{ "ml": { "v": "7", "eng": "2.13.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000027100245, "rte": "az", "prob": 0.000027100245 }, { "cls": 0, "raw": 0.00004358093, "rte": "az/native", "prob": 0.00004358093 }, { "cls": 0, "raw": 0.000014543533, "rte": "az/elf", "prob": 0.000014543533 } ], "prob": 0.000027100245, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.000027100244551547803, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-10-26T21:20:06Z" }, "path": "loc", "raw": { "v": "8", "rev": "76e61", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000@$H+0rr91ap[IM00000kMy=:00000S5sRQ0000000000kMA+z4/!\u0026{9rm5V1][S61onA4kMy=:00000kMy=:00000kMy=:00000ncn?(00000ncn?", "ln": 0 }, { "b": "000000rr91000001onA46Awak0@@r3m]04:BGyz3(aZmT\u003cRD)B9MSxgUjDsrfkLuihz^76wg.RizGQgQCSmPkhz^4cz.r^B0rr910rr910rr9100000000000000000000000000000000000000000000000000000000rr915=.[i00000000000000000000lJv8^aohxw00000000000000000000uJp6aaohxw00000000000000000000zu6Upaohxw000000000000000000006951ja]?Py000000000000000000000af8Hx\u003c$NVB97\u0026hBye([x(i]TuT[s?uUj1\u0026vqGU7wDlKXvQ?3iz.r{Fm[=GvlTIP3ga\u003eA:m[=GvlTIP3gC/8snMnz\u003ewmY^)xk8BewPy:AlU{WUwMi8Ey?iPNuUsj]zEmEbvrcD%uJsC8r83.uwOkZ#By/F(o*--nzE(^QvR/PQ000620000000093000000rrf3a]?P", "ln": 892 }, { "b": "0000000000000000000000000000000000000000000000000000000000000rrf3B8\u003e+zw]8x]Bs}ADiX\u0026GLg5}pO0uhb58#]%s0SSi22\u003em(]h#\u0026{U0Rci\u0026pYHE}000006Awak000000EvSz0EbdR8W(@SKo2sY6Awak8#]%s:Nxfecia2C07m560000", "ln": 8144 }, { "b": "0000000000000000000000000000000000000000000000000000000000005d[)x00000ZZ{FC000000rr9100000a]?Py000003\u0026*nc0000001Ybg000004fcwd00000g.xY/0000082%Tp000005iZ6]000008VP\u003cr000002MK\u00268000008uo:q000007^m{1000008#]%s00000", "ln": 11744 }, { "b": "By/G1BzUw{y\u0026si5A@YMOwn+*/y\u0026r=\u003ey*QZ{z/P]avrD!{v@Dj6y?mZ1wg/LouTEtZuUsg[vQT7Wwoq:gB6\u0026u#CWC5%zFrD^A=LPluUaa%A^mT%A:-/@uU1p@zfVa*uUjs!zdN6+B.$#vuUKy(ByeD%A::l2wO#QgC(RV0v\u003eIl\u003ev@=W5zE=V#zVBcKmP8JDmpeFUl%\u003cp3uQO3(k$%{r0af86pe$T\u0026nma?:k$}", "ln": 13270 } ], "mol": "Md₃(BiBkHe)", "sha": "22478ddd350ab9db77a039a0f9e3274ea24f0e82c63d4fb34c5c4d44278d89ae", "path": "/tmp/postdoc-tmp-8lt2Hj/scan-GlOFJQ/loc", "risk": 3, "size": 15848, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/records::elf-dynamic-linker-metadata-absent", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metrics" } ], "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "value" } ], "id": "objectives/anti-static/obfuscation/payload/elf-struct::entry-not-in-text", "crit": "suspicious", "kind": "unless" } ], "type": "elf", "facts": { "imp": [ [ "", "libc_start_main" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "gmon_start__" ], [ "", "ITM_registerTMCloneTable" ], [ "", "cxa_finalize" ] ], "sec": [ [ ".note.gnu.build-id", 904, 36, 4.25, "alloc" ], [ ".interp", 940, 28, 3.94, "alloc" ], [ ".gnu.hash", 968, 28, 0.49, "alloc" ], [ ".dynsym", 1000, 144, 0.56, "alloc" ], [ ".dynstr", 1144, 136, 4.59, "alloc" ], [ ".gnu.version", 1280, 12, 0.82, "alloc" ], [ ".gnu.version_r", 1296, 48, 2.3, "alloc" ], [ ".rela.dyn", 1344, 216, 1.41, "alloc" ], [ ".init", 4096, 27, 4.24, "alloc,executable" ], [ ".text", 4128, 273, 5.1, "alloc,executable" ], [ ".fini", 4404, 13, 3.24, "alloc,executable" ], [ ".rodata", 8192, 22, 3.97, "alloc" ], [ ".eh_frame_hdr", 8216, 28, 2.91, "alloc" ], [ ".eh_frame", 8248, 84, 3.38, "alloc" ], [ ".sframe", 8336, 54, 2.5, "alloc" ], [ ".note.gnu.property", 8392, 64, 1.94, "alloc" ], [ ".note.ABI-tag", 8456, 32, 1.5, "alloc" ], [ ".init_array", 11792, 8, 1.06, "writable,alloc" ], [ ".fini_array", 11800, 8, 1.06, "writable,alloc" ], [ ".dynamic", 11808, 416, 1.39, "writable,alloc" ], [ ".got", 12224, 40, 0.0, "writable,alloc" ], [ ".got.plt", 12264, 24, 0.5, "writable,alloc" ], [ ".data", 12288, 24, 0.98, "writable,alloc" ], [ ".comment", 12312, 54, 3.83, "merge,strings" ], [ ".symtab", 12368, 864, 1.76, "" ], [ ".strtab", 13232, 480, 4.78, "" ], [ ".shstrtab", 13712, 276, 4.26, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 4128, "has_got": 1, "has_plt": 0, "has_note": 1, "relacount": 4, "has_symtab": 1, "note_count": 3, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 6, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "symtab_count": 36, "dynrela_count": 9, "little_endian": 1, "dt_flags_1_raw": 134217728, "pltreloc_count": 0, "build_id_length": 20, "dt_versym_count": 6, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "comment_entry_count": 2, "program_header_count": 15, "stripped_with_symtab": 1, "comment_distinct_count": 2, "qcom_mdt_header_layout": 0, "executable_segment_count": 1, "load_segment_max_file_size": 1560, "load_segment_max_memory_size": 1560, "absent_metadata_section_count": 5, "section_relocation_group_count": 1, "stripped_metadata_section_count": 5, "load_segments_without_member_bytes": 0 }, "file": { "size": 15848, "entropy": 1.42 }, "binary": { "is_pie": 1, "is_stripped": 0, "code_entropy": 4.95, "data_entropy": 1.21, "string_count": 64, "entropy_variance": 2.39, "avg_string_length": 12.88, "max_string_length": 38, "peak_region_bytes": 1024, "code_to_data_ratio": 0.38, "peak_region_entropy": 4.25, "string_length_stddev": 7.65, "largest_section_ratio": 0.05, "sentence_string_count": 2, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0, "full_symbol_table_absent_or_empty": 0 }, "imports": { "count": 5 }, "strings": { "truncated": 0, "retained_count": 64, "extracted_count": 64 }, "sections": { "count": 29, "code_size": 313, "avg_entropy": 2.47, "max_entropy": 5.1, "name_entropy": 4.22, "writable_count": 7, "executable_count": 3, "nonstandard_count": 6, "executable_writable_count": 0 }, "dependencies": { "count": 1 } } }, "traits": [ { "id": "metadata/binary/layout/stub::tiny-backed-load-segments", "conf": 0.9, "crit": 3, "desc": "ELF LOAD segments have minimal file backing" }, { "id": "metadata/build/artifact::mixed-toolchain-comments", "conf": 1.0, "crit": 3, "desc": "Multiple distinct toolchain comment strings" }, { "id": "metadata/hardening/mitigation::partial-relro", "conf": 0.8, "crit": 3, "desc": "Partial RELRO (GOT partially protected)" } ] } ] } }