Sample : d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7
Modules
Summary
OS ABI
UNIX - System V
CPU class
64 bit
Persistence (user)
No
Persistence (root)
No
CPU byte order
2's complement LSB
File type
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
CPU type
AMD x86-64
Entropy
7.83480693319
Syscalls executed (root)
158
Syscalls executed (user)
169
ELF type
Executable file
ELF
Class
64 bit
Data encoding
2's complement LSB
Operating system ABI
UNIX - System V
Object file type
Executable file
ELF version
0.1
Machine
AMD x86-64
Link
static
Entrypoint
0x404ac8
Number of segments
3
Number of sections
0
Program header table offset
64
Section header table offset
0
Program header table - size of entry
56
Section header table - size of entry
64
Program header table - entries
3
Section header table - entries
0
Section header table - index sections names
0
Stripped
True
Sections stripped
True
Anomalies
Segments
High entropy : PT_LOAD at offset 0x0 - 7.842333
Memory size doubles physical size : PT_LOAD at offset 0x0
Sections
Section header table offset empty : True
Number of section headers empty : True
Debug information
False
Hash
MD5
5fe94ca343afbb6320a9eb73d6d5b8ec
SHA1
601593b2c8ed6c27357b1ea8a67e1fcbbd8e3ead
SHA256
d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7
SHA512
caf99420886b353146ae6bcb8eeea224fdb52ae25ce199528c54a72398d6b4c14f0975ce41f14ef2996d85777538526c64aea54dc2f3815624d1b0481c64a6d8
ssdeep
384:+SQ5J8iFCtlLtW95IltfCkJjmrRxYKkTP3fCub6vOuz:EJlCtLcqBCklKR2lLP8OQ
Bytes
Entropy
7.83480693319
Min entropy (16KB blocks)
7.85310121105
Max entropy (16KB blocks)
7.85310121105
Unique bytes (0-255)
256
Null bytes
496
White spaces
707
Printable bytes
9150
First 16B
7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00
Last 16B
14 01 00 00 88 83 00 00 49 02 00 8e f4 00 00 00
Longest same bytes sequence
Byte :
0x0
Offset : 0xb7
Length : 42
Offset : 0xb7
Length : 42
Three rarest bytes
0x92 - 25 times
0xf2 - 23 times
0xaa - 21 times
0xf2 - 23 times
0xaa - 21 times
Three most common bytes
0x0 - 496 times
0xff - 250 times
0xf - 222 times
0xff - 250 times
0xf - 222 times
File type
Mime type
application/x-executable
File type
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
VirusTotal
URL
https://www.virustotal.com/#/file/d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7
Positive
2
Total AVs
56
Scan date
2019-10-05 08:32:10
Detection
Ikarus :
Trojan.Linux.Coinminer
AhnLab-V3 : Linux/MalPack2.Exp
AhnLab-V3 : Linux/MalPack2.Exp
Data Explore
Paths
/proc/self/exe
Code Explore
Nucleus
Number of functions :
0
Eh_frame
Sandbox (user)
Standard output
Standard error
Sandbox (root)
Standard output
Standard error
Behavior
User behavior
Syscalls
Unique
rt_sigaction
mprotect
brk
prctl
close
flock
open
write
getdents
geteuid
arch_prctl
access
setsid
getpid
getrlimit
set_tid_address
fstat
fork
stat
read
clone
getppid
rt_sigreturn
set_robust_list
ioctl
getegid
unlink
execve
wait4
gettid
exit_group
munmap
pipe2
mmap2
statfs
readlink
rt_sigprocmask
Unique number
37
Total number
169
Instrumented libc calls
Unique
strchr
strncmp
strcmp
memchr
Unique number
4
Total number
434
If uid is checked
True
If gid is checked
True
Number of processes
4
Trace lines lost
0
Dropped files
Create
/tmp/.X11-unix/0
Files being read
/opt/lib/libpthread.so.0
/lib/x86_64-linux-gnu/libpcre.so.3
/etc/ld.so.cache
/opt/lib/locale/en_US/LC_IDENTIFICATION
/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION
/opt/lib/locale/en/LC_IDENTIFICATION
/opt/lib/libdl.so.2
/opt/lib/libc.so.6
/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION
/proc/self/exe
/opt/share/locale/locale.alias
/proc/filesystems
/opt/lib/locale/en.utf8/LC_IDENTIFICATION
/opt/lib/locale/locale-archive
/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION
/lib/x86_64-linux-gnu/libselinux.so.1
/tmp/.X11-unix
/lib/x86_64-linux-gnu/libpcre.so.3
/etc/ld.so.cache
/opt/lib/locale/en_US/LC_IDENTIFICATION
/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION
/opt/lib/locale/en/LC_IDENTIFICATION
/opt/lib/libdl.so.2
/opt/lib/libc.so.6
/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION
/proc/self/exe
/opt/share/locale/locale.alias
/proc/filesystems
/opt/lib/locale/en.utf8/LC_IDENTIFICATION
/opt/lib/locale/locale-archive
/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION
/lib/x86_64-linux-gnu/libselinux.so.1
/tmp/.X11-unix
Max sleep
-1.0
System cmds
ls /tmp/.X11-unix
Process renaming
EhyC6v
Ioctls
Total
2
Fail
TCGETS
TIOCGWINSZ
Unlink files
/tmp/d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7
String or memory comparison
"no_NO.ISO-8859-1", "nynorsk"
"swedish", "thai"
"ja_JP.ujis", "ko_KR"
"", "C"
"czech", "dansk"
"german", "ja_JP"
"galician", "ja_JP"
"en_US.UTF-8", "finnish"
"dansk", "eesti"
"icelandic", "ja_JP"
"ls", "read"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "swedish"
"dutch", "eesti"
"ls", "in"
"galician", "hebrew"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "ja_JP"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"finnish", "ja_JP"
"nynorsk", "polish"
"german", "greek"
"bokmal", "croatian"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...
"UTF-8", "utf8"
"japanese", "ja_JP"
"japanese.euc", "japanese.sjis"
"bokmal", "dansk"
"no_NO", "nynorsk"
"croatian", "ja_JP"
"ko_KR", "no_NO"
"mkdir", "for"
"deutsch", "eesti"
"hrvatski", "hungarian"
"no_NO.ISO-8859-1", "norwegian"
"mkdir", "until"
"greek", "ja_JP"
"nynorsk", "slovene"
"slovak", "slovene"
"en_US.UTF-8", "C"
"czech", "french"
"hebrew", "ja_JP"
"en_US.UTF-8", "ja_JP.ujis"
"italian", "japanese"
"japanese.euc", "ja_JP.ujis"
"GNAME=box", "CPATH"
"czech", "ja_JP"
"french", "galego"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"polish", "romanian"
"japanese.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"japanese.sjis", "ko_KR"
"norwegian", "nynorsk"
"deutsch", "french"
"slovenian", "swedish"
"danish", "french"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"no_NO", "no_NO.ISO-8859-1"
"ls", "local"
"japanese.sjis", "korean"
"korean.euc", "no_NO"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"ja_JP", "ko_KR"
"eesti", "ja_JP"
"japanese.euc", "ja_JP"
"utf8", "UTF-8"
"en_US.UTF-8", "POSIX"
"polish", "portuguese"
"russian", "slovene"
"greek", "hebrew"
"bokmal", "french"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "slovenian"
"ls", "test"
"french", "galician"
"bokmal", "catalan"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"catalan", "ja_JP"
"korean", "nynorsk"
"catalan", "french"
"slovenian", "spanish"
"/usr/share/locale", "/opt/share/locale"
"galician", "german"
"lithuanian", "no_NO"
"estonian", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"japanese", "japanese.euc"
"danish", "ja_JP"
"deutsch", "ja_JP"
"deutsch", "dutch"
"french", "ja_JP"
"en_US.UTF-8", "eesti"
"croatian", "czech"
"en_US.UTF-8", "french"
"dutch", "french"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"russian", "slovak"
"french", "hebrew"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"hrvatski", "ja_JP"
"ja_JP.ujis", "nynorsk"
"ja_JP", "ja_JP.ujis"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"ko_KR", "lithuanian"
"NG=en_US.UTF-8", "NG"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"estonian", "finnish"
"ls", "jobs"
"ls", "then"
"icelandic", "italian"
"mkdir", "in"
"ls", "printf"
"hebrew", "icelandic"
"german", "hebrew"
"korean.euc", "lithuanian"
"NGUAGE=en_US:en", "NG"
"portuguese", "romanian"
"catalan", "croatian"
"polish", "slovene"
"czech", "danish"
"spanish", "swedish"
"mkdir", "then"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"korean.euc", "ko_KR"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"ko_KR", "nynorsk"
"portuguese", "slovene"
"italian", "ja_JP"
"coreutils", "messages"
"dutch", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"hungarian", "ja_JP"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"dansk", "french"
"ls", "until"
"bokmal", "ja_JP"
"eesti", "estonian"
"hrvatski", "icelandic"
"ja_JP.ujis", "japanese.sjis"
"nynorsk", "romanian"
"lithuanian", "nynorsk"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "galician"
"romanian", "russian"
"dansk", "ja_JP"
"korean.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"thai", "turkish"
"eesti", "french"
"ls", "for"
"en_US.UTF-8", "estonian"
"korean", "ko_KR"
"romanian", "slovene"
"hungarian", "icelandic"
"dansk", "deutsch"
"en_US.UTF-8", "dansk"
"japanese.euc", "ko_KR"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"hebrew", "hrvatski"
"galego", "hebrew"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...
"japanese", "ja_JP.ujis"
"finnish", "french"
"croatian", "dansk"
"japanese.sjis", "nynorsk"
"ja_JP", "nynorsk"
"croatian", "french"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"korean", "korean.euc"
"catalan", "dansk"
"danish", "dansk"
"estonian", "french"
"swedish", "thai"
"ja_JP.ujis", "ko_KR"
"", "C"
"czech", "dansk"
"german", "ja_JP"
"galician", "ja_JP"
"en_US.UTF-8", "finnish"
"dansk", "eesti"
"icelandic", "ja_JP"
"ls", "read"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "swedish"
"dutch", "eesti"
"ls", "in"
"galician", "hebrew"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "ja_JP"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"finnish", "ja_JP"
"nynorsk", "polish"
"german", "greek"
"bokmal", "croatian"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...
"UTF-8", "utf8"
"japanese", "ja_JP"
"japanese.euc", "japanese.sjis"
"bokmal", "dansk"
"no_NO", "nynorsk"
"croatian", "ja_JP"
"ko_KR", "no_NO"
"mkdir", "for"
"deutsch", "eesti"
"hrvatski", "hungarian"
"no_NO.ISO-8859-1", "norwegian"
"mkdir", "until"
"greek", "ja_JP"
"nynorsk", "slovene"
"slovak", "slovene"
"en_US.UTF-8", "C"
"czech", "french"
"hebrew", "ja_JP"
"en_US.UTF-8", "ja_JP.ujis"
"italian", "japanese"
"japanese.euc", "ja_JP.ujis"
"GNAME=box", "CPATH"
"czech", "ja_JP"
"french", "galego"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"polish", "romanian"
"japanese.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"japanese.sjis", "ko_KR"
"norwegian", "nynorsk"
"deutsch", "french"
"slovenian", "swedish"
"danish", "french"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"no_NO", "no_NO.ISO-8859-1"
"ls", "local"
"japanese.sjis", "korean"
"korean.euc", "no_NO"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"ja_JP", "ko_KR"
"eesti", "ja_JP"
"japanese.euc", "ja_JP"
"utf8", "UTF-8"
"en_US.UTF-8", "POSIX"
"polish", "portuguese"
"russian", "slovene"
"greek", "hebrew"
"bokmal", "french"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "slovenian"
"ls", "test"
"french", "galician"
"bokmal", "catalan"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"catalan", "ja_JP"
"korean", "nynorsk"
"catalan", "french"
"slovenian", "spanish"
"/usr/share/locale", "/opt/share/locale"
"galician", "german"
"lithuanian", "no_NO"
"estonian", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"japanese", "japanese.euc"
"danish", "ja_JP"
"deutsch", "ja_JP"
"deutsch", "dutch"
"french", "ja_JP"
"en_US.UTF-8", "eesti"
"croatian", "czech"
"en_US.UTF-8", "french"
"dutch", "french"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"russian", "slovak"
"french", "hebrew"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"hrvatski", "ja_JP"
"ja_JP.ujis", "nynorsk"
"ja_JP", "ja_JP.ujis"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"ko_KR", "lithuanian"
"NG=en_US.UTF-8", "NG"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"estonian", "finnish"
"ls", "jobs"
"ls", "then"
"icelandic", "italian"
"mkdir", "in"
"ls", "printf"
"hebrew", "icelandic"
"german", "hebrew"
"korean.euc", "lithuanian"
"NGUAGE=en_US:en", "NG"
"portuguese", "romanian"
"catalan", "croatian"
"polish", "slovene"
"czech", "danish"
"spanish", "swedish"
"mkdir", "then"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"korean.euc", "ko_KR"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"ko_KR", "nynorsk"
"portuguese", "slovene"
"italian", "ja_JP"
"coreutils", "messages"
"dutch", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"hungarian", "ja_JP"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"dansk", "french"
"ls", "until"
"bokmal", "ja_JP"
"eesti", "estonian"
"hrvatski", "icelandic"
"ja_JP.ujis", "japanese.sjis"
"nynorsk", "romanian"
"lithuanian", "nynorsk"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "galician"
"romanian", "russian"
"dansk", "ja_JP"
"korean.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"thai", "turkish"
"eesti", "french"
"ls", "for"
"en_US.UTF-8", "estonian"
"korean", "ko_KR"
"romanian", "slovene"
"hungarian", "icelandic"
"dansk", "deutsch"
"en_US.UTF-8", "dansk"
"japanese.euc", "ko_KR"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"hebrew", "hrvatski"
"galego", "hebrew"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...
"japanese", "ja_JP.ujis"
"finnish", "french"
"croatian", "dansk"
"japanese.sjis", "nynorsk"
"ja_JP", "nynorsk"
"croatian", "french"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"korean", "korean.euc"
"catalan", "dansk"
"danish", "dansk"
"estonian", "french"
Unlink itself
True
Root behavior
Syscalls
Unique
rt_sigaction
mprotect
brk
prctl
close
flock
open
write
getdents
rt_sigprocmask
arch_prctl
access
setsid
getpid
getrlimit
set_tid_address
fstat
fork
stat
read
commit_creds
clone
set_robust_list
ioctl
readlink
unlink
execve
wait4
gettid
exit_group
munmap
pipe2
mmap2
statfs
rt_sigreturn
Unique number
35
Total number
158
Instrumented libc calls
Unique
strchr
strncmp
strcmp
memchr
Unique number
4
Total number
420
Number of processes
4
Trace lines lost
0
Dropped files
Create
/tmp/.X11-unix/0
Files being read
/opt/lib/libpthread.so.0
/lib/x86_64-linux-gnu/libpcre.so.3
/etc/ld.so.cache
/opt/lib/locale/en_US/LC_IDENTIFICATION
/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION
/opt/lib/locale/en/LC_IDENTIFICATION
/opt/lib/libdl.so.2
/opt/lib/libc.so.6
/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION
/proc/self/exe
/opt/share/locale/locale.alias
/proc/filesystems
/opt/lib/locale/en.utf8/LC_IDENTIFICATION
/opt/lib/locale/locale-archive
/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION
/lib/x86_64-linux-gnu/libselinux.so.1
/tmp/.X11-unix
/lib/x86_64-linux-gnu/libpcre.so.3
/etc/ld.so.cache
/opt/lib/locale/en_US/LC_IDENTIFICATION
/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION
/opt/lib/locale/en/LC_IDENTIFICATION
/opt/lib/libdl.so.2
/opt/lib/libc.so.6
/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION
/proc/self/exe
/opt/share/locale/locale.alias
/proc/filesystems
/opt/lib/locale/en.utf8/LC_IDENTIFICATION
/opt/lib/locale/locale-archive
/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION
/lib/x86_64-linux-gnu/libselinux.so.1
/tmp/.X11-unix
Max sleep
-1.0
Process renaming
HMEIWz
Ioctls
Total
2
Fail
TCGETS
TIOCGWINSZ
Unlink files
/tmp/d790ff5555b2977bb3d93743102fe2f5564db7ea0ba1dc49d6590157b21f2bd7
String or memory comparison
"no_NO.ISO-8859-1", "nynorsk"
"bokmal", "dansk"
"ja_JP.ujis", "ko_KR"
"", "C"
"czech", "dansk"
"german", "ja_JP"
"galician", "ja_JP"
"en_US.UTF-8", "finnish"
"dansk", "eesti"
"icelandic", "ja_JP"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "swedish"
"dutch", "eesti"
"galician", "hebrew"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "ja_JP"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"finnish", "ja_JP"
"german", "greek"
"bokmal", "croatian"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...
"UTF-8", "utf8"
"japanese", "ja_JP"
"japanese.euc", "japanese.sjis"
"swedish", "thai"
"no_NO", "nynorsk"
"croatian", "ja_JP"
"ko_KR", "no_NO"
"nynorsk", "polish"
"deutsch", "eesti"
"hrvatski", "hungarian"
"no_NO.ISO-8859-1", "norwegian"
"slovak", "slovene"
"greek", "ja_JP"
"nynorsk", "slovene"
"en_US.UTF-8", "C"
"czech", "french"
"hebrew", "ja_JP"
"en_US.UTF-8", "ja_JP.ujis"
"GNAME=root", "CPATH"
"italian", "japanese"
"japanese.euc", "ja_JP.ujis"
"czech", "ja_JP"
"french", "galego"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"polish", "romanian"
"japanese.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"japanese.sjis", "ko_KR"
"norwegian", "nynorsk"
"deutsch", "french"
"slovenian", "swedish"
"danish", "french"
"no_NO", "no_NO.ISO-8859-1"
"japanese.sjis", "korean"
"korean.euc", "no_NO"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"ja_JP", "ko_KR"
"eesti", "ja_JP"
"japanese.euc", "ja_JP"
"utf8", "UTF-8"
"en_US.UTF-8", "POSIX"
"polish", "portuguese"
"russian", "slovene"
"greek", "hebrew"
"bokmal", "french"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "slovenian"
"french", "galician"
"bokmal", "catalan"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"catalan", "ja_JP"
"korean", "nynorsk"
"catalan", "french"
"slovenian", "spanish"
"/usr/share/locale", "/opt/share/locale"
"galician", "german"
"lithuanian", "no_NO"
"estonian", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"japanese", "japanese.euc"
"danish", "ja_JP"
"deutsch", "ja_JP"
"deutsch", "dutch"
"french", "ja_JP"
"en_US.UTF-8", "eesti"
"croatian", "czech"
"en_US.UTF-8", "french"
"dutch", "french"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"russian", "slovak"
"french", "hebrew"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"hrvatski", "ja_JP"
"ja_JP.ujis", "nynorsk"
"ja_JP", "ja_JP.ujis"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"ko_KR", "lithuanian"
"NG=en_US.UTF-8", "NG"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"estonian", "finnish"
"icelandic", "italian"
"hebrew", "icelandic"
"german", "hebrew"
"korean.euc", "lithuanian"
"NGUAGE=en_US:en", "NG"
"portuguese", "romanian"
"catalan", "croatian"
"polish", "slovene"
"czech", "danish"
"spanish", "swedish"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"korean.euc", "ko_KR"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"ko_KR", "nynorsk"
"portuguese", "slovene"
"italian", "ja_JP"
"coreutils", "messages"
"dutch", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"hungarian", "ja_JP"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"dansk", "french"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"bokmal", "ja_JP"
"eesti", "estonian"
"hrvatski", "icelandic"
"ja_JP.ujis", "japanese.sjis"
"nynorsk", "romanian"
"lithuanian", "nynorsk"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "galician"
"romanian", "russian"
"dansk", "ja_JP"
"korean.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"eesti", "french"
"en_US.UTF-8", "estonian"
"korean", "ko_KR"
"romanian", "slovene"
"hungarian", "icelandic"
"dansk", "deutsch"
"en_US.UTF-8", "dansk"
"korean", "korean.euc"
"japanese.euc", "ko_KR"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"hebrew", "hrvatski"
"galego", "hebrew"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...
"japanese", "ja_JP.ujis"
"finnish", "french"
"croatian", "dansk"
"japanese.sjis", "nynorsk"
"ja_JP", "nynorsk"
"croatian", "french"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"thai", "turkish"
"catalan", "dansk"
"danish", "dansk"
"estonian", "french"
"bokmal", "dansk"
"ja_JP.ujis", "ko_KR"
"", "C"
"czech", "dansk"
"german", "ja_JP"
"galician", "ja_JP"
"en_US.UTF-8", "finnish"
"dansk", "eesti"
"icelandic", "ja_JP"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "swedish"
"dutch", "eesti"
"galician", "hebrew"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "ja_JP"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"finnish", "ja_JP"
"german", "greek"
"bokmal", "croatian"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATI...
"UTF-8", "utf8"
"japanese", "ja_JP"
"japanese.euc", "japanese.sjis"
"swedish", "thai"
"no_NO", "nynorsk"
"croatian", "ja_JP"
"ko_KR", "no_NO"
"nynorsk", "polish"
"deutsch", "eesti"
"hrvatski", "hungarian"
"no_NO.ISO-8859-1", "norwegian"
"slovak", "slovene"
"greek", "ja_JP"
"nynorsk", "slovene"
"en_US.UTF-8", "C"
"czech", "french"
"hebrew", "ja_JP"
"en_US.UTF-8", "ja_JP.ujis"
"GNAME=root", "CPATH"
"italian", "japanese"
"japanese.euc", "ja_JP.ujis"
"czech", "ja_JP"
"french", "galego"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"polish", "romanian"
"japanese.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"japanese.sjis", "ko_KR"
"norwegian", "nynorsk"
"deutsch", "french"
"slovenian", "swedish"
"danish", "french"
"no_NO", "no_NO.ISO-8859-1"
"japanese.sjis", "korean"
"korean.euc", "no_NO"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"ja_JP", "ko_KR"
"eesti", "ja_JP"
"japanese.euc", "ja_JP"
"utf8", "UTF-8"
"en_US.UTF-8", "POSIX"
"polish", "portuguese"
"russian", "slovene"
"greek", "hebrew"
"bokmal", "french"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"slovene", "slovenian"
"french", "galician"
"bokmal", "catalan"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"catalan", "ja_JP"
"korean", "nynorsk"
"catalan", "french"
"slovenian", "spanish"
"/usr/share/locale", "/opt/share/locale"
"galician", "german"
"lithuanian", "no_NO"
"estonian", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"japanese", "japanese.euc"
"danish", "ja_JP"
"deutsch", "ja_JP"
"deutsch", "dutch"
"french", "ja_JP"
"en_US.UTF-8", "eesti"
"croatian", "czech"
"en_US.UTF-8", "french"
"dutch", "french"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"russian", "slovak"
"french", "hebrew"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"hrvatski", "ja_JP"
"ja_JP.ujis", "nynorsk"
"ja_JP", "ja_JP.ujis"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"ko_KR", "lithuanian"
"NG=en_US.UTF-8", "NG"
"/opt/lib/locale/en/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"estonian", "finnish"
"icelandic", "italian"
"hebrew", "icelandic"
"german", "hebrew"
"korean.euc", "lithuanian"
"NGUAGE=en_US:en", "NG"
"portuguese", "romanian"
"catalan", "croatian"
"polish", "slovene"
"czech", "danish"
"spanish", "swedish"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION"
"korean.euc", "ko_KR"
"/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"ko_KR", "nynorsk"
"portuguese", "slovene"
"italian", "ja_JP"
"coreutils", "messages"
"dutch", "ja_JP"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"hungarian", "ja_JP"
"/opt/lib/locale/en_US/LC_IDENTIFICATION", "/opt/lib/locale/en/LC_IDENTIFICATION"
"dansk", "french"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en_US/LC_IDENTIFICATION"
"bokmal", "ja_JP"
"eesti", "estonian"
"hrvatski", "icelandic"
"ja_JP.ujis", "japanese.sjis"
"nynorsk", "romanian"
"lithuanian", "nynorsk"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"galego", "galician"
"romanian", "russian"
"dansk", "ja_JP"
"korean.euc", "nynorsk"
"/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", "/opt/lib/locale/en.utf8/LC_IDENTIFICATION"
"eesti", "french"
"en_US.UTF-8", "estonian"
"korean", "ko_KR"
"romanian", "slovene"
"hungarian", "icelandic"
"dansk", "deutsch"
"en_US.UTF-8", "dansk"
"korean", "korean.euc"
"japanese.euc", "ko_KR"
"/opt/lib/locale/en.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8/LC_IDENTIFICATION"
"hebrew", "hrvatski"
"galego", "hebrew"
"/opt/lib/locale/en_US.UTF-8.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en_US.UTF-8/LC_IDENTIFICATION...
"japanese", "ja_JP.ujis"
"finnish", "french"
"croatian", "dansk"
"japanese.sjis", "nynorsk"
"ja_JP", "nynorsk"
"croatian", "french"
"/opt/lib/locale/en_US.utf8/LC_IDENTIFICATION", "/opt/lib/locale/en.UTF-8.utf8/LC_IDENTIFICATION"
"thai", "turkish"
"catalan", "dansk"
"danish", "dansk"
"estonian", "french"
Unlink itself
True