Sample:

4c48f63224ae629a0943dca68e877eb6339428e134c6a0fb5178c05e599e57df



Summary

OS ABI: UNIX - System V

CPU class: 64 bit

Persistence (user): No

Persistence (root): No

CPU byte order: 2's complement LSB

File type: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=d641649880d5b75c682418939ad2a37a74b70891, stripped

CPU type: AMD x86-64

Entropy: 5.93814036155

Syscalls executed (root): 1447

Syscalls executed (user): 1442

ELF type: Executable file

ELF

Class: 64 bit

Data encoding: 2's complement LSB

Operating system ABI: UNIX - System V

Object file type: Executable file

ELF version: 0.1

Machine: AMD x86-64

Entrypoint: 0x4022f0

Interpreter: '/lib64/ld-linux-x86-64.so.2'

Number of segments: 9

Number of sections: 30

Program header table offset: 64

Section header table offset: 69560

Program header table - size of entry: 56

Section header table - size of entry: 64

Program header table - entries: 9

Section header table - entries: 30

Section header table - index sections names: 29

Stripped: True

Sections stripped: False

  • libc.so.6
  • __strcat_chk
  • getenv
  • __snprintf_chk
  • free
  • recv
  • __errno_location
  • strncpy
  • remove
  • _exit
  • strcpy
  • mkdir
  • fread
  • readlink
  • fcntl
  • getpid
  • inet_ntoa
  • clock
  • fclose
  • opendir
  • getpwuid
  • shutdown
  • strlen
  • chdir
  • __stack_chk_fail
  • getuid
  • mmap
  • system
  • dup2
  • send
  • rewind
  • __fdelt_chk
  • pclose
  • snprintf
  • ftruncate
  • uname
  • gettimeofday
  • memset
  • fscanf
  • ioctl
  • close
  • __realpath_chk
  • pipe
  • closedir
  • __strdup
  • read
  • __libc_start_main
  • srand
  • memcmp
  • fgets
  • getsockopt
  • calloc
  • strcmp
  • signal
  • __memcpy_chk
  • umask
  • strtol
  • memcpy
  • prctl
  • kill
  • time
  • fileno
  • select
  • __xstat
  • readdir
  • malloc
  • fflush
  • recvfrom
  • fseek
  • __strncpy_chk
  • realloc
  • __strcpy_chk
  • fdopen
  • chmod
  • waitpid
  • open
  • access
  • popen
  • fopen
  • strtok
  • strcasestr
  • strcat
  • gethostname
  • getppid
  • exit
  • connect
  • fwrite
  • __fprintf_chk
  • getaddrinfo
  • sleep
  • execv
  • fork
  • strstr
  • rand
  • freeaddrinfo
  • socket
  • PT_LOAD at offset 0xfe10
  • .arcsec
  • section without a name
  • .text - 6.415441
  • .rodata - 7.245862

Debug information: False

  • GCC: (Ubuntu 5.4.0-6ubuntu1~16.04.10) 5.4.0 20160609
  • GNU : '\xd6Ad\x98\x80\xd5\xb7\\h$\x18\x93\x9a\xd2\xa3zt\xb7\x08'

Hash

MD5: 2d63ed0a6701a6bf665fb684a654d66b

SHA1: c9e16cdc7270c8959bdcc33e3ea49effb2c00092

SHA256: 4c48f63224ae629a0943dca68e877eb6339428e134c6a0fb5178c05e599e57df

SHA512: 14811ed0434f75a57251dda504d07eb8bbf7ec8a5023cd90fcc7b1e8316e0fad09451488c1c4e174fca04f06f67818b09029eac842188c22b506724f4904cde9

ssdeep: 768:kKvwpyiEogrHwmq2chzPknk6ROOSRydALCyrp/5pIUxOkT0sIjeohtWDLw/QGDfE:JwcKpyROTJLCE7l0e/fw7mAgfV

Bytes

Entropy: 5.93814036155

Min entropy (16KB blocks): 5.3014344619

Max entropy (16KB blocks): 6.38101990834

Unique bytes (0-255): 256

Null bytes: 19034

White spaces: 1635

Printable bytes: 18363

First 16B: 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00

Last 16B: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Byte: 0x0

Offset: 0xf567

Length: 2218

  • 0x97 - 24 times
  • 0xa3 - 23 times
  • 0x3e - 22 times
  • 0x0 - 19034 times
  • 0xff - 3662 times
  • 0x48 - 2540 times

File type

Mime type: application/x-executable

File type: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=d641649880d5b75c682418939ad2a37a74b70891, stripped

VirusTotal

Error: Resource not found

Data Explore

  • ~/Hc
  • /bin/sh
  • /bin/sh

Code Explore

Number of functions: 136

Total size functions [B]: 43771

Average size a function [B]: 321.845588235

Percentage of covered .text section: 96.1535081938

Percentage of covered LOAD segment: 65.29379298

Number of functions: 135

Total size functions [B]: 45892

Average size a function [B]: 339.940740741

Percentage of covered .text section: 100.812793814

Percentage of covered LOAD segment: 68.45771738

Sandbox (user)

Standard output:

Standard error:

Sandbox (root)

Standard output:

Standard error:

Behavior

  • clock_gettime
  • rt_sigaction
  • lseek
  • mprotect
  • uname
  • brk
  • connect
  • shutdown
  • prctl
  • close
  • getgid
  • poll
  • open
  • select
  • write
  • getgroups
  • getdents
  • recvfrom
  • nanosleep
  • arch_prctl
  • statfs
  • access
  • getpid
  • getrlimit
  • munmap
  • fstat
  • fcntl
  • stat
  • dup2
  • read
  • getcwd
  • clone
  • sendto
  • getppid
  • fadvise64
  • kill
  • rt_sigreturn
  • set_robust_list
  • ioctl
  • exit_group
  • readlink
  • execve
  • getsockopt
  • wait4
  • chdir
  • getuid
  • socket
  • set_tid_address
  • pipe2
  • mmap2
  • rt_sigprocmask
  • getegid
  • geteuid

Unique number: 53

Total number: 1442

  • strchr
  • strncmp
  • strtok
  • strcat
  • strcmp
  • memchr

Unique number: 6

Total number: 4547

If uid is checked: True

If gid is checked: True

Number of processes: 19

Trace lines lost: 0

  • /dev/null
  • /var/tmp/.kNeZtrRvbNX
  • /home/box/.htKcYQorAWh
  • /var/tmp/.FoumtiJtntF
  • /var/tmp/.BnMQCqSvgWj
  • /opt/lib/libpthread.so.0
  • /opt/lib/libnss_dns.so.2
  • /opt/lib/locale/en_US.utf8/LC_IDENTIFICATION
  • 0007f68e8ba26d
  • /opt/lib/libresolv.so.2
  • /etc/lsb-release
  • /proc/filesystems
  • /opt/lib/libnsl.so.1
  • /etc/hosts
  • /opt/lib/libnss_compat.so.2
  • /sys/class/net/ens3/address
  • /lib/x86_64-linux-gnu/libselinux.so.1
  • /etc/passwd
  • /etc/os-release
  • /opt/lib/libdl.so.2
  • /opt/lib/libc.so.6
  • /opt/lib/locale/en.UTF-8/LC_IDENTIFICATION
  • /opt/lib/locale/en_US/LC_IDENTIFICATION
  • /proc/meminfo
  • /proc/sys/kernel/ngroups_max
  • /lib/x86_64-linux-gnu/libpcre.so.3
  • /etc/ld.so.cache
  • /etc
  • /opt/lib/libnss_files.so.2
  • /proc/cpuinfo
  • /opt/share/locale/locale.alias
  • /etc/issue
  • /proc/partitions
  • /sys/class/net
  • /etc/resolv.conf
  • /etc/group
  • /etc/nsswitch.conf
  • /etc/host.conf
  • /opt/lib/locale/en/LC_IDENTIFICATION
  • /opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION
  • /opt/lib/locale/en.utf8/LC_IDENTIFICATION
  • /opt/lib/locale/locale-archive
  • /proc/version
  • /opt/lib/libnss_nis.so.2

Max sleep: 60.0

  • sh -c cat /proc/cpuinfo 2>/dev/null
  • uname -a
  • cat /proc/partitions
  • sh -c cat /etc/*release /etc/issue 2>/dev/null
  • sh -c id 2>/dev/null
  • cat /proc/cpuinfo
  • sh -c whoami 2>/dev/null
  • sh -c cat /proc/meminfo 2>/dev/null
  • sh -c cat /proc/partitions 2>/dev/null
  • sh -c uname -a 2>/dev/null
  • whoami
  • sh -c cat /proc/version 2>/dev/null
  • cat /etc/lsb-release /etc/os-release /etc/issue
  • cat /proc/version
  • cat /proc/meminfo
  • id
  • [qsfijlnxss]
  • [hepdspooknu]
  • [xymjphcynwlu]

Total: 2

  • FIONREAD
  • SIOCGIFADDR
  • "files", "dns"
  • "no_NO.ISO-8859-1", "nynorsk"
  • "group", "services"
  • "swedish", "thai"
  • "uname", "jobs"
  • "ja_JP.ujis", "ko_KR"
  • "", "C"
  • "hosts", "ethers"
  • "whoami", "test"
  • "top.haletteompson.com", "ip6-localhost"
  • "czech", "dansk"
  • "german", "ja_JP"
  • "galician", "ja_JP"
  • "hosts", "passwd"
  • "en_US.UTF-8", "finnish"
  • "dansk", "eesti"
  • "icelandic", "ja_JP"
  • "multi on", "spoof"
  • "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
  • "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "passwd", "rpc"
  • "passwd", "group"
  • "top.haletteompson.com", "top.haletteompson.com"
  • "passwd_compat", "hosts"
  • "slovene", "swedish"
  • "dutch", "eesti"
  • "group_compat", "ethers"
  • "group_compat", "protocols"
  • "uname", "ulimit"
  • "x86_64", "aarch64"
  • "galician", "hebrew"
  • "id", "export"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "galego", "ja_JP"
  • "/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "finnish", "ja_JP"
  • "passwd_compat", "ethers"
  • "german", "greek"
  • "top.haletteompson.com.", "top.haletteompson.com."
  • "bokmal", "croatian"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...
  • "UTF-8", "utf8"
  • "japanese", "ja_JP"
  • "hosts", "shadow"
  • "japanese.euc", "japanese.sjis"
  • "passwd", "gshadow"
  • "bokmal", "dansk"
  • "no_NO", "nynorsk"
  • "croatian", "ja_JP"
  • "ko_KR", "no_NO"
  • "nynorsk", "polish"
  • "deutsch", "eesti"
  • "hrvatski", "hungarian"
  • "on", "on"
  • "no_NO.ISO-8859-1", "norwegian"
  • "whoami", "unset"
  • "group", "rpc"
  • "slovak", "slovene"
  • "passwd_compat", "gshadow"
  • "passwd_compat", "services"
  • "x86_64", "i686"
  • "hosts", "networks"
  • "greek", "ja_JP"
  • "nynorsk", "slovene"
  • "multi on", "order"
  • "en_US.UTF-8", "C"
  • "czech", "french"
  • "hebrew", "ja_JP"
  • "hrvatski", "ja_JP"
  • "group_compat", "gshadow"
  • "passwd", "netgroup"
  • "en_US.UTF-8", "ja_JP.ujis"
  • "whoami", "wait"
  • "passwd", "ethers"
  • "italian", "japanese"
  • "japanese.euc", "ja_JP.ujis"
  • "GNAME=box", "CPATH"
  • "czech", "ja_JP"
  • "getpwuid_r", "setpwent"
  • "french", "galego"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "polish", "romanian"
  • "japanese.euc", "nynorsk"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "cat", "break"
  • "japanese.sjis", "ko_KR"
  • "id", "continue"
  • "uname", "unalias"
  • "passwd_compat", "protocols"
  • "x86_64", "m68k"
  • "deutsch", "french"
  • "group", "protocols"
  • "slovenian", "swedish"
  • "danish", "french"
  • "id", "jobs"
  • "cat", "elif"
  • "no_NO", "no_NO.ISO-8859-1"
  • "group_compat", "netgroup"
  • "whoami", "until"
  • "japanese.sjis", "korean"
  • "korean.euc", "no_NO"
  • "getgrent_r", "getgrgid_r"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "ja_JP", "ko_KR"
  • "eesti", "ja_JP"
  • "getpwent_r", "getpwnam_r"
  • "passwd_compat", "netgroup"
  • "japanese.euc", "ja_JP"
  • "utf8", "UTF-8"
  • "en_US.UTF-8", "POSIX"
  • "getgrnam_r", "setgrent"
  • "polish", "portuguese"
  • "russian", "slovene"
  • "greek", "hebrew"
  • "bokmal", "french"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "slovene", "slovenian"
  • "id", "getopts"
  • "passwd_compat", "rpc"
  • "/etc/os-release", "/etc/lsb-release"
  • "top.haletteompson.com", "ip6-loopback"
  • "french", "galician"
  • "uname", "for"
  • "bokmal", "catalan"
  • "hosts", "rpc"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
  • "getgrgid_r", "setgrent"
  • "group", "shadow"
  • "catalan", "ja_JP"
  • "korean", "nynorsk"
  • "group", "hosts"
  • "passwd", "hosts"
  • "catalan", "french"
  • "multi on", "multi"
  • "top.haletteompson.com", "localhost"
  • "slovenian", "spanish"
  • "group_compat", "passwd"
  • "getgrgid_r", "getgrnam_r"
  • "passwd", "networks"
  • "/usr/share/locale", "/opt/share/locale"
  • "endgrent", "getgrgid_r"
  • "hosts", "protocols"
  • "passwd_compat", "group"
  • "galician", "german"
  • "getgrent_r", "getgrnam_r"
  • "getpwnam_r", "setpwent"
  • "lithuanian", "no_NO"
  • "cat", "bg"
  • "estonian", "ja_JP"
  • "cat", "jobs"
  • "uname", "until"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "passwd", "services"
  • "japanese", "japanese.euc"
  • "danish", "ja_JP"
  • "group", "ethers"
  • "getpwuid_r", "getpwnam_r"
  • "hosts", "services"
  • "passwd", "passwd"
  • "cat", "for"
  • "id", "if"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...
  • "deutsch", "ja_JP"
  • "deutsch", "dutch"
  • "french", "ja_JP"
  • "en_US.UTF-8", "eesti"
  • "croatian", "czech"
  • "multi on", "trim"
  • "en_US.UTF-8", "french"
  • "dutch", "french"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "id", "in"
  • "french", "hebrew"
  • "passwd", "protocols"
  • "passwd_compat", "networks"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "russian", "slovak"
  • "ja_JP.ujis", "nynorsk"
  • "ja_JP", "ja_JP.ujis"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "passwd_compat", "passwd"
  • "compat", "nis"
  • "ko_KR", "lithuanian"
  • "NG=en_US.UTF-8", "NG"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "estonian", "finnish"
  • "cat", "continue"
  • "hosts", "netgroup"
  • "coreutils", "coreutils"
  • "compat", "compat"
  • "uname", "unset"
  • "icelandic", "italian"
  • "uname", "then"
  • "top.haletteompson.com", "ubuntu"
  • "52:54:00:7f:35:f1", "00:00:00:00:00:00"
  • "cat", "do"
  • "group", "gshadow"
  • "x86_64", "sh4"
  • "passwd", "shadow"
  • "id", "hash"
  • "group_compat", "services"
  • "group_compat", "group"
  • "hebrew", "icelandic"
  • "german", "hebrew"
  • "korean.euc", "lithuanian"
  • "NGUAGE=en_US:en", "NG"
  • "portuguese", "romanian"
  • "ME=/home/box", "ME"
  • "catalan", "croatian"
  • "uname", "test"
  • "polish", "slovene"
  • "cat", "chdir"
  • "czech", "danish"
  • "spanish", "swedish"
  • "group_compat", "hosts"
  • "endpwent", "getpwuid_r"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
  • "group", "networks"
  • "korean.euc", "ko_KR"
  • "hosts", "group"
  • "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "group_compat", "networks"
  • "ko_KR", "nynorsk"
  • "endgrent", "getgrnam_r"
  • "portuguese", "slovene"
  • "italian", "ja_JP"
  • "coreutils", "messages"
  • "passwd_compat", "shadow"
  • "hosts", "hosts"
  • "dutch", "ja_JP"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "hungarian", "ja_JP"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "whoami", "{"
  • "dansk", "french"
  • "group", "passwd"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
  • "bokmal", "ja_JP"
  • "eesti", "estonian"
  • "hrvatski", "icelandic"
  • "ja_JP.ujis", "japanese.sjis"
  • "endpwent", "getpwnam_r"
  • "whoami", "while"
  • "nynorsk", "romanian"
  • "lithuanian", "nynorsk"
  • "endgrent", "getgrent_r"
  • "/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "endpwent", "getpwent_r"
  • "galego", "galician"
  • "nis", "nis"
  • "romanian", "russian"
  • "uname", "in"
  • "dansk", "ja_JP"
  • "group_compat", "shadow"
  • "korean.euc", "nynorsk"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "cat", "case"
  • "thai", "turkish"
  • "eesti", "french"
  • "en_US.UTF-8", "estonian"
  • "group", "group"
  • "korean", "ko_KR"
  • "whoami", "for"
  • "romanian", "slovene"
  • "order hosts,bind", "order"
  • "hungarian", "icelandic"
  • "group", "netgroup"
  • "dansk", "deutsch"
  • "id", "until"
  • "en_US.UTF-8", "dansk"
  • "japanese.euc", "ko_KR"
  • "/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "hebrew", "hrvatski"
  • "hosts", "gshadow"
  • "galego", "hebrew"
  • "whoami", "ulimit"
  • "x86_64", "x86_64"
  • "id", "for"
  • "whoami", "jobs"
  • "cat", "cd"
  • "norwegian", "nynorsk"
  • "japanese", "ja_JP.ujis"
  • "finnish", "french"
  • "croatian", "dansk"
  • "japanese.sjis", "nynorsk"
  • "ja_JP", "nynorsk"
  • "croatian", "french"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "korean", "korean.euc"
  • "group_compat", "rpc"
  • "catalan", "dansk"
  • "GNAME=box", "CALDOMAIN"
  • "danish", "dansk"
  • "getpwent_r", "getpwuid_r"
  • "estonian", "french"
  • clock_gettime
  • rt_sigaction
  • lseek
  • mprotect
  • uname
  • brk
  • connect
  • shutdown
  • prctl
  • close
  • getgid
  • poll
  • open
  • select
  • write
  • getgroups
  • getdents
  • recvfrom
  • nanosleep
  • arch_prctl
  • statfs
  • access
  • getpid
  • getrlimit
  • munmap
  • fstat
  • fcntl
  • stat
  • getcwd
  • dup2
  • read
  • commit_creds
  • clone
  • sendto
  • getppid
  • fadvise64
  • kill
  • rt_sigreturn
  • set_robust_list
  • ioctl
  • exit_group
  • readlink
  • execve
  • getsockopt
  • wait4
  • chdir
  • getuid
  • socket
  • set_tid_address
  • pipe2
  • mmap2
  • rt_sigprocmask
  • getegid
  • geteuid

Unique number: 54

Total number: 1447

  • strchr
  • strncmp
  • strtok
  • strcat
  • strcmp
  • memchr

Unique number: 6

Total number: 3986

Number of processes: 19

Trace lines lost: 0

  • /dev/null
  • /etc/.godeOjLgfvA
  • /var/tmp/.jXsFBHXPYET
  • /var/tmp/.FiwcyWVNijH
  • /var/tmp/.QLecKtSdxjr
  • /opt/lib/libpthread.so.0
  • /opt/lib/libnss_dns.so.2
  • /opt/lib/locale/en_US.utf8/LC_IDENTIFICATION
  • /opt/lib/libresolv.so.2
  • /etc/lsb-release
  • /proc/filesystems
  • /opt/lib/libnsl.so.1
  • /etc/hosts
  • /opt/lib/libnss_compat.so.2
  • /sys/class/net/ens3/address
  • /lib/x86_64-linux-gnu/libselinux.so.1
  • /etc/passwd
  • 0007f0af6d526d
  • /opt/lib/libdl.so.2
  • /etc/os-release
  • /opt/lib/libc.so.6
  • /opt/lib/locale/en.UTF-8/LC_IDENTIFICATION
  • /opt/lib/locale/en_US/LC_IDENTIFICATION
  • 0007f7d973a46d
  • /proc/meminfo
  • /proc/sys/kernel/ngroups_max
  • /lib/x86_64-linux-gnu/libpcre.so.3
  • /etc/ld.so.cache
  • /etc
  • /opt/lib/libnss_files.so.2
  • /proc/cpuinfo
  • /opt/share/locale/locale.alias
  • /etc/issue
  • /proc/partitions
  • /sys/class/net
  • /etc/resolv.conf
  • /etc/group
  • /etc/nsswitch.conf
  • /etc/host.conf
  • /opt/lib/locale/en/LC_IDENTIFICATION
  • /opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION
  • /opt/lib/locale/en.utf8/LC_IDENTIFICATION
  • /opt/lib/locale/locale-archive
  • /proc/version
  • /opt/lib/libnss_nis.so.2

Max sleep: 60.0

  • [ufppfmvfycld]
  • [sbicfjchy]
  • [ijuovkcgxvjov]

Total: 2

  • FIONREAD
  • SIOCGIFADDR
  • "files", "dns"
  • "no_NO.ISO-8859-1", "nynorsk"
  • "group", "services"
  • "swedish", "thai"
  • "uname", "jobs"
  • "ja_JP.ujis", "ko_KR"
  • "", "C"
  • "hosts", "ethers"
  • "whoami", "test"
  • "top.haletteompson.com", "ip6-localhost"
  • "czech", "dansk"
  • "german", "ja_JP"
  • "galician", "ja_JP"
  • "hosts", "passwd"
  • "en_US.UTF-8", "finnish"
  • "dansk", "eesti"
  • "icelandic", "ja_JP"
  • "multi on", "spoof"
  • "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
  • "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "passwd", "rpc"
  • "passwd", "group"
  • "top.haletteompson.com", "top.haletteompson.com"
  • "passwd_compat", "hosts"
  • "slovene", "swedish"
  • "dutch", "eesti"
  • "group_compat", "ethers"
  • "group_compat", "protocols"
  • "uname", "ulimit"
  • "x86_64", "aarch64"
  • "group", "passwd"
  • "galician", "hebrew"
  • "id", "export"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "galego", "ja_JP"
  • "/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "finnish", "ja_JP"
  • "passwd_compat", "ethers"
  • "german", "greek"
  • "top.haletteompson.com.", "top.haletteompson.com."
  • "bokmal", "croatian"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...
  • "UTF-8", "utf8"
  • "japanese", "ja_JP"
  • "hosts", "shadow"
  • "japanese.euc", "japanese.sjis"
  • "passwd", "gshadow"
  • "bokmal", "dansk"
  • "no_NO", "nynorsk"
  • "croatian", "ja_JP"
  • "ko_KR", "no_NO"
  • "nynorsk", "polish"
  • "deutsch", "eesti"
  • "hrvatski", "hungarian"
  • "on", "on"
  • "no_NO.ISO-8859-1", "norwegian"
  • "whoami", "unset"
  • "group", "rpc"
  • "slovak", "slovene"
  • "passwd_compat", "gshadow"
  • "passwd_compat", "services"
  • "x86_64", "i686"
  • "hosts", "networks"
  • "greek", "ja_JP"
  • "nynorsk", "slovene"
  • "multi on", "order"
  • "en_US.UTF-8", "C"
  • "czech", "french"
  • "hebrew", "ja_JP"
  • "hrvatski", "ja_JP"
  • "group_compat", "gshadow"
  • "passwd", "netgroup"
  • "en_US.UTF-8", "ja_JP.ujis"
  • "whoami", "wait"
  • "GNAME=root", "CPATH"
  • "passwd", "ethers"
  • "italian", "japanese"
  • "japanese.euc", "ja_JP.ujis"
  • "czech", "ja_JP"
  • "getpwuid_r", "setpwent"
  • "french", "galego"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "polish", "romanian"
  • "japanese.euc", "nynorsk"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "cat", "break"
  • "ME=/root", "ME"
  • "id", "continue"
  • "uname", "unalias"
  • "passwd_compat", "protocols"
  • "x86_64", "m68k"
  • "deutsch", "french"
  • "group", "protocols"
  • "slovenian", "swedish"
  • "danish", "french"
  • "id", "jobs"
  • "cat", "elif"
  • "no_NO", "no_NO.ISO-8859-1"
  • "group_compat", "netgroup"
  • "whoami", "until"
  • "japanese.sjis", "korean"
  • "korean.euc", "no_NO"
  • "getgrent_r", "getgrgid_r"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "ja_JP", "ko_KR"
  • "eesti", "ja_JP"
  • "getpwent_r", "getpwnam_r"
  • "passwd_compat", "netgroup"
  • "japanese.euc", "ja_JP"
  • "utf8", "UTF-8"
  • "en_US.UTF-8", "POSIX"
  • "getgrnam_r", "setgrent"
  • "polish", "portuguese"
  • "russian", "slovene"
  • "greek", "hebrew"
  • "bokmal", "french"
  • "GNAME=root", "CALDOMAIN"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "slovene", "slovenian"
  • "id", "getopts"
  • "passwd_compat", "rpc"
  • "/etc/os-release", "/etc/lsb-release"
  • "top.haletteompson.com", "ip6-loopback"
  • "french", "galician"
  • "uname", "for"
  • "bokmal", "catalan"
  • "hosts", "rpc"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
  • "getgrgid_r", "setgrent"
  • "group", "shadow"
  • "catalan", "ja_JP"
  • "korean", "nynorsk"
  • "group", "hosts"
  • "passwd", "hosts"
  • "catalan", "french"
  • "multi on", "multi"
  • "top.haletteompson.com", "localhost"
  • "slovenian", "spanish"
  • "group_compat", "passwd"
  • "getgrgid_r", "getgrnam_r"
  • "passwd", "networks"
  • "/usr/share/locale", "/opt/share/locale"
  • "endgrent", "getgrgid_r"
  • "hosts", "protocols"
  • "passwd_compat", "group"
  • "galician", "german"
  • "getgrent_r", "getgrnam_r"
  • "getpwnam_r", "setpwent"
  • "lithuanian", "no_NO"
  • "cat", "bg"
  • "estonian", "ja_JP"
  • "cat", "jobs"
  • "uname", "until"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "passwd", "services"
  • "japanese", "japanese.euc"
  • "danish", "ja_JP"
  • "group", "ethers"
  • "getpwuid_r", "getpwnam_r"
  • "hosts", "services"
  • "passwd", "passwd"
  • "cat", "for"
  • "id", "if"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...
  • "deutsch", "ja_JP"
  • "deutsch", "dutch"
  • "french", "ja_JP"
  • "en_US.UTF-8", "eesti"
  • "croatian", "czech"
  • "multi on", "trim"
  • "en_US.UTF-8", "french"
  • "dutch", "french"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "id", "in"
  • "french", "hebrew"
  • "passwd", "protocols"
  • "passwd_compat", "networks"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "russian", "slovak"
  • "ja_JP.ujis", "nynorsk"
  • "ja_JP", "ja_JP.ujis"
  • "/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "passwd_compat", "passwd"
  • "compat", "nis"
  • "ko_KR", "lithuanian"
  • "NG=en_US.UTF-8", "NG"
  • "/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "estonian", "finnish"
  • "cat", "continue"
  • "hosts", "netgroup"
  • "coreutils", "coreutils"
  • "compat", "compat"
  • "uname", "unset"
  • "icelandic", "italian"
  • "uname", "then"
  • "top.haletteompson.com", "ubuntu"
  • "52:54:00:7f:35:f1", "00:00:00:00:00:00"
  • "cat", "do"
  • "group", "gshadow"
  • "x86_64", "sh4"
  • "passwd", "shadow"
  • "id", "hash"
  • "group_compat", "services"
  • "group_compat", "group"
  • "hebrew", "icelandic"
  • "german", "hebrew"
  • "korean.euc", "lithuanian"
  • "NGUAGE=en_US:en", "NG"
  • "portuguese", "romanian"
  • "catalan", "croatian"
  • "uname", "test"
  • "polish", "slovene"
  • "cat", "chdir"
  • "czech", "danish"
  • "spanish", "swedish"
  • "group_compat", "hosts"
  • "endpwent", "getpwuid_r"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
  • "group", "networks"
  • "korean.euc", "ko_KR"
  • "hosts", "group"
  • "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "group_compat", "networks"
  • "ko_KR", "nynorsk"
  • "endgrent", "getgrnam_r"
  • "portuguese", "slovene"
  • "italian", "ja_JP"
  • "coreutils", "messages"
  • "passwd_compat", "shadow"
  • "hosts", "hosts"
  • "dutch", "ja_JP"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "hungarian", "ja_JP"
  • "/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
  • "whoami", "{"
  • "dansk", "french"
  • "japanese.sjis", "ko_KR"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
  • "bokmal", "ja_JP"
  • "eesti", "estonian"
  • "hrvatski", "icelandic"
  • "ja_JP.ujis", "japanese.sjis"
  • "endpwent", "getpwnam_r"
  • "whoami", "while"
  • "nynorsk", "romanian"
  • "lithuanian", "nynorsk"
  • "endgrent", "getgrent_r"
  • "/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "endpwent", "getpwent_r"
  • "galego", "galician"
  • "nis", "nis"
  • "romanian", "russian"
  • "uname", "in"
  • "dansk", "ja_JP"
  • "group_compat", "shadow"
  • "korean.euc", "nynorsk"
  • "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
  • "cat", "case"
  • "thai", "turkish"
  • "eesti", "french"
  • "en_US.UTF-8", "estonian"
  • "group", "group"
  • "korean", "ko_KR"
  • "whoami", "for"
  • "romanian", "slovene"
  • "order hosts,bind", "order"
  • "hungarian", "icelandic"
  • "group", "netgroup"
  • "dansk", "deutsch"
  • "id", "until"
  • "en_US.UTF-8", "dansk"
  • "japanese.euc", "ko_KR"
  • "/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
  • "hebrew", "hrvatski"
  • "hosts", "gshadow"
  • "galego", "hebrew"
  • "whoami", "ulimit"
  • "x86_64", "x86_64"
  • "id", "for"
  • "whoami", "jobs"
  • "cat", "cd"
  • "norwegian", "nynorsk"
  • "japanese", "ja_JP.ujis"
  • "finnish", "french"
  • "croatian", "dansk"
  • "japanese.sjis", "nynorsk"
  • "ja_JP", "nynorsk"
  • "croatian", "french"
  • "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
  • "korean", "korean.euc"
  • "group_compat", "rpc"
  • "catalan", "dansk"
  • "danish", "dansk"
  • "getpwent_r", "getpwuid_r"
  • "estonian", "french"