJECT<unknown>DEFAULT13
                              fd_serv.symtab0x257e84OBJECT<unknown>DEFAULT13
                              fd_to_DIR.symtab0x10538208FUNC<unknown>DEFAULT2
                              fdopendir.symtab0x106cc176FUNC<unknown>DEFAULT2
                              fds.symtab0x1c3ff2OBJECT<unknown>DEFAULT4
                              fflush_unlocked.symtab0x18588940FUNC<unknown>DEFAULT2
                              fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
                              fgetc.symtab0x18078324FUNC<unknown>DEFAULT2

                              Network Behavior

                              Download Network PCAP: filtered – full

                              Suricata IDS Alerts

                              TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                              2025-01-19T02:53:01.195443+01002500034ET COMPROMISED Known Compromised or Hostile Host Traffic group 18283.222.191.9013566192.168.2.2342752TCP

                              Network Port Distribution

                              • Total Packets: 251
                              • • 13566 undefined
                              • • 443 (HTTPS)
                              • • 80 (HTTP)
                              • • 53 (DNS)
                              TimestampSource PortDest PortSource IPDest IP
                              Jan 19, 2025 02:53:00.574425936 CET4636213566192.168.2.2383.222.170.166
                              Jan 19, 2025 02:53:00.579457045 CET135664636283.222.170.166192.168.2.23
                              Jan 19, 2025 02:53:00.579566956 CET4636213566192.168.2.2383.222.170.166
                              Jan 19, 2025 02:53:00.598258972 CET4636213566192.168.2.2383.222.170.166
                              Jan 19, 2025 02:53:00.602227926 CET3375613566192.168.2.2383.222.3.229
                              Jan 19, 2025 02:53:00.603333950 CET135664636283.222.170.166192.168.2.23
                              Jan 19, 2025 02:53:00.603389978 CET4636213566192.168.2.2383.222.170.166
                              Jan 19, 2025 02:53:00.607153893 CET135663375683.222.3.229192.168.2.23
                              Jan 19, 2025 02:53:00.607207060 CET3375613566192.168.2.2383.222.3.229
                              Jan 19, 2025 02:53:00.608838081 CET4804213566192.168.2.2383.222.25.76
                              Jan 19, 2025 02:53:00.613770008 CET135664804283.222.25.76192.168.2.23
                              Jan 19, 2025 02:53:00.613945007 CET4804213566192.168.2.2383.222.25.76
                              Jan 19, 2025 02:53:00.624411106 CET4804213566192.168.2.2383.222.25.76
                              Jan 19, 2025 02:53:00.628910065 CET3281213566192.168.2.2383.222.86.72
                              Jan 19, 2025 02:53:00.630122900 CET135664804283.222.25.76192.168.2.23
                              Jan 19, 2025 02:53:00.630278111 CET4804213566192.168.2.2383.222.25.76
                              Jan 19, 2025 02:53:00.631340981 CET5432613566192.168.2.2383.222.26.78
                              Jan 19, 2025 02:53:00.633743048 CET135663281283.222.86.72192.168.2.23
                              Jan 19, 2025 02:53:00.633842945 CET3281213566192.168.2.2383.222.86.72
                              Jan 19, 2025 02:53:00.636109114 CET135665432683.222.26.78192.168.2.23
                              Jan 19, 2025 02:53:00.636189938 CET5432613566192.168.2.2383.222.26.78
                              Jan 19, 2025 02:53:00.645899057 CET5432613566192.168.2.2383.222.26.78
                              Jan 19, 2025 02:53:00.648385048 CET5948613566192.168.2.2383.222.173.82
                              Jan 19, 2025 02:53:00.650726080 CET135665432683.222.26.78192.168.2.23
                              Jan 19, 2025 02:53:00.650767088 CET5432613566192.168.2.2383.222.26.78
                              Jan 19, 2025 02:53:00.653635979 CET5481613566192.168.2.2383.222.222.50
                              Jan 19, 2025 02:53:00.656083107 CET135665948683.222.173.82192.168.2.23
                              Jan 19, 2025 02:53:00.656131983 CET5948613566192.168.2.2383.222.173.82
                              Jan 19, 2025 02:53:00.658540964 CET3481213566192.168.2.2383.222.231.172
                              Jan 19, 2025 02:53:00.659512043 CET135665481683.222.222.50192.168.2.23
                              Jan 19, 2025 02:53:00.659574986 CET5481613566192.168.2.2383.222.222.50
                              Jan 19, 2025 02:53:00.662842989 CET4902013566192.168.2.2383.222.243.186
                              Jan 19, 2025 02:53:00.664290905 CET135663481283.222.231.172192.168.2.23
                              Jan 19, 2025 02:53:00.664370060 CET3481213566192.168.2.2383.222.231.172
                              Jan 19, 2025 02:53:00.668601036 CET135664902083.222.243.186192.168.2.23
                              Jan 19, 2025 02:53:00.668668032 CET4902013566192.168.2.2383.222.243.186
                              Jan 19, 2025 02:53:00.669281960 CET3511613566192.168.2.2383.222.44.224
                              Jan 19, 2025 02:53:00.674968958 CET3399613566192.168.2.2383.222.219.40
                              Jan 19, 2025 02:53:00.675092936 CET135663511683.222.44.224192.168.2.23
                              Jan 19, 2025 02:53:00.675357103 CET3511613566192.168.2.2383.222.44.224
                              Jan 19, 2025 02:53:00.680095911 CET4796813566192.168.2.2383.222.0.78
                              Jan 19, 2025 02:53:00.680670977 CET135663399683.222.219.40192.168.2.23
                              Jan 19, 2025 02:53:00.680831909 CET3399613566192.168.2.2383.222.219.40
                              Jan 19, 2025 02:53:00.685226917 CET5189413566192.168.2.2383.222.202.246
                              Jan 19, 2025 02:53:00.685905933 CET135664796883.222.0.78192.168.2.23
                              Jan 19, 2025 02:53:00.685945988 CET4796813566192.168.2.2383.222.0.78
                              Jan 19, 2025 02:53:00.690979004 CET135665189483.222.202.246192.168.2.23
                              Jan 19, 2025 02:53:00.691020012 CET5189413566192.168.2.2383.222.202.246
                              Jan 19, 2025 02:53:00.691545010 CET3884013566192.168.2.2383.222.82.217
                              Jan 19, 2025 02:53:00.698041916 CET5596813566192.168.2.2383.222.174.228
                              Jan 19, 2025 02:53:00.699528933 CET135663884083.222.82.217192.168.2.23
                              Jan 19, 2025 02:53:00.699578047 CET3884013566192.168.2.2383.222.82.217
                              Jan 19, 2025 02:53:00.700433016 CET4587213566192.168.2.2383.222.66.88
                              Jan 19, 2025 02:53:00.703862906 CET135665596883.222.174.228192.168.2.23
                              Jan 19, 2025 02:53:00.703912020 CET5596813566192.168.2.2383.222.174.228
                              Jan 19, 2025 02:53:00.706089973 CET135664587283.222.66.88192.168.2.23
                              Jan 19, 2025 02:53:00.706137896 CET4587213566192.168.2.2383.222.66.88
                              Jan 19, 2025 02:53:00.707031965 CET4450613566192.168.2.2383.222.138.69
                              Jan 19, 2025 02:53:00.710469007 CET4294213566192.168.2.2383.222.61.164
                              Jan 19, 2025 02:53:00.712820053 CET135664450683.222.138.69192.168.2.23
                              Jan 19, 2025 02:53:00.712872028 CET4450613566192.168.2.2383.222.138.69
                              Jan 19, 2025 02:53:00.716254950 CET135664294283.222.61.164192.168.2.23
                              Jan 19, 2025 02:53:00.716377974 CET4294213566192.168.2.2383.222.61.164
                              Jan 19, 2025 02:53:00.731379032 CET5577413566192.168.2.2383.222.145.148
                              Jan 19, 2025 02:53:00.737291098 CET135665577483.222.145.148192.168.2.23
                              Jan 19, 2025 02:53:00.737343073 CET5577413566192.168.2.2383.222.145.148
                              Jan 19, 2025 02:53:00.747993946 CET4492413566192.168.2.2383.222.236.171
                              Jan 19, 2025 02:53:00.753879070 CET135664492483.222.236.171192.168.2.23
                              Jan 19, 2025 02:53:00.753982067 CET4492413566192.168.2.2383.222.236.171
                              Jan 19, 2025 02:53:00.766060114 CET5604613566192.168.2.2383.222.226.153
                              Jan 19, 2025 02:53:00.770942926 CET135665604683.222.226.153192.168.2.23
                              Jan 19, 2025 02:53:00.771142960 CET5604613566192.168.2.2383.222.226.153
                              Jan 19, 2025 02:53:00.776515961 CET5604613566192.168.2.2383.222.226.153
                              Jan 19, 2025 02:53:00.780503035 CET3398013566192.168.2.2383.222.253.193
                              Jan 19, 2025 02:53:00.781516075 CET135665604683.222.226.153192.168.2.23
                              Jan 19, 2025 02:53:00.781750917 CET5604613566192.168.2.2383.222.226.153
                              Jan 19, 2025 02:53:00.785413980 CET135663398083.222.253.193192.168.2.23
                              Jan 19, 2025 02:53:00.785482883 CET3398013566192.168.2.2383.222.253.193
                              Jan 19, 2025 02:53:00.785767078 CET4047213566192.168.2.2383.222.203.228
                              Jan 19, 2025 02:53:00.787256956 CET3741213566192.168.2.2383.222.109.190
                              Jan 19, 2025 02:53:00.789865017 CET3572813566192.168.2.2383.222.158.153
                              Jan 19, 2025 02:53:00.790648937 CET135664047283.222.203.228192.168.2.23
                              Jan 19, 2025 02:53:00.790693045 CET4047213566192.168.2.2383.222.203.228
                              Jan 19, 2025 02:53:00.792037010 CET135663741283.222.109.190192.168.2.23
                              Jan 19, 2025 02:53:00.792079926 CET3741213566192.168.2.2383.222.109.190
                              Jan 19, 2025 02:53:00.794383049 CET3742413566192.168.2.2383.222.159.121
                              Jan 19, 2025 02:53:00.794743061 CET135663572883.222.158.153192.168.2.23
                              Jan 19, 2025 02:53:00.794811964 CET3572813566192.168.2.2383.222.158.153
                              Jan 19, 2025 02:53:00.796322107 CET5751813566192.168.2.2383.222.194.159
                              Jan 19, 2025 02:53:00.797991991 CET3904613566192.168.2.2383.222.199.140
                              Jan 19, 2025 02:53:00.799185991 CET135663742483.222.159.121192.168.2.23
                              Jan 19, 2025 02:53:00.799251080 CET3742413566192.168.2.2383.222.159.121
                              Jan 19, 2025 02:53:00.801143885 CET135665751883.222.194.159192.168.2.23
                              Jan 19, 2025 02:53:00.801198006 CET5751813566192.168.2.2383.222.194.159
                              Jan 19, 2025 02:53:00.802820921 CET135663904683.222.199.140192.168.2.23
                              Jan 19, 2025 02:53:00.802872896 CET3904613566192.168.2.2383.222.199.140
                              Jan 19, 2025 02:53:00.806499958 CET3904613566192.168.2.2383.222.199.140
                              Jan 19, 2025 02:53:00.811456919 CET135663904683.222.199.140192.168.2.23
                              Jan 19, 2025 02:53:00.811506033 CET3904613566192.168.2.2383.222.199.140
                              Jan 19, 2025 02:53:00.825220108 CET4839613566192.168.2.2383.222.149.26
                              Jan 19, 2025 02:53:00.830106974 CET135664839683.222.149.26192.168.2.23
                              Jan 19, 2025 02:53:00.830156088 CET4839613566192.168.2.2383.222.149.26
                              Jan 19, 2025 02:53:00.831114054 CET3866213566192.168.2.2383.222.101.68
                              Jan 19, 2025 02:53:00.835933924 CET135663866283.222.101.68192.168.2.23
                              Jan 19, 2025 02:53:00.835999012 CET3866213566192.168.2.2383.222.101.68
                              Jan 19, 2025 02:53:00.848129988 CET3866213566192.168.2.2383.222.101.68
                              Jan 19, 2025 02:53:00.851588964 CET5734413566192.168.2.2383.222.254.167
                              Jan 19, 2025 02:53:00.853063107 CET135663866283.222.101.68192.168.2.23
                              Jan 19, 2025 02:53:00.853104115 CET3866213566192.168.2.2383.222.101.68
                              Jan 19, 2025 02:53:00.856446028 CET135665734483.222.254.167192.168.2.23
                              Jan 19, 2025 02:53:00.856589079 CET5734413566192.168.2.2383.222.254.167
                              Jan 19, 2025 02:53:00.857836008 CET4236813566192.168.2.2383.222.156.137
                              Jan 19, 2025 02:53:00.862723112 CET135664236883.222.156.137192.168.2.23
                              Jan 19, 2025 02:53:00.862814903 CET4236813566192.168.2.2383.222.156.137
                              Jan 19, 2025 02:53:00.865566969 CET5322613566192.168.2.2383.222.236.218
                              Jan 19, 2025 02:53:00.868918896 CET3876813566192.168.2.2383.222.45.125
                              Jan 19, 2025 02:53:00.870491982 CET135665322683.222.236.218192.168.2.23
                              Jan 19, 2025 02:53:00.870534897 CET5322613566192.168.2.2383.222.236.218
                              Jan 19, 2025 02:53:00.873718977 CET135663876883.222.45.125192.168.2.23
                              Jan 19, 2025 02:53:00.873769999 CET3876813566192.168.2.2383.222.45.125
                              Jan 19, 2025 02:53:00.876141071 CET3554813566192.168.2.2383.222.110.25
                              Jan 19, 2025 02:53:00.881006002 CET135663554883.222.110.25192.168.2.23
                              Jan 19, 2025 02:53:00.881053925 CET3554813566192.168.2.2383.222.110.25
                              Jan 19, 2025 02:53:00.883384943 CET5161413566192.168.2.2383.222.40.80
                              Jan 19, 2025 02:53:00.888276100 CET135665161483.222.40.80192.168.2.23
                              Jan 19, 2025 02:53:00.888462067 CET5161413566192.168.2.2383.222.40.80
                              Jan 19, 2025 02:53:00.888736963 CET4116013566192.168.2.2383.222.178.38
                              Jan 19, 2025 02:53:00.893527031 CET135664116083.222.178.38192.168.2.23
                              Jan 19, 2025 02:53:00.893646002 CET4116013566192.168.2.2383.222.178.38
                              Jan 19, 2025 02:53:00.894968987 CET3775413566192.168.2.2383.222.17.125
                              Jan 19, 2025 02:53:00.899836063 CET135663775483.222.17.125192.168.2.23
                              Jan 19, 2025 02:53:00.900031090 CET3775413566192.168.2.2383.222.17.125
                              Jan 19, 2025 02:53:00.903642893 CET3775413566192.168.2.2383.222.17.125
                              Jan 19, 2025 02:53:00.908540010 CET135663775483.222.17.125192.168.2.23
                              Jan 19, 2025 02:53:00.908600092 CET3775413566192.168.2.2383.222.17.125
                              Jan 19, 2025 02:53:00.909351110 CET5653613566192.168.2.2383.222.10.127
                              Jan 19, 2025 02:53:00.914171934 CET135665653683.222.10.127192.168.2.23
                              Jan 19, 2025 02:53:00.914232016 CET5653613566192.168.2.2383.222.10.127
                              Jan 19, 2025 02:53:00.914433956 CET3756013566192.168.2.2383.222.60.169
                              Jan 19, 2025 02:53:00.916814089 CET6097013566192.168.2.2383.222.24.219
                              Jan 19, 2025 02:53:00.918248892 CET4565813566192.168.2.2383.222.34.218
                              Jan 19, 2025 02:53:00.919239044 CET135663756083.222.60.169192.168.2.23
                              Jan 19, 2025 02:53:00.919280052 CET3756013566192.168.2.2383.222.60.169
                              Jan 19, 2025 02:53:00.919699907 CET4109013566192.168.2.2383.222.122.234
                              Jan 19, 2025 02:53:00.920876980 CET5494213566192.168.2.2383.222.103.15
                              Jan 19, 2025 02:53:00.921648979 CET135666097083.222.24.219192.168.2.23
                              Jan 19, 2025 02:53:00.921806097 CET6097013566192.168.2.2383.222.24.219
                              Jan 19, 2025 02:53:00.922374964 CET4647813566192.168.2.2383.222.4.204
                              Jan 19, 2025 02:53:00.923073053 CET135664565883.222.34.218192.168.2.23
                              Jan 19, 2025 02:53:00.923255920 CET4565813566192.168.2.2383.222.34.218
                              Jan 19, 2025 02:53:00.923695087 CET3605013566192.168.2.2383.222.83.2
                              Jan 19, 2025 02:53:00.924618959 CET135664109083.222.122.234192.168.2.23
                              Jan 19, 2025 02:53:00.924802065 CET4109013566192.168.2.2383.222.122.234
                              Jan 19, 2025 02:53:00.925725937 CET135665494283.222.103.15192.168.2.23
                              Jan 19, 2025 02:53:00.925741911 CET5585813566192.168.2.2383.222.116.240
                              Jan 19, 2025 02:53:00.925765038 CET5494213566192.168.2.2383.222.103.15
                              Jan 19, 2025 02:53:00.927125931 CET135664647883.222.4.204192.168.2.23
                              Jan 19, 2025 02:53:00.927335978 CET4647813566192.168.2.2383.222.4.204
                              Jan 19, 2025 02:53:00.927858114 CET3563013566192.168.2.2383.222.139.96
                              Jan 19, 2025 02:53:00.928463936 CET135663605083.222.83.2192.168.2.23
                              Jan 19, 2025 02:53:00.928514957 CET3605013566192.168.2.2383.222.83.2
                              Jan 19, 2025 02:53:00.929714918 CET5492813566192.168.2.2383.222.202.184
                              Jan 19, 2025 02:53:00.930542946 CET135665585883.222.116.240192.168.2.23
                              Jan 19, 2025 02:53:00.930660009 CET5585813566192.168.2.2383.222.116.240
                              Jan 19, 2025 02:53:00.931422949 CET3622413566192.168.2.2383.222.222.56
                              Jan 19, 2025 02:53:00.932607889 CET135663563083.222.139.96192.168.2.23
                              Jan 19, 2025 02:53:00.932646990 CET3563013566192.168.2.2383.222.139.96
                              Jan 19, 2025 02:53:00.933074951 CET5149213566192.168.2.2383.222.209.6
                              Jan 19, 2025 02:53:00.934545040 CET135665492883.222.202.184192.168.2.23
                              Jan 19, 2025 02:53:00.934591055 CET5492813566192.168.2.2383.222.202.184
                              Jan 19, 2025 02:53:00.934830904 CET3902613566192.168.2.2383.222.136.131
                              Jan 19, 2025 02:53:00.936203957 CET135663622483.222.222.56192.168.2.23
                              Jan 19, 2025 02:53:00.936379910 CET3622413566192.168.2.2383.222.222.56
                              Jan 19, 2025 02:53:00.936817884 CET5206213566192.168.2.2383.222.44.154
                              Jan 19, 2025 02:53:00.937901020 CET135665149283.222.209.6192.168.2.23
                              Jan 19, 2025 02:53:00.937944889 CET5149213566192.168.2.2383.222.209.6
                              Jan 19, 2025 02:53:00.939450979 CET4947013566192.168.2.2383.222.1.55
                              Jan 19, 2025 02:53:00.939637899 CET135663902683.222.136.131192.168.2.23
                              Jan 19, 2025 02:53:00.939683914 CET3902613566192.168.2.2383.222.136.131
                              Jan 19, 2025 02:53:00.940670967 CET5085813566192.168.2.2383.222.25.61
                              Jan 19, 2025 02:53:00.941684008 CET135665206283.222.44.154192.168.2.23
                              Jan 19, 2025 02:53:00.941813946 CET5206213566192.168.2.2383.222.44.154
                              Jan 19, 2025 02:53:00.942882061 CET5472013566192.168.2.2383.222.224.49
                              Jan 19, 2025 02:53:00.944184065 CET135664947083.222.1.55192.168.2.23
                              Jan 19, 2025 02:53:00.944226980 CET4947013566192.168.2.2383.222.1.55
                              Jan 19, 2025 02:53:00.945488930 CET135665085883.222.25.61192.168.2.23
                              Jan 19, 2025 02:53:00.945533991 CET5085813566192.168.2.2383.222.25.61
                              Jan 19, 2025 02:53:00.946661949 CET4959813566192.168.2.2383.222.24.2
                              Jan 19, 2025 02:53:00.947681904 CET135665472083.222.224.49192.168.2.23
                              Jan 19, 2025 02:53:00.947757006 CET5472013566192.168.2.2383.222.224.49
                              Jan 19, 2025 02:53:00.949840069 CET4202413566192.168.2.2383.222.12.146
                              Jan 19, 2025 02:53:00.951515913 CET135664959883.222.24.2192.168.2.23
                              Jan 19, 2025 02:53:00.951556921 CET4959813566192.168.2.2383.222.24.2
                              Jan 19, 2025 02:53:00.953483105 CET3944813566192.168.2.2383.222.236.115
                              Jan 19, 2025 02:53:00.954598904 CET135664202483.222.12.146192.168.2.23
                              Jan 19, 2025 02:53:00.954788923 CET4202413566192.168.2.2383.222.12.146
                              Jan 19, 2025 02:53:00.956144094 CET5609413566192.168.2.2383.222.161.240
                              Jan 19, 2025 02:53:00.958266020 CET135663944883.222.236.115192.168.2.23
                              Jan 19, 2025 02:53:00.958509922 CET3944813566192.168.2.2383.222.236.115
                              Jan 19, 2025 02:53:00.959877014 CET5551613566192.168.2.2383.222.63.245
                              Jan 19, 2025 02:53:00.960922003 CET135665609483.222.161.240192.168.2.23
                              Jan 19, 2025 02:53:00.960994959 CET5609413566192.168.2.2383.222.161.240
                              Jan 19, 2025 02:53:00.963063955 CET5966813566192.168.2.2383.222.243.179
                              Jan 19, 2025 02:53:00.964807987 CET135665551683.222.63.245192.168.2.23
                              Jan 19, 2025 02:53:00.964982986 CET5551613566192.168.2.2383.222.63.245
                              Jan 19, 2025 02:53:00.966401100 CET4034013566192.168.2.2383.222.229.126
                              Jan 19, 2025 02:53:00.967909098 CET135665966883.222.243.179192.168.2.23
                              Jan 19, 2025 02:53:00.968065977 CET5966813566192.168.2.2383.222.243.179
                              Jan 19, 2025 02:53:00.969568014 CET4994013566192.168.2.2383.222.20.175
                              Jan 19, 2025 02:53:00.971169949 CET135664034083.222.229.126192.168.2.23
                              Jan 19, 2025 02:53:00.971219063 CET4034013566192.168.2.2383.222.229.126
                              Jan 19, 2025 02:53:00.972997904 CET4465813566192.168.2.2383.222.55.242
                              Jan 19, 2025 02:53:00.974378109 CET135664994083.222.20.175192.168.2.23
                              Jan 19, 2025 02:53:00.974513054 CET4994013566192.168.2.2383.222.20.175
                              Jan 19, 2025 02:53:00.976636887 CET3657013566192.168.2.2383.222.231.8
                              Jan 19, 2025 02:53:00.977782965 CET135664465883.222.55.242192.168.2.23
                              Jan 19, 2025 02:53:00.977930069 CET4465813566192.168.2.2383.222.55.242
                              Jan 19, 2025 02:53:00.981635094 CET135663657083.222.231.8192.168.2.23
                              Jan 19, 2025 02:53:00.981797934 CET3657013566192.168.2.2383.222.231.8
                              Jan 19, 2025 02:53:00.981918097 CET5850613566192.168.2.2383.222.248.111
                              Jan 19, 2025 02:53:00.986381054 CET4974613566192.168.2.2383.222.140.37
                              Jan 19, 2025 02:53:00.986788988 CET135665850683.222.248.111192.168.2.23
                              Jan 19, 2025 02:53:00.987056971 CET5850613566192.168.2.2383.222.248.111
                              Jan 19, 2025 02:53:00.991250992 CET135664974683.222.140.37192.168.2.23
                              Jan 19, 2025 02:53:00.991358042 CET4974613566192.168.2.2383.222.140.37
                              Jan 19, 2025 02:53:00.993024111 CET3713013566192.168.2.2383.222.9.141
                              Jan 19, 2025 02:53:00.998012066 CET135663713083.222.9.141192.168.2.23
                              Jan 19, 2025 02:53:00.998178005 CET3713013566192.168.2.2383.222.9.141
                              Jan 19, 2025 02:53:00.998761892 CET5963613566192.168.2.2383.222.92.34
                              Jan 19, 2025 02:53:01.003648996 CET135665963683.222.92.34192.168.2.23
                              Jan 19, 2025 02:53:01.003705025 CET5963613566192.168.2.2383.222.92.34
                              Jan 19, 2025 02:53:01.004034042 CET4532013566192.168.2.2383.222.202.60
                              Jan 19, 2025 02:53:01.008876085 CET135664532083.222.202.60192.168.2.23
                              Jan 19, 2025 02:53:01.008919954 CET4532013566192.168.2.2383.222.202.60
                              Jan 19, 2025 02:53:01.009239912 CET4002413566192.168.2.2383.222.84.226
                              Jan 19, 2025 02:53:01.014168024 CET135664002483.222.84.226192.168.2.23
                              Jan 19, 2025 02:53:01.014229059 CET4002413566192.168.2.2383.222.84.226
                              Jan 19, 2025 02:53:01.016386032 CET5125813566192.168.2.2383.222.62.96
                              Jan 19, 2025 02:53:01.021389961 CET135665125883.222.62.96192.168.2.23
                              Jan 19, 2025 02:53:01.021512985 CET5125813566192.168.2.2383.222.62.96
                              Jan 19, 2025 02:53:01.022661924 CET5815813566192.168.2.2383.222.116.43
                              Jan 19, 2025 02:53:01.027791023 CET135665815883.222.116.43192.168.2.23
                              Jan 19, 2025 02:53:01.027976990 CET5815813566192.168.2.2383.222.116.43
                              Jan 19, 2025 02:53:01.028397083 CET5815813566192.168.2.2383.222.116.43
                              Jan 19, 2025 02:53:01.033441067 CET135665815883.222.116.43192.168.2.23
                              Jan 19, 2025 02:53:01.033489943 CET5815813566192.168.2.2383.222.116.43
                              Jan 19, 2025 02:53:01.033709049 CET4892213566192.168.2.2383.222.211.21
                              Jan 19, 2025 02:53:01.038647890 CET135664892283.222.211.21192.168.2.23
                              Jan 19, 2025 02:53:01.038820982 CET4892213566192.168.2.2383.222.211.21
                              Jan 19, 2025 02:53:01.039140940 CET4892213566192.168.2.2383.222.211.21
                              Jan 19, 2025 02:53:01.041536093 CET5034613566192.168.2.2383.222.27.18
                              Jan 19, 2025 02:53:01.043975115 CET135664892283.222.211.21192.168.2.23
                              Jan 19, 2025 02:53:01.044025898 CET4892213566192.168.2.2383.222.211.21
                              Jan 19, 2025 02:53:01.046426058 CET135665034683.222.27.18192.168.2.23
                              Jan 19, 2025 02:53:01.046675920 CET5034613566192.168.2.2383.222.27.18
                              Jan 19, 2025 02:53:01.050493002 CET5177413566192.168.2.2383.222.10.14
                              Jan 19, 2025 02:53:01.055496931 CET135665177483.222.10.14192.168.2.23
                              Jan 19, 2025 02:53:01.055619001 CET5177413566192.168.2.2383.222.10.14
                              Jan 19, 2025 02:53:01.057877064 CET5044413566192.168.2.2383.222.198.239
                              Jan 19, 2025 02:53:01.062889099 CET135665044483.222.198.239192.168.2.23
                              Jan 19, 2025 02:53:01.063100100 CET5044413566192.168.2.2383.222.198.239
                              Jan 19, 2025 02:53:01.063774109 CET5044413566192.168.2.2383.222.198.239
                              Jan 19, 2025 02:53:01.067934036 CET4951213566192.168.2.2383.222.141.218
                              Jan 19, 2025 02:53:01.069077015 CET135665044483.222.198.239192.168.2.23
                              Jan 19, 2025 02:53:01.069221973 CET5044413566192.168.2.2383.222.198.239
                              Jan 19, 2025 02:53:01.073152065 CET135664951283.222.141.218192.168.2.23
                              Jan 19, 2025 02:53:01.073280096 CET4951213566192.168.2.2383.222.141.218
                              Jan 19, 2025 02:53:01.076236963 CET3828413566192.168.2.2383.222.158.196
                              Jan 19, 2025 02:53:01.081427097 CET135663828483.222.158.196192.168.2.23
                              Jan 19, 2025 02:53:01.081738949 CET3828413566192.168.2.2383.222.158.196
                              Jan 19, 2025 02:53:01.084980011 CET4397413566192.168.2.2383.222.204.133
                              Jan 19, 2025 02:53:01.090163946 CET135664397483.222.204.133192.168.2.23
                              Jan 19, 2025 02:53:01.090218067 CET4397413566192.168.2.2383.222.204.133
                              Jan 19, 2025 02:53:01.093275070 CET4276013566192.168.2.2383.222.204.196
                              Jan 19, 2025 02:53:01.098767042 CET135664276083.222.204.196192.168.2.23
                              Jan 19, 2025 02:53:01.098860979 CET4276013566192.168.2.2383.222.204.196
                              Jan 19, 2025 02:53:01.099116087 CET4276013566192.168.2.2383.222.204.196
                              Jan 19, 2025 02:53:01.103367090 CET5150013566192.168.2.2383.222.245.88
                              Jan 19, 2025 02:53:01.104460001 CET135664276083.222.204.196192.168.2.23
                              Jan 19, 2025 02:53:01.104712009 CET4276013566192.168.2.2383.222.204.196
                              Jan 19, 2025 02:53:01.108505964 CET135665150083.222.245.88192.168.2.23
                              Jan 19, 2025 02:53:01.108653069 CET5150013566192.168.2.2383.222.245.88
                              Jan 19, 2025 02:53:01.117043018 CET5150013566192.168.2.2383.222.245.88
                              Jan 19, 2025 02:53:01.122339964 CET135665150083.222.245.88192.168.2.23
                              Jan 19, 2025 02:53:01.122472048 CET5150013566192.168.2.2383.222.245.88
                              Jan 19, 2025 02:53:01.126595020 CET3920813566192.168.2.2383.222.233.254
                              Jan 19, 2025 02:53:01.132006884 CET135663920883.222.233.254192.168.2.23
                              Jan 19, 2025 02:53:01.132071018 CET3920813566192.168.2.2383.222.233.254
                              Jan 19, 2025 02:53:01.132117033 CET4897213566192.168.2.2383.222.229.69
                              Jan 19, 2025 02:53:01.137398958 CET135664897283.222.229.69192.168.2.23
                              Jan 19, 2025 02:53:01.137574911 CET4897213566192.168.2.2383.222.229.69
                              Jan 19, 2025 02:53:01.137959003 CET4044813566192.168.2.2383.222.33.175
                              Jan 19, 2025 02:53:01.142393112 CET4317213566192.168.2.2383.222.129.117
                              Jan 19, 2025 02:53:01.143105984 CET135664044883.222.33.175192.168.2.23
                              Jan 19, 2025 02:53:01.143156052 CET4044813566192.168.2.2383.222.33.175
                              Jan 19, 2025 02:53:01.144036055 CET5557213566192.168.2.2383.222.145.192
                              Jan 19, 2025 02:53:01.146197081 CET3351413566192.168.2.2383.222.213.5
                              Jan 19, 2025 02:53:01.147605896 CET135664317283.222.129.117192.168.2.23
                              Jan 19, 2025 02:53:01.147658110 CET4317213566192.168.2.2383.222.129.117
                              Jan 19, 2025 02:53:01.148070097 CET3418413566192.168.2.2383.222.235.168
                              Jan 19, 2025 02:53:01.148876905 CET135665557283.222.145.192192.168.2.23
                              Jan 19, 2025 02:53:01.148936033 CET5557213566192.168.2.2383.222.145.192
                              Jan 19, 2025 02:53:01.149570942 CET3521613566192.168.2.2383.222.27.6
                              Jan 19, 2025 02:53:01.151026964 CET135663351483.222.213.5192.168.2.23
                              Jan 19, 2025 02:53:01.151184082 CET3351413566192.168.2.2383.222.213.5
                              Jan 19, 2025 02:53:01.151669025 CET4749613566192.168.2.2383.222.186.37
                              Jan 19, 2025 02:53:01.153037071 CET135663418483.222.235.168192.168.2.23
                              Jan 19, 2025 02:53:01.153150082 CET4669813566192.168.2.2383.222.21.128
                              Jan 19, 2025 02:53:01.153239012 CET3418413566192.168.2.2383.222.235.168
                              Jan 19, 2025 02:53:01.154444933 CET135663521683.222.27.6192.168.2.23
                              Jan 19, 2025 02:53:01.154483080 CET3521613566192.168.2.2383.222.27.6
                              Jan 19, 2025 02:53:01.154805899 CET3411813566192.168.2.2383.222.21.162
                              Jan 19, 2025 02:53:01.156140089 CET5304013566192.168.2.2383.222.90.179
                              Jan 19, 2025 02:53:01.156455040 CET135664749683.222.186.37192.168.2.23
                              Jan 19, 2025 02:53:01.156507969 CET4749613566192.168.2.2383.222.186.37
                              Jan 19, 2025 02:53:01.157970905 CET135664669883.222.21.128192.168.2.23
                              Jan 19, 2025 02:53:01.158015966 CET4669813566192.168.2.2383.222.21.128
                              Jan 19, 2025 02:53:01.158299923 CET5797813566192.168.2.2383.222.102.38
                              Jan 19, 2025 02:53:01.159718037 CET135663411883.222.21.162192.168.2.23
                              Jan 19, 2025 02:53:01.159770966 CET3411813566192.168.2.2383.222.21.162
                              Jan 19, 2025 02:53:01.159943104 CET3331213566192.168.2.2383.222.57.50
                              Jan 19, 2025 02:53:01.161020994 CET135665304083.222.90.179192.168.2.23
                              Jan 19, 2025 02:53:01.161079884 CET5304013566192.168.2.2383.222.90.179
                              Jan 19, 2025 02:53:01.162126064 CET4404013566192.168.2.2383.222.235.46
                              Jan 19, 2025 02:53:01.163094044 CET135665797883.222.102.38192.168.2.23
                              Jan 19, 2025 02:53:01.163247108 CET5797813566192.168.2.2383.222.102.38
                              Jan 19, 2025 02:53:01.163491011 CET4915613566192.168.2.2383.222.139.212
                              Jan 19, 2025 02:53:01.164865971 CET135663331283.222.57.50192.168.2.23
                              Jan 19, 2025 02:53:01.164925098 CET3331213566192.168.2.2383.222.57.50
                              Jan 19, 2025 02:53:01.164943933 CET4467213566192.168.2.2383.222.44.112
                              Jan 19, 2025 02:53:01.166704893 CET5632413566192.168.2.2383.222.26.77
                              Jan 19, 2025 02:53:01.167021990 CET135664404083.222.235.46192.168.2.23
                              Jan 19, 2025 02:53:01.167072058 CET4404013566192.168.2.2383.222.235.46
                              Jan 19, 2025 02:53:01.168327093 CET135664915683.222.139.212192.168.2.23
                              Jan 19, 2025 02:53:01.168381929 CET4915613566192.168.2.2383.222.139.212
                              Jan 19, 2025 02:53:01.168638945 CET4262613566192.168.2.2383.222.32.155
                              Jan 19, 2025 02:53:01.169956923 CET135664467283.222.44.112192.168.2.23
                              Jan 19, 2025 02:53:01.170097113 CET4467213566192.168.2.2383.222.44.112
                              Jan 19, 2025 02:53:01.170387983 CET5988813566192.168.2.2383.222.194.177
                              Jan 19, 2025 02:53:01.171664000 CET135665632483.222.26.77192.168.2.23
                              Jan 19, 2025 02:53:01.171730995 CET5632413566192.168.2.2383.222.26.77
                              Jan 19, 2025 02:53:01.172204018 CET5109613566192.168.2.2383.222.91.151
                              Jan 19, 2025 02:53:01.173654079 CET135664262683.222.32.155192.168.2.23
                              Jan 19, 2025 02:53:01.173713923 CET4262613566192.168.2.2383.222.32.155
                              Jan 19, 2025 02:53:01.173947096 CET5979613566192.168.2.2383.222.183.70
                              Jan 19, 2025 02:53:01.175527096 CET135665988883.222.194.177192.168.2.23
                              Jan 19, 2025 02:53:01.175571918 CET5988813566192.168.2.2383.222.194.177
                              Jan 19, 2025 02:53:01.177444935 CET135665109683.222.91.151192.168.2.23
                              Jan 19, 2025 02:53:01.177582026 CET5109613566192.168.2.2383.222.91.151
                              Jan 19, 2025 02:53:01.179028034 CET135665979683.222.183.70192.168.2.23
                              Jan 19, 2025 02:53:01.179084063 CET5979613566192.168.2.2383.222.183.70
                              Jan 19, 2025 02:53:01.190012932 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:53:01.195442915 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:53:01.195682049 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:53:01.202243090 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:53:01.207495928 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:53:01.207663059 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:53:01.213088036 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:53:02.328478098 CET42836443192.168.2.2391.189.91.43
                              Jan 19, 2025 02:53:03.096231937 CET4251680192.168.2.23109.202.202.202
                              Jan 19, 2025 02:53:11.211204052 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:53:11.216561079 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:53:11.412974119 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:53:11.413165092 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:53:11.772192955 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:53:11.772588968 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:53:18.710163116 CET43928443192.168.2.2391.189.91.42
                              Jan 19, 2025 02:53:28.948674917 CET42836443192.168.2.2391.189.91.43
                              Jan 19, 2025 02:53:33.044050932 CET4251680192.168.2.23109.202.202.202
                              Jan 19, 2025 02:53:59.664383888 CET43928443192.168.2.2391.189.91.42
                              Jan 19, 2025 02:54:11.820930958 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:54:11.826868057 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:54:12.022691011 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:54:12.022772074 CET4275213566192.168.2.2383.222.191.90
                              Jan 19, 2025 02:54:12.771532059 CET135664275283.222.191.90192.168.2.23
                              Jan 19, 2025 02:54:12.771851063 CET4275213566192.168.2.2383.222.191.90
                              TimestampSource PortDest PortSource IPDest IP
                              Jan 19, 2025 02:53:01.177906990 CET5786153192.168.2.238.8.8.8
                              Jan 19, 2025 02:53:01.187215090 CET53578618.8.8.8192.168.2.23

                              DNS Queries

                              TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                              Jan 19, 2025 02:53:01.177906990 CET192.168.2.238.8.8.80xc74aStandard query (0)secure-network-rebirthltd.ruA (IP address)IN (0x0001)false

                              DNS Answers

                              TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                              Jan 19, 2025 02:53:01.187215090 CET8.8.8.8192.168.2.230xc74aNo error (0)secure-network-rebirthltd.ru83.222.191.90A (IP address)IN (0x0001)false

                              System Behavior

                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/tmp/Kloki.arm7.elf
                              Arguments:/tmp/Kloki.arm7.elf
                              File size:4956856 bytes
                              MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                              File Activities

                              Process Activities

                              System Activities

                              Network Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/tmp/Kloki.arm7.elf
                              Arguments:-
                              File size:4956856 bytes
                              MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                              File Activities

                              Process Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/tmp/Kloki.arm7.elf
                              Arguments:-
                              File size:4956856 bytes
                              MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                              Process Activities

                              Network Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/tmp/Kloki.arm7.elf
                              Arguments:-
                              File size:4956856 bytes
                              MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

                              File Activities

                              Process Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/usr/libexec/gnome-session-binary
                              Arguments:-
                              File size:334664 bytes
                              MD5 hash:d9b90be4f7db60cb3c2d3da6a1d31bfb

                              Process Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/usr/libexec/gnome-session-binary
                              Arguments:-
                              File size:334664 bytes
                              MD5 hash:d9b90be4f7db60cb3c2d3da6a1d31bfb

                              Process Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/bin/sh
                              Arguments:/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
                              File size:129816 bytes
                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                              File Activities

                              Process Activities


                              General

                              Start time (UTC):01:53:00
                              Start date (UTC):19/01/2025
                              Path:/usr/bin/gnome-shell
                              Arguments:/usr/bin/gnome-shell
                              File size:23168 bytes
                              MD5 hash:da7a257239677622fe4b3a65972c9e87

                              File Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/usr/libexec/gnome-session-binary
                              Arguments:-
                              File size:334664 bytes
                              MD5 hash:d9b90be4f7db60cb3c2d3da6a1d31bfb

                              Process Activities


                              General

                              Start time (UTC):01:52:59
                              Start date (UTC):19/01/2025
                              Path:/bin/sh
                              Arguments:/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-print-notifications
                              File size:129816 bytes
                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                              File Activities


                              General

                              Start time (UTC):01:53:00
                              Start date (UTC):19/01/2025
                              Path:/usr/libexec/gnome-session-binary
                              Arguments:-
                              File size:334664 bytes
                              MD5 hash:d9b90be4f7db60cb3c2d3da6a1d31bfb

                              Process Activities


                              General

                              Start time (UTC):01:53:00
                              Start date (UTC):19/01/2025
                              Path:/bin/sh
                              Arguments:/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
                              File size:129816 bytes
                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                              File Activities


                              General

                              Start time (UTC):01:53:00
                              Start date (UTC):19/01/2025
                              Path:/usr/sbin/gdm3
                              Arguments:-
                              File size:453296 bytes
                              MD5 hash:2492e2d8d34f9377e3e530a61a15674f

                              Process Activities


                              General

                              Start time (UTC):01:53:00
                              Start date (UTC):19/01/2025
                              Path:/etc/gdm3/PrimeOff/Default
                              Arguments:/etc/gdm3/PrimeOff/Default
                              File size:129816 bytes
                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                              File Activities


                              General

                              Start time (UTC):01:53:00
                              Start date (UTC):19/01/2025
                              Path:/usr/sbin/gdm3
                              Arguments:-
                              File size:453296 bytes
                              MD5 hash:2492e2d8d34f9377e3e530a61a15674f

                              Process Activities


                              General

                              Start time (UTC):01:53:00
                              Start date (UTC):19/01/2025
                              Path:/etc/gdm3/PrimeOff/Default
                              Arguments:/etc/gdm3/PrimeOff/Default
                              File size:129816 bytes
                              MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                              File Activities