{ "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.0000141859055, "rte": "az", "prob": 0.0000141859055 }, { "cls": 0, "raw": 0.000060965616, "rte": "az/native", "prob": 0.000060965616 }, { "cls": 0, "raw": 0.000018944344, "rte": "az/elf", "prob": 0.000018944344 } ], "prob": 0.0000141859055, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.000014185905456542969, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-30T23:08:02Z" }, "path": "paged_searches.so", "raw": { "v": "8", "rev": "c1ea9", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000%2!g0rr910000000000kMy=:00000Xb=Qg0000000000kMA+z2()i\u003c8#{]T0rr911POJ5000000000000000000000000000000:rgD.00000:rgD", "ln": 0 }, { "b": "{+Osm000000SSi2df6tF0rr911][S60dU4I0rr93df6tFdGxCG83(ZdpADXB000000000000000000000000000000000000@@YeXdnMt000000000000000000000@%bq00062000000000000000uJycb5=.[i000000000000000000005c8Xgaohx", "ln": 632 }, { "b": "69wjm5DIw300000000000000000000H5}tP5=-vvA2FYR00000Fb/MH000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0bMgPuU%Z(B.\u003eR@xjVf(Ab]T", "ln": 1664 }, { "b": "Ck#C\u0026vQAO!x(4r!B7F^2v}Yj\u0026wPmY^wmw[\u0026vqf/-y?d0ZzE[6muUKy(Bo2VPB97\u00262yHpN+yHpWZx(0==wmw[^wPq\u003c7B97=1z/fa^y?d0Zzf6t%v}YB-yHqd8A+PA7uTX4#A+P09By+C*wmw[WzFsi1zeS%cy?iP/BAg(dz#:Y+vQBd!xk8BewPzc{z!a0bwDl^[wmY!40af8BAb]VgBy[(\u0026xLNP:x\u003c$)?vLh.ue\u00260Ayx\u003c#f)y\u0026131e]$}-g5#c8vQ?3iz.r{Fy?bblx(n6reN-7dv}W+Se=", "ln": 2247 }, { "b": "e?]7/l}6Blk#7=ze\u00262gmf!)36mPh/:fKEjplnpn@f\u003c^:PnMFbRmpe$Vo*RbCm[=GvlTIP3f/G8ik$\u003c%FlTIP3fFk9XoHIiOfFkvrf/n@8l{+lme\u0026+KsfAq7M0000000ri400Ao700ri800ri800ri900ri600ri600ri600Ju600ria00Jua00SA900SA", "ln": 2509 }, { "b": "[bJEn5Sf9O5jeHwaoAUo[bJEn5SPxS5mN+:aoAUo[bJEn5T2VW5q03baoAUo[bJEn5TC@.5tzpHaoAUo[bJEn5T(k=5w*L(aoAUo[bJEn5UqI*5Ak*maoAUo[bJEn5U.!\u003e5ct1SaoAUo[bJEn5Ve7]5f:o1aoAUo[bJEn5VOv%5jeKxaoAUo[bJEn5W1U15mN!+aoAUo[bJEn5WB}5", "ln": 4272 }, { "b": "zGG]qy-)tgz/3R9aAhvjC4\u003e(qB0bBgxjSRpvS==nBzbxfaARsmwGU(eay/tcBAhqoaA}mnaAz4nB-Iwhwfy{M00000y?Wuiy?d0dzeS%cy?mVvAa9x\u003cwm6y?vrb\u003c\u003e", "ln": 7264 }, { "b": "000000000000000000000000000000000000000000000000000000000000022tj00000Tp+Hk00000p-YPp00000\u00261(v[00000aqj.P00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000rr9100000-Subu000000rr9100000^GfyG000000rr9100000\u0026q@#V000000rr9100000(Jd4^000004GDFe000000rSr4000003\u0026*nc00000XdnMt000004fcwd00000", "ln": 64392 }, { "b": "xF}X0y?W^fCR9MCBUvMBvR/N:ga)9GvS=q-Bs\u0026NYj.Re\u0026IYoNJWx*](JE$U#hzWm6f/S=OwI(qOi5C87i5Lk4wI#m#wmWUTg=e/7gC.3Kh83T[wNY^{00000kG11q04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaK6iC(PEmz//LyxkR\u0026AvS=y3wg.Ia04}]4BUmuoB7+Lawo\u00266lD2iKlwo\u00266lBAdvlxkR\u0026AC4CYnx(v\u003e?", "ln": 65592 } ], "mol": "Md₃(BiBkHe)", "sha": "14f0e01fff1c8f0e93cfba65de0ea2cbc82a6897a967050d00b19507a1ec4606", "path": "paged_searches.so", "risk": 3, "size": 67768, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "SAMBA_4.22.11_DEBIAN_4.22.11_DFSG_0_DEB13U1_PRIVATE_SAMBA" ], [ "ldb_init_module" ] ], "imp": [ [ "", "ldb_request_get_control" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "ldb_req_set_location" ], [ "", "ldb_module_send_entry" ], [ "", "ldb_request_add_control" ], [ "", "cxa_finalize" ], [ "", "ldb_next_init" ], [ "", "stderr" ], [ "", "ldb_module_send_referral" ], [ "", "talloc_strdup" ], [ "", "ldb_module_set_private" ], [ "", "ldb_reply_get_control" ], [ "", "ldb_request_done" ], [ "", "ldb_module_done" ], [ "", "ldb_set_errstring" ], [ "", "ldb_build_search_req_ex" ], [ "", "stack_chk_fail" ], [ "", "gmon_start__" ], [ "", "ldb_build_search_req" ], [ "", "stack_chk_guard" ], [ "", "fprintf_chk" ], [ "", "strcmp" ], [ "", "talloc_free" ], [ "", "ldb_dn_new" ], [ "", "talloc_steal_loc" ], [ "", "ldb_next_request" ], [ "", "talloc_memdup" ], [ "", "ldb_module_get_private" ], [ "", "ldb_error_at" ], [ "", "ldb_msg_check_string_attribute" ], [ "", "ldb_register_module" ], [ "", "talloc_named_const" ], [ "", "talloc_zero" ], [ "", "ITM_registerTMCloneTable" ], [ "", "talloc_check_name" ], [ "", "talloc_realloc_array" ], [ "", "ldb_module_get_ctx" ], [ "", "ldb_wait" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.69, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.25, "alloc" ], [ ".gnu.hash", 640, 40, 2.6, "alloc" ], [ ".dynsym", 680, 1032, 1.04, "alloc" ], [ ".dynstr", 1712, 891, 4.77, "alloc" ], [ ".gnu.version", 2604, 86, 2.02, "alloc" ], [ ".gnu.version_d", 2696, 56, 2.25, "alloc" ], [ ".gnu.version_r", 2752, 144, 2.76, "alloc" ], [ ".rela.dyn", 2896, 312, 1.85, "alloc" ], [ ".rela.plt", 3208, 816, 1.89, "alloc,info_link" ], [ ".init", 4024, 28, 3.9, "alloc,executable" ], [ ".plt", 4064, 576, 4.54, "alloc,executable" ], [ ".text", 4640, 2256, 5.88, "alloc,executable" ], [ ".fini", 6896, 24, 3.72, "alloc,executable" ], [ ".rodata", 6920, 864, 4.78, "alloc" ], [ ".eh_frame_hdr", 7784, 84, 3.61, "alloc" ], [ ".eh_frame", 7872, 520, 5.02, "alloc" ], [ ".init_array", 64440, 8, 0.54, "write,alloc" ], [ ".fini_array", 64448, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 64456, 136, 0.37, "write,alloc" ], [ ".dynamic", 64592, 592, 1.64, "write,alloc" ], [ ".got", 65184, 352, 0.98, "write,alloc" ], [ ".data", 65536, 32, 0.6, "write,alloc" ], [ ".gnu_debugaltlink", 65568, 72, 4.94, "" ], [ ".gnu_debuglink", 65640, 52, 4.29, "" ], [ ".shstrtab", 65692, 283, 4.25, "" ] ], "tgt": [ "entry0", "fcn.00001240", "sym.imp.__cxa_finalize", "sym.imp.__fprintf_chk", "sym.imp.__stack_chk_fail", "sym.imp._talloc_free", "sym.imp._talloc_memdup", "sym.imp._talloc_realloc_array", "sym.imp._talloc_steal_loc", "sym.imp._talloc_zero", "sym.imp.ldb_build_search_req", "sym.imp.ldb_build_search_req_ex", "sym.imp.ldb_dn_new", "sym.imp.ldb_error_at", "sym.imp.ldb_module_get_ctx", "sym.imp.ldb_module_get_private", "sym.imp.ldb_module_send_entry", "sym.imp.ldb_module_send_referral", "sym.imp.ldb_module_set_private", "sym.imp.ldb_msg_check_string_attribute", "sym.imp.ldb_next_init", "sym.imp.ldb_next_request", "sym.imp.ldb_reply_get_control", "sym.imp.ldb_req_set_location", "sym.imp.ldb_request_add_control", "sym.imp.ldb_request_get_control", "sym.imp.ldb_set_errstring", "sym.imp.ldb_wait", "sym.imp.strcmp", "sym.imp.talloc_check_name", "sym.imp.talloc_named_const", "sym.imp.talloc_strdup" ], "funcs": [ [ "fcn.00000fbc", 4028 ], [ "fcn.00000fe4", 4068 ], [ "sym.imp.ldb_request_get_control", 4096 ], [ "sym.imp.ldb_req_set_location", 4112 ], [ "sym.imp.ldb_module_send_entry", 4128 ], [ "sym.imp.ldb_request_add_control", 4144 ], [ "sym.imp.__cxa_finalize", 4160 ], [ "sym.imp.ldb_next_init", 4176 ], [ "sym.imp.ldb_module_send_referral", 4192 ], [ "sym.imp.talloc_strdup", 4208 ], [ "sym.imp.ldb_module_set_private", 4224 ], [ "sym.imp.ldb_reply_get_control", 4240 ], [ "sym.imp.ldb_request_done", 4256 ], [ "sym.imp.ldb_module_done", 4272 ], [ "sym.imp.ldb_set_errstring", 4288 ], [ "sym.imp.ldb_build_search_req_ex", 4304 ], [ "sym.imp.__stack_chk_fail", 4320 ], [ "sym.imp.ldb_build_search_req", 4352 ], [ "sym.imp.__fprintf_chk", 4368 ], [ "sym.imp.strcmp", 4384 ], [ "sym.imp._talloc_free", 4400 ], [ "sym.imp.ldb_dn_new", 4416 ], [ "sym.imp._talloc_steal_loc", 4432 ], [ "sym.imp.ldb_next_request", 4448 ], [ "sym.imp._talloc_memdup", 4464 ], [ "sym.imp.ldb_module_get_private", 4480 ], [ "sym.imp.ldb_error_at", 4496 ], [ "sym.imp.ldb_msg_check_string_attribute", 4512 ], [ "sym.imp.ldb_register_module", 4528 ], [ "sym.imp.talloc_named_const", 4544 ], [ "sym.imp._talloc_zero", 4560 ], [ "sym.imp.talloc_check_name", 4576 ], [ "sym.imp._talloc_realloc_array", 4592 ], [ "sym.imp.ldb_module_get_ctx", 4608 ], [ "sym.imp.ldb_wait", 4624 ], [ "entry0", 4640 ], [ "fcn.00001240", 4672 ], [ "entry.fini0", 4780 ], [ "entry.init0", 4868 ], [ "fcn.00001324", 4900 ], [ "fcn.000014c4", 5316 ], [ "fcn.000017e4", 6116 ], [ "fcn.000019a4", 6564 ], [ "sym.ldb_init_module", 6768 ], [ "fcn.00001af4", 6900 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 7, "note_count": 2, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 43, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 13, "has_debuglink": 1, "little_endian": 1, "dt_flags_1_raw": 1, "pltreloc_count": 34, "build_id_length": 20, "dt_versym_count": 43, "has_aarch64_bti": 1, "has_aarch64_pac": 1, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "fortify_source_count": 1, "program_header_count": 9, "stripped_with_symtab": 0, "has_direct_loader_dep": 1, "executable_segment_count": 1, "load_segment_max_file_size": 8392, "load_segment_max_memory_size": 8392, "section_relocation_group_count": 2, "stripped_metadata_section_count": 8 }, "file": { "size": 67768, "entropy": 1.05 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 1, "basic_blocks": 128, "code_entropy": 5.57, "data_entropy": 1.24, "overlay_size": 1793, "string_count": 95, "overlay_ratio": 0.03, "avg_complexity": 2.22, "max_complexity": 23, "huge_func_count": 0, "leaf_func_count": 37, "overlay_entropy": 1.46, "tiny_func_count": 36, "avg_basic_blocks": 2.84, "entropy_variance": 2.66, "avg_string_length": 19.78, "max_string_length": 106, "peak_region_bytes": 4096, "code_to_data_ratio": 0.72, "peak_region_entropy": 5.95, "string_length_stddev": 14.83, "largest_section_ratio": 0.03, "sentence_string_count": 4, "sentence_string_ratio": 0.04, "high_entropy_string_count": 0 }, "exports": { "count": 2, "api_count": 2 }, "imports": { "count": 38 }, "strings": { "truncated": 0, "retained_count": 95, "extracted_count": 95 }, "sections": { "count": 28, "code_size": 2884, "entropy_max": 5.88, "entropy_mean": 2.89, "name_entropy": 4.2, "writable_count": 7, "executable_count": 4, "nonstandard_count": 7, "executable_writable_count": 0 }, "functions": { "count": 45 }, "dependencies": { "count": 4 } } }, "traits": [ { "id": "metadata/binary/linking/runtime::dynamic-loader-needed", "conf": 0.7, "crit": 3, "desc": "ELF needs the Linux dynamic loader" }, { "id": "metadata/binary/linking/runtime::library-loader-dep", "conf": 1.0, "crit": 3, "desc": "ELF directly depends on the dynamic loader" }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" } ] } ] } }