Linux Analysis Report
XvAqhy3FO6.elf

Overview

General Information

Sample name: XvAqhy3FO6.elf
renamed because original name is a hash value
Original sample name: 1b895813a33cd6d036e4b82faed190c2.elf
Analysis ID: 1528330
MD5: 1b895813a33cd6d036e4b82faed190c2
SHA1: 674f2afd17eeaa10f642b4b2a5c47d9d7d2795a5
SHA256: 67965ef52efc331b6ad7a44e99a793c4def5302dd7d63287bae32ebcc568f41a
Tags: 32elfmipsmirai
Infos:

Detection

Mirai, Okiru
Score: 92
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Sample tries to kill a massive number of system processes
Yara detected Mirai
Yara detected Okiru
Reads system files that contain records of logged in users
Sample reads /proc/mounts (often used for finding a writable filesystem)
Sample tries to kill multiple processes (SIGKILL)
Creates hidden files and/or directories
Deletes log files
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes commands using a shell command-line interpreter
Executes the "grep" command used to find patterns in files or piped streams
Executes the "kill" or "pkill" command typically used to terminate processes
Executes the "rm" command used to delete files or directories
Found strings indicative of a multi-platform dropper
Reads CPU information from /sys indicative of miner or evasive malware
Reads system version information
Reads the 'hosts' file potentially containing internal network hosts
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Sample tries to set the executable flag
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: XvAqhy3FO6.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: XvAqhy3FO6.elf ReversingLabs: Detection: 57%
Reads CPU information from /sys indicative of miner or evasive malware
Source: /usr/bin/pulseaudio (PID: 5487) Reads CPU info from /sys: /sys/devices/system/cpu/online Jump to behavior
Source: /usr/bin/pkill (PID: 5603) Reads CPU info from /sys: /sys/devices/system/cpu/online Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5705) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5724) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5743) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5755) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/gnome-shell (PID: 5785) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6016) Reads CPU info from /sys: /sys/devices/system/cpu/online
Found strings indicative of a multi-platform dropper
Source: XvAqhy3FO6.elf String: 'byte/proc//proc/%s/exe/proc/self/exe/proc/proc/%d/cmdlinenetstatwgettftpftpcurlbusybox/bin/busyboxvar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/soraarmx86dbgmipsmpslbot/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homemipselarm4arm5arm6arm7sh4m68kx586x86_64i586i686ppcspctelnetbotdvrHelperbyte-mirai.kro.kr68.183.18.151
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.13:45106 -> 154.216.20.119:7777
Reads the 'hosts' file potentially containing internal network hosts
Source: /usr/sbin/rsyslogd (PID: 5486) Reads hosts file: /etc/hosts Jump to behavior
Sample listens on a socket
Source: /usr/sbin/gdm3 (PID: 5613) Socket: unknown address family Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5646) Socket: unknown address family Jump to behavior
Source: /usr/libexec/gnome-session-binary (PID: 5647) Socket: unknown address family Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5705) Socket: unknown address family
Source: /usr/bin/dbus-daemon (PID: 5722) Socket: unknown address family
Source: /usr/bin/dbus-daemon (PID: 5742) Socket: unknown address family
Source: /usr/libexec/gnome-session-binary (PID: 5723) Socket: unknown address family
Source: /usr/bin/ibus-daemon (PID: 5917) Socket: unknown address family
Source: unknown TCP traffic detected without corresponding DNS query: 109.130.96.204
Source: unknown TCP traffic detected without corresponding DNS query: 201.71.39.204
Source: unknown TCP traffic detected without corresponding DNS query: 73.7.34.143
Source: unknown TCP traffic detected without corresponding DNS query: 165.217.85.209
Source: unknown TCP traffic detected without corresponding DNS query: 148.201.113.197
Source: unknown TCP traffic detected without corresponding DNS query: 84.151.55.165
Source: unknown TCP traffic detected without corresponding DNS query: 152.78.8.179
Source: unknown TCP traffic detected without corresponding DNS query: 195.190.244.130
Source: unknown TCP traffic detected without corresponding DNS query: 59.181.157.86
Source: unknown TCP traffic detected without corresponding DNS query: 118.62.199.232
Source: unknown TCP traffic detected without corresponding DNS query: 9.91.36.182
Source: unknown TCP traffic detected without corresponding DNS query: 164.150.105.107
Source: unknown TCP traffic detected without corresponding DNS query: 177.61.195.182
Source: unknown TCP traffic detected without corresponding DNS query: 72.147.85.138
Source: unknown TCP traffic detected without corresponding DNS query: 24.61.180.89
Source: unknown TCP traffic detected without corresponding DNS query: 186.103.78.165
Source: unknown TCP traffic detected without corresponding DNS query: 152.86.66.6
Source: unknown TCP traffic detected without corresponding DNS query: 103.117.165.62
Source: unknown TCP traffic detected without corresponding DNS query: 94.245.200.161
Source: unknown TCP traffic detected without corresponding DNS query: 169.21.115.16
Source: unknown TCP traffic detected without corresponding DNS query: 82.142.238.48
Source: unknown TCP traffic detected without corresponding DNS query: 65.127.109.171
Source: unknown TCP traffic detected without corresponding DNS query: 149.9.117.14
Source: unknown TCP traffic detected without corresponding DNS query: 129.164.67.203
Source: unknown TCP traffic detected without corresponding DNS query: 8.99.67.75
Source: unknown TCP traffic detected without corresponding DNS query: 47.106.97.52
Source: unknown TCP traffic detected without corresponding DNS query: 1.37.136.110
Source: unknown TCP traffic detected without corresponding DNS query: 89.148.170.18
Source: unknown TCP traffic detected without corresponding DNS query: 138.184.211.40
Source: unknown TCP traffic detected without corresponding DNS query: 182.113.45.159
Source: unknown TCP traffic detected without corresponding DNS query: 159.179.132.93
Source: unknown TCP traffic detected without corresponding DNS query: 102.76.183.34
Source: unknown TCP traffic detected without corresponding DNS query: 156.52.164.128
Source: unknown TCP traffic detected without corresponding DNS query: 160.7.253.236
Source: unknown TCP traffic detected without corresponding DNS query: 59.54.129.150
Source: unknown TCP traffic detected without corresponding DNS query: 152.184.2.17
Source: unknown TCP traffic detected without corresponding DNS query: 218.38.227.190
Source: unknown TCP traffic detected without corresponding DNS query: 171.34.213.95
Source: unknown TCP traffic detected without corresponding DNS query: 34.185.180.125
Source: unknown TCP traffic detected without corresponding DNS query: 5.247.117.25
Source: unknown TCP traffic detected without corresponding DNS query: 18.158.233.130
Source: unknown TCP traffic detected without corresponding DNS query: 125.25.0.239
Source: unknown TCP traffic detected without corresponding DNS query: 116.173.7.170
Source: unknown TCP traffic detected without corresponding DNS query: 155.111.88.133
Source: unknown TCP traffic detected without corresponding DNS query: 52.146.183.196
Source: unknown TCP traffic detected without corresponding DNS query: 94.94.204.10
Source: unknown TCP traffic detected without corresponding DNS query: 85.17.231.88
Source: unknown TCP traffic detected without corresponding DNS query: 142.242.198.20
Source: unknown TCP traffic detected without corresponding DNS query: 12.169.144.156
Source: unknown TCP traffic detected without corresponding DNS query: 1.148.225.64
Source: global traffic DNS traffic detected: DNS query: byte-mirai.kro.kr
Source: Xorg.0.log.155.dr, syslog.28.dr String found in binary or memory: http://wiki.x.org
Source: Xorg.0.log.155.dr, syslog.28.dr String found in binary or memory: http://www.ubuntu.com/support)
Source: syslog.28.dr String found in binary or memory: https://www.rsyslog.com

System Summary
barindex
Sample tries to kill a massive number of system processes
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 1 (init), result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 2, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 3, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 4, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 5, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 6, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 7, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 8, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 9, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 10, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 11, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 12, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 13, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 14, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 15, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 16, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 17, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 18, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 19, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 20, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 21, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 22, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 23, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 24, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 25, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 26, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 27, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 28, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 29, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 30, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 35, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 77, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 78, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 79, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 80, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 81, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 82, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 83, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 84, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 85, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 86, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 88, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 89, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 91, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 92, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 93, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 94, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 95, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 96, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 97, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 98, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 99, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 100, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 101, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 102, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 103, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 104, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 105, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 106, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 107, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 108, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 109, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 110, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 111, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 112, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 113, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 114, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 115, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 116, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 117, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 118, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 119, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 120, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 121, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 122, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 123, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 124, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 125, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 126, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 127, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 128, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 129, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 130, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 131, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 134, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 142, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 145, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 158, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 202, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 203, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 204, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 205, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 206, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 207, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 216, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 219, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 220, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 221, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 222, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 223, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 224, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 225, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 226, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 227, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 228, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 229, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 230, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 231, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 232, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 233, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 234, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 235, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 236, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 237, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 239, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 240, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 241, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 242, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 243, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 244, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 245, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 246, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 247, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 248, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 249, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 250, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 251, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 252, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 253, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 254, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 255, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 256, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 257, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 258, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 259, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 260, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 261, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 262, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 263, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 264, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 265, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 266, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 267, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 268, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 269, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 270, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 271, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 272, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 273, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 274, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 275, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 276, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 291, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 293, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 298, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 299, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 303, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 304, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 306, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 307, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 308, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 309, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 310, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 311, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 312, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 313, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 314, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 315, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 316, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 317, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 318, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 319, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 321, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 322, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 323, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 324, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 325, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 326, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 327, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 328, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 332, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 347, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 371, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 378, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 418, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 419, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 660, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 672, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 674, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 678, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 726, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 727, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 778, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 783, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 790, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 795, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent to PID below 1000: pid: 936, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 1 (init), result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 2, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 3, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 4, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 5, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 6, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 7, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 8, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 9, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 10, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 11, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 12, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 13, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 14, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 15, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 16, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 17, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 18, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 19, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 20, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 21, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 22, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 23, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 24, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 25, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 26, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 27, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 28, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 29, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 30, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 35, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 77, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 78, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 79, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 80, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 81, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 82, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 83, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 84, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 85, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 86, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 88, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 89, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 91, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 92, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 93, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 94, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 95, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 96, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 97, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 98, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 99, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 100, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 101, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 102, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 103, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 104, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 105, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 106, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 107, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 108, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 109, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 110, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 111, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 112, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 113, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 114, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 115, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 116, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 117, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 118, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 119, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 120, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 121, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 122, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 123, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 124, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 125, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 126, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 127, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 128, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 129, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 130, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 131, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 134, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 142, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 145, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 158, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 202, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 203, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 204, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 205, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 206, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 207, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 216, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 219, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 220, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 221, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 222, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 223, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 224, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 225, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 226, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 227, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 228, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 229, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 230, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 231, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 232, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 233, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 234, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 235, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 236, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 237, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 239, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 240, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 241, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 242, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 243, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 244, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 245, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 246, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 247, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 248, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 249, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 250, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 251, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 252, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 253, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 254, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 255, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 256, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 257, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 258, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 259, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 260, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 261, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 262, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 263, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 264, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 265, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 266, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 267, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 268, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 269, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 270, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 271, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 272, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 273, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 274, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 275, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 276, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 291, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 293, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 298, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 299, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 303, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 304, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 306, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 307, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 308, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 309, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 310, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 311, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 312, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 313, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 314, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 315, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 316, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 317, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 318, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 319, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 321, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 322, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 323, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 324, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 325, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 326, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 327, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 328, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 332, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 347, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 371, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 378, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 418, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 419, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 660, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 672, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 674, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 678, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 726, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 778, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent to PID below 1000: pid: 936, result: successful Jump to behavior
Sample tries to kill multiple processes (SIGKILL)
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1 (init), result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 2, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 4, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 5, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 6, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 7, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 8, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 9, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 10, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 11, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 12, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 13, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 14, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 15, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 16, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 17, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 18, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 19, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 20, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 21, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 22, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 23, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 24, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 25, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 26, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 27, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 28, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 29, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 30, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 35, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 77, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 78, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 79, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 80, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 81, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 82, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 83, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 84, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 85, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 86, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 88, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 89, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 91, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 92, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 93, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 94, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 95, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 96, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 97, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 98, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 99, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 100, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 101, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 102, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 103, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 104, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 105, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 106, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 107, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 108, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 109, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 110, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 111, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 112, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 113, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 114, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 115, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 116, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 117, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 118, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 119, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 120, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 121, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 122, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 123, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 124, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 125, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 126, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 127, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 128, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 129, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 130, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 131, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 134, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 142, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 145, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 158, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 202, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 203, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 204, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 205, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 206, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 207, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 216, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 219, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 220, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 221, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 222, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 223, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 224, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 225, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 226, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 227, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 228, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 229, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 230, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 231, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 232, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 233, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 234, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 235, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 236, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 237, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 239, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 240, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 241, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 242, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 243, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 244, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 245, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 246, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 247, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 248, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 249, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 250, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 251, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 252, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 253, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 254, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 255, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 256, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 257, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 258, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 259, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 260, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 261, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 262, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 263, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 264, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 265, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 266, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 267, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 268, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 269, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 270, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 271, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 272, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 273, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 274, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 275, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 276, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 291, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 293, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 298, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 299, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 303, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 304, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 306, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 307, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 308, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 309, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 310, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 311, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 312, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 313, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 314, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 315, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 316, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 317, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 318, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 319, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 321, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 322, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 323, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 324, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 325, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 326, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 327, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 328, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 332, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 347, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 371, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 378, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 418, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 419, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 660, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 672, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 674, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 678, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 726, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 727, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 778, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 783, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 790, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 795, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1400, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1432, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1805, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 2496, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 2970, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3069, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3455, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3577, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3589, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3675, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 5407, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 5427, result: unknown Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1 (init), result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 2, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 4, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 5, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 6, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 7, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 8, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 9, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 10, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 11, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 12, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 13, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 14, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 15, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 16, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 17, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 18, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 19, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 20, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 21, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 22, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 23, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 24, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 25, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 26, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 27, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 28, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 29, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 30, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 35, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 77, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 78, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 79, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 80, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 81, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 82, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 83, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 84, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 85, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 86, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 88, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 89, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 91, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 92, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 93, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 94, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 95, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 96, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 97, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 98, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 99, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 100, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 101, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 102, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 103, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 104, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 105, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 106, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 107, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 108, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 109, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 110, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 111, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 112, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 113, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 114, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 115, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 116, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 117, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 118, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 119, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 120, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 121, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 122, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 123, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 124, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 125, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 126, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 127, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 128, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 129, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 130, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 131, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 134, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 142, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 145, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 158, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 202, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 203, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 204, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 205, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 206, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 207, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 216, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 219, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 220, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 221, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 222, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 223, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 224, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 225, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 226, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 227, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 228, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 229, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 230, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 231, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 232, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 233, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 234, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 235, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 236, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 237, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 239, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 240, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 241, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 242, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 243, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 244, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 245, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 246, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 247, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 248, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 249, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 250, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 251, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 252, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 253, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 254, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 255, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 256, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 257, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 258, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 259, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 260, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 261, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 262, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 263, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 264, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 265, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 266, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 267, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 268, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 269, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 270, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 271, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 272, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 273, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 274, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 275, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 276, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 291, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 293, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 298, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 299, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 303, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 304, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 306, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 307, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 308, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 309, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 310, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 311, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 312, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 313, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 314, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 315, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 316, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 317, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 318, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 319, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 321, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 322, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 323, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 324, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 325, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 326, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 327, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 328, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 332, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 347, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 371, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 378, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 418, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 419, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 660, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 672, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 674, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 678, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 726, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 778, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1400, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1805, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 2496, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3069, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3455, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3577, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3589, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3675, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 5431, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 5433, result: unknown Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5722) SIGKILL sent: pid: 5736, result: successful
Source: /usr/bin/dbus-daemon (PID: 5722) SIGKILL sent: pid: 5964, result: successful
Source: /usr/bin/dbus-daemon (PID: 5722) SIGKILL sent: pid: 6144, result: successful
Source: /usr/bin/dbus-daemon (PID: 5742) SIGKILL sent: pid: 6133, result: successful
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Source: Initial sample String containing 'busybox' found: busybox
Source: Initial sample String containing 'busybox' found: /bin/busybox
Source: Initial sample String containing 'busybox' found: 'byte/proc//proc/%s/exe/proc/self/exe/proc/proc/%d/cmdlinenetstatwgettftpftpcurlbusybox/bin/busyboxvar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/soraarmx86dbgmipsmpslbot/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homemipselarm4arm5arm6arm7sh4m68kx586x86_64i586i686ppcspctelnetbotdvrHelperbyte-mirai.kro.kr68.183.18.151
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Sample tries to kill a process (SIGKILL)
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1 (init), result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 2, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 4, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 5, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 6, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 7, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 8, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 9, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 10, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 11, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 12, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 13, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 14, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 15, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 16, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 17, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 18, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 19, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 20, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 21, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 22, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 23, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 24, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 25, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 26, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 27, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 28, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 29, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 30, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 35, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 77, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 78, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 79, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 80, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 81, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 82, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 83, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 84, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 85, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 86, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 88, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 89, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 91, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 92, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 93, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 94, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 95, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 96, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 97, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 98, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 99, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 100, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 101, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 102, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 103, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 104, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 105, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 106, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 107, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 108, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 109, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 110, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 111, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 112, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 113, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 114, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 115, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 116, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 117, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 118, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 119, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 120, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 121, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 122, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 123, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 124, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 125, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 126, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 127, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 128, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 129, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 130, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 131, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 134, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 142, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 145, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 158, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 202, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 203, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 204, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 205, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 206, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 207, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 216, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 219, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 220, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 221, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 222, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 223, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 224, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 225, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 226, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 227, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 228, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 229, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 230, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 231, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 232, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 233, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 234, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 235, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 236, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 237, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 239, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 240, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 241, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 242, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 243, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 244, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 245, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 246, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 247, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 248, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 249, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 250, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 251, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 252, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 253, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 254, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 255, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 256, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 257, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 258, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 259, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 260, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 261, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 262, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 263, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 264, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 265, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 266, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 267, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 268, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 269, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 270, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 271, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 272, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 273, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 274, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 275, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 276, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 291, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 293, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 298, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 299, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 303, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 304, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 306, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 307, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 308, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 309, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 310, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 311, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 312, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 313, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 314, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 315, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 316, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 317, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 318, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 319, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 321, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 322, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 323, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 324, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 325, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 326, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 327, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 328, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 332, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 347, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 371, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 378, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 418, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 419, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 660, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 672, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 674, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 678, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 726, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 727, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 778, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 783, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 790, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 795, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1400, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1432, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 1805, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 2496, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 2970, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3069, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3455, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3577, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3589, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3675, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 3680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 5407, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5427) SIGKILL sent: pid: 5427, result: unknown Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1 (init), result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 2, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 4, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 5, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 6, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 7, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 8, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 9, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 10, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 11, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 12, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 13, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 14, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 15, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 16, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 17, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 18, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 19, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 20, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 21, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 22, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 23, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 24, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 25, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 26, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 27, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 28, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 29, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 30, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 35, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 77, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 78, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 79, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 80, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 81, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 82, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 83, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 84, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 85, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 86, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 88, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 89, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 91, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 92, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 93, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 94, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 95, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 96, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 97, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 98, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 99, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 100, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 101, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 102, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 103, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 104, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 105, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 106, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 107, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 108, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 109, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 110, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 111, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 112, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 113, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 114, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 115, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 116, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 117, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 118, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 119, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 120, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 121, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 122, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 123, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 124, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 125, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 126, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 127, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 128, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 129, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 130, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 131, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 134, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 142, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 145, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 158, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 202, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 203, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 204, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 205, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 206, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 207, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 216, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 219, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 220, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 221, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 222, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 223, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 224, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 225, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 226, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 227, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 228, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 229, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 230, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 231, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 232, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 233, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 234, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 235, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 236, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 237, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 239, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 240, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 241, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 242, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 243, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 244, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 245, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 246, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 247, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 248, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 249, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 250, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 251, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 252, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 253, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 254, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 255, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 256, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 257, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 258, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 259, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 260, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 261, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 262, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 263, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 264, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 265, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 266, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 267, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 268, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 269, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 270, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 271, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 272, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 273, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 274, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 275, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 276, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 291, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 293, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 298, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 299, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 303, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 304, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 306, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 307, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 308, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 309, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 310, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 311, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 312, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 313, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 314, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 315, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 316, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 317, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 318, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 319, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 321, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 322, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 323, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 324, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 325, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 326, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 327, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 328, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 332, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 347, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 371, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 378, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 418, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 419, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 660, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 672, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 674, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 678, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 726, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 778, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1238, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1320, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1400, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 1805, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 2496, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3069, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3132, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3455, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3577, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3589, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3675, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3676, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3679, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 3680, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 5431, result: successful Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) SIGKILL sent: pid: 5433, result: unknown Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5722) SIGKILL sent: pid: 5736, result: successful
Source: /usr/bin/dbus-daemon (PID: 5722) SIGKILL sent: pid: 5964, result: successful
Source: /usr/bin/dbus-daemon (PID: 5722) SIGKILL sent: pid: 6144, result: successful
Source: /usr/bin/dbus-daemon (PID: 5742) SIGKILL sent: pid: 6133, result: successful
Source: classification engine Classification label: mal92.spre.troj.linELF@0/96@2/0

Persistence and Installation Behavior
barindex
Sample reads /proc/mounts (often used for finding a writable filesystem)
Source: /usr/bin/dbus-daemon (PID: 5485) File: /proc/5485/mounts Jump to behavior
Source: /bin/fusermount (PID: 5488) File: /proc/5488/mounts Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5585) File: /proc/5585/mounts Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5646) File: /proc/5646/mounts Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5722) File: /proc/5722/mounts
Source: /usr/bin/dbus-daemon (PID: 5742) File: /proc/5742/mounts
Source: /usr/bin/gjs (PID: 6145) File: /proc/6145/mounts
Source: /usr/bin/gnome-shell (PID: 5785) File: /proc/5785/mounts
Source: /usr/bin/dbus-daemon (PID: 5643) File: /proc/5643/mounts
Creates hidden files and/or directories
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (18)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (17)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/seats/.#seat01wSp9a Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127SN1ny9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#1277tbt19 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (20)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (19)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/seats/.#seat0SEMGl9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127ys6FY8 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c13cyeSa Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127k3VwKa Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/seats/.#seat0hgheM7 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127dGGOma Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c1ZzCrZa Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c1cpGed9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127p1vNua Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c1MTHNo8 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c19sgHJ8 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c1syyYka Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127DNXx0a Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/seats/.#seat0hATSTb Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#1276aT7R9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/seats/.#seat06Sqlkb Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127C7vCG8 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/seats/.#seat0d2AJWb Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127qxKmZ8 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2syw8dc Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127VUuj68 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/seats/.#seat0y1VID9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2a4Aza9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2oYwop9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/users/.#127Vxuvab Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2YF9z2b Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (21)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (20)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2Utojn9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (22)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (21)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2QwPlba Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (23)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (22)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2aHsKd9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (24)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) Directory: <invalid fd (23)>/.. Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/sessions/.#c2kEBlNb Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/inhibit/.#1urFFSa Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/inhibit/.#25H78g8 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/inhibit/.#3UYGFc9 Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5501) File: /run/systemd/inhibit/.#4kGmnV7 Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) Directory: /root/.cache Jump to behavior
Source: /usr/bin/gnome-shell (PID: 5669) Directory: <invalid fd (11)>/.. Jump to behavior
Source: /usr/bin/gnome-shell (PID: 5669) Directory: <invalid fd (10)>/.. Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5705) Directory: <invalid fd (23)>/..
Source: /usr/lib/xorg/Xorg (PID: 5705) Directory: <invalid fd (22)>/..
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5724) Directory: /var/lib/gdm3/.drirc
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5724) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5724) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5743) Directory: /var/lib/gdm3/.drirc
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5755) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5755) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5755) Directory: /var/lib/gdm3/.drirc
Source: /usr/bin/gnome-shell (PID: 5785) Directory: /var/lib/gdm3/.drirc
Source: /usr/bin/gnome-shell (PID: 5785) Directory: <invalid fd (12)>/..
Source: /usr/bin/gnome-shell (PID: 5785) Directory: <invalid fd (11)>/..
Source: /usr/bin/gnome-shell (PID: 5785) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/bin/gnome-shell (PID: 5785) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/bin/gnome-shell (PID: 5785) Directory: <invalid fd (14)>/..
Source: /usr/bin/gnome-shell (PID: 5785) Directory: <invalid fd (13)>/..
Source: /usr/libexec/ibus-x11 (PID: 5961) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/ibus-x11 (PID: 5961) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-wacom (PID: 6167) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-wacom (PID: 6167) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-color (PID: 6169) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-color (PID: 6169) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-keyboard (PID: 6170) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-keyboard (PID: 6170) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-rfkill (PID: 6173) Directory: <invalid fd (9)>/..
Source: /usr/libexec/gsd-rfkill (PID: 6173) Directory: <invalid fd (8)>/..
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale-langpack/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale-langpack/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale-langpack/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale-langpack/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale-langpack/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6178) Directory: /usr/share/locale-langpack/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-power (PID: 6193) Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-power (PID: 6193) Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5619) Directory: /var/lib/gdm3/.pam_environment
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5619) Directory: /root/.cache
Source: /usr/lib/upower/upowerd (PID: 5973) Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 5973) Directory: <invalid fd (11)>/..
Source: /usr/lib/packagekit/packagekitd (PID: 6142) Directory: /root/.cache
Source: /lib/systemd/systemd-hostnamed (PID: 6213) Directory: <invalid fd (10)>/..
Source: /usr/sbin/ModemManager (PID: 6409) Directory: <invalid fd (12)>/..
Source: /usr/sbin/ModemManager (PID: 6409) Directory: <invalid fd (11)>/..
Source: /usr/libexec/colord (PID: 6471) Directory: /var/lib/colord/.cache
Enumerates processes within the "proc" file system
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6471/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5485/status Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5485/attr/current Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5562/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6476/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6178/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5641/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5487/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5487/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5487/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6016/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6016/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6016/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5785/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6213/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6193/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6170/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6390/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6173/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6173/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6172/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5619/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/1475/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5973/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6645/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5613/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/2926/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5637/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5637/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6626/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6409/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6142/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6142/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6141/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6165/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5696/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5696/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5498/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6148/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6026/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6026/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/6169/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/1/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5809/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5501/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5723/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5647/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5669/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5703/cmdline Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5485) File opened: /proc/5705/cmdline Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6178/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6178/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5487/status Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5487/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5487/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6016/status Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6016/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6016/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5785/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5785/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5785/status Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5785/cmdline Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5785/status Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5785/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5785/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6169/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6169/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6193/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6193/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6170/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/6170/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/1/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/1/cgroup Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5723/stat Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5562) File opened: /proc/5723/cgroup Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/5266/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/230/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/110/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/231/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/111/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/232/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/112/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/233/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/113/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/234/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/114/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/235/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/115/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/236/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/116/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/237/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/117/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/238/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/118/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/239/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/119/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/3753/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/10/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/11/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/12/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/13/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/14/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/15/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/16/cmdline Jump to behavior
Source: /tmp/XvAqhy3FO6.elf (PID: 5433) File opened: /proc/17/cmdline Jump to behavior
Executes commands using a shell command-line interpreter
Source: /usr/bin/gpu-manager (PID: 5571) Shell command executed: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf" Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5573) Shell command executed: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf" Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5575) Shell command executed: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf" Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5577) Shell command executed: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf" Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5580) Shell command executed: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf" Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5582) Shell command executed: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf" Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5586) Shell command executed: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf" Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5590) Shell command executed: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf" Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5714) Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
Source: /usr/lib/xorg/Xorg (PID: 5962) Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
Source: /usr/share/language-tools/language-options (PID: 5632) Shell command executed: sh -c "locale -a | grep -F .utf8 "
Executes the "grep" command used to find patterns in files or piped streams
Source: /bin/sh (PID: 5572) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf Jump to behavior
Source: /bin/sh (PID: 5574) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf Jump to behavior
Source: /bin/sh (PID: 5576) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf Jump to behavior
Source: /bin/sh (PID: 5579) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf Jump to behavior
Source: /bin/sh (PID: 5581) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf Jump to behavior
Source: /bin/sh (PID: 5583) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf Jump to behavior
Source: /bin/sh (PID: 5587) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf Jump to behavior
Source: /bin/sh (PID: 5591) Grep executable: /usr/bin/grep -> grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf Jump to behavior
Source: /bin/sh (PID: 5634) Grep executable: /usr/bin/grep -> grep -F .utf8
Executes the "kill" or "pkill" command typically used to terminate processes
Source: /usr/share/gdm/generate-config (PID: 5603) Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service Jump to behavior
Executes the "rm" command used to delete files or directories
Source: /usr/bin/dash (PID: 5411) Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.ZRzIGSnEBc /tmp/tmp.Dw4qdzVmtQ /tmp/tmp.icgmyHceBB Jump to behavior
Source: /usr/bin/dash (PID: 5412) Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.ZRzIGSnEBc /tmp/tmp.Dw4qdzVmtQ /tmp/tmp.icgmyHceBB Jump to behavior
Reads system version information
Source: /sbin/agetty (PID: 5566) Reads version info: /etc/issue Jump to behavior
Sample tries to set the executable flag
Source: /usr/sbin/gdm3 (PID: 5613) File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx) Jump to behavior
Source: /usr/sbin/gdm3 (PID: 5613) File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx) Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5619) File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5619) File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)
Source: /usr/sbin/rsyslogd (PID: 5486) Log file created: /var/log/kern.log Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 5486) Log file created: /var/log/auth.log Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 5570) Log file created: /var/log/gpu-manager.log Jump to dropped file
Source: /usr/lib/xorg/Xorg (PID: 5705) Log file created: /var/log/Xorg.0.log Jump to dropped file
Deletes log files
Source: /usr/bin/gpu-manager (PID: 5570) Truncated file: /var/log/gpu-manager.log Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5705) Truncated file: /var/log/Xorg.pid-5705.log
Reads CPU information from /sys indicative of miner or evasive malware
Source: /usr/bin/pulseaudio (PID: 5487) Reads CPU info from /sys: /sys/devices/system/cpu/online Jump to behavior
Source: /usr/bin/pkill (PID: 5603) Reads CPU info from /sys: /sys/devices/system/cpu/online Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5705) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5724) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5743) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5755) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/gnome-shell (PID: 5785) Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6016) Reads CPU info from /sys: /sys/devices/system/cpu/online
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/XvAqhy3FO6.elf (PID: 5425) Queries kernel information via 'uname': Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5486) Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5487) Queries kernel information via 'uname': Jump to behavior
Source: /sbin/agetty (PID: 5566) Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5570) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/gdm3/gdm-session-worker (PID: 5637) Queries kernel information via 'uname': Jump to behavior
Source: /usr/libexec/gnome-session-binary (PID: 5647) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/gdm3/gdm-session-worker (PID: 5696) Queries kernel information via 'uname':
Source: /usr/lib/gdm3/gdm-x-session (PID: 5703) Queries kernel information via 'uname':
Source: /usr/lib/xorg/Xorg (PID: 5705) Queries kernel information via 'uname':
Source: /usr/libexec/at-spi-bus-launcher (PID: 5737) Queries kernel information via 'uname':
Source: /usr/libexec/at-spi2-registryd (PID: 6134) Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-binary (PID: 5723) Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5724) Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5743) Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5755) Queries kernel information via 'uname':
Source: /usr/bin/gnome-shell (PID: 5785) Queries kernel information via 'uname':
Source: /usr/libexec/ibus-x11 (PID: 5961) Queries kernel information via 'uname':
Source: /usr/libexec/gsd-wacom (PID: 6167) Queries kernel information via 'uname':
Source: /usr/libexec/gsd-color (PID: 6169) Queries kernel information via 'uname':
Source: /usr/libexec/gsd-keyboard (PID: 6170) Queries kernel information via 'uname':
Source: /usr/libexec/gsd-smartcard (PID: 6174) Queries kernel information via 'uname':
Source: /usr/libexec/gsd-media-keys (PID: 6178) Queries kernel information via 'uname':
Source: /usr/libexec/gsd-power (PID: 6193) Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6016) Queries kernel information via 'uname':
Source: /usr/lib/packagekit/packagekitd (PID: 6142) Queries kernel information via 'uname':
Source: /usr/sbin/avahi-daemon (PID: 6148) Queries kernel information via 'uname':
Source: /lib/systemd/systemd-hostnamed (PID: 6213) Queries kernel information via 'uname':
Source: /usr/libexec/colord-sane (PID: 6626) Queries kernel information via 'uname':
Source: /usr/libexec/fprintd (PID: 6645) Queries kernel information via 'uname':
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: message repeated 5 times: [ (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)]
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.319] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.707] (II) vmware(0): Modeline "640x480"x85.0 36.00 640 696 752 832 480 481 484 509 -hsync -vsync (43.3 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.442] (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.637] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1152x864"x100.0 143.47 1152 1232 1360 1568 864 865 868 915 -hsync +vsync (91.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.436] (==) vmware(0): RGB weight 888
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.078] (II) vmware(0): Not using default mode "1440x900" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.706] (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "720x400"x85.0 35.50 720 756 828 936 400 401 404 446 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.614] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) event3 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.366] (II) vmware(0): Not using default mode "864x486" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.518] (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.412] (--) vmware(0): w.blu: 8
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.112] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.718] (II) vmware(0): Modeline "640x480"x75.0 31.50 640 656 720 840 480 481 484 500 -hsync -vsync (37.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.171] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.960] (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "512x384i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.717] (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.872] (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.750] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.287] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.521] (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "720x405" (monitor doesn't support reduced blanking)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:43 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) Loading /usr/lib/xorg/modules/drivers/vmware_drv.so
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.455] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.641] (**) vmware(0): Default mode "800x600": 40.0 MHz, 37.9 kHz, 60.3 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.013] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.427] (==) vmware(0): Depth 24, (==) framebuffer bpp 32
Source: XvAqhy3FO6.elf, 5425.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5427.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5428.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5431.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5433.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5440.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/mipsel
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.089] (II) vmware(0): Not using default mode "1600x1024" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.294] (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "960x540" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.682] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 155.920] (WW) vmware(0): Disabling Render Acceleration.
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: message repeated 3 times: [ (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)]
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.287] (**) vmware(0): Default mode "1152x864": 121.5 MHz, 77.5 kHz, 85.1 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.669] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.458] (II) vmware(0): Modeline "1152x864"x75.0 108.00 1152 1216 1344 1600 864 865 868 900 +hsync +vsync (67.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.584] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse0)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.451] (==) vmware(0): Will set up a driver mode with dimensions 800x600.
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.215] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1024x768"x85.0 94.50 1024 1072 1168 1376 768 769 772 808 +hsync +vsync (68.7 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.615] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.370] (--) vmware(0): mheig: 885
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.859] (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.422] (--) vmware(0): vis: 4
Source: XvAqhy3FO6.elf, 5425.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5427.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5428.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5431.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5433.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5440.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp Binary or memory string: /usr/bin/qemu-mipsel
Source: Xorg.0.log.155.dr Binary or memory string: [ 159.248] (II) vmware(0): Initialized VMWARE_CTRL extension version 0.2
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.811] (**) vmware(0): Default mode "640x350": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.604] (**) vmware(0): Default mode "800x600": 49.5 MHz, 46.9 kHz, 75.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.554] (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.474] (**) vmware(0): Default mode "1152x864": 105.0 MHz, 67.6 kHz, 75.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.487] (II) vmware(0): Not using default mode "360x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.806] (II) vmware(0): Not using default mode "416x312" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.132] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) vmware(0): Depth 24, (==) framebuffer bpp 32
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1024x768i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.702] (**) vmware(0): Default mode "640x480": 36.0 MHz, 43.3 kHz, 85.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.508] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.588] (II) vmware(0): Modeline "960x540"x59.6 40.75 960 992 1088 1216 540 543 548 562 -hsync +vsync (33.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.202] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.579] (II) vmware(0): Modeline "832x624"x74.6 57.28 832 864 928 1152 624 625 628 667 -hsync -vsync (49.7 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.691] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "800x600"x56.2 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.600] (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.518] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: message repeated 4 times: [ (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)]
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1152x864": 121.5 MHz, 77.5 kHz, 85.1 Hz
Source: XvAqhy3FO6.elf, 5427.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp Binary or memory string: U/tmp/qemu-open.XqbNLy
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:54 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.668] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.504] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.610] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.006] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.312] (II) vmware(0): Modeline "1152x864"x85.1 121.50 1152 1216 1344 1568 864 865 868 911 +hsync -vsync (77.5 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.186] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): depth: 24
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.732] (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): w.grn: 8
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.824] (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.546] (II) vmware(0): Modeline "1024x768"x70.1 75.00 1024 1048 1184 1328 768 771 777 806 -hsync -vsync (56.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.118] (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.978] (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.300] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.387] (--) vmware(0): bpp: 32
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.739] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 159.270] (II) vmware(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.508] (**) vmware(0): Default mode "1152x864": 81.6 MHz, 53.7 kHz, 60.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1152x864"x75.0 104.99 1152 1224 1352 1552 864 865 868 902 -hsync +vsync (67.6 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.033] (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.155.dr Binary or memory string: [ 153.454] (II) vmware(0): Creating default Display subsection in Screen section
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.786] (II) vmware(0): Modeline "640x400"x85.1 31.50 640 672 736 832 400 401 404 445 -hsync +vsync (37.9 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.684] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.916] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:54 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): VMware SVGA regs at (0x1070, 0x1071)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.513] (II) vmware(0): Modeline "1152x864"x60.0 81.62 1152 1216 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "832x624": 57.3 MHz, 49.7 kHz, 74.6 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.998] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.162] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.836] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "960x540": 40.8 MHz, 33.5 kHz, 59.6 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.748] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.673] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.745] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.313] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) vmware(0): Default visual is TrueColor
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 155.893] (EE) vmware(0): Failed to open drm.
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.454] (II) event2 - VirtualPS/2 VMware VMMouse: device removed
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.515] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1600x1024" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.711] (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.988] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.118] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.416] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.522] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.511] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.226] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.196] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.501] (II) vmware(0): Modeline "1152x864"x70.0 96.77 1152 1224 1344 1536 864 865 868 900 -hsync +vsync (63.0 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "720x405"x59.5 22.50 720 744 808 896 405 408 413 422 -hsync +vsync (25.1 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.163] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.820] (==) vmware(0): DPI set to (96, 96)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.771] (**) vmware(0): Default mode "720x400": 35.5 MHz, 37.9 kHz, 85.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.598] (II) vmware(0): Modeline "800x600"x85.1 56.30 800 832 896 1048 600 601 604 631 +hsync +vsync (53.7 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1024x576" (monitor doesn't support reduced blanking)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x480"x75.0 31.50 640 656 720 840 480 481 484 500 -hsync -vsync (37.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.247] (II) vmware(0): Modeline "vmwlegacy-default-800x600"x60.0 36.25 800 801 802 1002 600 601 602 603 (36.2 kHz ez)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.307] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.598] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.454] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event3)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "864x486" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.570] (**) vmware(0): Default mode "832x624": 57.3 MHz, 49.7 kHz, 74.6 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.706] (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "800x600": 50.0 MHz, 48.1 kHz, 72.2 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.576] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: XvAqhy3FO6.elf, 5425.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5427.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5428.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5431.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5433.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp, XvAqhy3FO6.elf, 5440.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/XvAqhy3FO6.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/XvAqhy3FO6.elf
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 155.927] (WW) vmware(0): Disabling RandR12+ support.
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "864x486": 32.5 MHz, 30.3 kHz, 59.9 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.220] (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) event2 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.725] (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.9 kHz, 72.8 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): vram: 4194304
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1152x864": 143.5 MHz, 91.5 kHz, 100.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.495] (**) vmware(0): Default mode "1152x864": 96.8 MHz, 63.0 kHz, 70.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): pbase: 0xe8000000
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.654] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): bpp: 32
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): w.red: 8
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.184] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.401] (II) vmware(0): Not using default mode "512x288" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1152x864": 105.0 MHz, 67.6 kHz, 75.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "800x600": 49.5 MHz, 46.9 kHz, 75.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.966] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:50 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) vmware(0): Backing store enabled
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.914] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 8)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "640x400": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1024x768": 75.0 MHz, 56.5 kHz, 70.1 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:50 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Initialized VMware Xinerama extension.
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.791] (**) vmware(0): Default mode "640x360": 18.0 MHz, 22.5 kHz, 59.8 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.678] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.038] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.537] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.983] (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x350"x85.1 31.50 640 672 736 832 350 382 385 445 +hsync -vsync (37.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.084] (II) vmware(0): Not using default mode "720x450" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 9)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.352] (II) vmware(0): Not using default mode "720x405" (monitor doesn't support reduced blanking)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.743] (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:43 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) Module vmware: vendor="X.Org Foundation"
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.804] (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.762] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.846] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:54 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event3)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.612] (II) vmware(0): Modeline "800x600"x75.0 49.50 800 816 896 1056 600 601 604 625 +hsync +vsync (46.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.563] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.582] (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.542] (**) vmware(0): Default mode "1024x768": 75.0 MHz, 56.5 kHz, 70.1 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.051] (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.676] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.258] (II) vmware(0): Modeline "1152x864"x100.0 143.47 1152 1232 1360 1568 864 865 868 915 -hsync +vsync (91.5 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:54 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.945] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:50 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) vmware(0): Silken mouse enabled
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "832x624"x74.6 57.28 832 864 928 1152 624 625 628 667 -hsync -vsync (49.7 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.375] (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.426] (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:50 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Initialized VMware Xv extension successfully.
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.815] (II) vmware(0): Modeline "640x350"x85.1 31.50 640 672 736 832 350 382 385 445 +hsync -vsync (37.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.334] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.562] (**) vmware(0): Default mode "1024x576": 46.5 MHz, 35.9 kHz, 59.9 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.619] (**) vmware(0): Default mode "800x600": 50.0 MHz, 48.1 kHz, 72.2 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1152x864": 108.0 MHz, 67.5 kHz, 75.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.553] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: XvAqhy3FO6.elf, 5427.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp Binary or memory string: /tmp/qemu-open.XqbNLy
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1152x864": 81.6 MHz, 53.7 kHz, 60.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.473] (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1152x864"x75.0 108.00 1152 1216 1344 1600 864 865 868 900 +hsync +vsync (67.5 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "640x360": 18.0 MHz, 22.5 kHz, 59.8 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 8)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.176] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.484] (II) vmware(0): Modeline "1152x864"x75.0 104.99 1152 1224 1352 1552 864 865 868 902 -hsync +vsync (67.6 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.143] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 159.323] (==) vmware(0): Silken mouse enabled
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1152x864": 119.7 MHz, 77.1 kHz, 85.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.795] (II) vmware(0): Modeline "640x360"x59.8 18.00 640 664 720 800 360 363 368 376 -hsync +vsync (22.5 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1024x768"x75.0 78.75 1024 1040 1136 1312 768 769 772 800 +hsync +vsync (60.0 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.693] (II) vmware(0): Modeline "864x486"x59.9 32.50 864 888 968 1072 486 489 494 506 -hsync +vsync (30.3 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.441] (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.191] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.873] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event2)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.071] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.362] (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.566] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) vmware(0): DPI set to (96, 96)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x480"x72.8 31.50 640 664 704 832 480 489 492 520 -hsync -vsync (37.9 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (WW) vmware(0): Disabling RandR12+ support.
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "720x450" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1024x576"x59.9 46.50 1024 1064 1160 1296 576 579 584 599 -hsync +vsync (35.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.711] (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.353] (--) vmware(0): pbase: 0xe8000000
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "800x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.800] (**) vmware(0): Default mode "640x360": 17.8 MHz, 22.2 kHz, 59.3 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 153.241] (II) vmware: driver for VMware SVGA: vmware0405, vmware0710
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.371] (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "320x175" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.532] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.563] (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:43 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) Matched vmware as autoconfigured driver 0
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:43 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) LoadModule: "vmware"
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.107] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (WW) vmware(0): Disabling Render Acceleration.
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.342] (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.745] (II) vmware(0): Modeline "640x480"x72.8 31.50 640 664 704 832 480 489 492 520 -hsync -vsync (37.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.881] (II) event3 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.537] (II) vmware(0): Modeline "1024x768"x75.0 78.75 1024 1040 1136 1312 768 769 772 800 +hsync +vsync (60.0 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.170] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event2)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.595] (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.181] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "800x600": 40.0 MHz, 37.9 kHz, 60.3 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.568] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.461] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.738] (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.933] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "320x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.734] (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.479] (II) vmware(0): Not using default mode "320x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.628] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.213] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.536] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) vmware(0): Using gamma correction (1.0, 1.0, 1.0)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.972] (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.446] (==) vmware(0): Using HW cursor
Source: Xorg.0.log.155.dr Binary or memory string: [ 155.904] (WW) vmware(0): Disabling 3D support.
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "800x600"x85.1 56.30 800 832 896 1048 600 601 604 631 +hsync +vsync (53.7 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.502] (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.544] (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.467] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.765] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "960x540"x59.6 40.75 960 992 1088 1216 540 543 548 562 -hsync +vsync (33.5 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "800x600": 36.0 MHz, 35.2 kHz, 56.2 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.573] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.9 kHz, 72.8 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.796] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.687] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.313] (--) vmware(0): caps: 0xFDFF83E2
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1024x576": 46.5 MHz, 35.9 kHz, 59.9 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.664] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.727] (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.395] (II) vmware(0): Not using default mode "1024x576" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.608] (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.545] (II) vmware(0): Not using default mode "1024x768i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.890] (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.964] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:44 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Creating default Display subsection in Screen section
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): *Driver mode "vmwlegacy-default-800x600": 36.3 MHz, 36.2 kHz, 60.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.936] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "800x600": 56.3 MHz, 53.7 kHz, 85.1 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.328] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.327] (--) vmware(0): depth: 24
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.490] (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.142] (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1440x900" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1152x864": 96.8 MHz, 63.0 kHz, 70.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1152x864"x85.0 119.65 1152 1224 1352 1552 864 865 868 907 -hsync +vsync (77.1 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse1)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): caps: 0xFDFF83E2
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.700] (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.102] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.476] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 9)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.664] (**) vmware(0): Default mode "800x600": 36.0 MHz, 35.2 kHz, 56.2 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.572] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.207] (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.278] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.156] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "720x400": 35.5 MHz, 37.9 kHz, 85.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "800x600"x72.2 50.00 800 856 976 1040 600 637 643 666 +hsync +vsync (48.1 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.253] (**) vmware(0): Default mode "1152x864": 143.5 MHz, 91.5 kHz, 100.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.236] (II) vmware(0): Virtual size is 800x600 (pitch 1176)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.318] (**) vmware(0): Default mode "1152x864": 119.7 MHz, 77.1 kHz, 85.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.386] (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse0)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.693] (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:50 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "360x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.553] (**) vmware(0): Default mode "1024x768": 65.0 MHz, 48.4 kHz, 60.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.148] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.135] (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.481] (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.781] (**) vmware(0): Default mode "640x400": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.333] (--) vmware(0): bpp: 32
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.358] (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.651] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (==) vmware(0): Using HW cursor
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.589] (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 159.263] (II) vmware(0): Initialized VMware Xinerama extension.
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "720x405": 22.5 MHz, 25.1 kHz, 59.5 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (WW) vmware(0): Disabling 3D support.
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): vis: 4
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.654] (II) vmware(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.530] (**) vmware(0): Default mode "1024x768": 78.8 MHz, 60.0 kHz, 75.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 152.788] (II) Module vmware: vendor="X.Org Foundation"
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.310] (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.950] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.781] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): mheig: 885
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 159.330] (II) vmware(0): Initialized VMware Xv extension successfully.
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.324] (II) vmware(0): Modeline "1152x864"x85.0 119.65 1152 1224 1352 1552 864 865 868 907 -hsync +vsync (77.1 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.191] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.073] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse1)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.765] (II) vmware(0): Modeline "720x405"x59.5 22.50 720 744 808 896 405 408 413 422 -hsync +vsync (25.1 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.559] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "640x360": 17.8 MHz, 22.2 kHz, 59.3 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): w.blu: 8
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.751] (**) vmware(0): Default mode "640x480": 25.2 MHz, 31.5 kHz, 59.9 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.790] (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.805] (II) vmware(0): Modeline "640x360"x59.3 17.75 640 688 720 800 360 363 368 374 +hsync -vsync (22.2 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.769] (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1024x768"x70.1 75.00 1024 1048 1184 1328 768 771 777 806 -hsync -vsync (56.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.170] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.522] (II) vmware(0): Modeline "1024x768"x85.0 94.50 1024 1072 1168 1376 768 769 772 808 +hsync +vsync (68.7 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.540] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: XvAqhy3FO6.elf, 5433.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp Binary or memory string: U/tmp/qemu-open.PmWGSZ
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.956] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.553] (II) vmware(0): Not using default mode "512x384i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.407] (--) vmware(0): w.grn: 8
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.754] (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.755] (II) vmware(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.992] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.685] (**) vmware(0): Default mode "864x486": 32.5 MHz, 30.3 kHz, 59.9 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x360"x59.8 18.00 640 664 720 800 360 363 368 376 -hsync +vsync (22.5 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.862] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.441] (==) vmware(0): Default visual is TrueColor
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.696] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.096] (II) vmware(0): Not using default mode "800x512" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1024x768": 78.8 MHz, 60.0 kHz, 75.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.138] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.408] (II) vmware(0): Not using default mode "512x288" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.643] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.561] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.702] (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.400] (--) vmware(0): w.red: 8
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.757] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.584] (**) vmware(0): Default mode "960x540": 40.8 MHz, 33.5 kHz, 59.6 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.594] (**) vmware(0): Default mode "800x600": 56.3 MHz, 53.7 kHz, 85.1 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.713] (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.5 kHz, 75.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "640x480": 25.2 MHz, 31.5 kHz, 59.9 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (--) vmware(0): mwidt: 1176
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:54 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.378] (--) vmware(0): depth: 24
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.557] (II) vmware(0): Modeline "1024x768"x60.0 65.00 1024 1048 1184 1344 768 771 777 806 -hsync -vsync (48.4 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.773] (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.242] (**) vmware(0): *Driver mode "vmwlegacy-default-800x600": 36.3 MHz, 36.2 kHz, 60.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 152.706] (II) LoadModule: "vmware"
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.817] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.875] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.5 kHz, 75.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.062] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: XvAqhy3FO6.elf, 5433.1.00007ffeb598b000.00007ffeb59ac000.rw-.sdmp Binary or memory string: /tmp/qemu-open.PmWGSZ
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.658] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.605] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.919] (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.625] (II) vmware(0): Modeline "800x600"x72.2 50.00 800 856 976 1040 600 637 643 666 +hsync +vsync (48.1 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.156] (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.345] (**) vmware(0): Default mode "1152x864": 108.0 MHz, 67.5 kHz, 75.0 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Virtual size is 800x600 (pitch 1176)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "1024x768": 65.0 MHz, 48.4 kHz, 60.0 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 163.974] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.155.dr Binary or memory string: [ 164.508] (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
Source: XvAqhy3FO6.elf, 5425.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5427.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5428.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5431.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5433.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp, XvAqhy3FO6.elf, 5440.1.000055f2cf5c6000.000055f2cf64d000.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.777] (II) vmware(0): Modeline "720x400"x85.0 35.50 720 756 828 936 400 401 404 446 -hsync +vsync (37.9 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:44 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware: driver for VMware SVGA: vmware0405, vmware0710
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.855] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: message repeated 3 times: [ (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)]
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1024x768"x60.0 65.00 1024 1048 1184 1344 768 771 777 806 -hsync -vsync (48.4 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.761] (**) vmware(0): Default mode "720x405": 22.5 MHz, 25.1 kHz, 59.5 Hz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (EE) vmware(0): Failed to open drm.
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.566] (II) vmware(0): Modeline "1024x576"x59.9 46.50 1024 1064 1160 1296 576 579 584 599 -hsync +vsync (35.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.527] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.904] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x360"x59.3 17.75 640 688 720 800 360 363 368 374 +hsync -vsync (22.2 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.391] (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:55 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.149] (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x480"x85.0 36.00 640 696 752 832 480 481 484 509 -hsync -vsync (43.3 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.465] (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 152.723] (II) Loading /usr/lib/xorg/modules/drivers/vmware_drv.so
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Clock range: 0.00 to 400000.00 MHz
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "640x400"x85.1 31.50 640 672 736 832 400 401 404 445 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 158.095] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "vmwlegacy-default-800x600"x60.0 36.25 800 801 802 1002 600 601 602 603 (36.2 kHz ez)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.621] (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.348] (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "1152x864"x60.0 81.62 1152 1216 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:50 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Initialized VMWARE_CTRL extension version 0.2
Source: Xorg.0.log.155.dr Binary or memory string: [ 156.458] (==) vmware(0): Using gamma correction (1.0, 1.0, 1.0)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:48 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:47 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Not using default mode "416x312" (bad mode clock/interlace/doublescan)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (II) vmware(0): Modeline "864x486"x59.9 32.50 864 888 968 1072 486 489 494 506 -hsync +vsync (30.3 kHz d)
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.717] (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.155.dr Binary or memory string: [ 159.319] (==) vmware(0): Backing store enabled
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.725] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: syslog.28.dr Binary or memory string: Oct 7 12:33:49 galassia /usr/lib/gdm3/gdm-x-session[5705]: (**) vmware(0): Default mode "640x350": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.155.dr Binary or memory string: [ 157.127] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)

Language, Device and Operating System Detection
barindex
Reads system files that contain records of logged in users
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5619) Logged in records file read: /var/log/wtmp

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: XvAqhy3FO6.elf, type: SAMPLE
Source: Yara match File source: 5425.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5433.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5431.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5427.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5440.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5428.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5425, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5427, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5428, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5431, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5433, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5440, type: MEMORYSTR
Yara detected Okiru
Source: Yara match File source: XvAqhy3FO6.elf, type: SAMPLE
Source: Yara match File source: 5425.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5433.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5431.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5427.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5440.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5428.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5425, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5427, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5428, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5431, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5433, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5440, type: MEMORYSTR

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: XvAqhy3FO6.elf, type: SAMPLE
Source: Yara match File source: 5425.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5433.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5431.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5427.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5440.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5428.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5425, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5427, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5428, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5431, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5433, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5440, type: MEMORYSTR
Yara detected Okiru
Source: Yara match File source: XvAqhy3FO6.elf, type: SAMPLE
Source: Yara match File source: 5425.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5433.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5431.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5427.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5440.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5428.1.00007f18f8400000.00007f18f8415000.r-x.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5425, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5427, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5428, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5431, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5433, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: XvAqhy3FO6.elf PID: 5440, type: MEMORYSTR

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
138.99.129.41
 unknown Argentina
263768 EUROSATSAAR false
223.169.120.39
 unknown Korea Republic of
7641 CHINABTNChinaBroadcastingTVNetCN false
187.255.208.100
 unknown Brazil
28573 CLAROSABR false
90.69.108.139
 unknown France
12479 UNI2-ASES false
178.137.157.93
 unknown Ukraine
15895 KSNET-ASUA false
54.87.50.185
 unknown United States
14618 AMAZON-AESUS false
110.35.194.76
 unknown Korea Republic of
10175 HCNKUMHO-AS-KRKumhoCableKR false
164.42.160.97
 unknown Puerto Rico
16649 IUPR-ASPR false
57.134.190.154
 unknown Belgium
2686 ATGS-MMD-ASUS false
13.7.15.180
 unknown United States
33631 PARC-ASNUS false
119.242.158.38
 unknown Japan 2518 BIGLOBEBIGLOBEIncJP false
172.220.122.192
 unknown United States
20115 CHARTER-20115US false
140.7.152.248
 unknown United States
668 DNIC-AS-00668US false
31.57.157.44
 unknown Iran (ISLAMIC Republic Of)
31549 RASANAIR false
192.89.10.117
 unknown Finland
1759 TSF-IP-CORETeliaFinlandOyjEU false
210.137.58.174
 unknown Japan 2907 SINET-ASResearchOrganizationofInformationandSystemsN false
147.166.173.156
 unknown United States
1452 DNIC-ASBLK-01451-01456US false
196.237.197.232
 unknown Tunisia
37492 ORANGE-TN false
89.248.34.135
 unknown Switzerland
42346 AS-TINEOInternetServiceProvider-SwitzerlandCH false
192.221.197.196
 unknown United States
3356 LEVEL3US false
223.68.161.192
 unknown China
56046 CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN false
54.119.141.84
 unknown United States
16509 AMAZON-02US false
54.87.50.193
 unknown United States
14618 AMAZON-AESUS false
132.168.84.171
 unknown France
777 CEA-SaclayEU false
217.53.86.198
 unknown Egypt
36992 ETISALAT-MISREG false
172.96.116.38
 unknown United States
21859 ZNETUS false
217.219.14.73
 unknown Iran (ISLAMIC Republic Of)
58224 TCIIR false
59.60.173.72
 unknown China
4809 CHINATELECOM-CORE-WAN-CN2ChinaTelecomNextGenerationCarr false
206.140.22.120
 unknown United States
701 UUNETUS false
206.41.176.146
 unknown United States
203999 GEEKYWORKSIL false
121.198.26.176
 unknown China
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
128.80.145.149
 unknown United States
unknown unknown false
97.47.196.138
 unknown United States
22394 CELLCOUS false
18.105.167.248
 unknown United States
3 MIT-GATEWAYSUS false
183.168.47.167
 unknown China
4538 ERX-CERNET-BKBChinaEducationandResearchNetworkCenter false
51.58.121.76
 unknown United Kingdom
2686 ATGS-MMD-ASUS false
61.10.98.209
 unknown Hong Kong
9908 HKCABLE2-HK-APHKCableTVLtdHK false
5.113.65.140
 unknown Iran (ISLAMIC Republic Of)
44244 IRANCELL-ASIR false
52.96.194.56
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
132.209.121.170
 unknown Canada
376 RISQ-ASCA false
53.60.76.12
 unknown Germany
31399 DAIMLER-ASITIGNGlobalNetworkDE false
93.178.28.140
 unknown Saudi Arabia
43766 MTC-KSA-ASSA false
51.65.109.90
 unknown United Kingdom
2686 ATGS-MMD-ASUS false
17.202.33.215
 unknown United States
714 APPLE-ENGINEERINGUS false
129.14.150.39
 unknown United States
786 JANETJiscServicesLimitedGB false
128.108.78.165
 unknown China
45090 CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa false
187.208.37.241
 unknown Mexico
8151 UninetSAdeCVMX false
126.230.58.246
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
157.139.31.142
 unknown United States
20252 JSIWMCUS false
173.35.51.207
 unknown Canada
812 ROGERS-COMMUNICATIONSCA false
184.209.111.81
 unknown United States
10507 SPCSUS false
84.112.43.114
 unknown Austria
6830 LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding false
196.51.223.10
 unknown South Africa
37518 FIBERGRIDSC false
14.135.254.241
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
204.160.201.167
 unknown United States
3356 LEVEL3US false
192.236.176.249
 unknown United States
54290 HOSTWINDSUS false
89.43.240.163
 unknown Romania
39425 ELECTROSIM-ASRO false
107.210.162.171
 unknown United States
7018 ATT-INTERNET4US false
89.103.89.58
 unknown Czech Republic
6830 LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding false
98.228.13.154
 unknown United States
7922 COMCAST-7922US false
205.50.28.253
 unknown United States
2914 NTT-COMMUNICATIONS-2914US false
43.142.72.167
 unknown Japan 4249 LILLY-ASUS false
223.148.241.47
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
187.10.79.97
 unknown Brazil
27699 TELEFONICABRASILSABR false
109.67.240.112
 unknown Israel
8551 BEZEQ-INTERNATIONAL-ASBezeqintInternetBackboneIL false
181.26.83.251
 unknown Argentina
22927 TelefonicadeArgentinaAR false
212.3.103.71
 unknown Ukraine
6702 APEXNCC-ASGagarinaavenuebuilding7room61RU false
141.74.44.205
 unknown Germany
680 DFNVereinzurFoerderungeinesDeutschenForschungsnetzese false
212.200.249.122
 unknown Serbia
8400 TELEKOM-ASRS false
193.92.123.52
 unknown Greece
1241 FORTHNET-GRForthnetEU false
150.136.104.146
 unknown United States
31898 ORACLE-BMC-31898US false
113.65.120.212
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
13.1.178.163
 unknown United States
7018 ATT-INTERNET4US false
35.115.119.202
 unknown United States
237 MERIT-AS-14US false
23.185.116.20
 unknown Reserved
26721 INYOUS false
92.104.24.31
 unknown Switzerland
3303 SWISSCOMSwisscomSwitzerlandLtdCH false
205.54.183.149
 unknown United States
2914 NTT-COMMUNICATIONS-2914US false
138.47.255.213
 unknown United States
19564 LATECHUS false
70.162.191.140
 unknown United States
22773 ASN-CXA-ALL-CCI-22773-RDCUS false
204.122.38.215
 unknown United States
1239 SPRINTLINKUS false
152.60.114.135
 unknown United States
55836 RELIANCEJIO-INRelianceJioInfocommLimitedIN false
137.248.26.129
 unknown Germany
680 DFNVereinzurFoerderungeinesDeutschenForschungsnetzese false
66.148.110.116
 unknown United States
54098 LIONLINK-NETWORKSUS false
23.164.225.15
 unknown Reserved
393434 AL-DC-US false
129.206.24.167
 unknown Germany
553 BELWUEBelWue-KoordinationEU false
201.238.25.223
 unknown Venezuela
27889 TelecomunicacionesMOVILNETVE false
173.87.1.252
 unknown United States
5650 FRONTIER-FRTRUS false
162.8.123.60
 unknown United States
10457 ILX-ASNUS false
85.2.39.212
 unknown Switzerland
3303 SWISSCOMSwisscomSwitzerlandLtdCH false
2.77.71.11
 unknown Kazakhstan
29355 KCELL-ASKZ false
74.14.196.35
 unknown Canada
577 BACOMCA false
52.111.82.236
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
192.109.0.79
 unknown Germany
29765 DATACHAMBERSUS false
143.136.135.240
 unknown Japan 2018 TENET-1ZA false
150.133.42.152
 unknown United States
1649 DNIC-AS-01649US false
115.18.150.67
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
200.118.227.2
 unknown Colombia
10620 TelmexColombiaSACO false
202.109.242.38
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
217.237.3.247
 unknown Germany
3320 DTAGInternetserviceprovideroperationsDE false
44.139.46.193
 unknown United States
34387 NETCREWHelsinkiFinlandFI false

Contacted Domains

Name IP Active
byte-mirai.kro.kr 154.216.20.119 true