{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000031501055, "rte": "az", "prob": 0.000031501055 } ], "prob": 0.000031501055, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.000031501054763793945, "type": "xz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000009059906005859375, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-12T05:40:09Z" }, "path": "ath10k_pci.ko.xz", "raw": { "files": [ { "id": 0, "mol": "H(Mg)", "sha": "2e404effaf4941f572e5a8cc07da20c1dabbda0e2c86778c0afdcfed59387c64", "path": "ath10k_pci.ko.xz", "risk": 1, "size": 67828, "type": "xz", "facts": { "metrics": { "file": { "size": 67828, "entropy": 8 }, "binary": { "peak_region_bytes": 67584, "peak_region_entropy": 7.85 } } }, "traits": [ { "id": "micro-behaviors/mem/read/dump::memdump-cmd", "atk": "T1003", "conf": 0.65, "crit": 3, "desc": "memdump command reference", "from": [ { "file": 1 } ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "from": [ { "file": 1 } ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000PMHwq0000000000kMy=:002m:jPEOA1onA4fAq7M1POJ5m]04:0SSko1onA40rr91000000rreo1onA40rr91000000SSnp1onA40rr91000001onA46Awa", "ln": 0 }, { "b": "000001][S60rr9100961oLFx!CMmZz00000@-}p]sr2*MeubF=tCXhy(A*EnKDtM=KDtM=KDtM=KDtM=]a8]snq\u0026lKx-Fc7I:dLsI:dNj00000+NU!C00000KDtM=KDtM=KDtM=KDtM=]a8]snq\u0026lKx-Fc7I:dLsIVz#w0002y4\u003ccD800000KDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.07-36KotK-q\u0026g9%\u003cnYb\u00260e\u003e!4nq\u0026l", "ln": 184 }, { "b": "eG=-(b}}r8CPXzKvr-[GCQk46DuZ\u003eC003Rtx(4u\u003eaARJACvtn#aAR4jxjVfcw]zYjA+eV\u0026gCQ7YBrAnZb}}r6iV].V3ik9Tw{5fezF78lzY\u003cmAx()]ezeB09aA8yAaA7\u003cmvScybwoe(4BrAnZb}}r6at1Y\u0026CQk46DuZLXzddVifNa($ic]/#3ijV", "ln": 25878 }, { "b": "srGqxb}}qX3ig5a0bVp:z/QaCA+e($z/cWzB0bKrDsXiBwftPcaz+FbxjV9aBzb98aAz4gvqfQ[zF78jvqPK$zeZRbB.kk%AV/BqDsXiBDuxL{000000a]UNy?mc1Bz\u0026pywPP4)k$@Fiz/ff3xcp/bz/3QJCQmOSBz\u0026oQCQmOw000000a]UNy?mc1", "ln": 26323 }, { "b": "iV].V3ij1ux(F39zF78hv}/pXB.#88zdNN5A^q2jwOic1zGYD8x\u003eeucByxo53ig5a003.Jv@DydwN/*8zdNM{B.#7uA+e($z/cWKCQmOSCwhejaAIa7BzkVhaAITkA=-BjwmPZ(B8@DTCQmO!3ij^Tv@DydwN/*8A:-/}B.#7uw]zZbvrrSox([2hB97\u0026hBrC15wo8m5B09eYc3QLvzE:(hBz(avvpS[?wPI]nfNa)*3ij%PCYU6GvqPK$zeZRswN/*@z/cWKCQmOSx(+zrzddl%wPw]nxKL^3v%8*jwO#PjwO#33vpS[?wPI]nfNa)*3ig5a0044FzdA", "ln": 26514 }, { "b": "ayYF9iV].V3ig6GzE[6iwN/*[wi7\u00261o?uErvrt{2A+e-(x)a5#j0nlIzF%MfzF6pR000000001hvqfK?wft#jaA}mfwGUI{C4\u003eC$aA.SCz/cXiA=Bb.c1Et.0000*vqfK?", "ln": 27061 }, { "b": "Bz9x.yCeKLk@*[:stauiga\u003emlw[=p5CvtJ6eIX}/x(i]!x\u003e7Z(B7EH5BZY8elq{o9m]h\u003eVwmY*(A+PGmx(v(Ll#)0+wPw]mB-qqrA=-Boz/M%$BZY8@z/6tll3c^KA=l1wp^W/=ff@b}auh5ge?]7?v\u003c1\u0026Dk#5LkwP?=$wPE\u0026WB-.qnAY)oxvqGB(zeyx", "ln": 29998 }, { "b": "z#:P-wO0?PgbgH\u003cyH}=#B7Gs\u003eB7GD2yH}=#v@k-Rq:\u003cU)ogq$-l}Hrylqf*Pogq$-x\u003ep\u003c!i509xf\u003c/0zvpa7$vru5XnKV6pi509xf\u003c^\u003cUl0)w.r7f[Xq=A-*mmxT8fFUvquSf]\u0026uRTx(mf2)", "ln": 177688 } ], "depth": 1, "facts": { "sec": [ [ ".note.gnu.property", 64, 64, 1.77, "alloc" ], [ ".note.gnu.build-id", 128, 36, 4.19, "alloc" ], [ ".note.Linux", 164, 48, 1.97, "alloc" ], [ ".orc_header", 212, 20, 4.12, "alloc" ], [ ".text", 232, 22394, 5.48, "alloc,executable" ], [ ".rela.text", 232704, 19488, 2.84, "info_link" ], [ ".init.text", 22632, 82, 3.13, "alloc,executable" ], [ ".rela.init.text", 252192, 192, 1.83, "info_link" ], [ ".exit.text", 22720, 32, 2.19, "alloc,executable" ], [ ".rela.exit.text", 252384, 48, 1.57, "info_link" ], [ ".text.unlikely", 22752, 26, 2.86, "alloc,executable" ], [ ".rela.text.unlikely", 252432, 72, 1.91, "info_link" ], [ ".rodata", 22784, 2185, 1.54, "alloc" ], [ ".rela.rodata", 252504, 1056, 1.69, "info_link" ], [ "__mcount_loc", 24969, 608, 0.0, "alloc" ], [ ".rela__mcount_loc", 253560, 1824, 1.77, "info_link" ], [ ".rodata.str1.8", 25584, 2863, 4.67, "alloc,merge,strings" ], [ ".rodata.str1.1", 28447, 678, 4.67, "alloc,merge,strings" ], [ ".modinfo", 29125, 1669, 5.23, "alloc" ], [ "__param", 30800, 80, 0.5, "alloc" ], [ ".rela__param", 255384, 192, 1.11, "info_link" ], [ ".retpoline_sites", 30880, 276, 0.0, "alloc" ], [ ".rela.retpoline_sites", 255576, 1656, 1.81, "info_link" ], [ ".return_sites", 31156, 312, 0.0, "alloc" ], [ ".rela.return_sites", 257232, 1872, 1.87, "info_link" ], [ ".call_sites", 31468, 1956, 0.0, "alloc" ], [ ".rela.call_sites", 259104, 11736, 2.18, "info_link" ], [ ".ibt_endbr_seal", 33424, 76, 0.0, "alloc" ], [ ".rela.ibt_endbr_seal", 270840, 456, 1.59, "info_link" ], [ ".orc_unwind", 33500, 4098, 2.95, "alloc" ], [ ".orc_unwind_ip", 37598, 2732, 0.0, "alloc" ], [ ".rela.orc_unwind_ip", 271296, 16392, 2.2, "info_link" ], [ "__bug_table", 40336, 216, 2.07, "write,alloc" ], [ ".rela__bug_table", 287688, 864, 1.42, "info_link" ], [ "__jump_table", 40552, 96, 0.0, "write,alloc" ], [ ".rela__jump_table", 288552, 432, 1.63, "info_link" ], [ "__patchable_function_entries", 40648, 632, 0.0, "write,alloc" ], [ ".rela__patchable_function_entries", 288984, 1896, 1.68, "info_link" ], [ ".codetag.alloc_tags", 41280, 240, 0.44, "write,alloc" ], [ ".rela.codetag.alloc_tags", 290880, 432, 1.2, "info_link" ], [ ".data", 41520, 280, 0.0, "write,alloc" ], [ ".rela.data", 291312, 120, 1.2, "info_link" ], [ ".exit.data", 41800, 8, 0.0, "write,alloc" ], [ ".rela.exit.data", 291432, 24, 0.5, "info_link" ], [ ".init.data", 41808, 8, 0.0, "write,alloc" ], [ ".rela.init.data", 291456, 24, 0.5, "info_link" ], [ ".printk_index", 41816, 24, 0.0, "write,alloc" ], [ ".rela.printk_index", 291480, 72, 1.01, "info_link" ], [ ".data..once", 41840, 2, 0.0, "write,alloc" ], [ ".static_call_sites", 41842, 8, 0.0, "write,alloc" ], [ ".rela.static_call_sites", 291552, 48, 1.07, "info_link" ], [ ".gnu.linkonce.this_module", 41856, 1280, 0.09, "write,alloc" ], [ ".rela.gnu.linkonce.this_module", 291600, 48, 1.05, "info_link" ], [ ".comment", 43136, 57, 3.72, "merge,strings" ], [ ".BTF", 43193, 173619, 4.84, "" ], [ ".symtab", 216816, 9240, 2.12, "" ], [ ".strtab", 226056, 6646, 4.69, "" ], [ ".shstrtab", 291648, 604, 4.28, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 3, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 385, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "comment_entry_count": 3, "program_header_count": 0, "stripped_with_symtab": 1, "comment_distinct_count": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 22, "stripped_metadata_section_count": 5 }, "file": { "size": 296160, "entropy": 4.52 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 5.47, "data_entropy": 0.24, "overlay_size": 3908, "string_count": 3011, "overlay_ratio": 0.01, "overlay_entropy": 1.42, "entropy_variance": 2.49, "avg_string_length": 18.57, "max_string_length": 78, "peak_region_bytes": 12288, "code_to_data_ratio": 0.89, "peak_region_entropy": 5.67, "string_length_stddev": 9.05, "largest_section_ratio": 0.59, "sentence_string_count": 86, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0 }, "sections": { "count": 61, "code_size": 22534, "entropy_max": 5.48, "entropy_mean": 1.74, "name_entropy": 4.22, "writable_count": 12, "executable_count": 4, "nonstandard_count": 53, "executable_writable_count": 0 }, "dependencies": { "count": 0 } } }, "id": 1, "mol": "H(Mg)", "path": "ath10k_pci.ko.xz!!ath10k_pci.ko", "pid": 0, "risk": 1, "sha": "83c2f9d78ce8c8528bd1612fe6c11ef7e58a54da8f901ed6abf0d9b488c4466a", "size": 296160, "traits": [ { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/mem/read/dump::memdump-cmd", "atk": "T1003", "conf": 0.65, "crit": 3, "desc": "memdump command reference", "spans": [ [ 26578, 7 ] ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 30050, 0 ] ] } ], "type": "elf" } ], "rev": "c7f7e", "v": "8" } }