{ "ml": { "v": "7", "eng": "2.7.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.0035108924, "rte": "az", "prob": 0.0035108924 }, { "cls": 0, "raw": 0.014745553, "rte": "az/tar", "prob": 0.014745553 } ], "prob": 0.0035108924, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.003510892391204834, "type": "pkg_arch" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000004490216724661877, "type": "elf" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000005751848220825195, "type": "elf" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000005940596111031482, "type": "elf" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000006198883056640625, "type": "text" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000005910793788643787, "type": "text" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000007063150405883789, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-08-15T18:13:18Z" }, "path": "plasma-thunderbolt-6.7.4-1-x86_64.pkg.tar.zst", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "d77-b1BdNU0j(vn4\u003cSn(NG\u003eL]eQgeLc{q)f+PGS8jG3PT(a+.m1cA)}X=seA{Z3S{(hZnMntgc=\u003ev(5[!s1Xz=SN8@!PoA=%ao#/Ds:#Xu\u00260Q:m9U=I*is{{iAE:7Wf?5sXQ\u00266(Hy\u0026iOa+R]17YWA.qt)qOp^X}Z+7#bctceIxnoM0uCU9lYfTa@y6UzIk0bqMyJ=pIk]-LTipa.dr8%yu7i[BoRE\u0026NX@4yc8o]OK-MT+OP=YP(*xwgqh/7glW08HI#rzMhW", "n": [ { "c": 2, "d": "Linux kernel architecture source path", "i": "metadata/lang/source::linux-kernel-arch-source-path", "o": 0, "z": 115, "cf": 0.98 } ], "ln": 0 } ], "mol": "H(Cm)Md₂(BiPa)", "sha": "02a06fe6c9a71fd48013386c0695e2699cf11d521db7ae4caaaffd1b00e751ec", "path": "/data/samples/unknown/foraged/arch/archlinux.org/_/plasma-thunderbolt/plasma-thunderbolt-6.7.4-1-x86_64.pkg.tar.zst", "risk": 4, "size": 146467, "type": "pkg_arch", "facts": { "metrics": { "file": { "size": 146467.0, "entropy": 7.99, "size_bytes": 146467.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 146432.0, "peak_region_entropy": 7.84 } } }, "ident": { "name": { "value": "plasma-thunderbolt", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "6.7.4-1-x86_64.pkg", "source": "file.basename", "verified": false } }, "traits": [ { "id": "metadata/file/profile/locale::locale-path", "conf": 0.95, "crit": 2, "desc": "JavaScript locale resource path", "from": [ { "file": 5 } ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.94, "crit": 1, "desc": "Arch pkgname metadata field", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::arch-pkginfo-manifest", "conf": 0.97, "crit": 3, "desc": "Arch package metadata manifest", "from": [ { "off": 61, "file": 4, "line": 3 }, { "off": 11, "file": 8, "line": 2 } ] }, { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.94, "crit": 1, "desc": "Arch pkgver metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/package/files/system-package::arch-makepkg-generated", "conf": 0.96, "crit": 1, "desc": "Arch makepkg generated metadata", "from": [ { "file": 4 } ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/linking/runtime::glibc-needed", "conf": 1.0, "crit": 3, "desc": "ELF depends on glibc" }, { "id": "metadata/package/files/system-package::arch-package-arch-field", "conf": 0.9, "crit": 1, "desc": "Arch package architecture field", "from": [ { "file": 4 } ] }, { "id": "metadata/package/license::spdx-identifier", "conf": 0.9, "crit": 2, "desc": "SPDX license identifier", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000M).$n0000000000kMA+z3\u0026\u0026J)9rm5V0rr911onA4000000000000000000000000000000u#b/y00000u#b/y0000001Ybg000000rr911POJ50b}]r000000b}]r000000b}]", "n": [ { "c": 2, "d": "ELF binary magic at file start", "i": "metadata/file/magic/identity::elf-header", "o": 0, "z": 11, "cf": 1.0 } ], "ln": 0 }, { "b": "H.oZ*00000CNTSM00000CNTSM000000rr91000003\u0026*ncq78zA0rt#sADA^KA=kY7v@@\u003c]0r@]jZxeN%A+v1uwmWw^p\u00267n!x(lyGv@#TfC(}}SlRP)=y\u0026\u0026cPv@#TfC)7Scxg(6qB.tAaXlA=oB.sP-AbP=srDq]2q!Qn{Ac15[fjG6pB1RlswId[wxd)?lBy/G1vS=rov}PHuAb](cBZ]IRB9R?GwO(H1BAzkmxlbzfz/6DizE)Zcj.[LAuVY$7zE^s0vSc78yEz-Pv@=p5BzkVhCPx:%B-7-3A:\u0026%6BrA$.C4\u003eC$awDoZvp%d*wO#Qdl$HBHA+PGmx(v([vrbT#cd]6DUH\u0026", "n": [ { "c": 3, "d": "Embedded HTTP or WebSocket URL", "i": "micro-behaviors/communications/http/url/domain::http-url-binary", "o": 833, "z": 21, "cf": 0.7 }, { "c": 1, "d": "Oversized data config component", "i": "objectives/anti-static/obfuscation/payload/section::large-encoded-config-section-cond-1--inline-29175", "o": 736, "z": 17, "cf": 0.85 } ], "ln": 704 }, { "b": "BzbPkx)KtVhC(}Wvp%TMpe+HRl3mo.mmyc%ia^qJv@#B6zB)rvC11?#g*-*zC2y%(qb.NSx(mMLmf3X4B97\u00262yHpN+yHpWZx(0=RrC)1{zE^9LwPJ0hwDl7vpbCpQy\u0026?QgvqYH^wPxHXwO#Kby?#HJC4\u003eC$mn==qqb.NSx(mMUq^RBVz!%b$C%%R*mR(HCB4Gb9uO\u003e5\u003eBza9iq/\u003e0hB-7Yhx(v(XmS@@zmn(fMnK^(4gHANt0ae]8f/R*6B.Lu3lVh", "n": [ { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 15566, "z": 14, "cf": 0.9 }, { "c": 1, "d": "_Unwind_Resume exception-unwinding symbol", "i": "metadata/lang/compiled::unwind-resume-symbol", "o": 15582, "z": 13, "cf": 0.5 } ], "ln": 15502 }, { "b": "oe/ZzvRPE:Bo2VPv%zA?xlvT6wm5+PADL#owDl7Av%zA?vru79x(\u003ctZuT[s?uUsH\u0026A+5J$wO+{^B7CtUs#4*LqE%GPB97#lqE%]/B-H#6l$7gCx\u00264Doq.RMSfKB*3BAg(dz#Y", "n": [ { "c": 1, "d": "__cxa_atexit runtime registration symbol", "i": "metadata/lang/compiled::cxa-atexit-symbol", "o": 17677, "z": 10, "cf": 0.5 } ], "ln": 17645 }, { "b": "mntM(qb7RzvnyuEwN/*slT:!EmqkN{B]VJ7uV{13B7]MguVYZ?0ae]er.+w6uTEq/CWU5}B$\u003e:auTE\u003e*uT)[XB8$YgD2Nt4x(mK3mf3W#r7O/1og8A(wozZ1l$7gC0ae]enLR9ez!%IOo\u003c}{FxjV9L0ae]enLR9ez!%IIf*]O@x\u003e7ZGz!9A}mf3W#r8V.qf/e", "n": [ { "c": 2, "d": "GNU libstdc++ stdlib", "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref", "o": 18141, "z": 10, "cf": 0.9 } ], "ln": 18093 }, { "b": "hBzz6wKf\u003cqz/fRGB8JV?0bMvUqfjY[zep?Cz.r{Fy?WuQBt=H8A+c\u003eAz.r{Fy?Wv1ByX(id\u003eU)Ye\u0026AYCx\u003c$Z+v{:pfB8JV=0bMvUv\u003eI?ve\u0026AY1lQLipe\u0026bam07PyzuO:q*08W\u0026BhullvnKt^Kk%!dIl@WI\u003emncOVm[=GvlTIP3gYQ3tnKt^Kga\u003esmh2{cunKt^Dsyi\u003cpg+HHt07f\u003c\u003ck%!dIf!LlZm[=GvlS^C$gCgG:lS^CRlp\u003eJse\u0026bau08W\u0026BhzcZs00000", "n": [ { "c": 2, "d": "glibc reference", "i": "micro-behaviors/dylib/library/libc::glibc-ref", "o": 21846, "z": 6, "cf": 0.3 }, { "c": 2, "d": "GNU libstdc++ stdlib", "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref", "o": 21784, "z": 12, "cf": 0.9 } ], "ln": 21736 }, { "b": "000c41POJ50SSo40SSo40SSA8000620SSo4000622lj-70SSi20SSo40SSi20SSi20SSGa0SSJb0SSi22(\u003e2b0SSi20SSD90SSD9000i60SSi20SSi20SSo400000", "n": [ { "c": 1, "d": "Repeated 0x07 byte constant", "i": "micro-behaviors/mem/protect/modify::repeated-07-byte-constant", "o": 22040, "z": 4, "cf": 0.25 } ], "ln": 22008 }, { "b": "000000000000000000000000000000000000000000000000000000000000mGvubASviZwDlPFBPumUA@Wr.ve$fBwb).Lw=MSEve%{uA@Wr.zVBUPyYF.X0000000000rrd7uwDi?Ml\u0026Z=#B]VjRv/Q6uo-P8iwb{fvyYBCnl$HKQv}tTmvqYH^wPv=swP?=$wD", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-2", "o": 49162, "z": 3, "cf": 0.8 }, { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-5", "o": 49152, "z": 3, "cf": 0.8 } ], "ln": 49104 }, { "b": "ASu7t00000h+MIjlt{WZ00000000000000000000qbIgDoLFM\u0026p\u0026ZF[wPz)rjvi$5BuhDJwP?=$wLE8NwO:Kg000000000000000lt{WZiYYVuC4\u003eC$o(BMNy:]z+00000000000000000000000000000000000qbIgDoLFM\u0026p\u0026ZF[wPz)rjvi$5BuhDSvqYH^wPx%mlt{WZiYY#zzEEf?AW?4?qbIgDoLFM\u0026p\u0026ZF[wPz)rjvi$5BuhDJwP?=$wJ*7]lt{WZiYYVuC4\u003eC$dGxCGqb6.PwO=r%AW?4?0000000000000000000000000000h)d77-bu[\u0026M.f93g[V[\u003c%*BhGYkf2JjJv\u0026hw@yEu\u0026!qUiZQhQ9Lqof\u0026E@N!\u0026^QJgppo.XU?cTF:LA-=f$-1*d\u003c10i2%pQuGZ]NUa!\u00267tk]E}yu=zco:GO^xuq%8vj{SVLk3Kk3$[]lrz^+Fa^IJ6df+QC-gI16vF$/T+AnHxe-J*9e}U)(YQg5CRRk@E\u003cxz-egBiO7^4}YHki-GLrn8%Ja3W)o1[EN]Pc\u003eM2\u003c9bTlZ1[^HjgA.]^R7DxWX5kP:iRDN8u{)7NNj*KY$e#gh[0s3\u003eP(z6B%}k(Q*x%\u0026[b0o5%0ps4^V2G5g\u0026XE\u0026?/^+j*^!{Rn@*4d.cFNdS}44Sa?edWZhB#BsSt\u003eNm(a8}Ht5z(D{KCmK.THCCI##9-49iq$3QFB26P8.lP\u0026OCO]HolS1i(VckJfatQN/}2d2[0S[sSBdH7@l*=}N", "n": [ { "c": 1, "d": "1KB region has high entropy", "i": "metadata/file/metrics::peak-region-cipher-entropy", "o": 50176, "z": 512, "cf": 0.85 } ], "ln": 50144 }, { "b": "Bw#*@BugK1fFUEcx)9{5aARycv}YB\u003eyI$sTzdL$Mvrui#vrj5yyD-7FdHEpFax898ss)iXv}xL0wI3F:wO#Q7w[+*%iV{{?oF51LfFdiXy\u003cvd0qxOFaoF54MfFdiXy\u003cvd0qxOUEv}xL0wM08KeLwG2eKr(RwPh:5wgZqFoBq)(fa54sx(d*cA=-BxA+v1uwmWxex(W{2vqPZ3vriL:x(W{2vqPY=e=", "n": [ { "c": 2, "d": "Linux kernel GPL-2.0 SPDX header", "i": "metadata/file/string/artifact::linux-kernel-gpl2-spdx-header", "o": 52070, "z": 32, "cf": 0.99 } ], "ln": 52022 }, { "b": "x(4i!y?j!ted9HxarR^HarR^HarR^HarUluAbn%2vruj4zAn[Of/T50b1Vw?BzbkdwmY{#v}u^7B-qqrA==vBra{z(wmY^\u003cz!%IDaARTHaAhdtxj\u003e{@xcp]aayMx(xMXi6wPzl#y\u0026*!gwP?=$wG\u0026MO3lQDlarR^HarR^HaBKOtarR^HarR!P3lQC", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-1", "o": 58256, "z": 3, "cf": 0.8 } ], "ln": 58208 }, { "b": "0000000000PM{Iq00000KAZ:900000p\u003cA3v00000arQW+00000PDBmn00000arZ:=000000000000000000000000000000d/YLH0000000000^zb.Z00000000000000000000", "n": [ { "c": 1, "d": "Oversized data config component", "i": "objectives/anti-static/obfuscation/payload/section::large-encoded-config-section-cond-1--inline-29175", "o": 70304, "z": 12, "cf": 0.85 } ], "ln": 70272 }, { "b": "000000000000000000000000000000000000000003zpx000000000000000000000000000000000000rrx97YTKo1hB)p00000KB3%c00000k/iN400000KFq^Q00", "n": [ { "c": 1, "d": "Oversized data config component", "i": "objectives/anti-static/obfuscation/payload/section::large-encoded-config-section-cond-1--inline-29175", "o": 73728, "z": 5, "cf": 0.85 } ], "ln": 73696 }, { "b": "0000000000000000sG8i00000m)/T8asG-PrvG4BhzcZpf^5k9gbZ*Bgb]mlyH.i*vSc78e]$}-wmYj)x8?]ilqOn304@taB98CAvpxi?zF%Sde]+$=zdN/$wmoN*04@ecBy^7qzGNNvB.LV5eOO.}e[Y6Ae[!WmxAfU}D2vXGz2=h0D2vXBASv.8zGNNPwPz\u003caz/bLcxkR\u0026AC4CYnx(v(@ASv.jwO+^cwo\u00264)e]\u003eJtAXp)Fzu8q6zFsg)e{7VHBo0}9x(mR+e]\u003e(vvrt]Te[FZ6w].r%wNxaYASv.6xKtv(ve", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/runtime::elf-dynstr-section-name", "o": 75686, "z": 7, "cf": 1.0 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/runtime::elf-dynsym-section-name", "o": 75678, "z": 7, "cf": 1.0 }, { "c": 2, "d": ".gnu_debuglink reference present", "i": "metadata/build/debug::elf-debuglink", "o": 75596, "z": 17, "cf": 1.0 } ], "ln": 75548 }, { "b": "BUmSNz/xodBA)\u003csx(mTbuTW$}vr?\u00269w[=c%uTW$}vr?\u00269wmoN*e]\u003eJte]\u003e\u003ege[xlBvqPZ*04}]5Bo0}7vrt]Te]+#RwPz\u003caz/bLcvSMO\u003ce[n*pzdNQb04}]4BZFV\u003cvS=s1x(mX^0000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/runtime::elf-dynamic-section-name", "o": 75866, "z": 8, "cf": 1.0 } ], "ln": 75818 } ], "depth": 1, "facts": { "exp": [ [ "ZTSSt31_Maybe_unary_or_binary_functionIvJ7QStringEE" ], [ "ZTISt31_Maybe_unary_or_binary_functionIvJ7QStringEE" ], [ "ZTSSt14unary_functionI7QStringvE" ], [ "ZTISt14_Function_base" ], [ "qt_plugin_query_metadata_v2" ], [ "ZTISt8functionIFv7QStringEE" ], [ "ZTISt14unary_functionI7QStringvE" ], [ "ZTSSt8functionIFv7QStringEE" ], [ "qt_plugin_instance" ], [ "ZTSSt14_Function_base" ] ], "imp": [ [ "", "ZN14KPluginFactory16staticMetaObjectE" ], [ "", "ZN12KCModuleData16revertToDefaultsEv" ], [ "", "ZNK18QAbstractItemModel5buddyERK11QModelIndex" ], [ "", "ZN14KPluginFactory6createEPKcP7QWidgetP7QObjectRK5QListI8QVariantE" ], [ "", "ZN4Bolt6Device16staticMetaObjectE" ], [ "", "ZNK4Bolt7Manager11isAvailableEv" ], [ "", "ZdlPvm" ], [ "", "ZNK18QAbstractItemModel15canDropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "ZN7QObjectC2EPS_" ], [ "", "ZNK4Bolt11DeviceModel9roleNamesEv" ], [ "", "qt_version_tag" ], [ "", "Znwm" ], [ "", "ZN4Bolt7Manager12enrollDeviceERK7QStringNS_6PolicyE6QFlagsINS_4AuthEESt8functionIFvvEES8_IFvS3_EE" ], [ "", "ZNK18QAbstractItemModel9multiDataERK11QModelIndex18QModelRoleDataSpan" ], [ "", "ZN18QAbstractItemModel13clearItemDataERK11QModelIndex" ], [ "", "ZN18QAbstractItemModel10removeRowsEiiRK11QModelIndex" ], [ "", "ZN10QArrayData8allocateEPPS_xxxNS_16AllocationOptionE" ], [ "", "ZN18QAbstractItemModel11moveColumnsERK11QModelIndexiiS2_i" ], [ "", "cxa_finalize" ], [ "", "ZN12KCModuleData16staticMetaObjectE" ], [ "", "ZNK18QAbstractItemModel5matchERK11QModelIndexiRK8QVarianti6QFlagsIN2Qt9MatchFlagEE" ], [ "", "ZN6QDebugD1Ev" ], [ "", "ZN7QObject10timerEventEP11QTimerEvent" ], [ "", "ZN4Bolt7Manager11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "Z30qt_QMetaEnum_flagDebugOperatorR6QDebugyPK11QMetaObjectPKc" ], [ "", "ZTVN10__cxxabiv121__vmi_class_type_infoE" ], [ "", "ZNK4Bolt11DeviceModel4dataERK11QModelIndexi" ], [ "", "ZN18QAbstractItemModel9fetchMoreERK11QModelIndex" ], [ "", "ZN21KAbstractConfigModule8defaultsEv" ], [ "", "ZNK18QAbstractItemModel4spanERK11QModelIndex" ], [ "", "ZN9QMetaType14registerHelperEPKN9QtPrivate18QMetaTypeInterfaceE" ], [ "", "ZN18QAbstractItemModel10insertRowsEiiRK11QModelIndex" ], [ "", "ZN4Bolt6Device9authorizeE6QFlagsINS_4AuthEESt8functionIFvvEES4_IFvRK7QStringEE" ], [ "", "ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject" ], [ "", "ZN4Bolt7Manager16staticMetaObjectE" ], [ "", "ZN18QAbstractItemModel11setItemDataERK11QModelIndexRK4QMapIi8QVariantE" ], [ "", "stack_chk_fail" ], [ "", "Z23qUnregisterResourceDataiPKhS0_S0_" ], [ "", "Z32qmlRegisterUncreatableMetaObjectRK11QMetaObjectPKciiS3_RK7QString" ], [ "", "ZN18QAbstractItemModel8moveRowsERK11QModelIndexiiS2_i" ], [ "", "ZN4Bolt7ManagerC1EP7QObject" ], [ "", "ZNK8QJSValue4callERK5QListIS_E" ], [ "", "ZNK18QAbstractItemModel8mimeDataERK5QListI11QModelIndexE" ], [ "", "ZTI7QObject" ], [ "", "ZN12KCModuleData11setRelevantEb" ], [ "", "ZN7QObjectD2Ev" ], [ "", "cxa_guard_acquire" ], [ "", "ZNK18QAbstractListModel11columnCountERK11QModelIndex" ], [ "", "ZTVN10__cxxabiv117__class_type_infoE" ], [ "", "gmon_start__" ], [ "", "strlen" ], [ "", "ZNK18QAbstractItemModel8itemDataERK11QModelIndex" ], [ "", "ZN18KQuickConfigModule11qt_metacastEPKc" ], [ "", "ZNK18QAbstractItemModel20supportedDropActionsEv" ], [ "", "ZN21KAbstractConfigModule4loadEv" ], [ "", "ZN9QtPrivate25QMetaTypeInterfaceWrapperI7QStringE8metaTypeE" ], [ "", "ZNK18QAbstractListModel6parentERK11QModelIndex" ], [ "", "ZNK4Bolt11DeviceModel8rowCountERK11QModelIndex" ], [ "", "ZN4Bolt7Manager11qt_metacastEPKc" ], [ "", "Z26qt_QMetaEnum_debugOperatorR6QDebugxPK11QMetaObjectPKc" ], [ "", "ZNK11QMetaObject4castEPK7QObject" ], [ "", "ZN12KCModuleDataD2Ev" ], [ "", "ZN18QAbstractItemModel13insertColumnsEiiRK11QModelIndex" ], [ "", "ZdlPv" ], [ "", "ZN4Bolt7ManagerD2Ev" ], [ "", "cxa_guard_release" ], [ "", "ZN12KCModuleDataC2EP7QObject" ], [ "", "ZN18QAbstractItemModel6submitEv" ], [ "", "ZN18QAbstractItemModel17resetInternalDataEv" ], [ "", "ZN4Bolt7Manager12forgetDeviceERK7QStringSt8functionIFvvEES4_IFvS3_EE" ], [ "", "ZNK12KCModuleData12matchesQueryERK7QString" ], [ "", "ZN18KQuickConfigModule16staticMetaObjectE" ], [ "", "gxx_personality_v0" ], [ "", "ZN8QJSValueC1ERK7QString" ], [ "", "ZN11QDataStreamrsERi" ], [ "", "ZN7QObject5eventEP6QEvent" ], [ "", "ZN4Bolt11DeviceModel16staticMetaObjectE" ], [ "", "Unwind_Resume" ], [ "", "ZN18KQuickConfigModule11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "Z21qRegisterResourceDataiPKhS0_S0_" ], [ "", "ZN18QAbstractListModelC2EP7QObject" ], [ "", "ZN11QQmlPrivate30qdeclarativeelement_destructorEP7QObject" ], [ "", "ZN11QMetaObject14normalizedTypeEPKc" ], [ "", "ZN18KQuickConfigModuleD2Ev" ], [ "", "ZNK18QAbstractListModel11hasChildrenERK11QModelIndex" ], [ "", "ZN14KPluginFactory14registerPluginEPK11QMetaObjectPFP7QObjectP7QWidgetS4_RK15KPluginMetaDataRK5QListI8QVariantEE" ], [ "", "ZN7QObject16disconnectNotifyERK11QMetaMethod" ], [ "", "ZN7QObject11eventFilterEPS_P6QEvent" ], [ "", "ZN18QAbstractListModelD2Ev" ], [ "", "ZNK18QAbstractItemModel10headerDataEiN2Qt11OrientationEi" ], [ "", "ZNK11QMetaObject9classNameEv" ], [ "", "ZN18KQuickConfigModuleC2EP7QObjectRK15KPluginMetaData" ], [ "", "ZNK4Bolt7Manager10metaObjectEv" ], [ "", "strcmp" ], [ "", "ZTVN10__cxxabiv120__si_class_type_infoE" ], [ "", "ZN10QByteArray6appendEc" ], [ "", "ZN4Bolt16staticMetaObjectE" ], [ "", "ZNK18QAbstractListModel5flagsERK11QModelIndex" ], [ "", "cxa_atexit" ], [ "", "ZN18QAbstractItemModel4sortEiN2Qt9SortOrderE" ], [ "", "ZN4Bolt11DeviceModel11qt_metacastEPKc" ], [ "", "ZN14KPluginFactory11qt_metacastEPKc" ], [ "", "ZN14KPluginFactoryC2Ev" ], [ "", "ZN8QJSValueC1ENS_12SpecialValueE" ], [ "", "ZN10QArrayData10deallocateEPS_xx" ], [ "", "ZN18QAbstractItemModel7setDataERK11QModelIndexRK8QVarianti" ], [ "", "ZNK18QAbstractItemModel9mimeTypesEv" ], [ "", "ZN7QObject13connectNotifyERK11QMetaMethod" ], [ "", "ZN14KPluginFactory11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZTI18KQuickConfigModule" ], [ "", "ZTVN4Bolt11DeviceModelE" ], [ "", "ZN10QByteArrayC1EPKcx" ], [ "", "ZN10QByteArray11reallocDataExN10QArrayData16AllocationOptionE" ], [ "", "Z9qBadAllocv" ], [ "", "qt_resourceFeatureZstd" ], [ "", "ZN21KAbstractConfigModule4saveEv" ], [ "", "ZNK18QAbstractItemModel20supportedDragActionsEv" ], [ "", "ZNK12KCModuleData10isDefaultsEv" ], [ "", "ZN18QAbstractItemModel13removeColumnsEiiRK11QModelIndex" ], [ "", "ZTIN4Bolt7ManagerE" ], [ "", "ITM_registerTMCloneTable" ], [ "", "ZN12KCModuleData11qt_metacastEPKc" ], [ "", "ZN8QJSValueC1ERKS_" ], [ "", "ZN7QObject16staticMetaObjectE" ], [ "", "ZTI12KCModuleData" ], [ "", "ZrsR11QDataStreamR8QJSValue" ], [ "", "ZN7QObject11qt_metacastEPKc" ], [ "", "ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayS_" ], [ "", "ZN12KCModuleData11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZN7QObject10childEventEP11QChildEvent" ], [ "", "ZNK18QAbstractItemModel12canFetchMoreERK11QModelIndex" ], [ "", "memcmp" ], [ "", "ZN18QAbstractListModel12dropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex" ], [ "", "ZN18QAbstractItemModel13setHeaderDataEiN2Qt11OrientationERK8QVarianti" ], [ "", "ZSt25__throw_bad_function_callv" ], [ "", "ZN14KPluginFactoryD2Ev" ], [ "", "ZN18QAbstractItemModel6revertEv" ], [ "", "ZTI14KPluginFactory" ], [ "", "ZN11QQmlPrivate11qmlregisterENS_16RegistrationTypeEPv" ], [ "", "ZN8QJSValueD1Ev" ], [ "", "ZN11QDataStreamlsEi" ], [ "", "ZTIN4Bolt11DeviceModelE" ], [ "", "ZNK18QAbstractListModel5indexEiiRK11QModelIndex" ], [ "", "ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZNK18QAbstractListModel7siblingEiiRK11QModelIndex" ], [ "", "ZNK4Bolt11DeviceModel10metaObjectEv" ], [ "", "gcc_personality_v0" ], [ "", "ZN7QObject11customEventEP6QEvent" ], [ "", "ZN10QByteArray6insertEx14QByteArrayView" ], [ "", "ZN4Bolt7ManagerC2EP7QObject" ], [ "", "ZlsR11QDataStreamRK8QJSValue" ], [ "", "ZN4Bolt11DeviceModel11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZNK11QObjectData17dynamicMetaObjectEv" ] ], "sec": [ [ ".note.qt.metadata", 736, 10352, 5.84, "alloc" ], [ ".note.gnu.build-id", 11088, 36, 4.19, "alloc" ], [ ".gnu.hash", 11128, 124, 3.75, "alloc" ], [ ".dynsym", 11256, 3960, 1.31, "alloc" ], [ ".dynstr", 15216, 6770, 5.32, "alloc" ], [ ".gnu.version", 21986, 330, 1.57, "alloc" ], [ ".gnu.version_r", 22320, 272, 3.27, "alloc" ], [ ".rela.dyn", 22592, 5064, 1.8, "alloc" ], [ ".relr.dyn", 27656, 88, 4.19, "alloc" ], [ ".init", 28672, 27, 4.24, "alloc,executable" ], [ ".text", 28704, 16618, 5.89, "alloc,executable" ], [ ".fini", 45324, 13, 3.24, "alloc,executable" ], [ ".rodata", 49152, 11376, 5.72, "alloc" ], [ ".eh_frame_hdr", 60528, 1028, 4.7, "alloc" ], [ ".eh_frame", 61560, 4524, 4.92, "alloc" ], [ ".gcc_except_table", 66084, 832, 4.74, "alloc" ], [ ".note.gnu.property", 66920, 80, 1.88, "alloc" ], [ ".init_array", 70280, 16, 1.31, "write,alloc" ], [ ".fini_array", 70296, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 70304, 2112, 1.08, "write,alloc" ], [ ".dynamic", 72416, 608, 1.49, "write,alloc" ], [ ".got", 73024, 680, 0.05, "write,alloc" ], [ ".data", 73728, 1824, 0.99, "write,alloc" ], [ ".qtversion", 75552, 16, 0.99, "write,alloc" ], [ ".comment", 75568, 27, 3.86, "merge,strings" ], [ ".gnu_debuglink", 75596, 24, 4.05, "" ], [ ".shstrtab", 75620, 306, 4.28, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 0.0, "has_note": 1.0, "note_count": 3.0, "nx_enabled": 1.0, "has_cet_ibt": 1.0, "has_dt_relr": 1.0, "dynrel_count": 0.0, "dynsym_count": 165.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 0.0, "dynrela_count": 211.0, "has_cet_shstk": 1.0, "has_debuglink": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 0.0, "build_id_length": 20.0, "dt_versym_count": 165.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 2.0, "wx_segment_count": 0.0, "comment_entry_count": 1.0, "program_header_count": 12.0, "comment_distinct_count": 1.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 27744.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 27744.0, "section_relocation_group_count": 1.0, "stripped_metadata_section_count": 7.0 }, "file": { "size": 77784.0, "entropy": 5.27, "size_bytes": 77784.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 5.88, "data_entropy": 0.96, "overlay_size": 1858.0, "string_count": 514.0, "overlay_ratio": 0.02, "overall_entropy": 5.27, "overlay_entropy": 1.53, "entropy_variance": 3.09, "avg_string_length": 51.52, "max_string_length": 3499.0, "peak_region_bytes": 2048.0, "code_to_data_ratio": 0.76, "peak_region_entropy": 7.56, "string_length_stddev": 191.89, "largest_section_ratio": 0.21, "sentence_string_count": 107.0, "sentence_string_ratio": 0.21, "high_entropy_string_count": 0.0 }, "exports": { "count": 10.0 }, "imports": { "count": 154.0 }, "sections": { "count": 29.0, "code_size": 16658.0, "entropy_max": 5.89, "entropy_mean": 3.18, "name_entropy": 4.23, "writable_count": 8.0, "executable_count": 3.0, "nonstandard_count": 9.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 9.0 } } }, "id": 1, "mol": "H(Cm)Md(Bi)", "path": "/data/samples/unknown/foraged/arch/archlinux.org/_/plasma-thunderbolt/plasma-thunderbolt-6.7.4-1-x86_64.pkg.tar.zst!!usr/lib/qt6/plugins/plasma/kcms/systemsettings/kcm_bolt.so", "pid": 0, "risk": 2, "sha": "56ce53168f924a7b3d6c2a9a799ca50b5e1a40a21880c00e21b3e29ddd96e3c2", "size": 77784, "traits": [ { "id": "metadata/package/license::spdx-identifier", "conf": 0.9, "crit": 2, "desc": "SPDX license identifier", "spans": [ [ 52071, 23 ] ] }, { "id": "metadata/binary/linking/runtime::glibc-needed", "conf": 1.0, "crit": 3, "desc": "ELF depends on glibc" }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "spans": [ [ 833, 21 ] ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 52096, 0 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000NdpjS0000000000kMA+z3\u0026\u0026J)9rm5V0rr911onA4000000000000000000000000000000kTCCJ00000kTCCJ0000001Ybg000000rr911POJ508JT}", "n": [ { "c": 2, "d": "ELF binary magic at file start", "i": "metadata/file/magic/identity::elf-header", "o": 0, "z": 11, "cf": 1.0 } ], "ln": 0 }, { "b": "\u003c-C2o0002*\u003eL$O.0002*{Y7o]0002*{Y7o]0000g2lj-70000g2lj-700001000000000c0002*761sn08W\u0026TBs?DLz!-\u0026[BrHR+1}7ED0^nH5xd^$gwIcRLy\u0026%x8", "n": [ { "c": 1, "d": "Repeated 0x07 byte constant", "i": "micro-behaviors/mem/protect/modify::repeated-07-byte-constant", "o": 713, "z": 4, "cf": 0.25 } ], "ln": 681 }, { "b": "x(lTRByvNCByw6uhbN4YB96#kqc4aCx\u003c\u003e[3mmvh-rC)1{zE^9LwPJ0hwDl7vpd)q@qbpUowN/*Ivrt{jh!mhKvqPZ*o\u003ewAPpHX6Iv@$d.0ae]8oe]NjmmoEXy\u0026?x=zdN/$pHX6Iv/", "n": [ { "c": 1, "d": "_Unwind_Resume exception-unwinding symbol", "i": "metadata/lang/compiled::unwind-resume-symbol", "o": 9944, "z": 13, "cf": 0.5 } ], "ln": 9912 }, { "b": "q9/kyvr\u003emHByu):A+eV}y\u0026r/(By!D\u0026vqGT\u003czE)uEp/yZ$C6Fmbq^Rmql2pvQv{%E[z/eu\u0026BzkVhmf3X4B97\u00262yHpN+yHpWZx(0=Rs#*N?vpRVuy\u0026r*b0bVp:zeTPe0ae]8oeF$Ny\u0026?N6wP?=$wJ1QKvruTkmrOVrt23$Mrb3hXAY4]WvrcDUB]U(Mq/\u003c-NuS7uuBAg@7uU0.TA+f90zGFYNBtk:ZqET0PA+e/?zF%5%uT^C+wDl7vq/\u003c-NuS7uuBAd", "n": [ { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 10196, "z": 14, "cf": 0.9 } ], "ln": 10132 }, { "b": "oe/ZzvRPE:Bo2VPv%zA?xlvT6wm5+PADL#owDl7Av%zA?vru79x(\u003ctZuT[s?uUsH\u0026A+5J$wO+{^B7CtUt244Il}6Hgz!%IIf(}nNBvoX-x\u003e7Z}mn==oqa$XBBv!hzqb.dpA+b", "n": [ { "c": 1, "d": "__cxa_atexit runtime registration symbol", "i": "metadata/lang/compiled::cxa-atexit-symbol", "o": 10709, "z": 10, "cf": 0.5 } ], "ln": 10677 }, { "b": "uV{13B7]MguVYZ?0ae]eq-EArmmoEXy\u0026/U:t2X6Moghiplt{WZ0ae]er.+w6uTEq/CWU5}B$\u003e:auTE\u003e*uT)[XB8$YgD2Nt4x(mK3mf3W#r7O!#oghipo(BM+y?iPNt2X6Fg!QUYB.tAamQY!Gz/Qa6uS{AfpbaCfuT[t9vpA}]f!\u003eQ]uT)[XB8$YgD2Nt4x(i", "n": [ { "c": 2, "d": "GNU libstdc++ stdlib", "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref", "o": 13020, "z": 10, "cf": 0.9 } ], "ln": 12972 }, { "b": "0bMvUqfjY^B.JEHz.r{Fy?WuKmM9*)ibQu\u0026z.r{Fy?WuQBt=H8A+c\u003eAz.r{Fy?Wv1ByX(id\u003eU)Ye\u0026AYCx\u003c$Z+v{:pfB8JV=0bMvUv\u003eI?ve\u0026AY1lQLipe\u0026bam07PyzuO:q*07PZOlpk9Clp\u003eJLr9@J(oI$\u003cXoI4MruOTk\u003c07PZOlpk9ne\u002624p08W\u0026BhullvnKt^Dsyi\u003cpgYP)Bsv2nBuOKe?e\u0026-]0sxE\u003cQnNBh8gxpo]uP6I\u003ef-RgN00000000000000", "n": [ { "c": 2, "d": "glibc reference", "i": "micro-behaviors/dylib/library/libc::glibc-ref", "o": 13764, "z": 6, "cf": 0.3 }, { "c": 2, "d": "GNU libstdc++ stdlib", "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref", "o": 13707, "z": 12, "cf": 0.9 } ], "ln": 13659 }, { "b": "0000000000000000sG8i00000m)/T8asG-PrvG4BhzcZpf^5k9gbZ*Bgb]mlyH?0!uT^}\u0026Bs}SMe[wK5B.pWOHD26104@taB98CAvpxi?zF%Sde]+$=zdN/$wmoN*04@ecBy^7qzGNNvB.LV5eOO.}e[Y6Ae[!WmxAfU}D2vXGz2=h0D2vXBASv.8zGNNPwPz\u003caz/bLcxkR\u0026AC4CYnx(v(@ASv.jwO+^cwo\u00264)e]\u003eJtAXp)Fzu8q6zFsg)e{7VHBo0}9x(mR+e]\u003e(vvrt]Te[FZ6w].r%wNxaYASv.6xKtv(ve", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/runtime::elf-dynstr-section-name", "o": 61862, "z": 7, "cf": 1.0 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/runtime::elf-dynsym-section-name", "o": 61854, "z": 7, "cf": 1.0 }, { "c": 2, "d": ".gnu_debuglink reference present", "i": "metadata/build/debug::elf-debuglink", "o": 61772, "z": 18, "cf": 1.0 } ], "ln": 61724 }, { "b": "BUmSNz/xodBA)\u003csx(mTbuTW$}vr?\u00269w[=c%uTW$}vr?\u00269wmoN*e]\u003eJte]\u003e\u003ege[xlBvqPZ*04}]5Bo0}7vrt]Te]+#RwPz\u003caz/bLcvSMO\u003ce[n*pzdNQb04}]4BZFV\u003cvS=s1x(mX^0000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/runtime::elf-dynamic-section-name", "o": 62042, "z": 8, "cf": 1.0 } ], "ln": 61994 } ], "depth": 1, "facts": { "exp": [ [ "ZTI8KDEDBolt" ], [ "ZN8KDEDBolt11qt_metacastEPKc" ], [ "ZN8KDEDBoltD0Ev" ], [ "ZN8KDEDBolt16authorizeDevicesE5QListI14QSharedPointerIN4Bolt6DeviceEEENS_8AuthModeE" ], [ "ZN8KDEDBolt11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "ZN8KDEDBoltC1EP7QObjectRK5QListI8QVariantE" ], [ "ZN8KDEDBolt6notifyEv" ], [ "ZN8KDEDBoltD1Ev" ], [ "ZNK8KDEDBolt10metaObjectEv" ], [ "ZN8KDEDBoltD2Ev" ], [ "ZTV8KDEDBolt" ], [ "ZN8KDEDBolt11sortDevicesERK5QListI14QSharedPointerIN4Bolt6DeviceEEE" ], [ "ZN8KDEDBoltC2EP7QObjectRK5QListI8QVariantE" ], [ "ZN8KDEDBolt16staticMetaObjectE" ], [ "qt_plugin_query_metadata_v2" ], [ "ZTS8KDEDBolt" ], [ "qt_plugin_instance" ] ], "imp": [ [ "", "Z6ki18ndPKcS0_" ], [ "", "ZN14KPluginFactory16staticMetaObjectE" ], [ "", "ZN6QTimer5startEv" ], [ "", "ZN19KNotificationAction16staticMetaObjectE" ], [ "", "ZN10KDEDModuleD2Ev" ], [ "", "cxa_begin_catch" ], [ "", "ZN14KPluginFactory6createEPKcP7QWidgetP7QObjectRK5QListI8QVariantE" ], [ "", "ZN7QPixmapC1Ev" ], [ "", "ZNK4Bolt7Manager11isAvailableEv" ], [ "", "ZdlPvm" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "qt_version_tag" ], [ "", "Znwm" ], [ "", "memmove" ], [ "", "ZN4Bolt7Manager12enrollDeviceERK7QStringNS_6PolicyE6QFlagsINS_4AuthEESt8functionIFvvEES8_IFvS3_EE" ], [ "", "ZNK14QMessageLogger4infoEPKcz" ], [ "", "ZN10KDEDModule16staticMetaObjectE" ], [ "", "ZN10QArrayData8allocateEPPS_xxxNS_16AllocationOptionE" ], [ "", "ZN6QTimer7timeoutENS_14QPrivateSignalE" ], [ "", "cxa_finalize" ], [ "", "ZN7QObject10timerEventEP11QTimerEvent" ], [ "", "ZN19KNotificationAction9activatedEv" ], [ "", "ZN13KNotification5closeEv" ], [ "", "ZN4Bolt6Device9authorizeE6QFlagsINS_4AuthEESt8functionIFvvEES4_IFvRK7QStringEE" ], [ "", "ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject" ], [ "", "ZN4Bolt7Manager16staticMetaObjectE" ], [ "", "stack_chk_fail" ], [ "", "ZN4Bolt7ManagerC1EP7QObject" ], [ "", "ZN6QTimer16staticMetaObjectE" ], [ "", "ZN6QTimer11setIntervalENSt6chrono8durationIlSt5ratioILl1ELl1000EEEE" ], [ "", "cxa_guard_acquire" ], [ "", "ZTVN10__cxxabiv117__class_type_infoE" ], [ "", "ZN16QLoggingCategoryC1EPKc9QtMsgType" ], [ "", "ZN13KNotification6closedEv" ], [ "", "gmon_start__" ], [ "", "cxa_guard_abort" ], [ "", "ZNK16KLocalizedString8toStringEv" ], [ "", "ZN13KNotification16staticMetaObjectE" ], [ "", "ZNK4Bolt6Device3uidEv" ], [ "", "Z7ki18ndpPKcS0_S0_" ], [ "", "ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base" ], [ "", "ZN6QTimerC1EP7QObject" ], [ "", "ZNK11QMetaObject4castEPK7QObject" ], [ "", "ZdlPv" ], [ "", "ZN9QtPrivate12equalStringsE11QStringViewS0_" ], [ "", "cxa_guard_release" ], [ "", "ZN4Bolt7ManagerD1Ev" ], [ "", "gxx_personality_v0" ], [ "", "ZN16QLoggingCategoryD1Ev" ], [ "", "ZN7QPixmapD1Ev" ], [ "", "ZN7QObject5eventEP6QEvent" ], [ "", "ZN11QMetaObject10ConnectionD1Ev" ], [ "", "Unwind_Resume" ], [ "", "ZN10KDEDModule11qt_metacastEPKc" ], [ "", "ZN6QTimerD1Ev" ], [ "", "ZN14KPluginFactory14registerPluginEPK11QMetaObjectPFP7QObjectP7QWidgetS4_RK15KPluginMetaDataRK5QListI8QVariantEE" ], [ "", "ZN7QObject16disconnectNotifyERK11QMetaMethod" ], [ "", "ZN7QObject11eventFilterEPS_P6QEvent" ], [ "", "cxa_end_catch" ], [ "", "ZNK16KLocalizedString4subsExii5QChar" ], [ "", "cxa_rethrow" ], [ "", "strcmp" ], [ "", "ZTVN10__cxxabiv120__si_class_type_infoE" ], [ "", "ZN10KDEDModule11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_" ], [ "", "cxa_atexit" ], [ "", "ZN14KPluginFactory11qt_metacastEPKc" ], [ "", "ZN14KPluginFactoryC2Ev" ], [ "", "ZN10QArrayData10deallocateEPS_xx" ], [ "", "ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject" ], [ "", "ZN7QObject13connectNotifyERK11QMetaMethod" ], [ "", "ZN14KPluginFactory11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZNK16KLocalizedString4subsERK7QStringi5QChar" ], [ "", "ZNK4Bolt6Device4nameEv" ], [ "", "ZN6QTimer13setSingleShotEb" ], [ "", "ZTI10KDEDModule" ], [ "", "Z9qBadAllocv" ], [ "", "ZNK4Bolt6Device6statusEv" ], [ "", "ZNK4Bolt6Device6parentEv" ], [ "", "ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base" ], [ "", "ZN13KNotification9addActionERK7QString" ], [ "", "ITM_registerTMCloneTable" ], [ "", "ZN7QObject16staticMetaObjectE" ], [ "", "ZN10KDEDModuleC2EP7QObject" ], [ "", "ZN7QObject10childEventEP11QChildEvent" ], [ "", "ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_" ], [ "", "ZN4Bolt7Manager11deviceAddedERK14QSharedPointerINS_6DeviceEE" ], [ "", "ZN13KNotification5eventERK7QStringS2_S2_RK7QPixmapRK6QFlagsINS_16NotificationFlagEES2_" ], [ "", "ZN16KLocalizedStringD1Ev" ], [ "", "ZNK7QString13toHtmlEscapedEv" ], [ "", "ZN14KPluginFactoryD2Ev" ], [ "", "ZTI14KPluginFactory" ], [ "", "ZN4Bolt7Manager13deviceRemovedERK14QSharedPointerINS_6DeviceEE" ], [ "", "gcc_personality_v0" ], [ "", "ZN7QObject11customEventEP6QEvent" ], [ "", "ZN10QArrayData19reallocateUnalignedEPS_PvxxNS_16AllocationOptionE" ], [ "", "ZNK11QObjectData17dynamicMetaObjectEv" ] ], "sec": [ [ ".note.qt.metadata", 736, 5896, 5.87, "alloc" ], [ ".note.gnu.build-id", 6632, 36, 4.14, "alloc" ], [ ".gnu.hash", 6672, 224, 3.76, "alloc" ], [ ".dynsym", 6896, 2760, 1.48, "alloc" ], [ ".dynstr", 9656, 4238, 5.33, "alloc" ], [ ".gnu.version", 13894, 230, 1.68, "alloc" ], [ ".gnu.version_r", 14128, 256, 3.15, "alloc" ], [ ".rela.dyn", 14384, 2544, 1.57, "alloc" ], [ ".relr.dyn", 16928, 32, 2.59, "alloc" ], [ ".init", 20480, 27, 4.24, "alloc,executable" ], [ ".text", 20544, 30282, 6.05, "alloc,executable" ], [ ".fini", 50828, 13, 3.24, "alloc,executable" ], [ ".rodata", 53248, 1140, 4.39, "alloc" ], [ ".eh_frame_hdr", 54388, 516, 4.65, "alloc" ], [ ".eh_frame", 54904, 3176, 5.42, "alloc" ], [ ".gcc_except_table", 58080, 995, 5.22, "alloc" ], [ ".note.gnu.property", 59080, 80, 1.88, "alloc" ], [ ".init_array", 59632, 8, 0.54, "write,alloc" ], [ ".fini_array", 59640, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 59648, 496, 1.03, "write,alloc" ], [ ".dynamic", 60144, 624, 1.45, "write,alloc" ], [ ".got", 60768, 664, 0.03, "write,alloc" ], [ ".data", 61440, 288, 0.75, "write,alloc" ], [ ".qtversion", 61728, 16, 0.99, "write,alloc" ], [ ".comment", 61744, 27, 3.86, "merge,strings" ], [ ".gnu_debuglink", 61772, 24, 3.97, "" ], [ ".shstrtab", 61796, 306, 4.28, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 0.0, "has_note": 1.0, "note_count": 3.0, "nx_enabled": 1.0, "has_cet_ibt": 1.0, "has_dt_relr": 1.0, "dynrel_count": 0.0, "dynsym_count": 115.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 0.0, "dynrela_count": 106.0, "has_cet_shstk": 1.0, "has_debuglink": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 0.0, "build_id_length": 20.0, "dt_versym_count": 115.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 1.0, "wx_segment_count": 0.0, "comment_entry_count": 1.0, "program_header_count": 12.0, "comment_distinct_count": 1.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 30361.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 30361.0, "section_relocation_group_count": 1.0, "stripped_metadata_section_count": 7.0 }, "file": { "size": 63960.0, "entropy": 5.52, "size_bytes": 63960.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 6.04, "data_entropy": 0.8, "overlay_size": 1858.0, "string_count": 299.0, "overlay_ratio": 0.03, "overall_entropy": 5.52, "overlay_entropy": 1.47, "entropy_variance": 3.21, "avg_string_length": 30.09, "max_string_length": 201.0, "peak_region_bytes": 24576.0, "code_to_data_ratio": 0.94, "peak_region_entropy": 6.01, "string_length_stddev": 26.03, "largest_section_ratio": 0.47, "sentence_string_count": 37.0, "sentence_string_ratio": 0.12, "high_entropy_string_count": 0.0 }, "exports": { "count": 17.0 }, "imports": { "count": 97.0 }, "sections": { "count": 29.0, "code_size": 30322.0, "entropy_max": 6.05, "entropy_mean": 3.06, "name_entropy": 4.23, "writable_count": 8.0, "executable_count": 3.0, "nonstandard_count": 9.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 10.0 } } }, "id": 2, "mol": "Md(Bi)", "path": "/data/samples/unknown/foraged/arch/archlinux.org/_/plasma-thunderbolt/plasma-thunderbolt-6.7.4-1-x86_64.pkg.tar.zst!!usr/lib/qt6/plugins/kf6/kded/kded_bolt.so", "pid": 0, "risk": 1, "sha": "02b6bb35a701ed4906d3d4cd96039c58c711e83707b40d3c396bed713b501e7c", "size": 63960, "traits": [ { "id": "metadata/binary/linking/runtime::glibc-needed", "conf": 1.0, "crit": 3, "desc": "ELF depends on glibc" } ], "type": "elf" }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000N7SL30000000000kMA+z3JJA(8#{]T0rr911onA4000000000000000000000000000000H(8fj00000H(8fj0000001Ybg000000rr911POJ50fvfX", "n": [ { "c": 2, "d": "ELF binary magic at file start", "i": "metadata/file/magic/identity::elf-header", "o": 0, "z": 11, "cf": 1.0 } ], "ln": 0 }, { "b": "vqYZ?wjol(uP7\u00268vruTkmf3W#pbaF2o\u003ewAPpHX6Iv@%Xsv@#Bdvru6Hp=zlEvRPE:BwLReuUJtkB]U(RB97\u00262yHpN+yHpWZx(0=Rt23[vz!%INl$HKQv}vwJB98tvwN[ewvqYZ?wjo@cuS{hYlt{WZhBIb1x\u003e7ZegJmnGx\u003e8AQxKL^\u003ewN[k8q^RBVz!%b$C%}Zut23[vz!%INl$HKQv}vwMvrDW9mR(HCB3\u003cRHzF9J\u003emk!1jy**%$nLSh\u003eg^MnaxHI", "n": [ { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 10668, "z": 14, "cf": 0.9 } ], "ln": 10604 }, { "b": "f\u0026pURByv%OygQ)%p!Lo#uS{h.qaa#8B.s8%mrOVrrC)1{zE^9LwPJ0hwDl7vpbaF2l$7gCq/)4\u003evqP?4mqh:et23!bqaa\u0026mvn?n*wNPB@B45#v0ae[=fMzhwqb7Rzvmt6Rzc{)\u003eve", "n": [ { "c": 1, "d": "_Unwind_Resume exception-unwinding symbol", "i": "metadata/lang/compiled::unwind-resume-symbol", "o": 11087, "z": 13, "cf": 0.5 } ], "ln": 11055 }, { "b": "B.t$@oeed#o\u003ewAPpHX6Iv@$Kuv/P\u003etwmnqT0ae]uvnIb:0ae]ECwNs!t5E+=0af8IwO(H1ByeJ\u003eyxdZGzdNM]AcU/2xLNP+wO\u003e{@C(RhPpb#fxvrl9XwO2ybfLtiuvQT7KwO2yvB]U(MiDmw]wi\u003e3Fz!0}\u003cuS{hVi8I$JB98Chv@$yUB97b{wmYNAgdt1#qbpUowN//ZuS{AfpbCpQy\u0026?x^l$HKQv}wwMwmYNC0ae]8f/S2@vSMTivpKyMx(:", "n": [ { "c": 3, "d": "FORTIFY_SOURCE hardening enabled", "i": "metadata/hardening/build::fortify", "o": 11248, "z": 10, "cf": 0.85 } ], "ln": 11184 }, { "b": "z/ecovO/Zvp\u003cbn@q^SEgmklGszGor3x(!xcASxDNv%zA?vru79x(\u003ctZuT[s?uUsH\u0026A+5J$wO+{^B7CtUt247Po\u003ewAPrc-B]f/i]Zxk8BewPysMy\u0026A%amnMSLiz\u003c({A+PY9By+", "n": [ { "c": 1, "d": "__cxa_atexit runtime registration symbol", "i": "metadata/lang/compiled::cxa-atexit-symbol", "o": 12397, "z": 10, "cf": 0.5 } ], "ln": 12365 }, { "b": "vqZfwgI}5NwKyxNB98CBv@$d1qb7Rzvn}I\u003ewL^KIuS{h-qbpUowN/*pf\u003es\u003ciwPRGSvru73mrOVrt23?cqa9-[B5lB=wnb{]qE%/-C%U}XwKwjwB]U(MpbjL3l{=3qp?sJPx(mMYwPhEhlsB}DhEQU", "n": [ { "c": 1, "d": "XOR-decoded wordlike string runs", "i": "objectives/anti-static/obfuscation/string/encoding::rust-xor-encoded-strings", "o": 12579, "z": 23, "cf": 0.85 } ], "ln": 12547 }, { "b": "h=iH}A+PA7f!)=*q/(LGBAh8kxf[E=CZ7}$mrOVrt251rf/9\u0026)zGGPfwNx1?A=k$=gdt8lpe=l[uTEq/CRH{cggBWkx\u003e7H\u003eBAh8kxgVPiBtkHWxKL{*BAg/7BAp2-mn)R^v)@*P0af8yCWT%3xMw3n0af8yCWT@\u003eA+e/?wQ4Y@Acb/jzua3EpbCpQy\u0026?N6wP?=$wKwgvqCe-4qa9-[B5cmW", "n": [ { "c": 1, "d": "C++ std basic_string symbol", "i": "metadata/lang/compiled::libcxx-basic-string-symbol", "o": 14495, "z": 76, "cf": 0.5 } ], "ln": 14463 }, { "b": "mf3W#pb(9Kvrc6\u003czGFl2mlajtwPRuWD2Ns\u003eolHqxt241NpHX6Iv@%BYwn+yTBwN0@AaK6iC%$L5v]t@Vqc4aCx\u003c\u003e[3p/xbR0ae]8oeF$Ny\u0026?QgvqYH^wPxXtwP?=$wKPx[Bu0(PzEW^5z/ecovP2\u0026Ng/mg+vrb{\u0026p\u0026y5=By/F:pe+HT", "n": [ { "c": 1, "d": "Flood or attack worker symbol", "i": "objectives/impact/dos/udp::flood-function-symbol", "o": 16528, "z": 44, "cf": 0.9 } ], "ln": 16496 }, { "b": "o\u003ewAPpHX6Iv@%K{vqG:Gx\u00264SH0ae]eq+/eoz!%IOo\u003c}{FxjV9L0ae]er.+w6uTEq/CWU5}B$\u003e:auTE\u003e*uT)[XB8$YgD2Nt4x(mK3mf3W#r7O\u00262qa9-[B3TnRBAg/1Bv*v(wPzx\u003ev}tTEt2X6*g^Va%Bt({5zEEf?AZY$nt2X6LqbpUowN//ZuS{AcpbCpQy\u0026/", "n": [ { "c": 2, "d": "GNU libstdc++ stdlib", "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref", "o": 17605, "z": 10, "cf": 0.9 } ], "ln": 17557 }, { "b": "mpGjJuQW$hp!L$dC12:ry?WuQBt=JNB-PfRz.r{Fy?WuQBt=H8A+c\u003eAz.r{Fy?Wv1ByX(id\u003eU)Ye\u0026AYCx\u003c$Z+v{:pfB8JV=0bMvUv\u003eI?ve\u0026AYCx\u003c$\u003c!z!%IFB8I4GlQLipe\u0026bam07PyzuO:q*07PZOlpk9Clp\u003eJLr9@J(oI$\u003cXoI4MruOTk\u0026e\u0026iL#oI4MruOTk\u003c07PZOlpk9ne\u002624p07PZOlpk9ne?]f.qfle608W\u0026BhzcZs07PZOlpj\u003cSuO:q\u003ee?]f.m[=GvlS^C$gCgHpgbe=0oI4MrsxF]^e\u0026iL}sxE\u003cQnNBh8gxo^Asv2nBuOKe?e\u0026-[i000620@@A60@@D7", "n": [ { "c": 2, "d": "glibc reference", "i": "micro-behaviors/dylib/library/libc::glibc-ref", "o": 24531, "z": 6, "cf": 0.3 }, { "c": 2, "d": "Versioned libc soname or symbol version", "i": "micro-behaviors/dylib/library/libc::libc-version-string", "o": 24583, "z": 7, "cf": 0.8 }, { "c": 2, "d": "GNU libstdc++ stdlib", "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref", "o": 24462, "z": 12, "cf": 0.9 } ], "ln": 24414 }, { "b": "000001][S61][S600000000002!p0p000001][S62lj-700000000005v?\u0026x000001][S62MK\u0026800000000007}xXF000001][S66AFgl0000000000aH}KN00000", "n": [ { "c": 1, "d": "Repeated 0x07 byte constant", "i": "micro-behaviors/mem/protect/modify::repeated-07-byte-constant", "o": 30140, "z": 4, "cf": 0.25 } ], "ln": 30108 }, { "b": "wDlgTz/+$%z/xi2wDlQ^yH}+\u003eB7F\u003c7A+bkEvrb{%Bo2l+B7PF\u0026vrue.oj-wGxKM6}0bVB\u003eB7]J80b=v(08c*gwO.t)A@Zc0xd^!pwO2y-B8b(oA4UQry\u0026?x:o\u003c}{FxjV8-r+lq)x(v\u003e?p\u0026ZF-x(mL-l$G$sB.(d@z!%b$C(Q=Ov%8*aBA{L\u003eC4CE\u0026B-Rbm0aZ4!zFTN#B-R2gzFTN#wnc9[vR/Q^0a*4RvR/P", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-4", "o": 135602, "z": 4, "cf": 0.8 }, { "c": 1, "d": "Probing keyword (explicit scanning intent)", "i": "objectives/discovery/network/scan/port::probing-keyword", "o": 135666, "z": 7, "cf": 0.75 } ], "ln": 135554 }, { "b": "vGprDyYFLS0000000000mGu\u0026%x-I@HwDllvaolG-zVy)WzVBkDBo2.Hx-J2Jaoj!fli8cdA@Wr.x-J2JBo2\u003eLASxXKve%^qwDi?Mw=M-HASviZwb{fvB]VjRv/Q6uaoiX/f-TlmaoiX/g5}pO00000f92[\u003cASx.Lf92O:ASxUJwDllvwDl=KyxeC", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-5", "o": 135960, "z": 3, "cf": 0.8 } ], "ln": 135912 }, { "b": "By=OazGP!sC42ifwGSuDB0*}/00000002rcBzbPkx)KGhxcp.@C4\u003eC$ash7KCwhejayPzmxDQ]6vp%T7c364^00000002F%x(4u\u003eaARJAv@Dm5wN/*8Bz\u0026o*z!%Irzddr\u003cxjV9al{=3qazC.nwPzx\u003ev}vXzc364^002A3B7ociwPzu)axi2%zE^s0", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-6", "o": 136726, "z": 4, "cf": 0.8 } ], "ln": 136678 }, { "b": "07y^Cz!%l7zF77\u003exMXi6wPzl#y\u0026*!gwP?=$wGSpuaA}KwxDRnjy?Wy8ash7KvqYP#w]7)*B08=I0000007H)HzE:(czY\u0026[9ByO##zF77\u003exMXi6wPzl#y\u0026*!gwP?=$wGU]2ygQ)%azbLjaA.yeash7e07H)ExjVgbx(mMara{z(wmY^\u003cz!%IrwmY]", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-2", "o": 136991, "z": 3, "cf": 0.8 } ], "ln": 136943 }, { "b": "08vDIwDkFzp^W/y08)DsB-I3[ph-^pC(QfHz/+$LwQdi@vru5Xo\u003e!V\u0026x(mL-nmuWM08v9H08NPIx\u003e8z*l$G$sB.(d1o\u003c}{ZvqC{fB-.K4rc-B]07.3HBo2cGA+PGawPzi}06$:HxIAzQwDkbjB75J]wN\u003e^fzEE0\u003cwN\u003e^twN/\u003e6x([R2l@lV%y\u003cu1X", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-4", "o": 140915, "z": 4, "cf": 0.8 } ], "ln": 140867 }, { "b": "0000000000000000sG8i00000m)/T8asG-PrvG4BhzcZpf^5k9gbZ*Bgb]mly?Wu]vSc78e]$}-wmYj)x8?]izIN/Y04@taB98CAvpxi?zF%Sde[Y6Ae[e%qy?bbiwb[k{zGNNBvrl8Ze[xlBB9RQ5e[xlBB98B5e[Y6Ae{p/DB7]Mg04}]4BUm\u0026GA=U@kzEmz:e]\u003eJtvj(8ozu8qfwO=xtwo\u00264)e[]iqBo0}nwQ5p%e[O*nx-G=az!9o#ve}]\u003exKtv(vqPN.xK(b-e[FZ6w].q", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/runtime::elf-dynstr-section-name", "o": 179364, "z": 7, "cf": 1.0 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/runtime::elf-dynsym-section-name", "o": 179356, "z": 7, "cf": 1.0 }, { "c": 2, "d": ".gnu_debuglink reference present", "i": "metadata/build/debug::elf-debuglink", "o": 179292, "z": 17, "cf": 1.0 } ], "ln": 179244 }, { "b": "BUmSNz/xodBA)\u003csx(mTbuTW$}vr?\u00269w[=c%uTW$}vr?\u00269wmoN*e]\u003eJte]\u003e\u003ege[xlBvqPZ*04}]5Bo0}7vrt]Te]+#RwPz\u003caz/bLcvSMO\u003ce[n*pzdNQb04}]4BZFV\u003cvS=s1x(mX^0000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/runtime::elf-dynamic-section-name", "o": 179544, "z": 8, "cf": 1.0 } ], "ln": 179496 } ], "depth": 1, "facts": { "exp": [ [ "ZNK4Bolt11DeviceModel7managerEv" ], [ "ZNK4Bolt6Device10metaObjectEv" ], [ "ZNK4Bolt6Device6vendorEv" ], [ "ZN4Bolt6Device11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "ZTSN4Bolt6DeviceE" ], [ "ZN4Bolt7Manager11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "ZN4Bolt7Manager11qt_metacastEPKc" ], [ "ZTVN4Bolt11DeviceModelE" ], [ "ZTSZN9QMetaType17registerConverterI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEN9QtPrivate33QSequentialIterableConvertFunctorIS6_EEEEbT1_EUlPKvPvE_" ], [ "ZTIZN9QMetaType19registerMutableViewI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEN9QtPrivate37QSequentialIterableMutableViewFunctorIS3_EEEEbT1_EUlPvSB_E_" ], [ "ZTIZN9QMetaType19registerMutableViewI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEN9QtPrivate37QSequentialIterableMutableViewFunctorIS6_EEEEbT1_EUlPvSE_E_" ], [ "ZNK4Bolt6Device13authorizeTimeEv" ], [ "ZN4Bolt11DeviceModel14managerChangedEPNS_7ManagerE" ], [ "ZNK4Bolt6Device6storedEv" ], [ "ZTIZN9QMetaType17registerConverterI14QSharedPointerIN4Bolt6DeviceEEP7QObjectN9QtPrivate27QSmartPointerConvertFunctorIS4_EEEEbT1_EUlPKvPvE_" ], [ "ZN4Bolt6DeviceC2ERK15QDBusObjectPathP7QObject" ], [ "ZN4Bolt6Device11qt_metacastEPKc" ], [ "ZNK4Bolt11DeviceModel9roleNamesEv" ], [ "ZN4Bolt6DeviceC2EP7QObject" ], [ "ZN4Bolt11DeviceModel12setShowHostsEb" ], [ "ZGVZN9QMetaType21registerConverterImplI14QSharedPointerIN4Bolt6DeviceEEP7QObjectEEbSt8functionIFbPKvPvEES_S_E10unregister" ], [ "ZTVN4Bolt7ManagerE" ], [ "ZNK4Bolt7Manager13securityLevelEv" ], [ "ZN4Bolt6Device6createERK15QDBusObjectPath" ], [ "ZNK4Bolt6Device11connectTimeEv" ], [ "ZN13QMetaSequence12MetaSequenceI5QListI15QDBusObjectPathEE5valueE" ], [ "ZN4Bolt6Device19clearStatusOverrideEv" ], [ "ZN4Bolt11DeviceModel16staticMetaObjectE" ], [ "ZNK4Bolt6Device4nameEv" ], [ "ZNK4Bolt7Manager10metaObjectEv" ], [ "ZN4Bolt11DeviceModel11qt_metacastEPKc" ], [ "ZN4Bolt7ManagerD0Ev" ], [ "ZNK4Bolt7Manager8authModeEv" ], [ "ZGVZN9QMetaType21registerConverterImplI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEEEbSt8functionIFbPKvPvEES_S_E10unregister" ], [ "ZZN9QMetaType21registerConverterImplI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEEEbSt8functionIFbPKvPvEES_S_E10unregister" ], [ "ZN4Bolt16staticMetaObjectE" ], [ "ZN4Bolt7ManagerC1EP7QObject" ], [ "ZN4Bolt7Manager11setAuthModeENS_8AuthModeE" ], [ "ZN4Bolt6DeviceC1EP7QObject" ], [ "ZN4Bolt6DeviceD0Ev" ], [ "ZNK4Bolt7Manager6deviceEOSt8functionIFbRK14QSharedPointerINS_6DeviceEEEE" ], [ "ZN4Bolt6Device13policyChangedENS_6PolicyE" ], [ "ZTIZN9QMetaType17registerConverterI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEN9QtPrivate33QSequentialIterableConvertFunctorIS3_EEEEbT1_EUlPKvPvE_" ], [ "ZN4Bolt7Manager15authModeChangedENS_8AuthModeE" ], [ "ZTIN4Bolt7ManagerE" ], [ "ZNK4Bolt6Device8keyStateEv" ], [ "ZGVZN9QMetaType23registerMutableViewImplI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEEEbSt8functionIFbPvSB_EES_S_E10unregister" ], [ "ZN4Bolt11DeviceModel10setManagerEPNS_7ManagerE" ], [ "ZTSZN9QMetaType17registerConverterI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEN9QtPrivate33QSequentialIterableConvertFunctorIS3_EEEEbT1_EUlPKvPvE_" ], [ "ZNK4Bolt11DeviceModel8rowCountERK11QModelIndex" ], [ "ZNK4Bolt6Device9authFlagsEv" ], [ "ZNK4Bolt6Device9sysfsPathEv" ], [ "ZZN9QMetaType21registerConverterImplI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEEEbSt8functionIFbPKvPvEES_S_E10unregister" ], [ "ZNK4Bolt7Manager6deviceERK15QDBusObjectPath" ], [ "ZNK4Bolt6Device9storeTimeEv" ], [ "ZNK4Bolt6Device6statusEv" ], [ "ZN4Bolt6Device17setStatusOverrideENS_6StatusE" ], [ "ZNK4Bolt7Manager13defaultPolicyEv" ], [ "ZNK4Bolt11DeviceModel10metaObjectEv" ], [ "ZN4Bolt11DeviceModel20populateWithoutResetEv" ], [ "ZN4Bolt7Manager12forgetDeviceERK7QStringSt8functionIFvvEES4_IFvS3_EE" ], [ "ZN4Bolt7Manager11deviceAddedERK14QSharedPointerINS_6DeviceEE" ], [ "ZN4Bolt6Device16staticMetaObjectE" ], [ "ZN4Bolt7ManagerD1Ev" ], [ "ZN4Bolt6Device13storedChangedEb" ], [ "ZN13QMetaSequence12MetaSequenceI5QListI14QSharedPointerIN4Bolt6DeviceEEEE5valueE" ], [ "ZNK4Bolt6Device8dbusPathEv" ], [ "ZNK4Bolt6Device3uidEv" ], [ "ZN4Bolt6DeviceD1Ev" ], [ "ZNK4Bolt7Manager7versionEv" ], [ "ZNK4Bolt6Device5labelEv" ], [ "ZN4Bolt6DeviceC1ERK15QDBusObjectPathP7QObject" ], [ "ZNK4Bolt11DeviceModel9showHostsEv" ], [ "ZTSN4Bolt7ManagerE" ], [ "ZTIZN9QMetaType17registerConverterI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEN9QtPrivate33QSequentialIterableConvertFunctorIS6_EEEEbT1_EUlPKvPvE_" ], [ "ZNK4Bolt6Device6policyEv" ], [ "ZN4Bolt6Device9authorizeE6QFlagsINS_4AuthEESt8functionIFvvEES4_IFvRK7QStringEE" ], [ "ZNK4Bolt7Manager6deviceERK7QString" ], [ "ZNK4Bolt11DeviceModel4dataERK11QModelIndexi" ], [ "ZTSZN9QMetaType17registerConverterI14QSharedPointerIN4Bolt6DeviceEEP7QObjectN9QtPrivate27QSmartPointerConvertFunctorIS4_EEEEbT1_EUlPKvPvE_" ], [ "ZTIN4Bolt6DeviceE" ], [ "ZTSZN9QMetaType19registerMutableViewI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEN9QtPrivate37QSequentialIterableMutableViewFunctorIS3_EEEEbT1_EUlPvSB_E_" ], [ "ZTSN4Bolt11DeviceModelE" ], [ "ZTIN4Bolt11DeviceModelE" ], [ "ZTSZN9QMetaType19registerMutableViewI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEN9QtPrivate37QSequentialIterableMutableViewFunctorIS6_EEEEbT1_EUlPvSE_E_" ], [ "ZZN9QMetaType23registerMutableViewImplI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEEEbSt8functionIFbPvS8_EES_S_E10unregister" ], [ "ZGVZN9QMetaType21registerConverterImplI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEEEbSt8functionIFbPKvPvEES_S_E10unregister" ], [ "ZN4Bolt11DeviceModel16showHostsChangedEb" ], [ "ZN4Bolt7Manager12enrollDeviceERK7QStringNS_6PolicyE6QFlagsINS_4AuthEESt8functionIFvvEES8_IFvS3_EE" ], [ "ZN4Bolt6Device16authFlagsChangedE6QFlagsINS_4AuthEE" ], [ "ZN4Bolt7ManagerD2Ev" ], [ "ZZN9QMetaType23registerMutableViewImplI5QListI14QSharedPointerIN4Bolt6DeviceEEE9QIterableI13QMetaSequenceEEEbSt8functionIFbPvSB_EES_S_E10unregister" ], [ "ZN4Bolt7Manager13deviceRemovedERK14QSharedPointerINS_6DeviceEE" ], [ "ZTVN4Bolt6DeviceE" ], [ "ZNK4Bolt6Device6parentEv" ], [ "ZN4Bolt6DeviceD2Ev" ], [ "ZNK4Bolt7Manager9isProbingEv" ], [ "ZNK4Bolt7Manager11isAvailableEv" ], [ "ZN4Bolt6Device13statusChangedENS_6StatusE" ], [ "ZNK4Bolt7Manager7devicesEv" ], [ "ZGVZN9QMetaType23registerMutableViewImplI5QListI15QDBusObjectPathE9QIterableI13QMetaSequenceEEEbSt8functionIFbPvS8_EES_S_E10unregister" ], [ "ZNK4Bolt6Device4typeEv" ], [ "ZN4Bolt7ManagerC2EP7QObject" ], [ "ZN4Bolt11DeviceModel11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "ZN4Bolt7Manager16staticMetaObjectE" ], [ "ZZN9QMetaType21registerConverterImplI14QSharedPointerIN4Bolt6DeviceEEP7QObjectEEbSt8functionIFbPKvPvEES_S_E10unregister" ] ], "imp": [ [ "", "ZdaPvm" ], [ "", "ZN9QtPrivate16QStringList_joinEPK5QListI7QStringEPK5QCharx" ], [ "", "ZNK18QAbstractItemModel5buddyERK11QModelIndex" ], [ "", "ZN9QtPrivate12equalStringsE11QStringView13QLatin1String" ], [ "", "ZN22QDBusAbstractInterface11qt_metacastEPKc" ], [ "", "ZN9QMetaType30hasRegisteredConverterFunctionES_S_" ], [ "", "ZN9QMetaType7convertES_PKvS_Pv" ], [ "", "cxa_begin_catch" ], [ "", "memcpy" ], [ "", "ZN18QAbstractItemModel13endResetModelEv" ], [ "", "ZdlPvm" ], [ "", "ZNK18QAbstractItemModel15canDropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "ZN7QObjectC2EPS_" ], [ "", "ZN23QDBusPendingCallWatcher8finishedEPS_" ], [ "", "ZNK18QAbstractItemModel9roleNamesEv" ], [ "", "Z43qRegisterNormalizedMetaType_QDBusObjectPathRK10QByteArray" ], [ "", "ZN22QDBusAbstractInterface11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZN9QMetaType27unregisterConverterFunctionES_S_" ], [ "", "qt_version_tag" ], [ "", "Znwm" ], [ "", "memmove" ], [ "", "ZNK18QAbstractItemModel9multiDataERK11QModelIndex18QModelRoleDataSpan" ], [ "", "ZN18QAbstractItemModel13clearItemDataERK11QModelIndex" ], [ "", "ZN18QAbstractItemModel10removeRowsEiiRK11QModelIndex" ], [ "", "ZN10QArrayData8allocateEPPS_xxxNS_16AllocationOptionE" ], [ "", "ZN18QAbstractItemModel11moveColumnsERK11QModelIndexiiS2_i" ], [ "", "ZN15QDBusConnectionD1Ev" ], [ "", "cxa_finalize" ], [ "", "ZNK7QObject8propertyEPKc" ], [ "", "ZNK18QAbstractItemModel5matchERK11QModelIndexiRK8QVarianti6QFlagsIN2Qt9MatchFlagEE" ], [ "", "ZN6QDebugD1Ev" ], [ "", "ZN7QObject10timerEventEP11QTimerEvent" ], [ "", "ZN7QString13toUtf8_helperERKS_" ], [ "", "ZNKSt13runtime_error4whatEv" ], [ "", "ZN9QtPrivate12argToQStringE14QAnyStringViewmPPKNS_7ArgBaseE" ], [ "", "Z30qt_QMetaEnum_flagDebugOperatorR6QDebugyPK11QMetaObjectPKc" ], [ "", "ZTVN10__cxxabiv121__vmi_class_type_infoE" ], [ "", "ZN13QDBusArgumentD1Ev" ], [ "", "ZN9QtPrivate54hasRegisteredMutableViewFunctionToIterableMetaSequenceE9QMetaType" ], [ "", "ZN16QDebugStateSaverC1ER6QDebug" ], [ "", "ZN18QAbstractItemModel9fetchMoreERK11QModelIndex" ], [ "", "ZNK18QAbstractItemModel4spanERK11QModelIndex" ], [ "", "ZNSt13runtime_errorC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE" ], [ "", "ZN22QDBusAbstractInterface16disconnectNotifyERK11QMetaMethod" ], [ "", "ZNK22QDBusAbstractInterface9lastErrorEv" ], [ "", "ZN9QMetaType14registerHelperEPKN9QtPrivate18QMetaTypeInterfaceE" ], [ "", "ZN18QAbstractItemModel10insertRowsEiiRK11QModelIndex" ], [ "", "ZNK7QString11toStdStringB5cxx11Ev" ], [ "", "ZN9QtPrivate14compareStringsE11QStringViewS0_N2Qt15CaseSensitivityE" ], [ "", "ZN18QAbstractItemModel11setItemDataERK11QModelIndexRK4QMapIi8QVariantE" ], [ "", "stack_chk_fail" ], [ "", "ZN18QAbstractItemModel8moveRowsERK11QModelIndexiiS2_i" ], [ "", "ZN13QDBusArgumentC1ERKS_" ], [ "", "ZNK14QMessageLogger7warningEPKcz" ], [ "", "ZNK18QAbstractItemModel8mimeDataERK5QListI11QModelIndexE" ], [ "", "ZN18QAbstractItemModel13endInsertRowsEv" ], [ "", "ZTI7QObject" ], [ "", "ZN21QDBusPendingReplyBaseC2Ev" ], [ "", "ZN7QObjectD2Ev" ], [ "", "cxa_guard_acquire" ], [ "", "ZN7QObject11deleteLaterEv" ], [ "", "ZNK22QDBusAbstractInterface7isValidEv" ], [ "", "ZTI18QAbstractListModel" ], [ "", "ZNK18QAbstractListModel11columnCountERK11QModelIndex" ], [ "", "ZTVN10__cxxabiv117__class_type_infoE" ], [ "", "ZdaPv" ], [ "", "ZN16QLoggingCategoryC1EPKc9QtMsgType" ], [ "", "ZN9QtPrivate25QMetaTypeInterfaceWrapperIjE8metaTypeE" ], [ "", "cxa_allocate_exception" ], [ "", "gmon_start__" ], [ "", "strlen" ], [ "", "ZNK18QAbstractItemModel8itemDataERK11QModelIndex" ], [ "", "ZN9QMetaTypeC1Ei" ], [ "", "cxa_guard_abort" ], [ "", "ZN13QDBusArgumentC1Ev" ], [ "", "ZNSt13runtime_errorD2Ev" ], [ "", "ZNK14QMessageLogger5debugEPKcz" ], [ "", "ZNK13QDBusArgument8endArrayEv" ], [ "", "ZNK18QAbstractItemModel20supportedDropActionsEv" ], [ "", "Znam" ], [ "", "ZN9QtPrivate25QMetaTypeInterfaceWrapperI7QStringE8metaTypeE" ], [ "", "ZNK18QAbstractListModel6parentERK11QModelIndex" ], [ "", "ZN15QDBusConnection9systemBusEv" ], [ "", "ZNK21QDBusPendingReplyBase10argumentAtEi" ], [ "", "ZN8QVariantC1ERKS_" ], [ "", "ZN9QDateTime18fromSecsSinceEpochEx" ], [ "", "ZN11QTextStreamlsEc" ], [ "", "ZN15QtSharedPointer20ExternalRefCountData16setQObjectSharedEPK7QObjectb" ], [ "", "Z26qt_QMetaEnum_debugOperatorR6QDebugxPK11QMetaObjectPKc" ], [ "", "memcpy_chk" ], [ "", "ZN21QDBusPendingReplyBaseD2Ev" ], [ "", "ZN18QAbstractItemModel13insertColumnsEiiRK11QModelIndex" ], [ "", "ZdlPv" ], [ "", "ZN9QtPrivate12equalStringsE11QStringViewS0_" ], [ "", "ZN22QDBusAbstractInterface16staticMetaObjectE" ], [ "", "cxa_guard_release" ], [ "", "ZNK7QString5splitERKS_6QFlagsIN2Qt18SplitBehaviorFlagsEENS3_15CaseSensitivityE" ], [ "", "ZN18QAbstractItemModel6submitEv" ], [ "", "ZN8QVariantD1Ev" ], [ "", "ZN18QAbstractItemModel17resetInternalDataEv" ], [ "", "ZN10QByteArrayaSEPKc" ], [ "", "ZN18QAbstractItemModel15beginResetModelEv" ], [ "", "ZN11QMetaObject8activateEP7QObjectPKS_iPPv" ], [ "", "ZN9QtPrivate25QMetaTypeInterfaceWrapperIyE8metaTypeE" ], [ "", "gxx_personality_v0" ], [ "", "ZN16QLoggingCategoryD1Ev" ], [ "", "ZN16QDBusPendingCallC2ERKS_" ], [ "", "cxa_throw" ], [ "", "ZN7QObject10disconnectEPKS_PKcS1_S3_" ], [ "", "ZNK10QDBusError7messageEv" ], [ "", "ZN11QDataStreamrsERi" ], [ "", "ZN7QObject5eventEP6QEvent" ], [ "", "ZN11QMetaObject10ConnectionD1Ev" ], [ "", "Unwind_Resume" ], [ "", "ZN9QHashSeed10globalSeedEv" ], [ "", "ZN22QDBusAbstractInterface25asyncCallWithArgumentListERK7QStringRK5QListI8QVariantE" ], [ "", "ZN18QAbstractItemModel15beginRemoveRowsERK11QModelIndexii" ], [ "", "ZN22QDBusAbstractInterfaceD2Ev" ], [ "", "ZNK13QDBusArgument5atEndEv" ], [ "", "ZN22QDBusAbstractInterfaceC2ERK7QStringS2_PKcRK15QDBusConnectionP7QObject" ], [ "", "ZN18QAbstractListModelC2EP7QObject" ], [ "", "ZN18QAbstractListModel11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZN10QByteArray6_emptyE" ], [ "", "ZN8QVariantC1ERK7QString" ], [ "", "ZN11QMetaObject14normalizedTypeEPKc" ], [ "", "ZN23QDBusPendingCallWatcherC1ERK16QDBusPendingCallP7QObject" ], [ "", "ZN9QMetaType27registerMutableViewFunctionERKSt8functionIFbPvS1_EES_S_" ], [ "", "ZNK18QAbstractListModel11hasChildrenERK11QModelIndex" ], [ "", "ZN8QVariant13moveConstructE9QMetaTypePv" ], [ "", "ZN7QObject16disconnectNotifyERK11QMetaMethod" ], [ "", "ZN7QObject11eventFilterEPS_P6QEvent" ], [ "", "ZN18QAbstractItemModel13endRemoveRowsEv" ], [ "", "ZN18QAbstractListModelD2Ev" ], [ "", "ZN9QtPrivate25QMetaTypeInterfaceWrapperIbE8metaTypeE" ], [ "", "cxa_end_catch" ], [ "", "ZNK13QDBusArgumentrsER15QDBusObjectPath" ], [ "", "ZN9QMetaType29unregisterMutableViewFunctionES_S_" ], [ "", "ZNK18QAbstractItemModel10headerDataEiN2Qt11OrientationEi" ], [ "", "ZN13QDBusMetaType25registerMarshallOperatorsE9QMetaTypePFvR13QDBusArgumentPKvEPFvRKS1_PvE" ], [ "", "ZNK11QMetaObject9classNameEv" ], [ "", "Zls6QDebugPK7QObject" ], [ "", "strcmp" ], [ "", "ZN22QDBusAbstractInterface11doAsyncCallERK7QStringPK8QVariantm" ], [ "", "ZTVN10__cxxabiv120__si_class_type_infoE" ], [ "", "ZN10QByteArray6appendEc" ], [ "", "ZNK16QDBusPendingCall7isErrorEv" ], [ "", "ZNK18QAbstractListModel5flagsERK11QModelIndex" ], [ "", "ZTI22QDBusAbstractInterface" ], [ "", "ZNK14QMessageLogger8criticalEPKcz" ], [ "", "cxa_atexit" ], [ "", "ZN18QAbstractItemModel4sortEiN2Qt9SortOrderE" ], [ "", "cxa_free_exception" ], [ "", "ZN7QObject13doSetPropertyEPKcRK8QVariantPS2_" ], [ "", "ZN10QArrayData10deallocateEPS_xx" ], [ "", "ZN22QDBusAbstractInterface13connectNotifyERK11QMetaMethod" ], [ "", "ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject" ], [ "", "ZN18QAbstractItemModel7setDataERK11QModelIndexRK8QVarianti" ], [ "", "ZN9QDateTimeC1Ev" ], [ "", "ZNK16QDBusPendingCall5errorEv" ], [ "", "ZNK18QAbstractItemModel9mimeTypesEv" ], [ "", "ZN7QObject13connectNotifyERK11QMetaMethod" ], [ "", "ZN18QAbstractListModel16staticMetaObjectE" ], [ "", "ZN10QByteArrayC1EPKcx" ], [ "", "Zls6QDebugRK15QDBusObjectPath" ], [ "", "ZN10QByteArray11reallocDataExN10QArrayData16AllocationOptionE" ], [ "", "Z9qBadAllocv" ], [ "", "ZN9QtPrivate25QMetaTypeInterfaceWrapperI9QDateTimeE8metaTypeE" ], [ "", "ZN18QAbstractListModel11qt_metacastEPKc" ], [ "", "Z25qEnvironmentVariableIsSetPKc" ], [ "", "ZN8QVariantC1E9QMetaTypePKv" ], [ "", "ZN9QDateTimeD1Ev" ], [ "", "ZN9QtPrivate25QMetaTypeInterfaceWrapperIP7QObjectE8metaTypeE" ], [ "", "ZN11QTextStreamlsERK7QString" ], [ "", "ZTISt13runtime_error" ], [ "", "ZNK18QAbstractItemModel20supportedDragActionsEv" ], [ "", "ZN7QString8fromUtf8E14QByteArrayView" ], [ "", "ZN21QDBusPendingReplyBase6assignERK16QDBusPendingCall" ], [ "", "ZN13QDBusArgumentlsERK15QDBusObjectPath" ], [ "", "ZN18QAbstractItemModel13removeColumnsEiiRK11QModelIndex" ], [ "", "ITM_registerTMCloneTable" ], [ "", "memset_chk" ], [ "", "ZN7QObject16staticMetaObjectE" ], [ "", "ZN7QObject11qt_metacastEPKc" ], [ "", "ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayS_" ], [ "", "Z41qRegisterNormalizedMetaType_QDBusArgumentRK10QByteArray" ], [ "", "ZN15QDBusConnection10sessionBusEv" ], [ "", "ZN7QObject10childEventEP11QChildEvent" ], [ "", "ZN9QtPrivate52hasRegisteredConverterFunctionToIterableMetaSequenceE9QMetaType" ], [ "", "ZNK18QAbstractItemModel12canFetchMoreERK11QModelIndex" ], [ "", "memcmp" ], [ "", "ZN18QAbstractListModel12dropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex" ], [ "", "ZNK13QDBusArgument10beginArrayEv" ], [ "", "ZN18QAbstractItemModel13setHeaderDataEiN2Qt11OrientationERK8QVarianti" ], [ "", "ZSt25__throw_bad_function_callv" ], [ "", "ZN23QDBusPendingCallWatcher16staticMetaObjectE" ], [ "", "ZN18QAbstractItemModel6revertEv" ], [ "", "ZN9QMetaType25registerConverterFunctionERKSt8functionIFbPKvPvEES_S_" ], [ "", "ZN16QDBusPendingCallD1Ev" ], [ "", "ZN7QStringaSERKS_" ], [ "", "ZN11QDataStreamlsEi" ], [ "", "ZN16QDebugStateSaverD1Ev" ], [ "", "ZN21QDBusPendingReplyBase12setMetaTypesEiPK9QMetaType" ], [ "", "ZNK18QAbstractListModel5indexEiiRK11QModelIndex" ], [ "", "ZN18QAbstractItemModel15beginInsertRowsERK11QModelIndexii" ], [ "", "ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv" ], [ "", "ZNK18QAbstractListModel7siblingEiiRK11QModelIndex" ], [ "", "gcc_personality_v0" ], [ "", "ZN7QObject11customEventEP6QEvent" ], [ "", "ZN10QByteArray6insertEx14QByteArrayView" ], [ "", "ZN7QString14trimmed_helperERKS_" ], [ "", "ZN10QArrayData19reallocateUnalignedEPS_PvxxNS_16AllocationOptionE" ], [ "", "ZNK11QObjectData17dynamicMetaObjectEv" ] ], "sec": [ [ ".note.gnu.build-id", 680, 36, 4.06, "alloc" ], [ ".gnu.hash", 720, 1392, 4.52, "alloc" ], [ ".dynsym", 2112, 7680, 1.92, "alloc" ], [ ".dynstr", 9792, 14881, 5.33, "alloc" ], [ ".gnu.version", 24674, 640, 2.05, "alloc" ], [ ".gnu.version_r", 25320, 320, 3.35, "alloc" ], [ ".rela.dyn", 25640, 9696, 1.95, "alloc" ], [ ".relr.dyn", 35336, 128, 4.74, "alloc" ], [ ".init", 36864, 27, 4.24, "alloc,executable" ], [ ".text", 36928, 94607, 6.13, "alloc,executable" ], [ ".fini", 131536, 13, 3.24, "alloc,executable" ], [ ".rodata", 135168, 9896, 4.69, "alloc" ], [ ".eh_frame_hdr", 145064, 3516, 5.31, "alloc" ], [ ".eh_frame", 148584, 16928, 5.35, "alloc" ], [ ".gcc_except_table", 165512, 3881, 5.24, "alloc" ], [ ".note.gnu.property", 169400, 80, 1.88, "alloc" ], [ ".init_array", 170448, 8, 1.06, "write,alloc" ], [ ".fini_array", 170456, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 170464, 3256, 1.4, "write,alloc" ], [ ".dynamic", 173720, 544, 1.53, "write,alloc" ], [ ".got", 174264, 1848, 0.02, "write,alloc" ], [ ".data", 176128, 3120, 1.45, "write,alloc" ], [ ".qtversion", 179248, 16, 0.99, "write,alloc" ], [ ".comment", 179264, 27, 3.86, "merge,strings" ], [ ".gnu_debuglink", 179292, 24, 3.94, "" ], [ ".shstrtab", 179316, 288, 4.29, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 0.0, "has_note": 1.0, "note_count": 2.0, "nx_enabled": 1.0, "has_cet_ibt": 1.0, "has_dt_relr": 1.0, "dynrel_count": 0.0, "dynsym_count": 320.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 0.0, "dynrela_count": 404.0, "has_cet_shstk": 1.0, "has_debuglink": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 0.0, "build_id_length": 20.0, "dt_versym_count": 320.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 1.0, "wx_segment_count": 0.0, "comment_entry_count": 1.0, "fortify_source_count": 2.0, "program_header_count": 11.0, "comment_distinct_count": 1.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 94685.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 94685.0, "section_relocation_group_count": 1.0, "stripped_metadata_section_count": 7.0 }, "file": { "size": 181400.0, "entropy": 5.71, "size_bytes": 181400.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 6.13, "data_entropy": 1.14, "overlay_size": 1796.0, "string_count": 592.0, "overlay_ratio": 0.01, "overall_entropy": 5.71, "overlay_entropy": 1.56, "entropy_variance": 2.93, "avg_string_length": 32.49, "max_string_length": 177.0, "peak_region_bytes": 65536.0, "code_to_data_ratio": 0.91, "peak_region_entropy": 6.06, "string_length_stddev": 32.17, "largest_section_ratio": 0.52, "sentence_string_count": 23.0, "sentence_string_ratio": 0.04, "high_entropy_string_count": 0.0 }, "exports": { "count": 106.0 }, "imports": { "count": 213.0 }, "sections": { "count": 28.0, "code_size": 94647.0, "entropy_max": 6.13, "entropy_mean": 3.22, "name_entropy": 4.25, "writable_count": 8.0, "executable_count": 3.0, "nonstandard_count": 8.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 5.0 } } }, "id": 3, "mol": "Md(Bi)", "path": "/data/samples/unknown/foraged/arch/archlinux.org/_/plasma-thunderbolt/plasma-thunderbolt-6.7.4-1-x86_64.pkg.tar.zst!!usr/lib/libkbolt.so", "pid": 0, "risk": 1, "sha": "5d47776af349a617f0e6bec92191bf709f45d8371a4470b860e1bbf9e0f889fe", "size": 181400, "traits": [ { "id": "metadata/binary/linking/runtime::glibc-needed", "conf": 1.0, "crit": 3, "desc": "ELF depends on glibc" } ], "type": "elf" }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf8kvqxB[yIa+Ge?[$j3l{WoB7]J8azb4$wPzZcBrC:rA=U@kzxHU^gDc{w3uf=[zEEx[auZ\u0026^y*?y4vj=OmB-7-3A:\u0026%6Bp8#5xjtp\u003cwGTbUAbn%7zdb2rxMXi6wPzl#y\u0026*2ewmoN*auZ\u0026^yId:mAaIgKyI9#[yId*4AV^H/hzc{vg+yA?Abf8%wPIu7jS)Nqvrlo]azC.nwOl3(BzkVhazbLjay/tcBAhqoy?W^1axi2%zE^s0vSc78ay]5bx\u003e7Z}3uZx9auZ\u0026XBAzFyiXJd4wmWxiA+v4Ay*?y4vj=23B8b(oA4.McB.LV5wmoN\u003eauZ\u00264h-JVOi5ADCf:.(d", "n": [ { "c": 3, "d": "Arch package metadata manifest", "i": "metadata/package/files/system-package::arch-pkginfo-manifest", "o": 0, "z": 23, "cf": 0.97 }, { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-5", "o": 185, "z": 3, "cf": 0.8 }, { "c": 1, "d": "Arch pkgname metadata field", "i": "metadata/package/files/system-package::arch-pkgname-field", "o": 61, "z": 28, "cf": 0.94 }, { "c": 1, "d": "Arch pkgver metadata field", "i": "metadata/package/files/system-package::arch-pkgver-field", "o": 139, "z": 16, "cf": 0.94 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "vp%d(auZ\u0026Dz/5{eavxNPvpBm=C3#HQByO-%vpBm=C40TAA:@^0x(n6re]L=yj{(vBDsXiZat(5lfF\u003e-@vrb\u003c\u003eauZ\u0026(i5Ub4gZX5kv}xL0wGTbUoH?]MeIX}jePkUYy*?A%ATDD1z/{1wjS[YWvrlo]3s)Z!wO#33jS[iLy\u0026*1{wPhi#wfs2Txkzo\u003ev*V:TAaJ]$auZ\u0026.v@lvgx(4?$wmYZ\u003ezE:\u003eMazUF9A+eV\u0026wn=vb3s)Z!wO#33jS[JJvS=:2wb", "n": [ { "c": 1, "d": "Arch package architecture field", "i": "metadata/package/files/system-package::arch-package-arch-field", "o": 350, "z": 13, "cf": 0.9 } ], "ln": 286, "col": 5, "line": 10 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 664.0, "entropy": 4.85, "size_bytes": 664.0 }, "binary": { "overall_entropy": 4.85, "peak_region_bytes": 664.0, "peak_region_entropy": 4.85 } } }, "id": 4, "mol": "Md(Pa)", "path": "/data/samples/unknown/foraged/arch/archlinux.org/_/plasma-thunderbolt/plasma-thunderbolt-6.7.4-1-x86_64.pkg.tar.zst!!.PKGINFO", "pid": 0, "risk": 1, "sha": "5fd6f84a0ad6921f6268fb411590cbb4edcd2a96185f8758443e52080de7dcda", "size": 664, "traits": [ { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.94, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 61, 0 ] ] }, { "id": "metadata/package/files/system-package::arch-package-arch-field", "conf": 0.9, "crit": 1, "desc": "Arch package architecture field", "spans": [ [ 350, 0 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.94, "crit": 1, "desc": "Arch pkgver metadata field", "spans": [ [ 139, 0 ] ] }, { "id": "metadata/package/files/system-package::arch-makepkg-generated", "conf": 0.96, "crit": 1, "desc": "Arch makepkg generated metadata", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/files/system-package::arch-pkginfo-manifest", "conf": 0.97, "crit": 3, "desc": "Arch package metadata manifest", "spans": [ [ 0, 23 ], [ 61, 28 ], [ 139, 16 ], [ 350, 13 ] ] } ], "type": "text" }, { "ctx": [ { "b": "w]zZbvrrRPatKpyyIdJ[zdK?MaAhd9B8ttqBzb/mwmY^\u003cz!%I5Abf8}vrl05jS[YWvrlo]eP+VGzE^s0vSc783uf=[C4CXpjS(Tnh.D{sf:.(nxjk*\u003cxDPCXCSmP*hz++WyIda0x(4r!B7!#qh8YI#z6g$:gC}a2gby*Gv(lhPh8c%%h8/56f!^8)gx", "n": [ { "c": 1, "d": "Arch pkgname metadata field", "i": "metadata/package/files/system-package::arch-pkgname-field", "o": 11, "z": 28, "cf": 0.94 }, { "c": 1, "d": "Arch pkgver metadata field", "i": "metadata/package/files/system-package::arch-pkgver-field", "o": 69, "z": 16, "cf": 0.94 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 11756.0, "entropy": 4.89, "size_bytes": 11756.0 }, "binary": { "overall_entropy": 4.89, "peak_region_bytes": 11756.0, "peak_region_entropy": 5.0 } } }, "id": 8, "path": "/data/samples/unknown/foraged/arch/archlinux.org/_/plasma-thunderbolt/plasma-thunderbolt-6.7.4-1-x86_64.pkg.tar.zst!!.BUILDINFO", "pid": 0, "sha": "9bd47de308234af4ba73e32e57f46857aca0aa354df86b2a81609af470426c8b", "size": 11756, "traits": [ { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.94, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 11, 0 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.94, "crit": 1, "desc": "Arch pkgver metadata field", "spans": [ [ 69, 0 ] ] } ], "type": "text" }, { "id": 9, "mol": "Md", "sha": "fcc734e7a230f5592e488567f8fa6c72b8a4d49257d800f7b408e49db799b2c5", "path": "plasma-thunderbolt@6.7.4-1.registry.json", "risk": 1, "size": 849, "type": "registry", "depth": 1 } ], "omitted_files": 1, "rev": "285c0", "v": "8" } }