{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000087966524, "rte": "az", "prob": 0.000087966524 } ], "prob": 0.000087966524, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.0000879665240063332, "type": "xz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000005940596111031482, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T22:34:12Z" }, "path": "pps-ldisc.ko.xz", "raw": { "files": [ { "id": 0, "mol": "Md₂(BiHe)", "sha": "0488417017ca856439a92dc2d294e5bf5b4539b73f860deb8fa29e9161275bc5", "path": "pps-ldisc.ko.xz", "risk": 3, "size": 12224, "type": "xz", "facts": { "metrics": { "file": { "size": 12224, "entropy": 7.99 }, "binary": { "peak_region_bytes": 12224, "peak_region_entropy": 7.83 } } }, "traits": [ { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "from": [ { "file": 1 } ], "uses": [ 2, 4 ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "from": [ { "file": 1 } ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 5 ] }, { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "from": [ { "file": 1 } ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 5 ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000Z{Kdx0000000000kMy=:002m:hukPmKDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.098@*ItMGp0000\u0026IqH\u003cX-yL)\u003c00000\u003eL$O.07.?h4$%#-0058\u003e3Y[N#f#bKqg5{Fr0001XKDtM=KDtM=Kn", "ln": 0 }, { "b": "0000000000000000000000000Ee\u003clE00000000000000000000y?Wx\u003czGxwLm]h\u003eVwmY*(A+PGmx(v(Lp/77kr8^0ywmY{#v}u=[A+PYdASxJ\u003cBzbPkjYliez!%37av*c:zdN*hx=]JJx(v\u003c1BAzjZy?W^fCRiYLj]/2cx\u003c(6CBAz^Wy?dm3v\u003exz", "ln": 1724 } ], "depth": 1, "facts": { "sec": [ [ ".text", 64, 671, 4.73, "alloc,executable" ], [ ".rela.text", 41312, 936, 2.29, "info_link" ], [ ".init.text", 736, 185, 2.62, "alloc,executable" ], [ ".rela.init.text", 42248, 600, 1.8, "info_link" ], [ ".text.unlikely", 921, 79, 2.58, "alloc,executable" ], [ ".rela.text.unlikely", 42848, 240, 1.96, "info_link" ], [ ".exit.text", 1000, 32, 2.19, "alloc,executable" ], [ ".rela.exit.text", 43088, 48, 1.57, "info_link" ], [ ".rodata.str1.1", 1032, 100, 4.31, "alloc,merge,strings" ], [ ".rodata.str1.8", 1136, 225, 4.46, "alloc,merge,strings" ], [ "__mcount_loc", 1361, 32, 0.0, "alloc" ], [ ".rela__mcount_loc", 43136, 96, 1.05, "info_link" ], [ ".rodata", 1400, 364, 1.27, "alloc" ], [ ".rela.rodata", 43232, 408, 1.33, "info_link" ], [ ".modinfo", 1764, 202, 4.81, "alloc" ], [ ".note.gnu.property", 1968, 64, 1.77, "alloc" ], [ ".note.gnu.build-id", 2032, 36, 4.25, "alloc" ], [ ".note.Linux", 2068, 48, 1.97, "alloc" ], [ ".orc_header", 2116, 20, 4.12, "alloc" ], [ ".retpoline_sites", 2136, 8, 0.0, "alloc" ], [ ".rela.retpoline_sites", 43640, 48, 1.01, "info_link" ], [ ".return_sites", 2144, 16, 0.0, "alloc" ], [ ".rela.return_sites", 43688, 96, 1.15, "info_link" ], [ ".call_sites", 2160, 96, 0.0, "alloc" ], [ ".rela.call_sites", 43784, 576, 1.42, "info_link" ], [ ".orc_unwind", 2256, 216, 2.81, "alloc" ], [ ".orc_unwind_ip", 2472, 144, 0.0, "alloc" ], [ ".rela.orc_unwind_ip", 44360, 864, 1.42, "info_link" ], [ "__bug_table", 2616, 24, 1.37, "write,alloc" ], [ ".rela__bug_table", 45224, 96, 0.99, "info_link" ], [ "__jump_table", 2640, 32, 0.0, "write,alloc" ], [ ".rela__jump_table", 45320, 144, 1.31, "info_link" ], [ "__patchable_function_entries", 2672, 40, 0.0, "write,alloc" ], [ ".rela__patchable_function_entries", 45464, 120, 0.93, "info_link" ], [ ".exit.data", 2712, 8, 0.0, "write,alloc" ], [ ".rela.exit.data", 45584, 24, 0.5, "info_link" ], [ ".init.data", 2720, 8, 0.0, "write,alloc" ], [ ".rela.init.data", 45608, 24, 0.5, "info_link" ], [ ".printk_index", 2728, 40, 0.0, "write,alloc" ], [ ".rela.printk_index", 45632, 120, 1.09, "info_link" ], [ "__dyndbg", 2768, 112, 0.28, "write,alloc" ], [ ".rela__dyndbg", 45752, 192, 1.16, "info_link" ], [ ".gnu.linkonce.this_module", 2880, 1280, 0.08, "write,alloc" ], [ ".rela.gnu.linkonce.this_module", 45944, 48, 1.05, "info_link" ], [ ".comment", 4160, 57, 3.72, "merge,strings" ], [ ".BTF", 4217, 34039, 3.64, "" ], [ ".symtab", 38256, 1968, 1.63, "" ], [ ".strtab", 40224, 1081, 4.7, "" ], [ ".shstrtab", 45992, 532, 4.34, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 3, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 82, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "comment_entry_count": 3, "program_header_count": 0, "stripped_with_symtab": 1, "comment_distinct_count": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 18, "stripped_metadata_section_count": 5 }, "file": { "size": 49984, "entropy": 3.48 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 4.07, "data_entropy": 0.11, "overlay_size": 3460, "string_count": 142, "overlay_ratio": 0.07, "overlay_entropy": 1.29, "entropy_variance": 2.32, "avg_string_length": 15.91, "max_string_length": 46, "peak_region_bytes": 2048, "code_to_data_ratio": 0.39, "peak_region_entropy": 4.35, "string_length_stddev": 8.42, "largest_section_ratio": 0.68, "sentence_string_count": 10, "sentence_string_ratio": 0.07, "high_entropy_string_count": 0 }, "sections": { "count": 54, "code_size": 967, "entropy_max": 4.81, "entropy_mean": 1.72, "name_entropy": 4.27, "writable_count": 11, "executable_count": 4, "nonstandard_count": 46, "executable_writable_count": 0 }, "dependencies": { "count": 0 } } }, "id": 1, "mol": "Md₂(BiHe)", "path": "pps-ldisc.ko.xz!!pps-ldisc.ko", "pid": 0, "risk": 3, "sha": "a3ada4f677783002aafe31bd21db90e6f50151081ac3e1d0e1b63761417b6465", "size": 49984, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 1772, 0 ] ] }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 5 ], "spans": [ [ 0, 25 ] ] } ], "type": "elf" } ], "rev": "b3dc8", "v": "8" } }