{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00007467469, "rte": "az", "prob": 0.00007467469 } ], "prob": 0.00007467469, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00007467468822142109, "type": "xz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.0000061790146901330445, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T22:33:40Z" }, "path": "idxd_bus.ko.xz", "raw": { "files": [ { "id": 0, "mol": "Md₂(BiHe)", "sha": "27553d76b5188baf7c6a678c28f38e02c03a69db072e744dde463ab49bd87f82", "path": "idxd_bus.ko.xz", "risk": 3, "size": 21604, "type": "xz", "facts": { "metrics": { "file": { "size": 21604, "entropy": 7.99 }, "binary": { "peak_region_bytes": 21504, "peak_region_entropy": 7.85 } } }, "traits": [ { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 7 ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "from": [ { "file": 1 } ], "uses": [ 1, 5 ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "from": [ { "file": 1 } ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 7 ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000atJ@$0000000000kMy=:002m:g5%3e00000000000000000000000000000000000000000000000000uTEITCW$e(A+PYdA:J\u0026#xk8BewPv+J00000000000000000000000000000000", "ln": 0 }, { "b": "B14B@woheVx\u003ehE0uT!e00aZa:C4CYnfjX{dfkj%wwg}zmB1Q@5y?Wx\u003czGxwLm]h(4B$%5dwPIv4x(Ffdz/dZfl%8\u00261wo8ycwPw]7B75A+B-Q]iD2Nsqwo8ycwPv=YwPhi#wof)lx(n3kwO12c0b=jZwJ::rCW$e\u003cB-NL6wPR)fy?W=#jY}=dwPzR", "ln": 401 }, { "b": "uU1g\u003eC4CY3B-8khxk8BewPv=xl%8?Swohf^vS=:0BA}?p07/NXl\u0026Wh!00000KDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.07-2y\u0026emR*}2tC3I)\u0026V*001+4(Mx!Ke!o4S0000001Qf400000GtETWw5scbFRi:$Bqu)RB)=:u0000N^Ln\u0026#{a=Qi00000f#bJ(g08fzg5{Fr0001hw?BPoGA7#L003R)KDtM=KDtM=KDtM=KDtL", "ln": 1016 } ], "depth": 1, "facts": { "sec": [ [ "__ksymtab_gpl", 64, 36, 0.0, "alloc" ], [ ".rela__ksymtab_gpl", 75584, 216, 0.95, "info_link" ], [ ".rodata", 104, 200, 0.84, "alloc" ], [ ".rela.rodata", 75800, 120, 1.23, "info_link" ], [ "__mcount_loc", 304, 56, 0.0, "alloc" ], [ ".rela__mcount_loc", 75920, 168, 1.23, "info_link" ], [ ".rodata.str1.1", 360, 81, 4.71, "alloc,merge,strings" ], [ ".modinfo", 441, 143, 4.74, "alloc" ], [ ".retpoline_sites", 584, 8, 0.0, "alloc" ], [ ".rela.retpoline_sites", 76088, 48, 0.93, "info_link" ], [ ".return_sites", 592, 12, 0.0, "alloc" ], [ ".rela.return_sites", 76136, 72, 1.12, "info_link" ], [ ".call_sites", 604, 32, 0.0, "alloc" ], [ ".rela.call_sites", 76208, 192, 1.29, "info_link" ], [ ".orc_unwind", 636, 108, 1.21, "alloc" ], [ ".orc_unwind_ip", 744, 72, 0.0, "alloc" ], [ ".rela.orc_unwind_ip", 76400, 432, 1.32, "info_link" ], [ ".note.gnu.property", 816, 64, 1.77, "alloc" ], [ ".note.gnu.build-id", 880, 36, 3.95, "alloc" ], [ ".note.Linux", 916, 48, 1.97, "alloc" ], [ ".orc_header", 964, 20, 4.12, "alloc" ], [ "__ksymtab_strings", 984, 74, 3.99, "alloc,merge,strings" ], [ ".text", 1064, 432, 4.16, "alloc,executable" ], [ ".rela.text", 76832, 456, 2.14, "info_link" ], [ ".init.text", 1496, 37, 2.26, "alloc,executable" ], [ ".rela.init.text", 77288, 72, 1.75, "info_link" ], [ ".exit.text", 1536, 32, 2.19, "alloc,executable" ], [ ".rela.exit.text", 77360, 48, 1.57, "info_link" ], [ "__jump_table", 1568, 16, 0.0, "write,alloc" ], [ ".rela__jump_table", 77408, 72, 1.27, "info_link" ], [ "__patchable_function_entries", 1584, 64, 0.0, "write,alloc" ], [ ".rela__patchable_function_entries", 77480, 192, 1.13, "info_link" ], [ ".exit.data", 1648, 8, 0.0, "write,alloc" ], [ ".rela.exit.data", 77672, 24, 0.5, "info_link" ], [ ".init.data", 1656, 8, 0.0, "write,alloc" ], [ ".rela.init.data", 77696, 24, 0.5, "info_link" ], [ "__dyndbg", 1664, 56, 0.26, "write,alloc" ], [ ".rela__dyndbg", 77720, 96, 0.98, "info_link" ], [ ".gnu.linkonce.this_module", 1720, 1280, 0.07, "write,alloc" ], [ ".rela.gnu.linkonce.this_module", 77816, 48, 1.05, "info_link" ], [ ".comment", 3000, 57, 3.72, "merge,strings" ], [ ".BTF", 3057, 70059, 3.99, "" ], [ ".symtab", 73120, 1512, 1.63, "" ], [ ".strtab", 74632, 949, 4.54, "" ], [ ".shstrtab", 77864, 498, 4.37, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 3, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "symtab_count": 63, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "comment_entry_count": 3, "program_header_count": 0, "stripped_with_symtab": 1, "comment_distinct_count": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 16, "stripped_metadata_section_count": 5 }, "file": { "size": 81568, "entropy": 3.86 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 3.89, "data_entropy": 0.07, "overlay_size": 3206, "string_count": 376, "overlay_ratio": 0.04, "overlay_entropy": 1.28, "entropy_variance": 2.38, "avg_string_length": 14.14, "max_string_length": 43, "peak_region_bytes": 3072, "code_to_data_ratio": 0.26, "peak_region_entropy": 4.96, "string_length_stddev": 6.08, "largest_section_ratio": 0.86, "sentence_string_count": 4, "sentence_string_ratio": 0.01, "high_entropy_string_count": 0 }, "sections": { "count": 50, "code_size": 501, "entropy_max": 4.74, "entropy_mean": 1.63, "name_entropy": 4.3, "writable_count": 9, "executable_count": 3, "nonstandard_count": 42, "executable_writable_count": 0 }, "dependencies": { "count": 0 } } }, "id": 1, "mol": "Md₂(BiHe)", "path": "idxd_bus.ko.xz!!idxd_bus.ko", "pid": 0, "risk": 3, "sha": "386e9f6337d599c5f8bc39c9567e11883102b5bd87b1c7a3a0ec998f6623894a", "size": 81568, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 449, 0 ] ] }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 5 ], "spans": [ [ 0, 25 ] ] } ], "type": "elf" } ], "rev": "b3dc8", "v": "8" } }