{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000102857746, "rte": "az", "prob": 0.000102857746 } ], "prob": 0.000102857746, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00010285774624207988, "type": "xz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000005751848220825195, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T22:13:37Z" }, "path": "idma64.ko.xz", "raw": { "files": [ { "id": 0, "mol": "Md₂(BiHe)", "sha": "08c879d596e5159b519177e525ee97b20fe78b37d4d978138aaef92c054aef89", "path": "idma64.ko.xz", "risk": 3, "size": 15856, "type": "xz", "facts": { "metrics": { "file": { "size": 15856, "entropy": 7.99 }, "binary": { "peak_region_bytes": 15856, "peak_region_entropy": 7.86 } } }, "traits": [ { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 5 ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "from": [ { "file": 1 } ], "uses": [ 0, 1 ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "from": [ { "file": 1 } ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "from": [ { "file": 1 } ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 5 ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000.2jlk0000000000kMy=:002m:hukPmKDtM=KDtM=KDtM=KDtM=\u003eL$O.07-36Fb]SInqWc%^UT6M0@@riW$/+u002MFW$1FV0kWO0Ig#Mz000LsHLL%h07-3SFb]SI.qCPQH8p0)01VL]HYEFQnq\u003elk0rrbo\u00260tf{aoIPz54vaC0rr9\u003cI)m^k006\u003c[2-jo:0@@riW$fto002MFXQTX", "ln": 0 }, { "b": "0000000000003.Jv@co#wIm\u003elzGQgSwnL:bzddy5x(mMoxAg!Caz\u003eXbz/QaCw]zYjwmY*(A+PGmz/P[a0aZa:C4CYnfjX{dfjX{dwO#c{zE\u003eCl0aZa:C4CYnfjX{dfkj%lvkY}{v/MJ=03#Xec389\u002600a$Tx\u003eh6?hz+yl0000007H)HzE:\u003eYzGGB", "ln": 6495 }, { "b": "By/nvv@DiF0aYUZv@=p5BzkVhj.WqUk@HLxv@Dy0ay]IbC4CW]y?Wx\u003czGxwLm]h(4B$%5dwPhi#wof[Sx(XqEwnL-Px(n3kwO12c0b=jZwJ::rzdbsV0chT)AbPMbzE\u003e$l0cR{]zdd6\u003ev)8.5f/Q^vax80haAhvjwO(ydaz(4cuV*m5z^^f00000", "ln": 7128 } ], "depth": 1, "facts": { "sec": [ [ ".text", 64, 6125, 5.47, "alloc,executable" ], [ ".rela.text", 51304, 3192, 2.59, "info_link" ], [ ".init.text", 6192, 44, 2.4, "alloc,executable" ], [ ".rela.init.text", 54496, 96, 1.66, "info_link" ], [ ".exit.text", 6240, 32, 2.19, "alloc,executable" ], [ ".rela.exit.text", 54592, 48, 1.57, "info_link" ], [ ".text.unlikely", 6272, 65, 3.37, "alloc,executable" ], [ ".rela.text.unlikely", 54640, 144, 1.82, "info_link" ], [ "__mcount_loc", 6337, 168, 0.0, "alloc" ], [ ".rela__mcount_loc", 54784, 504, 1.51, "info_link" ], [ ".rodata.str1.1", 6505, 121, 4.65, "alloc,merge,strings" ], [ ".rodata.str1.8", 6632, 35, 4.29, "alloc,merge,strings" ], [ ".smp_locks", 6668, 12, 0.0, "alloc" ], [ ".rela.smp_locks", 55288, 72, 1.29, "info_link" ], [ ".rodata", 6680, 376, 1.28, "alloc" ], [ ".rela.rodata", 55360, 384, 1.3, "info_link" ], [ ".modinfo", 7056, 217, 4.89, "alloc" ], [ ".note.gnu.property", 7280, 64, 1.77, "alloc" ], [ ".note.gnu.build-id", 7344, 36, 4.19, "alloc" ], [ ".note.Linux", 7380, 48, 1.97, "alloc" ], [ ".orc_header", 7428, 20, 4.12, "alloc" ], [ ".return_sites", 7448, 92, 0.0, "alloc" ], [ ".rela.return_sites", 55744, 552, 1.64, "info_link" ], [ ".call_sites", 7540, 348, 0.0, "alloc" ], [ ".rela.call_sites", 56296, 2088, 1.81, "info_link" ], [ ".orc_unwind", 7888, 1224, 2.95, "alloc" ], [ ".orc_unwind_ip", 9112, 816, 0.0, "alloc" ], [ ".rela.orc_unwind_ip", 58384, 4896, 1.92, "info_link" ], [ "__bug_table", 9928, 24, 1.22, "write,alloc" ], [ ".rela__bug_table", 63280, 96, 1.11, "info_link" ], [ "__jump_table", 9952, 32, 0.0, "write,alloc" ], [ ".rela__jump_table", 63376, 144, 1.37, "info_link" ], [ "__patchable_function_entries", 9984, 176, 0.0, "write,alloc" ], [ ".rela__patchable_function_entries", 63520, 528, 1.42, "info_link" ], [ ".codetag.alloc_tags", 10160, 80, 0.19, "write,alloc" ], [ ".rela.codetag.alloc_tags", 64048, 144, 1.2, "info_link" ], [ ".data", 10240, 200, 0.0, "write,alloc" ], [ ".rela.data", 64192, 96, 1.19, "info_link" ], [ ".exit.data", 10440, 8, 0.0, "write,alloc" ], [ ".rela.exit.data", 64288, 24, 0.5, "info_link" ], [ ".init.data", 10448, 8, 0.0, "write,alloc" ], [ ".rela.init.data", 64312, 24, 0.5, "info_link" ], [ ".printk_index", 10456, 16, 0.0, "write,alloc" ], [ ".rela.printk_index", 64336, 48, 0.93, "info_link" ], [ ".gnu.linkonce.this_module", 10472, 1280, 0.06, "write,alloc" ], [ ".rela.gnu.linkonce.this_module", 64384, 48, 1.05, "info_link" ], [ ".comment", 11752, 57, 3.72, "merge,strings" ], [ ".BTF", 11809, 34273, 3.68, "" ], [ ".symtab", 46088, 3216, 1.78, "" ], [ ".strtab", 49304, 1998, 4.62, "" ], [ ".shstrtab", 64432, 528, 4.33, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 3, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 134, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "comment_entry_count": 3, "program_header_count": 0, "stripped_with_symtab": 1, "comment_distinct_count": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 19, "stripped_metadata_section_count": 5 }, "file": { "size": 68416, "entropy": 3.68 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 5.41, "data_entropy": 0.06, "overlay_size": 3456, "string_count": 189, "overlay_ratio": 0.05, "overlay_entropy": 1.32, "entropy_variance": 2.43, "avg_string_length": 17.92, "max_string_length": 58, "peak_region_bytes": 2048, "code_to_data_ratio": 0.77, "peak_region_entropy": 5.66, "string_length_stddev": 8.04, "largest_section_ratio": 0.5, "sentence_string_count": 6, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0 }, "sections": { "count": 54, "code_size": 6266, "entropy_max": 5.47, "entropy_mean": 1.76, "name_entropy": 4.27, "writable_count": 10, "executable_count": 4, "nonstandard_count": 46, "executable_writable_count": 0 }, "dependencies": { "count": 0 } } }, "id": 1, "mol": "Md₂(BiHe)", "path": "idma64.ko.xz!!idma64.ko", "pid": 0, "risk": 3, "sha": "abc74a716e1afd37e7a356e11614b9d51d7da9fe0a3e4cb4bfe3aeb1dd583631", "size": 68416, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 7176, 0 ] ] }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 5 ], "spans": [ [ 0, 25 ] ] } ], "type": "elf" } ], "rev": "b3dc8", "v": "8" } }