{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000097721815, "rte": "az", "prob": 0.000097721815 } ], "prob": 0.000097721815, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00009772181510925293, "type": "xz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000006119410045357654, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T23:47:11Z" }, "path": "vhost_net.ko.xz", "raw": { "files": [ { "id": 0, "mol": "Md₂(BiHe)", "sha": "3986f3ce495cf1ed6ad3299272fcc81d839fd47c29f1d8772f278a9e81d87e55", "path": "vhost_net.ko.xz", "risk": 3, "size": 37424, "type": "xz", "facts": { "metrics": { "file": { "size": 37424, "entropy": 7.99 }, "binary": { "peak_region_bytes": 37424, "peak_region_entropy": 7.85 } } }, "traits": [ { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "from": [ { "file": 1 } ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 3 ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "from": [ { "file": 1 } ], "uses": [ 0, 5 ] }, { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "from": [ { "file": 1 } ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 3 ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "from": [ { "file": 1 } ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000PJRx%0000000000kMy=:002m:k(:dI0000000000gYWNR0%nJ600000004]T0rrob0000000000gYWNR0%nJ6000000000000000irfc/0000000000000000000000000000000000000", "ln": 0 }, { "b": "aAIaiwnb{]aAg+0yH}Qe3ig6azE[6iwN/*[wftz]B7ol8Acc2sazbLjzddJew]zYjr9hg7z/{dAc1FLHx(n2nc1Et.00010zE[6iwN/*[wftL%vpS}\u0026az+RbazbLjaxhD7ashtAaz2!pwN/*[wfrgAwc@roA=(nfvru6\u003eaxhC=Aa9l(wPP%Qaz+P", "ln": 1301 }, { "b": "z/M$zx(XrfzY\u0026}eBo2-(BzbPkjXYT2xKLE*ax6)nrc8+]yIvU^y?Wx\u003czGxwLm]h(4B$%5vwPz\u003caz/dY(e?![j0b#v!z9qDPAaK67zdNQbvqGp%v@DsiBA/\u0026nzEE0\u003cwGUe/A=i6/z/x$Ar9hj8f^55pzEE0\u003cwJI1*at1Z7x(^Y(y?iP=vrcjbD2Nr", "ln": 1892 }, { "b": "000001][S60rr9100961oLFx!CMmZz00000@-}p]sr2*MeubF=tCXhy(A*EnKDtM=KDtM=KDtM=KDtM=\u003eL$O.0e(PInDn-LHqlvX01T+u0000+ry6OQIs:!5)nJr@GtmJdk)de/004U\u003c0HZ^?76h=d@@Sl3dBpvvGE1u80049$nSeJMsvAh\u0026nmQ1q.qUL/0NV*B1CuWQBRPK:Q)g]W0zeidbV)Fn07WdrI/w(L@SdkwH3-%", "ln": 7160 } ], "depth": 1, "facts": { "sec": [ [ ".altinstructions", 64, 42, 1.56, "alloc" ], [ ".rela.altinstructions", 120960, 144, 1.24, "info_link" ], [ "__bug_table", 112, 12, 1.21, "write,alloc" ], [ ".rela__bug_table", 121104, 48, 0.93, "info_link" ], [ "__jump_table", 128, 368, 0.0, "write,alloc" ], [ ".rela__jump_table", 121152, 1656, 1.87, "info_link" ], [ "__ex_table", 496, 12, 0.41, "alloc" ], [ ".rela__ex_table", 122808, 48, 1.11, "info_link" ], [ ".rodata", 512, 517, 2.22, "alloc" ], [ ".rela.rodata", 122856, 240, 1.48, "info_link" ], [ "__mcount_loc", 1029, 224, 0.0, "alloc" ], [ ".rela__mcount_loc", 123096, 672, 1.62, "info_link" ], [ ".smp_locks", 1256, 28, 0.0, "alloc" ], [ ".rela.smp_locks", 123768, 168, 1.45, "info_link" ], [ ".rodata.str1.8", 1288, 357, 4.5, "alloc,merge,strings" ], [ ".rodata.str1.1", 1645, 162, 4.76, "alloc,merge,strings" ], [ ".modinfo", 1807, 391, 5.12, "alloc" ], [ "__param", 2200, 40, 0.5, "alloc" ], [ ".rela__param", 123936, 96, 0.91, "info_link" ], [ ".retpoline_sites", 2240, 36, 0.0, "alloc" ], [ ".rela.retpoline_sites", 124032, 216, 1.53, "info_link" ], [ ".return_sites", 2276, 88, 0.0, "alloc" ], [ ".rela.return_sites", 124248, 528, 1.67, "info_link" ], [ ".call_sites", 2364, 1300, 0.0, "alloc" ], [ ".rela.call_sites", 124776, 7800, 2.1, "info_link" ], [ ".orc_unwind", 3664, 2022, 3.07, "alloc" ], [ ".orc_unwind_ip", 5686, 1348, 0.0, "alloc" ], [ ".rela.orc_unwind_ip", 132576, 8088, 2.06, "info_link" ], [ ".note.gnu.property", 7040, 64, 1.77, "alloc" ], [ ".note.gnu.build-id", 7104, 36, 4.19, "alloc" ], [ ".note.Linux", 7140, 48, 1.97, "alloc" ], [ ".orc_header", 7188, 20, 4.12, "alloc" ], [ ".text", 7208, 16197, 5.55, "alloc,executable" ], [ ".rela.text", 140664, 10152, 2.73, "info_link" ], [ ".init.text", 23408, 53, 2.7, "alloc,executable" ], [ ".rela.init.text", 150816, 120, 1.94, "info_link" ], [ ".exit.text", 23464, 32, 2.19, "alloc,executable" ], [ ".rela.exit.text", 150936, 48, 1.57, "info_link" ], [ ".altinstr_replacement", 23496, 11, 2.37, "alloc,executable" ], [ ".rela.altinstr_replacement", 150984, 24, 1.68, "info_link" ], [ "__patchable_function_entries", 23512, 232, 0.0, "write,alloc" ], [ ".rela__patchable_function_entries", 151008, 696, 1.59, "info_link" ], [ ".codetag.alloc_tags", 23744, 240, 0.39, "write,alloc" ], [ ".rela.codetag.alloc_tags", 151704, 432, 1.2, "info_link" ], [ ".data", 23984, 80, 0.1, "write,alloc" ], [ ".rela.data", 152136, 48, 1.05, "info_link" ], [ ".exit.data", 24064, 8, 0.0, "write,alloc" ], [ ".rela.exit.data", 152184, 24, 0.5, "info_link" ], [ ".init.data", 24072, 8, 0.0, "write,alloc" ], [ ".rela.init.data", 152208, 24, 0.5, "info_link" ], [ "__dyndbg", 24080, 672, 0.48, "write,alloc" ], [ ".rela__dyndbg", 152232, 1152, 1.4, "info_link" ], [ ".data..read_mostly", 24752, 4, 0.0, "write,alloc" ], [ ".static_call_sites", 24756, 32, 0.0, "write,alloc" ], [ ".rela.static_call_sites", 153384, 192, 1.22, "info_link" ], [ ".gnu.linkonce.this_module", 24792, 1280, 0.08, "write,alloc" ], [ ".rela.gnu.linkonce.this_module", 153576, 48, 1.05, "info_link" ], [ ".comment", 26072, 57, 3.72, "merge,strings" ], [ ".BTF", 26129, 85339, 3.82, "" ], [ ".symtab", 111472, 5760, 1.85, "" ], [ ".strtab", 117232, 3723, 4.76, "" ], [ ".shstrtab", 153624, 646, 4.28, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 3, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 240, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "comment_entry_count": 3, "program_header_count": 0, "stripped_with_symtab": 1, "comment_distinct_count": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 24, "stripped_metadata_section_count": 5 }, "file": { "size": 158432, "entropy": 3.88 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 5.53, "data_entropy": 0.19, "overlay_size": 4162, "string_count": 391, "overlay_ratio": 0.03, "overlay_entropy": 1.4, "entropy_variance": 2.23, "avg_string_length": 17.16, "max_string_length": 69, "peak_region_bytes": 11264, "code_to_data_ratio": 0.85, "peak_region_entropy": 5.6, "string_length_stddev": 8.05, "largest_section_ratio": 0.54, "sentence_string_count": 16, "sentence_string_ratio": 0.04, "high_entropy_string_count": 0 }, "sections": { "count": 65, "code_size": 16293, "entropy_max": 5.55, "entropy_mean": 1.65, "name_entropy": 4.21, "writable_count": 12, "executable_count": 4, "nonstandard_count": 57, "executable_writable_count": 0 }, "dependencies": { "count": 0 } } }, "id": 1, "mol": "Md₂(BiHe)", "path": "vhost_net.ko.xz!!vhost_net.ko", "pid": 0, "risk": 3, "sha": "168795eb97d8a46101dca888ecd2a672fedf049c0528158533d88a02cd6fb61c", "size": 158432, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 1940, 0 ] ] }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 5 ], "spans": [ [ 0, 25 ] ] } ], "type": "elf" } ], "rev": "b3dc8", "v": "8" } }