{ "ml": { "v": "7", "eng": "2.2.0-rc.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00007120768, "rte": "az", "prob": 0.00007120768 } ], "prob": 0.00007120768, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00007120767986634746, "type": "apk_alpine" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000014692544937133789, "type": "elf" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000010838110938493628, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-06-26T05:13:28Z" }, "path": "boost1.84-fiber-1.84.0-r6.apk", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8000000T3{24[J!\u003enkh=HeH]u63?!Yp^*DIa!jX1m:JNrco?u{f=2H?Deg@xa3GU*X", "n": [ { "c": 2, "d": "Binary is not digitally signed", "i": "metadata/unsigned", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 } ], "mol": "O(Er)", "sha": "22bef15f27516686ba857783d0ca6fffe894a31dd1fbf4252ef2ebb4f9d5f47d", "path": "boost1.84-fiber-1.84.0-r6.apk", "risk": 2, "size": 32169, "type": "apk_alpine", "facts": { "metrics": { "file": { "size": 32169.0, "entropy": 7.98, "size_bytes": 32169.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.98, "peak_region_bytes": 30720.0, "peak_region_entropy": 7.82 } } }, "traits": [ { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit", "crit": 2, "desc": "Characteristic libc export __cxa_atexit", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "from": [ { "file": 2 } ] }, { "id": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287", "conf": 0.8999999761581421, "crit": 3, "desc": "High export-count binary context", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000p+.$J0000000000kMA+z3\u0026", "n": [ { "c": 3, "d": "Patterns associated with legitimate injectors to reduce FPs", "i": "objectives/evasion/process/injection/toolkit::legitimate-injector-patterns", "o": 0, "z": 22, "cf": 1.0 } ], "ln": 0 }, { "b": "A-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0af8zwPzu{x(!xcA:JB0vqPN.x(mK30af8NwOkZ#", "n": [ { "c": 3, "d": "Terminal socket exec helper context", "i": "micro-behaviors/process/fd/dup::unix-terminal-socket-exec-benign-context", "o": 7733, "z": 12, "cf": 0.949999988079071 } ], "ln": 7717 }, { "b": "z!0MOq/\u003c)lB-.htmf3X4B97\u00262yHpN+yHpWZx(0=Rt2XA}hdyGxB96rLx\u003c$T]B2mrwxkY!sy?EWbx(\u003c", "n": [ { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 8744, "z": 14, "cf": 0.8999999761581421 } ], "ln": 8728 }, { "b": "xk.*8BzbIW0ae]er.+w6uTEq/CWU5}B$\u003eZguTEqVvrlG%BA}?puUKy\u0026z::Ukt2XA}hdyGxB94", "n": [ { "c": 3, "d": "Benign network-capable library context", "i": "objectives/supply-chain/trojanized/backdoor::benign-network-library-context", "o": 8836, "z": 10, "cf": 0.8999999761581421 } ], "ln": 8820 }, { "b": "zFa68uUam#z/OVEv/P\u003eyv%zA?vru79x(\u003ctZuT[s?uT^OVx(mo/vru0)0af8yCWT%1wPRQaz*8", "n": [ { "c": 3, "d": "Benign socket shell helper context", "i": "micro-behaviors/process/fd/dup::posix-fd-redirect-shell-benign-context", "o": 9649, "z": 10, "cf": 0.9399999976158142 } ], "ln": 9633 }, { "b": "z/f5@uT)IXy**^?wDl7ABzM29xjVf(vpS[?0ae]er.+IYz/oYshFcVjwPz\u0026GvqGN{f/a2(A+/36", "n": [ { "c": 2, "d": "Imports __tls_get_addr from the dynamic loader", "i": "metadata/binary/linking/runtime::imports-tls-get-addr", "o": 10028, "z": 12, "cf": 1.0 } ], "ln": 10012 }, { "b": "uUj1\u0026x*)gBuS{xIgbicyxkzo\u003ev%Al9vrlH3A=+V2vqfKOojIWmfKE:juJsCuv%zA?v/", "n": [ { "c": 2, "d": "libc version string pattern", "i": "micro-behaviors/dylib/library/libc::libc-version-string", "o": 10595, "z": 5, "cf": 0.800000011920929 } ], "ln": 10579 }, { "b": "zGGDmBs}SMe?[$rg+HDZy?Wv1ByX(id\u003eU)Ye\u0026AYCx\u003c$Z+v{:pfB8JV=0bMvUv\u003eIRvB8iBMi5Ub4g+J\u0026/e?)uxx\u003c$K\u0026z/Z2cw[+Z=AXqAKe?[$rg+HDZm/", "n": [ { "c": 3, "d": "Architecture detection strings", "i": "objectives/discovery/host/software::arch-detection", "o": 17700, "z": 6, "cf": 0.5 }, { "c": 2, "d": "GNU libstdc++ stdlib", "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref", "o": 17661, "z": 12, "cf": 0.8999999761581421 } ], "ln": 17645 }, { "b": "y?bbiwb[k{zGNNBvrl8Ze[xlBB9RQ5e[xlBB98B5e[Y6Ae{p/DB7]Mg04}]4BUm\u0026GA=U@kzEmz:e]\u003eI", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/static::elf-dynstr-section-name", "o": 77959, "z": 7, "cf": 0.8999999761581421 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/static::elf-dynsym-section-name", "o": 77951, "z": 7, "cf": 0.8999999761581421 } ], "ln": 77935 }, { "b": "vr?\u00269wmoN*e]\u003eJte]\u003e\u003ege[xlBvqPZ*04}]5Bo0}7vrt]Te[e)y04}=1zeA\u003c4Bn#pv00000", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/static::elf-dynamic-section-name", "o": 78126, "z": 8, "cf": 0.8999999761581421 } ], "ln": 78110 } ], "depth": 1, "facts": { "exp": [ [ "ZN5boost6fibers7barrierC2Em" ], [ "ZN5boost6fibers4algo11round_robin13suspend_untilERKNSt6chrono10time_pointINS3_3_V212steady_clockENS3_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "ZN5boost6fibers9scheduler19attach_main_contextEPNS0_7contextE" ], [ "ZN5boost6fibers7context15suspend_with_ccEv" ], [ "ZNSt8_Rb_treeImSt4pairIKmN5boost6fibers7context8fss_dataEESt10_Select1stIS6_ESt4lessImESaIS6_EE22_M_emplace_hint_uniqueIJS0_ImS5_EEEESt17_Rb_tree_iteratorIS6_ESt23_Rb_tree_const_iteratorIS6_EDpOT_" ], [ "ZN5boost6fibers9scheduler9terminateERSt11unique_lockINS0_6detail13spinlock_ttasEEPNS0_7contextE" ], [ "ZTVN5boost6fibers4algo11shared_workE" ], [ "ZN5boost6fibers9scheduler21detach_worker_contextEPNS0_7contextE" ], [ "ZN5boost6fibers4algo13work_stealing6notifyEv" ], [ "ZN5boost6fibers21recursive_timed_mutex4lockEv" ], [ "ZN5boost6fibers7contextD0Ev" ], [ "ZNK5boost6fibers10wait_queue5emptyEv" ], [ "ZN5boost6fibers11timed_mutex6unlockEv" ], [ "ZN5boost6fibers10wait_queue10notify_oneEv" ], [ "ZN5boost6fibers5mutex8try_lockEv" ], [ "ZN5boost6fibers7context7suspendERSt11unique_lockINS0_6detail13spinlock_ttasEE" ], [ "ZTSN5boost6fibers4algo11shared_workE" ], [ "ZN5boost6fibers4algo11round_robin9pick_nextEv" ], [ "ZN5boost6fibers9scheduler8dispatchEv" ], [ "ZN5boost6fibers11timed_mutex15try_lock_until_ERKNSt6chrono10time_pointINS2_3_V212steady_clockENS2_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "ZN5boost6fibers10wait_queue16suspend_and_waitERSt11unique_lockINS0_6detail13spinlock_ttasEEPNS0_7contextE" ], [ "ZN5boost6fibers7context10wait_untilERKNSt6chrono10time_pointINS2_3_V212steady_clockENS2_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "ZN5boost6fibers11timed_mutex8try_lockEv" ], [ "ZN5boost6fibers21recursive_timed_mutex6unlockEv" ], [ "ZN5boost6fibers15recursive_mutex6unlockEv" ], [ "ZTIN5boost6fibers7contextE" ], [ "ZN5boost6fibers9scheduler19release_terminated_Ev" ], [ "ZN5boost6fibers9schedulerC2ENS_13intrusive_ptrINS0_4algo9algorithmEEE" ], [ "ZN5boost6fibers4algo13work_stealingC2Ejb" ], [ "ZN5boost6fibers4algo13work_stealing13suspend_untilERKNSt6chrono10time_pointINS3_3_V212steady_clockENS3_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "init" ], [ "ZNK5boost6fibers7context16worker_is_linkedEv" ], [ "ZN5boost6fibers9scheduler8set_algoENS_13intrusive_ptrINS0_4algo9algorithmEEE" ], [ "ZN5boost6fibers7context6activeEv" ], [ "ZN5boost6fibers22condition_variable_any10notify_oneEv" ], [ "ZN5boost6fibers7context5yieldEv" ], [ "ZTIN5boost6fibers4algo9algorithmE" ], [ "ZTVN5boost6fibers4algo11round_robinE" ], [ "ZN5boost6fibers7context12sleep_unlinkEv" ], [ "ZTIN5boost6fibers9schedulerE" ], [ "ZN5boost6fibers7context6resumeEv" ], [ "ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEmmPKcm" ], [ "ZN5boost6fibers9schedulerC1ENS_13intrusive_ptrINS0_4algo9algorithmEEE" ], [ "ZN5boost6fibers9schedulerD2Ev" ], [ "ZTSN5boost6fibers4algo30algorithm_with_properties_baseE" ], [ "fini" ], [ "ZN5boost6fibers7context9terminateEv" ], [ "ZN5boost6fibers9scheduler20schedule_from_remoteEPNS0_7contextE" ], [ "ZN5boost6fibers7context13worker_unlinkEv" ], [ "ZNK5boost6fibers4algo11round_robin16has_ready_fibersEv" ], [ "ZN5boost6fibers7context6attachEPS1_" ], [ "ZN5boost6fibers4algo13work_stealing11schedulers_E" ], [ "ZTSN5boost6fibers9schedulerE" ], [ "ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE15_M_replace_coldEPcmPKcmm" ], [ "ZN5boost6fibers7context7suspendEv" ], [ "ZN5boost6fibers7context10wait_untilERKNSt6chrono10time_pointINS2_3_V212steady_clockENS2_8durationIlSt5ratioILl1ELl1000000000EEEEEERSt11unique_lockINS0_6detail13spinlock_ttasEEONS0_5wakerE" ], [ "ZN5boost6fibers15recursive_mutex8try_lockEv" ], [ "ZN5boost6fibers5fiber4joinEv" ], [ "ZN5boost6fibers9scheduler7suspendERSt11unique_lockINS0_6detail13spinlock_ttasEE" ], [ "ZN5boost6fibers9scheduler21attach_worker_contextEPNS0_7contextE" ], [ "ZN5boost6fibers4algo11shared_work9pick_nextEv" ], [ "ZN5boost6fibers4algo11shared_work8awakenedEPNS0_7contextE" ], [ "ZN5boost6fibers4algo30algorithm_with_properties_base14get_propertiesEPNS0_7contextE" ], [ "ZN5boost6fibers15future_categoryEv" ], [ "ZN5boost6fibers9schedulerD0Ev" ], [ "ZN5boost6fibers7context6resumeERSt11unique_lockINS0_6detail13spinlock_ttasEE" ], [ "ZN5boost6fibers7contextD1Ev" ], [ "ZNK5boost6fibers7context6get_idEv" ], [ "ZTIN5boost6fibers4algo11shared_workE" ], [ "ZN5boost6fibers7context14set_propertiesEPNS0_16fiber_propertiesE" ], [ "ZN5boost6fibers7context4wakeEm" ], [ "ZN5boost6fibers9scheduler10wait_untilEPNS0_7contextERKNSt6chrono10time_pointINS4_3_V212steady_clockENS4_8durationIlSt5ratioILl1ELl1000000000EEEEEERSt11unique_lockINS0_6detail13spinlock_ttasEEONS0_5wakerE" ], [ "ZN5boost6fibers4algo13work_stealing8counter_E" ], [ "ZN5boost6fibers21recursive_timed_mutex8try_lockEv" ], [ "ZN5boost6fibers5fiber6detachEv" ], [ "ZN5boost6fibers5fiber6start_Ev" ], [ "ZNK5boost6fibers9scheduler16has_ready_fibersEv" ], [ "ZNK5boost6fibers7context15sleep_is_linkedEv" ], [ "ZNK5boost6fibers7context22remote_ready_is_linkedEv" ], [ "ZTVN5boost6fibers4algo13work_stealingE" ], [ "ZN5boost6fibers4algo13work_stealing8awakenedEPNS0_7contextE" ], [ "ZN5boost6fibers7barrierC1Em" ], [ "ZN5boost6fibers7barrier4waitEv" ], [ "ZN5boost6fibers21recursive_timed_mutex15try_lock_until_ERKNSt6chrono10time_pointINS2_3_V212steady_clockENS2_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "ZN5boost6fibers4algo11round_robin6notifyEv" ], [ "ZZNSt9once_flag18_Prepare_executionC4IZSt9call_onceIPFvjRSt6vectorIN5boost13intrusive_ptrINS4_6fibers4algo13work_stealingEEESaIS9_EEEJRjSt17reference_wrapperISB_EEEvRS_OT_DpOT0_EUlvE_EERSJ_ENUlvE_4_FUNEv" ], [ "ZNK5boost6fibers7context15ready_is_linkedEv" ], [ "ZN5boost6fibers4algo30algorithm_with_properties_base14set_propertiesEPNS0_7contextEPNS0_16fiber_propertiesE" ], [ "ZN5boost6fibers7context12reset_activeEv" ], [ "ZN5boost6fibers9scheduler19remote_ready2ready_Ev" ], [ "ZN5boost6fibers9scheduler5yieldEPNS0_7contextE" ], [ "ZN5boost6fibers7context6resumeEPS1_" ], [ "ZTSN5boost6fibers4algo9algorithmE" ], [ "ZNSt5dequeIPN5boost6fibers7contextESaIS3_EE17_M_reallocate_mapEmb" ], [ "ZNK5boost6fibers5waker4wakeEv" ], [ "ZN5boost6fibers4algo13work_stealingC1Ejb" ], [ "ZTSN5boost6fibers4algo13work_stealingE" ], [ "ZN5boost6fibers7context12set_fss_dataEPKvRKNS_13intrusive_ptrINS0_6detail20fss_cleanup_functionEEEPvb" ], [ "ZN5boost6fibers5mutex6unlockEv" ], [ "ZN5boost6fibers9scheduler25attach_dispatcher_contextENS_13intrusive_ptrINS0_7contextEEE" ], [ "ZTIN5boost6fibers4algo11round_robinE" ], [ "ZTSN5boost6fibers6detail32polymorphic_stack_allocator_baseE" ], [ "ZTIN5boost6fibers4algo30algorithm_with_properties_baseE" ], [ "ZTIN5boost6fibers4algo13work_stealingE" ], [ "ZN5boost6fibers10wait_queue10notify_allEv" ], [ "ZTSN5boost6fibers7contextE" ], [ "ZN5boost6fibers7context17initialize_threadENS_13intrusive_ptrINS0_4algo9algorithmEEEONS0_23stack_allocator_wrapperE" ], [ "ZN5boost6fibers4algo13work_stealing5init_EjRSt6vectorINS_13intrusive_ptrIS2_EESaIS5_EE" ], [ "ZN5boost6fibers4algo11shared_work7rqueue_E" ], [ "ZN5boost6fibers4algo13work_stealing9pick_nextEv" ], [ "ZN5boost6fibers9scheduler7suspendEv" ], [ "ZN5boost6fibers4algo11shared_work6notifyEv" ], [ "ZN5boost6fibers15recursive_mutex4lockEv" ], [ "ZTIN5boost6fibers6detail32polymorphic_stack_allocator_baseE" ], [ "ZN5boost6fibers4algo11shared_work13suspend_untilERKNSt6chrono10time_pointINS3_3_V212steady_clockENS3_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "ZN5boost6fibers10wait_queue22suspend_and_wait_untilERSt11unique_lockINS0_6detail13spinlock_ttasEEPNS0_7contextERKNSt6chrono10time_pointINS9_3_V212steady_clockENS9_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "ZN5boost6fibers5mutex4lockEv" ], [ "ZN5boost6fibers4algo11shared_work11rqueue_mtx_E" ], [ "ZNK5boost6fibers7context12get_fss_dataEPKv" ], [ "ZNK5boost6fibers7context20terminated_is_linkedEv" ], [ "ZN5boost6fibers7context8scheduleEPS1_" ], [ "ZN5boost6fibers9scheduler10wait_untilEPNS0_7contextERKNSt6chrono10time_pointINS4_3_V212steady_clockENS4_8durationIlSt5ratioILl1ELl1000000000EEEEEE" ], [ "ZN5boost6fibers9schedulerD1Ev" ], [ "ZN5boost6fibers7contextD2Ev" ], [ "ZN5boost6fibers7context12ready_unlinkEv" ], [ "ZN5boost6fibers11timed_mutex4lockEv" ], [ "ZN5boost6fibers7context4joinEv" ], [ "ZN5boost6fibers16fiber_properties6notifyEv" ], [ "ZN5boost6fibers22condition_variable_any10notify_allEv" ], [ "ZTSN5boost6fibers4algo11round_robinE" ], [ "ZTVN5boost6fibers7contextE" ], [ "ZTVN5boost6fibers9schedulerE" ], [ "ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_mutateEmmPKcm" ], [ "ZN5boost6fibers9scheduler12sleep2ready_Ev" ], [ "ZN5boost6fibers9scheduler8scheduleEPNS0_7contextE" ], [ "ZN5boost6fibers4algo11round_robin8awakenedEPNS0_7contextE" ], [ "ZN5boost6fibers7context6detachEv" ] ], "imp": [ [ "", "once_proxy" ], [ "", "ZNSt18condition_variable4waitERSt11unique_lockISt5mutexE" ], [ "", "memmove" ], [ "", "ZNSt13random_device9_M_getvalEv" ], [ "", "ZNSt3_V214error_categoryD2Ev" ], [ "", "cxa_finalize" ], [ "", "ZSt21__glibcxx_assert_failPKciS0_S0_" ], [ "", "pthread_mutex_lock" ], [ "", "ZNKSt3_V214error_category10equivalentEiRKSt15error_condition" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base" ], [ "", "Znam" ], [ "", "ZTISt9bad_alloc" ], [ "", "ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base" ], [ "", "ZTINSt3_V214error_categoryE" ], [ "", "cxa_end_catch" ], [ "", "ZNSt18condition_variable10notify_allEv" ], [ "", "cxa_allocate_exception" ], [ "", "free" ], [ "", "ZNSt9bad_allocD1Ev" ], [ "", "sched_yield" ], [ "", "ZNSt13random_device7_M_initERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE" ], [ "", "make_fcontext" ], [ "", "memcpy" ], [ "", "cxa_guard_release" ], [ "", "cxa_call_terminate" ], [ "", "ZNSt3_V216generic_categoryEv" ], [ "", "stack_chk_fail" ], [ "", "register_frame_info" ], [ "", "pthread_mutex_unlock" ], [ "", "memset" ], [ "", "ZNSt18condition_variableD1Ev" ], [ "", "ZTIN10__cxxabiv115__forced_unwindE" ], [ "", "cxa_throw_bad_array_new_length" ], [ "", "dynamic_cast" ], [ "", "ZNSt13runtime_errorC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE" ], [ "", "pthread_once" ], [ "", "ZNSt13random_device7_M_finiEv" ], [ "", "ZdaPv" ], [ "", "ZTVSt12system_error" ], [ "", "pthread_cond_timedwait" ], [ "", "ontop_fcontext" ], [ "", "ZNKSt13runtime_error4whatEv" ], [ "", "gxx_personality_v0" ], [ "", "ZTVSt9bad_alloc" ], [ "", "ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_" ], [ "", "cxa_begin_catch" ], [ "", "cxa_rethrow" ], [ "", "cxa_throw" ], [ "", "deregister_frame_info" ], [ "", "ZSt20__throw_system_errori" ], [ "", "ZTVN10__cxxabiv120__si_class_type_infoE" ], [ "", "ZSt11__once_call" ], [ "", "Znwm" ], [ "", "ZN5boost7context12stack_traits12default_sizeEv" ], [ "", "ZNSt6chrono3_V212system_clock3nowEv" ], [ "", "ZTISt12system_error" ], [ "", "ZNSt6chrono3_V212steady_clock3nowEv" ], [ "", "ZNKSt3_V214error_category10_M_messageB5cxx11Ei" ], [ "", "cxa_atexit" ], [ "", "ZdlPvm" ], [ "", "strlen" ], [ "", "ITM_registerTMCloneTable" ], [ "", "ZNSt12system_errorD2Ev" ], [ "", "tls_get_addr" ], [ "", "ZNSt18condition_variableC1Ev" ], [ "", "ZSt20__throw_length_errorPKc" ], [ "", "ZTVN10__cxxabiv117__class_type_infoE" ], [ "", "jump_fcontext" ], [ "", "ZSt15__once_callable" ], [ "", "Unwind_Resume" ], [ "", "ZSt9terminatev" ], [ "", "ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_" ], [ "", "malloc" ], [ "", "cxa_free_exception" ], [ "", "cxa_thread_atexit" ], [ "", "cxa_guard_acquire" ] ], "sec": [ [ ".note.gnu.property", 736, 48, 1.94, "alloc" ], [ ".note.gnu.build-id", 784, 36, 4.14, "alloc" ], [ ".gnu.hash", 824, 1680, 4.53, "alloc" ], [ ".dynsym", 2504, 5160, 2.29, "alloc" ], [ ".dynstr", 7664, 10081, 5.08, "alloc" ], [ ".gnu.version", 17746, 430, 1.05, "alloc" ], [ ".gnu.version_r", 18176, 32, 2.17, "alloc" ], [ ".rela.dyn", 18208, 4800, 1.83, "alloc" ], [ ".relr.dyn", 23008, 40, 3.04, "alloc" ], [ ".init", 24576, 3, 1.58, "alloc,executable" ], [ ".text", 24640, 35399, 5.99, "alloc,executable" ], [ ".fini", 60039, 3, 1.58, "alloc,executable" ], [ ".rodata", 61440, 1850, 4.76, "alloc" ], [ ".eh_frame_hdr", 63292, 1540, 4.9, "alloc" ], [ ".eh_frame", 64832, 7388, 4.94, "alloc" ], [ ".gcc_except_table", 72220, 855, 4.25, "alloc" ], [ ".init_array", 75232, 24, 1.37, "write,alloc" ], [ ".fini_array", 75256, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 75264, 880, 0.96, "write,alloc" ], [ ".dynamic", 76144, 528, 1.5, "write,alloc" ], [ ".got", 76672, 1152, 0.03, "write,alloc" ], [ ".data", 77824, 40, 1.2, "write,alloc" ], [ ".comment", 77864, 28, 3.99, "merge,strings" ], [ ".shstrtab", 77892, 268, 4.24, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 0.0, "has_note": 1.0, "note_count": 2.0, "nx_enabled": 1.0, "has_dt_relr": 1.0, "dynrel_count": 0.0, "dynsym_count": 215.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 0.0, "dynrela_count": 200.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 0.0, "build_id_length": 20.0, "dt_versym_count": 215.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 3.0, "wx_segment_count": 0.0, "comment_entry_count": 1.0, "program_header_count": 12.0, "comment_distinct_count": 1.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 35466.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 35466.0, "section_relocation_group_count": 1.0, "stripped_metadata_section_count": 7.0 }, "file": { "size": 79888.0, "entropy": 5.42, "size_bytes": 79888.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 5.99, "data_entropy": 0.67, "overlay_size": 1728.0, "string_count": 294.0, "overlay_ratio": 0.02, "overall_entropy": 5.42, "overlay_entropy": 1.52, "entropy_variance": 2.8, "avg_string_length": 40.29, "max_string_length": 339.0, "peak_region_bytes": 24576.0, "code_to_data_ratio": 0.93, "peak_region_entropy": 6.01, "string_length_stddev": 42.03, "largest_section_ratio": 0.44, "sentence_string_count": 9.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "exports": { "count": 137.0 }, "imports": { "count": 77.0 }, "sections": { "count": 27.0, "code_size": 35405.0, "entropy_max": 5.99, "entropy_mean": 2.85, "name_entropy": 4.19, "writable_count": 8.0, "executable_count": 3.0, "nonstandard_count": 6.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 4.0 } } }, "id": 1, "mol": "O(Er)", "path": "boost1.84-fiber-1.84.0-r6.apk!!usr/lib/libboost_fiber.so.1.84.0", "risk": 2, "sha": "834ae1c8b5c29eed080eb14a25aa66180807caf87bddb2776231ed264aea2d2b", "size": 79888, "traits": [ { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "spans": [ [ 7733, 12 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit", "crit": 2, "desc": "Characteristic libc export __cxa_atexit", "spans": [ [ 9649, 10 ] ] }, { "id": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287", "conf": 0.8999999761581421, "crit": 3, "desc": "High export-count binary context", "spans": [ [ 0, 22 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "spans": [ [ 7733, 12 ], [ 9649, 10 ] ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "spans": [ [ 7733, 12 ], [ 9649, 10 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf88vS=y3wfrVXf/HZsuVGThePJM", "n": [ { "c": 1, "d": "Alpine/Wolfi package info file", "i": "metadata/package/files/system-package::alpine-pkginfo-basename", "o": 0, "z": 1, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "boRbIx(mMaw)]E^A=k(raA?spB7]MgatCG8h.D\u0026", "ln": 2, "addr": 36 }, { "b": "Abf97vqPM#jS[iLz/Z1Pe\u0026UWtw[+Z=AS", "n": [ { "c": 2, "d": "Alpine/Wolfi package info metadata", "i": "metadata/package/files/system-package::alpine-apk-pkginfo", "o": 68, "z": 25, "cf": 0.9700000286102295 } ], "ln": 3, "addr": 68 }, { "b": "Abf9fwPw[RatCGdg+HElAY9", "n": [ { "c": 1, "d": "Alpine/Wolfi package version field", "i": "metadata/package/files/system-package::alpine-pkginfo-version-field", "o": 94, "z": 18, "cf": 0.8999999761581421 } ], "ln": 4, "addr": 94 }, { "b": "Abf8%wPIu7jS)7fz/Z1yw[+Z=AV/Bpvrb{\u0026az++3A::0l", "ln": 5, "addr": 113 }, { "b": "B-IpvjS[AWBz#pZfe4J[Cp)uyz/Z1Mz/PFz", "ln": 6, "addr": 150 }, { "b": "B7]@iauZ\u0026aixe#T", "ln": 9, "addr": 260 }, { "b": "vrb\u003c\u003eauZ\u0026(i5Ub4gY", "ln": 10, "addr": 273 }, { "b": "z/PM8x(k4RayYncB96b?i5y", "n": [ { "c": 1, "d": "Alpine/Wolfi package origin field", "i": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "o": 287, "z": 18, "cf": 0.8999999761581421 } ], "ln": 11, "addr": 287 }, { "b": "v@Dj3x(\u003eEXattGWwIDh6wh=h4gbiiEw[9?Pix5YNiBVzKfF\u003eZzvk8mMi5AN6hV", "ln": 12, "addr": 306 }, { "b": "zddc@Byw)3wPw[RawMu!vqYH+y-(8-Aa6\u003eKzEWQ7vl!mqAa%i3y?W^fCRi]PxfD", "ln": 13, "addr": 356 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 759.0, "entropy": 5.13, "size_bytes": 759.0 }, "binary": { "overall_entropy": 5.13, "peak_region_bytes": 759.0, "peak_region_entropy": 5.13 } } }, "id": 2, "path": "boost1.84-fiber-1.84.0-r6.apk!!.PKGINFO", "risk": 1, "sha": "7d9e6bfd80fc88485c5225aad92336a73093fb89d1d3d920b4b0333c3212a2d6", "size": 759, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "spans": [ [ 94, 18 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgver metadata field", "spans": [ [ 94, 18 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 68, 25 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "spans": [ [ 287, 18 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 68, 25 ] ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "spans": [ [ 68, 25 ], [ 94, 18 ], [ 287, 18 ] ] } ], "type": "text" } ], "v": "8" } }