Sample : d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7

Summary


OS ABI

UNIX - System V
CPU class

64 bit
Persistence (user)

No
Persistence (root)

No
CPU byte order

2's complement LSB
File type

ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
CPU type

AMD x86-64
Entropy

7.83480693319
Syscalls executed (root)

158
Syscalls executed (user)

169
ELF type

Executable file

ELF


Class

64 bit
Data encoding

2's complement LSB
Operating system ABI

UNIX - System V
Object file type

Executable file
ELF version

0.1
Machine

AMD x86-64
Link

static
Entrypoint

0x404ac8
Number of segments

3
Number of sections

0
Program header table offset

64
Section header table offset

0
Program header table - size of entry

56
Section header table - size of entry

64
Program header table - entries

3
Section header table - entries

0
Section header table - index sections names

0
Stripped

True
Sections stripped

True
Anomalies


Segments
High entropy : PT_LOAD at offset 0x0 - 7.842333
Memory size doubles physical size : PT_LOAD at offset 0x0


Sections
Section header table offset empty : True
Number of section headers empty : True


Debug information

False

Hash


MD5

5fe94ca343afbb6320a9eb73d6d5b8ec
SHA1

601593b2c8ed6c27357b1ea8a67e1fcbbd8e3ead
SHA256

d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7
SHA512

caf99420886b353146ae6bcb8eeea224fdb52ae25ce199528c54a72398d6b4c14f0975ce41f14ef2996d85777538526c64aea54dc2f3815624d1b0481c64a6d8
ssdeep

384:+SQ5J8iFCtlLtW95IltfCkJjmrRxYKkTP3fCub6vOuz:EJlCtLcqBCklKR2lLP8OQ

Bytes


Entropy

7.83480693319
Min entropy (16KB blocks)

7.85310121105
Max entropy (16KB blocks)

7.85310121105
Unique bytes (0-255)

256
Null bytes

496
White spaces

707
Printable bytes

9150
First 16B

7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00
Last 16B

14 01 00 00 88 83 00 00 49 02 00 8e f4 00 00 00
Longest same bytes sequence

Byte : 0x0

Offset : 0xb7

Length : 42

Three rarest bytes

0x92 - 25 times

0xf2 - 23 times

0xaa - 21 times

Three most common bytes

0x0 - 496 times

0xff - 250 times

0xf - 222 times

File type


Mime type

application/x-executable
File type

ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped

VirusTotal


URL

https://www.virustotal.com/#/file/d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7
Positive

2
Total AVs

56
Scan date

2019-10-05 08:32:10
Detection

Ikarus : Trojan.Linux.Coinminer

AhnLab-V3 : Linux/MalPack2.Exp

Data Explore


Paths

/proc/self/exe

Code Explore


Nucleus

Number of functions : 0

Eh_frame

Sandbox (user)


Standard output

Standard error

Sandbox (root)


Standard output

Standard error

Behavior


User behavior

Syscalls


Unique
rt_sigaction
mprotect
brk
prctl
close
flock
open
write
getdents
geteuid
arch_prctl
access
setsid
getpid
getrlimit
set_tid_address
fstat
fork
stat
read
clone
getppid
rt_sigreturn
set_robust_list
ioctl
getegid
unlink
execve
wait4
gettid
exit_group
munmap
pipe2
mmap2
statfs
readlink
rt_sigprocmask


Unique number
37

Total number
169

Instrumented libc calls


Unique
strchr
strncmp
strcmp
memchr


Unique number
4

Total number
434

If uid is checked

True

If gid is checked

True

Number of processes

4

Trace lines lost

0

Dropped files


Create
/tmp/.X11-unix/0


Files being read

/opt/lib/libpthread.so.0

/lib/x86_64-linux-gnu/libpcre.so.3

/etc/ld.so.cache

/opt/lib/locale/en_US/LC_IDENTIFICATION

/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION

/opt/lib/locale/en/LC_IDENTIFICATION

/opt/lib/libdl.so.2

/opt/lib/libc.so.6

/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION

/proc/self/exe

/opt/share/locale/locale.alias

/proc/filesystems

/opt/lib/locale/en.utf8/LC_IDENTIFICATION

/opt/lib/locale/locale-archive

/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION

/lib/x86_64-linux-gnu/libselinux.so.1

/tmp/.X11-unix

Max sleep

-1.0

System cmds

ls /tmp/.X11-unix

Process renaming

EhyC6v

Ioctls


Total
2

Fail
TCGETS
TIOCGWINSZ


Unlink files

/tmp/d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7

String or memory comparison

"no_NO.ISO-8859-1", "nynorsk"

"swedish", "thai"

"ja_JP.ujis", "ko_KR"

"", "C"

"czech", "dansk"

"german", "ja_JP"

"galician", "ja_JP"

"en_US.UTF-8", "finnish"

"dansk", "eesti"

"icelandic", "ja_JP"

"ls", "read"

"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"

"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"slovene", "swedish"

"dutch", "eesti"

"ls", "in"

"galician", "hebrew"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"galego", "ja_JP"

"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"finnish", "ja_JP"

"nynorsk", "polish"

"german", "greek"

"bokmal", "croatian"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...

"UTF-8", "utf8"

"japanese", "ja_JP"

"japanese.euc", "japanese.sjis"

"bokmal", "dansk"

"no_NO", "nynorsk"

"croatian", "ja_JP"

"ko_KR", "no_NO"

"mkdir", "for"

"deutsch", "eesti"

"hrvatski", "hungarian"

"no_NO.ISO-8859-1", "norwegian"

"mkdir", "until"

"greek", "ja_JP"

"nynorsk", "slovene"

"slovak", "slovene"

"en_US.UTF-8", "C"

"czech", "french"

"hebrew", "ja_JP"

"en_US.UTF-8", "ja_JP.ujis"

"italian", "japanese"

"japanese.euc", "ja_JP.ujis"

"GNAME=box", "CPATH"

"czech", "ja_JP"

"french", "galego"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"polish", "romanian"

"japanese.euc", "nynorsk"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"japanese.sjis", "ko_KR"

"norwegian", "nynorsk"

"deutsch", "french"

"slovenian", "swedish"

"danish", "french"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"

"no_NO", "no_NO.ISO-8859-1"

"ls", "local"

"japanese.sjis", "korean"

"korean.euc", "no_NO"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"ja_JP", "ko_KR"

"eesti", "ja_JP"

"japanese.euc", "ja_JP"

"utf8", "UTF-8"

"en_US.UTF-8", "POSIX"

"polish", "portuguese"

"russian", "slovene"

"greek", "hebrew"

"bokmal", "french"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"slovene", "slovenian"

"ls", "test"

"french", "galician"

"bokmal", "catalan"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"

"catalan", "ja_JP"

"korean", "nynorsk"

"catalan", "french"

"slovenian", "spanish"

"/usr/share/locale", "/opt/share/locale"

"galician", "german"

"lithuanian", "no_NO"

"estonian", "ja_JP"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"japanese", "japanese.euc"

"danish", "ja_JP"

"deutsch", "ja_JP"

"deutsch", "dutch"

"french", "ja_JP"

"en_US.UTF-8", "eesti"

"croatian", "czech"

"en_US.UTF-8", "french"

"dutch", "french"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"russian", "slovak"

"french", "hebrew"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"hrvatski", "ja_JP"

"ja_JP.ujis", "nynorsk"

"ja_JP", "ja_JP.ujis"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"ko_KR", "lithuanian"

"NG=en_US.UTF-8", "NG"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"estonian", "finnish"

"ls", "jobs"

"ls", "then"

"icelandic", "italian"

"mkdir", "in"

"ls", "printf"

"hebrew", "icelandic"

"german", "hebrew"

"korean.euc", "lithuanian"

"NGUAGE=en_US:en", "NG"

"portuguese", "romanian"

"catalan", "croatian"

"polish", "slovene"

"czech", "danish"

"spanish", "swedish"

"mkdir", "then"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"

"korean.euc", "ko_KR"

"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"ko_KR", "nynorsk"

"portuguese", "slovene"

"italian", "ja_JP"

"coreutils", "messages"

"dutch", "ja_JP"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"hungarian", "ja_JP"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"dansk", "french"

"ls", "until"

"bokmal", "ja_JP"

"eesti", "estonian"

"hrvatski", "icelandic"

"ja_JP.ujis", "japanese.sjis"

"nynorsk", "romanian"

"lithuanian", "nynorsk"

"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"galego", "galician"

"romanian", "russian"

"dansk", "ja_JP"

"korean.euc", "nynorsk"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"thai", "turkish"

"eesti", "french"

"ls", "for"

"en_US.UTF-8", "estonian"

"korean", "ko_KR"

"romanian", "slovene"

"hungarian", "icelandic"

"dansk", "deutsch"

"en_US.UTF-8", "dansk"

"japanese.euc", "ko_KR"

"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"hebrew", "hrvatski"

"galego", "hebrew"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...

"japanese", "ja_JP.ujis"

"finnish", "french"

"croatian", "dansk"

"japanese.sjis", "nynorsk"

"ja_JP", "nynorsk"

"croatian", "french"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"korean", "korean.euc"

"catalan", "dansk"

"danish", "dansk"

"estonian", "french"

Unlink itself

True



Root behavior

Syscalls


Unique
rt_sigaction
mprotect
brk
prctl
close
flock
open
write
getdents
rt_sigprocmask
arch_prctl
access
setsid
getpid
getrlimit
set_tid_address
fstat
fork
stat
read
commit_creds
clone
set_robust_list
ioctl
readlink
unlink
execve
wait4
gettid
exit_group
munmap
pipe2
mmap2
statfs
rt_sigreturn


Unique number
35

Total number
158

Instrumented libc calls


Unique
strchr
strncmp
strcmp
memchr


Unique number
4

Total number
420

Number of processes

4

Trace lines lost

0

Dropped files


Create
/tmp/.X11-unix/0


Files being read

/opt/lib/libpthread.so.0

/lib/x86_64-linux-gnu/libpcre.so.3

/etc/ld.so.cache

/opt/lib/locale/en_US/LC_IDENTIFICATION

/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION

/opt/lib/locale/en/LC_IDENTIFICATION

/opt/lib/libdl.so.2

/opt/lib/libc.so.6

/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION

/proc/self/exe

/opt/share/locale/locale.alias

/proc/filesystems

/opt/lib/locale/en.utf8/LC_IDENTIFICATION

/opt/lib/locale/locale-archive

/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION

/lib/x86_64-linux-gnu/libselinux.so.1

/tmp/.X11-unix

Max sleep

-1.0

Process renaming

HMEIWz

Ioctls


Total
2

Fail
TCGETS
TIOCGWINSZ


Unlink files

/tmp/d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7

String or memory comparison

"no_NO.ISO-8859-1", "nynorsk"

"bokmal", "dansk"

"ja_JP.ujis", "ko_KR"

"", "C"

"czech", "dansk"

"german", "ja_JP"

"galician", "ja_JP"

"en_US.UTF-8", "finnish"

"dansk", "eesti"

"icelandic", "ja_JP"

"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"

"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"slovene", "swedish"

"dutch", "eesti"

"galician", "hebrew"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"galego", "ja_JP"

"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"finnish", "ja_JP"

"german", "greek"

"bokmal", "croatian"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...

"UTF-8", "utf8"

"japanese", "ja_JP"

"japanese.euc", "japanese.sjis"

"swedish", "thai"

"no_NO", "nynorsk"

"croatian", "ja_JP"

"ko_KR", "no_NO"

"nynorsk", "polish"

"deutsch", "eesti"

"hrvatski", "hungarian"

"no_NO.ISO-8859-1", "norwegian"

"slovak", "slovene"

"greek", "ja_JP"

"nynorsk", "slovene"

"en_US.UTF-8", "C"

"czech", "french"

"hebrew", "ja_JP"

"en_US.UTF-8", "ja_JP.ujis"

"GNAME=root", "CPATH"

"italian", "japanese"

"japanese.euc", "ja_JP.ujis"

"czech", "ja_JP"

"french", "galego"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"polish", "romanian"

"japanese.euc", "nynorsk"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"japanese.sjis", "ko_KR"

"norwegian", "nynorsk"

"deutsch", "french"

"slovenian", "swedish"

"danish", "french"

"no_NO", "no_NO.ISO-8859-1"

"japanese.sjis", "korean"

"korean.euc", "no_NO"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"ja_JP", "ko_KR"

"eesti", "ja_JP"

"japanese.euc", "ja_JP"

"utf8", "UTF-8"

"en_US.UTF-8", "POSIX"

"polish", "portuguese"

"russian", "slovene"

"greek", "hebrew"

"bokmal", "french"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"slovene", "slovenian"

"french", "galician"

"bokmal", "catalan"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"

"catalan", "ja_JP"

"korean", "nynorsk"

"catalan", "french"

"slovenian", "spanish"

"/usr/share/locale", "/opt/share/locale"

"galician", "german"

"lithuanian", "no_NO"

"estonian", "ja_JP"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"japanese", "japanese.euc"

"danish", "ja_JP"

"deutsch", "ja_JP"

"deutsch", "dutch"

"french", "ja_JP"

"en_US.UTF-8", "eesti"

"croatian", "czech"

"en_US.UTF-8", "french"

"dutch", "french"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"russian", "slovak"

"french", "hebrew"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"hrvatski", "ja_JP"

"ja_JP.ujis", "nynorsk"

"ja_JP", "ja_JP.ujis"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"ko_KR", "lithuanian"

"NG=en_US.UTF-8", "NG"

"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"estonian", "finnish"

"icelandic", "italian"

"hebrew", "icelandic"

"german", "hebrew"

"korean.euc", "lithuanian"

"NGUAGE=en_US:en", "NG"

"portuguese", "romanian"

"catalan", "croatian"

"polish", "slovene"

"czech", "danish"

"spanish", "swedish"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"

"korean.euc", "ko_KR"

"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"ko_KR", "nynorsk"

"portuguese", "slovene"

"italian", "ja_JP"

"coreutils", "messages"

"dutch", "ja_JP"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"hungarian", "ja_JP"

"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"

"dansk", "french"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"

"bokmal", "ja_JP"

"eesti", "estonian"

"hrvatski", "icelandic"

"ja_JP.ujis", "japanese.sjis"

"nynorsk", "romanian"

"lithuanian", "nynorsk"

"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"galego", "galician"

"romanian", "russian"

"dansk", "ja_JP"

"korean.euc", "nynorsk"

"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"

"eesti", "french"

"en_US.UTF-8", "estonian"

"korean", "ko_KR"

"romanian", "slovene"

"hungarian", "icelandic"

"dansk", "deutsch"

"en_US.UTF-8", "dansk"

"korean", "korean.euc"

"japanese.euc", "ko_KR"

"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"

"hebrew", "hrvatski"

"galego", "hebrew"

"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...

"japanese", "ja_JP.ujis"

"finnish", "french"

"croatian", "dansk"

"japanese.sjis", "nynorsk"

"ja_JP", "nynorsk"

"croatian", "french"

"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"

"thai", "turkish"

"catalan", "dansk"

"danish", "dansk"

"estonian", "french"

Unlink itself

True