API tools faq
paste
Advertisement
phimuskapsi

Mr Robot Kernel Panic Notes

phimuskapsi
Sep 7th, 2016
2,463
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.25 KB | None | 0 0
raw download clone embed print report
  1. ** ENTIRE PHOTO ALBUM HERE: http://imgur.com/a/Lv7eO **
  2.  
  3. =======================================================================================================================================
  4. Code Trace #1: http://i.imgur.com/LkOCQxk.png
  5. =======================================================================================================================================
  6. * Mentions 'local_softirq_pending 40' *
  7. ---------------------------------------------------------------------------------------------------------------------------------------
  8. Code: c3 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 0f 1f 44 00 00 48 8b 47 08 48 83 c7 08 41 89 f4 89 d3 41 89 cf 48 83 e8 18 <4c> 8b 68 18 48 89 7d
  9. 83 ed 18 eb 33 44 8b 30 4c 89 c1 4c
  10. ---------------------------------------------------------------------------------------------------------------------------------------
  11.  
  12. =======================================================================================================================================
  13. Code Trace #2: http://i.imgur.com/bnFHPtS.png
  14. =======================================================================================================================================
  15. Code: 78 29 8b 44 24 04 29 d0 8b 54 24 10 c1 f8 05 c1 e0 0c 09 f8 89 02 8b 43 0 [cut off]
  16. 85 c0 75 08 0f 0b 9c 00 77 c8 61 c0 48 89 43 0c eb 08 <0f> 0b 9f 00 77 c8 61 (c?) [cut off]
  17. (3b or 8b) 03 f6 c4 04 0f 85 a5 00 00 00 a1 oc
  18. ---------------------------------------------------------------------------------------------------------------------------------------
  19.  
  20. =======================================================================================================================================
  21. Code Trace #3: http://i.imgur.com/sebbcdd.png *** EXTREMELY CLOSE TO #8/9/10 ***
  22. =======================================================================================================================================
  23. Code: 30 fa 58 80 4c 39 2c 08 75 04 0f 0b eb fe 48 c7 c0 40 fa [cut off?]
  24. [first char cut off]8 80 eb 1f 65 48 8b 04 25 10 00 00 00 66 f7 80 44 e0 ff ff 00 ff 75 04 <0f> 0b [cut off?]
  25. [first char cut off]b fe 48 c7 c0 30 fa 58 80 48 8d 1c 08 48 83 3b 00 74 04
  26. ---------------------------------------------------------------------------------------------------------------------------------------
  27.  
  28. =======================================================================================================================================
  29. Code Trace #4: http://i.imgur.com/DNnUXGD.png
  30. =======================================================================================================================================
  31. *Mentions 'twofish' in loaded modules - Encryption type, blowfish, des, aes, blkcipher, sha's, crypto null*
  32. ---------------------------------------------------------------------------------------------------------------------------------------
  33. Stack: 4589f5f8 c7075b3c c7075c80 c54f3960 00000008 00000000 c7075b50 00000800
  34. f0290d0a 00000000 00000000 c10e1120 c1107940 c019627e 00000000 00000000
  35. ffffffff 00008020 535aaac3 00000000 00000000 c1107940 00000292 c656dd00
  36. ---------------------------------------------------------------------------------------------------------------------------------------
  37. Code: 48 8b 6c 24 08 89 4c 24 04 83 c7 0e 83 c5 0c eb 0e 8d 74 26 00 85 db 89 de 0f 84 ba 00 00 00 8b 1e 0f 18
  38. [first char cut off]0 8b 56 18 8d 4a 0c <0f> b6 41 26 3a 84 24 96 00 00 00 75 dd 8b 01 3b 44 24 70 75 d5
  39. ---------------------------------------------------------------------------------------------------------------------------------------
  40.  
  41. =======================================================================================================================================
  42. Code Trace #5: http://i.imgur.com/7qSb9Gn.png
  43. =======================================================================================================================================
  44. * Odd line at top *: 5.682942 c044d395 c1fb2400 c021f782 00000001 00000000 00000000 00
  45. ---------------------------------------------------------------------------------------------------------------------------------------
  46. Code: 04 8b 42 14 8b 72 10 89 c1 31 c0 0f a5 fd d3 e7 f6 c1 20
  47. [first char cut off]5 ef 0f 45 f8 89 f8 89 ea 89 d1 31 d2 85 c9 89 c3 74 08 89 c8 31 d2 <f7> f6
  48. [first char cut off]1 89 d8 f7 f6 89 ca 83 fa 00 89 c1 76 1f b8 ff ff ff
  49. ---------------------------------------------------------------------------------------------------------------------------------------
  50.  
  51.  
  52. =======================================================================================================================================
  53. Code Trace #6: http://i.imgur.com/cENFWwJ.png
  54. =======================================================================================================================================
  55. *Odd lines at top*:
  56. 0.762761] f58e9ef4 c13510b5 c15be75c 00000000 00000000 f5a0fa00 c1587453
  57. [cut off stuff - 4 chars?]3ca80
  58. ---------------------------------------------------------------------------------------------------------------------------------------
  59. 0.762869] c16116e0 f603ca80 00000000 c16116e0 c16ba29f f58e9f04 c16ba2cf
  60. [cut off stuff - 4 chars?]0fa00
  61. ---------------------------------------------------------------------------------------------------------------------------------------
  62. Code: 8d 48 01 ba 08 00 00 00 89 d8 e8 69 8d f1 ff 3b 05 2c e9 6 [cut off]
  63. c1 73 21 39 c6 74 e5 8b 14 85 00 de 67 c1 8b 7d ec 8b 4d f0 03 0c 3a <f0> 0f b[cut off]
  64. 71 1c f0 0f b3 eb ca 66 90 8b 7d f0 8b 04 b5 00 de
  65. ---------------------------------------------------------------------------------------------------------------------------------------
  66.  
  67. =======================================================================================================================================
  68. Code Trace #7: http://i.imgur.com/6spGpvy.png
  69. =======================================================================================================================================
  70. Code: c3 48 8b 8e 28 01 00 00 31 d2 31 c0 0f 30 c3 48 8b 87 08 01 [cut off]
  71. [cut off]00 00 00 00 75 0e 31 d2 b8 0f 00 00 20 b9 91 03 00 00 <0f> 30 c3[cut off]
  72. [cut off]91 03 00 00 0f 30 c3 ba 01 00 00 00 b8
  73. ---------------------------------------------------------------------------------------------------------------------------------------
  74.  
  75. =======================================================================================================================================
  76. Code Trace #8/9: http://i.imgur.com/MbYJKWv.png
  77. =======================================================================================================================================
  78. Code: 30 fa 58 80 4c 39 2c 08 75 [cut off]
  79. 58 80 eb 1f 65 48 8b 04 25 10 00 00 00 66 f7 80 4(?)[cut off]
  80. eb fe 48 c7 c0 30 fa 58 80 48 8d 1c 08 48 83 3b [cut off]
  81. ---------------------------------------------------------------------------------------------------------------------------------------
  82. Code: 30 fa 58 80 4c 39 2c 08 75 [cut off]
  83. 58 80 eb 1f 65 48 8b 04 25 10 00 00 00 66 f7 80 4(?)[cut off]
  84. eb fe 48 c7 c0 30 fa 58 80 48 8d 1c 08 48 83 3b [cut off]
  85. 48 8b 04
  86. ---------------------------------------------------------------------------------------------------------------------------------------
  87. *Bottom identical except for last line*
  88. ---------------------------------------------------------------------------------------------------------------------------------------
  89.  
  90. =======================================================================================================================================
  91. Code Trace #10: Notebook Code (similar to #8/9 - Same time code [3448075.307991]) http://i.imgur.com/y3J1I9J.png
  92. =======================================================================================================================================
  93. Code: 30 fa 58 80 4c 39 2c 88
  94. 75 04 0f 0b eb fe 48 c7 cb 48 fa 58 00 eb
  95. 1f 65 48 8b 04 25 10 00 00 00 66 f7 80 44
  96. e0 ff ff 00 ff 75 04 <0f> 0b eb fe 48 c7
  97. c0 30 fa 58 80 48 8d 7c 08 48 83 3b 00
  98. 74 04
  99. ---------------------------------------------------------------------------------------------------------------------------------------
  100. Code is likely Same as #3 which when compared and contrasted, you get this:
  101. ---------------------------------------------------------------------------------------------------------------------------------------
  102. Code: 30 fa 58 80 4c 39 2c 08
  103. 75 04 0f 0b eb fe 48 c7 c0 40 fa
  104. 58 80 eb 1f 65 48 8b 04 25 10 00 00 00 66 f7 80 44
  105. e0 ff ff 00 ff 75 04 <0f> 0b eb fe 48 c7
  106. c0 30 fa 58 80 48 8d 1c 08 48 83 3b 00
  107. 74 04
  108. ---------------------------------------------------------------------------------------------------------------------------------------
  109.  
  110. * Five Down / 9 Across Applied *:
  111. First Nine Chars: First 9 Sets: Ninth Code:
  112. c030fa588 c0 30 fa 58 80 48 8d 7c 08 08
  113. ---------------------------------------------------------------------------------------------------------------------------------------
  114.  
  115. Chars after 9th Char: Chars After 9th Set:
  116. 0488b7c0848833b00 48 83 3b 00
  117. ---------------------------------------------------------------------------------------------------------------------------------------
  118.  
  119. =======================================================================================================================================
  120. Notebook Cipher: http://i.imgur.com/M4xP7D0.png
  121. =======================================================================================================================================
  122. Possibility 1: Possibility 2: Possbility 3:
  123. \\:LWWX YKLM LFMNO \\:[WWX YKLM LFMNO
  124. ASDF Q L :) EXN _*@ ASDF Q L :) EXN _*@
  125. JKLMN LOL VNj fN WYNN JKLMN LOL UNj fN WYNN
  126. Najb etc .. nyc ba na 4423 Jajb etc .. nyc ba na 4423
  127. lmfao qn yzz k e:(//[ex. lmfao qn yzz k e:(//[ex.
  128. jpn n 32 rsqash fapng y jpn n 32 rsqash fgpng y
  129. asdfgkli)Nb (exe) i* asdfakli)Nb 6exe) i*
  130. 428x0101nj238?_axa 428yO101nv238?_axa 428xO101nj238?_axa
  131. dbf\\ec 8s jgggjjjj dbf\\ec as jgggjjjj
  132. jjjgxene
  133. ---------------------------------------------------------------------------------------------------------------------------------------
  134.  
  135. *5 Down / 9 Across applied*:
  136. ---------------------------------------------------------------------------------------------------------------------------------------
  137. Spaces Don't Count: Spaces Do Count If Blowfish 8-bit req'd
  138. ---------------------------------------------------------------------------------------------------------------------------------------
  139. lmfao qn yz lmfao qn lmfao qn y
  140. ---------------------------------------------------------------------------------------------------------------------------------------
  141. Skip Truncation:
  142. ---------------------------------------------------------------------------------------------------------------------------------------
  143. lmfaoqnyz lmfaoqn lmfaoqny
  144.  
  145.  
  146.  
  147. =======================================================================================================================================
  148. Kernel Panic Log:
  149. =======================================================================================================================================
  150. Top 3 Rows:
  151. ---------------------------------------------------------------------------------------------------------------------------------------
  152. CR2: 00007ff9b3cd5000 CR3: 00000001c4287000 CR4: 0000800000002660
  153. DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
  154. DR3: 0000000000000000 DR6: 00000000ffffeff0 DR7: 0000000000000400
  155. ---------------------------------------------------------------------------------------------------------------------------------------
  156. RIP: e030:[<ffffffff8103f880c>] [<ffffffff8103f8oc>] __wake_up_common+0x2a/0x84
  157. RSP: e02b:ffff8800280afd98 EFLAGS: 00010006
  158. RAX: 615f79726f6d6555 RBX: 0000000000000001 RCX: 0000000000000000
  159. RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8801c4a454e0
  160. RBP: ffff8800280afdd8 R08: 0000000000000000 R09: 0000000000000000
  161. R10: ffff8801c403ab00 R11: ffffffff819d2f18 R12: 0000000000000003
  162. R13: 0000000000000044 R14: 0000000000000000 R15: 0000000000000000
  163. FS: 00007f592cdfa710(0000) GS:ffff880028214000(0000) kn1GS:0000000000000000
  164. CS: e033 DS: 0000 ES: 0000 CR0: 000000000005003b
  165. CR2: 00007f072e464810 CR3: 00000001b5def000 CR4: 0000000000002660
  166. DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
  167. DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
  168. ---------------------------------------------------------------------------------------------------------------------------------------
  169. Stack:
  170. ffffffff8100f6af ffffffff8145cf03 ffff8800280afe18 ffff8801c4a454d8
  171. <0> ffff8801c4a602a4 0000000000000044 0000000000000000 0000000000000000
  172. <0> ffff8800280afe18 ffffffff81046c01 0000000000000000 0000000000000000
  173. ---------------------------------------------------------------------------------------------------------------------------------------
  174. Code: 69 6e 69 74 20 64 65 63 6f 64 65 20 73 65 71 75 65 6e 63 65 2e 2e 2e 66 69 76 65 20 64 6f 77 6e 2c 20 6e 69 6e 65 20 61 63 72 6f 73 73 2e 2e 2e 73 6b 69 70 20 74 72 75 6e 63 61 74 69 6f 6e 2e 2e 2e
  175. ---------------------------------------------------------------------------------------------------------------------------------------
  176.  
  177. *** Code decodes to: init decode sequence...five down, nine across...skip truncation... ***
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!