{ "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.020602802, "rte": "az", "prob": 0.020602802 }, { "cls": 0, "raw": 0.0028640728, "rte": "az/native", "prob": 0.0028640728 }, { "cls": 0, "raw": 0.011157304, "rte": "az/elf", "prob": 0.011157304 } ], "prob": 0.020602802, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.02060280181467533, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-10-01T00:23:18Z" }, "path": "libgif.so.7.2.0", "raw": { "v": "8", "rev": "c1ea9", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000%2!g0rr910000000000kMy=:00000fAzgO0000000000kMA+z2()i\u003c82$GN0rr911POJ5000000000000000000000000000000{\u003ew+G00000{\u003ew+", "ln": 0 }, { "b": ".gO\u003csJCgi27PBOaZ}Tp9LIYh(F69!pUZ3LS\u003el\u0026he?h}i4g#Gku]:n8u00000000000000000000000000000000000000000@@Vd5e+DF000000000000000000000@%5o000620000000000000004*h\u003ej5=.[i000000000000000000002M\u003e5b5=.[", "ln": 1072 }, { "b": "j]$Y:5=-suKtW7s00000z#{1t000001oXY85=-sukVE^:00000Ob-J?000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0a{m.vpPvBuVQr$v@2BYxLQ%/BZYr30af8OBywV{uT)++uUi.XyYD\u003c[x\u003ex\u003eDBw(W\u0026wO2:EwPItYm}(N8A+e/Rvq]1KygQ)%07Q:no\u003c}*Go\u003c@0pvRPE:Bo1Z0x\u003eydWwO%$Ky?ldCzE^M{0aPCNy\u0026r!-w[k?0wO}GWv@c78wDls.wN$\u003cfm}(NhAaJ]Rx(4uQvqPMQl}p%6pJf(.07os\u003ew\u003ecAOm}(NowPz\u003caz/bLym}(N9wPQ*Yv@Dx#rc-B]07os\u003ew\u003ecAOnO})GwK{xvwmY=Yl}m", "ln": 3184 }, { "b": "wNPT\u003enO})GwKyxUzGGDg07os\u003ew(AI*A=q1Gx\u003exUwwjp-+wO#N6z/d)Tz!0L.w{nofBy+CVmr\u0026J/BAo#YB7!JYvR/PQuQFTvvra[EB7!JYvR/PQuRbcRwPz(-vrl9YvpB4:07xy(w(0wSzBOtRwK{lEwnC/SuRbcHBvY?YxJezHy?iPnm}(NhAaJ]Rx(0", "ln": 3789 }, { "b": "Bo1:1x\u003eyg:Bvf$SwDkd?x\u003ex.Gz/YFVx(4tXmmR67q/Dq(07Q:nltpKux)Ks\u003czdNM]AcRBNx\u003eyv.x(v(Rz!%ujo\u003c}#vm}(N3AbYSsrb#z+B8kobx(v\u003e?mSJ6KoKS0:q^\u003c\u0026XwjZSDxjR6kx\u003ey7FyH{BMC4ChQzdd6*07Q:nmriA!A-m72x(mL-m}(N6A:X", "ln": 4223 }, { "b": "z/P}1y?Wu*e]$}-humM7eO]csB:bGDvrb\u003c\u003ehz^4cz.r:Ay?Wu\u003ex\u003ew#sz.r%Gm[=GvlTIP3f/G7j0000000ic40096300ic400ic400ic400ic400ic400ic300ri500ic400ic300ic30096200962009620096200962009620096200962009620096", "ln": 4507 }, { "b": "[bJEn5Mhc{5p#%9aoAUo[bJEn5MRA$5tzjFaoAUo[bJEn5N4Z25w*F\u003caoAUo[bJEn5NF065Ak:kaoAUo[bJEn5N[oa5cs}QaoAUo[bJEn5OsMe5f:h#aoAUo[bJEn5O:\u0026i5jeEvaoAUo[bJEn5Pgbm5mN.-aoAUo[bJEn5PQzq5q00aaoAUo[bJEn5Q3Xu5tzmGaoAUo[bJEn5QD$y", "ln": 6816 }, { "b": "00000002J6C4CLlw[=6)aA}mnaz#ataA8jgzE)u3w]zYjCxdztwDhYg002F%x(4u\u003eaARJAA+eV\u0026azbUjz6iF9C4CLlw[=6)002z}ByuqaB0bvsBrCpnav/0)azbJ", "ln": 28434 }, { "b": "000000000000000000000000000000000000000000000000000000000000\u00262I^$00000J2.(#000000rr9100000@@-r4000000rr91000002)yqe000004GDFe000009%zSA000003\u0026*nc000005e+DF000004fcwd00000D#e\u0026-0000082%Tp00000.21cj000008VP\u003cr00000", "ln": 64400 }, { "b": "000000000000000000000000000000000000000000000000000006200000gbit}gH-gHvR4l8hE!Q7h8NiHi5Lh2vMut4g?yhTg?wKPh!sQLwNY^{00000wc*A*04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaK6iC(PEmz//LyxkR\u0026AvS=y3wg.Ia04}]4BUmuoB7+Lawo\u00266lD2iKlwo\u00266lBAdvlxkR\u0026AC4CYnx(v\u003e?", "ln": 65496 } ], "mol": "Md₃(BiBkHe)", "sha": "3d125a2019bf6f87aa4bfc4796b0c9775629f6a82322e0ea42b54dcc0a56a776", "path": "libgif.so.7.2.0", "risk": 4, "size": 67440, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "InsertHashTable" ], [ "EGifPutImageDesc" ], [ "DGifGetLZCodes" ], [ "EGifSpew" ], [ "DGifDecreaseImageCounter" ], [ "DGifGetLine" ], [ "DGifGetScreenDesc" ], [ "DGifGetExtension" ], [ "openbsd_reallocarray" ], [ "DGifExtensionToGCB" ], [ "GifMakeMapObject" ], [ "DGifGetRecordType" ], [ "DGifSavedExtensionToGCB" ], [ "EGifPutComment" ], [ "DGifCloseFile" ], [ "EGifPutLine" ], [ "GifApplyTranslation" ], [ "EGifSetGifVersion" ], [ "EGifPutCodeNext" ], [ "EGifPutExtensionTrailer" ], [ "InitHashTable" ], [ "GifDrawBoxedText8x8" ], [ "DGifGetCode" ], [ "EGifPutExtension" ], [ "GifMakeSavedImage" ], [ "GifDrawRectangle" ], [ "GifFreeExtensions" ], [ "GifFreeMapObject" ], [ "GifDrawBox" ], [ "DGifGetPixel" ], [ "GifErrorString" ], [ "EGifGetGifVersion" ], [ "DGifOpen" ], [ "EGifPutScreenDesc" ], [ "EGifCloseFile" ], [ "DGifGetGifVersion" ], [ "EGifPutCode" ], [ "EGifPutExtensionLeader" ], [ "EGifOpenFileHandle" ], [ "DGifGetExtensionNext" ], [ "FreeLastSavedImage" ], [ "EGifGCBToExtension" ], [ "DGifOpenFileName" ], [ "EGifPutExtensionBlock" ], [ "DGifGetImageHeader" ], [ "GifFreeSavedImages" ], [ "DGifGetCodeNext" ], [ "EGifOpen" ], [ "EGifPutPixel" ], [ "GifAsciiTable8x8" ], [ "ClearHashTable" ], [ "DGifGetImageDesc" ], [ "GifAddExtensionBlock" ], [ "GifDrawText8x8" ], [ "GifUnionColorMap" ], [ "EGifOpenFileName" ], [ "EGifGCBToSavedExtension" ], [ "ExistsHashTable" ], [ "GifQuantizeBuffer" ], [ "DGifOpenFileHandle" ], [ "DGifSlurp" ], [ "GifBitSize" ] ], "imp": [ [ "", "memcpy" ], [ "", "strlen" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "cxa_finalize" ], [ "", "qsort" ], [ "", "fclose" ], [ "", "strtok_r" ], [ "", "malloc" ], [ "", "open" ], [ "", "memset" ], [ "", "fdopen" ], [ "", "calloc" ], [ "", "realloc" ], [ "", "stack_chk_fail" ], [ "", "close" ], [ "", "gmon_start__" ], [ "", "stack_chk_guard" ], [ "", "fread" ], [ "", "free" ], [ "", "fwrite" ], [ "", "strcpy" ], [ "", "ITM_registerTMCloneTable" ], [ "", "errno_location" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.69, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.0, "alloc" ], [ ".gnu.hash", 640, 476, 6.03, "alloc" ], [ ".dynsym", 1120, 2112, 2.15, "alloc" ], [ ".dynstr", 3232, 1334, 4.92, "alloc" ], [ ".gnu.version", 4566, 176, 1.41, "alloc" ], [ ".gnu.version_r", 4744, 64, 2.39, "alloc" ], [ ".rela.dyn", 4808, 216, 1.74, "alloc" ], [ ".rela.plt", 5024, 1392, 1.92, "alloc,info_link" ], [ ".init", 6416, 28, 3.9, "alloc,executable" ], [ ".plt", 6448, 960, 4.6, "alloc,executable" ], [ ".text", 7424, 20604, 6.37, "alloc,executable" ], [ ".fini", 28028, 24, 3.72, "alloc,executable" ], [ ".rodata", 28064, 2104, 4.96, "alloc" ], [ ".eh_frame_hdr", 30168, 588, 4.67, "alloc" ], [ ".eh_frame", 30760, 3792, 5.34, "alloc" ], [ ".init_array", 64448, 8, 1.06, "write,alloc" ], [ ".fini_array", 64456, 8, 1.06, "write,alloc" ], [ ".dynamic", 64464, 528, 1.58, "write,alloc" ], [ ".got", 64992, 544, 1.02, "write,alloc" ], [ ".data", 65536, 8, 0.54, "write,alloc" ], [ ".gnu_debuglink", 65544, 52, 4.16, "" ], [ ".shstrtab", 65596, 237, 4.24, "" ] ], "tgt": [ "entry0", "fcn.00001980", "fcn.00001990", "fcn.000019c0", "fcn.000019d0", "fcn.000019e0", "fcn.00001a10", "fcn.00001a30", "fcn.00001a60", "fcn.00001a70", "fcn.00001a80", "fcn.00001af0", "fcn.00001b10", "fcn.00001b20", "fcn.00001b40", "fcn.00001b50", "fcn.00001b60", "fcn.00001b90", "fcn.00001ba0", "fcn.00001bb0", "fcn.00001bc0", "fcn.00001be0", "fcn.00001c00", "fcn.00001c10", "fcn.00001c20", "fcn.00001c30", "fcn.00001c40", "fcn.00001c50", "fcn.00001c60", "fcn.00001c70", "fcn.00001c80", "fcn.00001ca0", "fcn.00001cc0", "fcn.00001cd0", "fcn.00001ce0", "fcn.00001d20", "fcn.00001e00", "fcn.00001e40", "fcn.00001fb0", "fcn.00003900", "fcn.00003c20", "fcn.00004bf0", "sym.imp.__cxa_finalize", "sym.imp.__errno_location", "sym.imp.__stack_chk_fail", "sym.imp.calloc", "sym.imp.close", "sym.imp.fclose", "sym.imp.fdopen", "sym.imp.fread", "sym.imp.free", "sym.imp.fwrite", "sym.imp.malloc", "sym.imp.memcpy", "sym.imp.memset", "sym.imp.open", "sym.imp.qsort", "sym.imp.realloc", "sym.imp.strcpy", "sym.imp.strlen", "sym.imp.strtok_r" ], "funcs": [ [ "fcn.00001914", 6420 ], [ "fcn.00001934", 6452 ], [ "sym.imp.memcpy", 6480 ], [ "sym.imp.strlen", 6496 ], [ "fcn.00001980", 6528 ], [ "fcn.00001990", 6544 ], [ "sym.imp.__cxa_finalize", 6560 ], [ "sym.imp.qsort", 6576 ], [ "fcn.000019c0", 6592 ], [ "fcn.000019d0", 6608 ], [ "fcn.000019e0", 6624 ], [ "sym.imp.fclose", 6640 ], [ "sym.imp.strtok_r", 6656 ], [ "fcn.00001a10", 6672 ], [ "sym.imp.malloc", 6688 ], [ "fcn.00001a30", 6704 ], [ "sym.imp.open", 6736 ], [ "fcn.00001a60", 6752 ], [ "fcn.00001a70", 6768 ], [ "fcn.00001a80", 6784 ], [ "sym.imp.memset", 6800 ], [ "sym.imp.fdopen", 6816 ], [ "sym.imp.calloc", 6832 ], [ "sym.imp.realloc", 6848 ], [ "sym.imp.__stack_chk_fail", 6864 ], [ "sym.imp.close", 6880 ], [ "fcn.00001af0", 6896 ], [ "fcn.00001b10", 6928 ], [ "fcn.00001b20", 6944 ], [ "fcn.00001b40", 6976 ], [ "fcn.00001b50", 6992 ], [ "fcn.00001b60", 7008 ], [ "sym.imp.fread", 7024 ], [ "sym.imp.free", 7040 ], [ "fcn.00001b90", 7056 ], [ "fcn.00001ba0", 7072 ], [ "fcn.00001bb0", 7088 ], [ "fcn.00001bc0", 7104 ], [ "sym.imp.fwrite", 7120 ], [ "fcn.00001be0", 7136 ], [ "sym.imp.strcpy", 7152 ], [ "fcn.00001c00", 7168 ], [ "fcn.00001c10", 7184 ], [ "fcn.00001c20", 7200 ], [ "fcn.00001c30", 7216 ], [ "fcn.00001c40", 7232 ], [ "fcn.00001c50", 7248 ], [ "fcn.00001c60", 7264 ], [ "fcn.00001c70", 7280 ], [ "fcn.00001c80", 7296 ], [ "fcn.00001ca0", 7328 ], [ "sym.imp.__errno_location", 7344 ], [ "fcn.00001cc0", 7360 ], [ "fcn.00001cd0", 7376 ], [ "fcn.00001ce0", 7392 ], [ "entry0", 7424 ], [ "fcn.00001d20", 7456 ], [ "entry.fini0", 7564 ], [ "entry.init0", 7652 ], [ "fcn.00001e00", 7680 ], [ "fcn.00001e40", 7744 ], [ "fcn.00001fb0", 8112 ], [ "sym.DGifGetScreenDesc", 9200 ], [ "sym.DGifOpenFileHandle", 9696 ], [ "sym.DGifOpenFileName", 10124 ], [ "sym.DGifOpen", 10212 ], [ "fcn.00002984", 10628 ], [ "sym.DGifGetRecordType", 10668 ], [ "sym.DGifGetImageHeader", 10944 ], [ "sym.DGifGetImageDesc", 11648 ], [ "sym.DGifGetExtensionNext", 11884 ], [ "sym.DGifGetExtension", 12132 ], [ "fcn.00003028", 12328 ], [ "sym.DGifSavedExtensionToGCB", 12420 ], [ "fcn.00003104", 12548 ], [ "sym.DGifGetCodeNext", 12800 ], [ "sym.DGifGetLine", 13060 ], [ "sym.DGifGetPixel", 13312 ], [ "fcn.000034f4", 13556 ], [ "sym.DGifGetLZCodes", 13608 ], [ "sym.DGifDecreaseImageCounter", 13864 ], [ "sym.DGifSlurp", 13968 ], [ "fcn.00003900", 14592 ], [ "fcn.00003c20", 15392 ], [ "sym.EGifOpenFileHandle", 15840 ], [ "sym.EGifOpenFileName", 16032 ], [ "sym.EGifOpen", 16192 ], [ "fcn.00004004", 16388 ], [ "fcn.00004104", 16644 ], [ "sym.EGifPutScreenDesc", 16672 ], [ "sym.EGifPutImageDesc", 17440 ], [ "fcn.0000486c", 18540 ], [ "sym.EGifPutPixel", 18688 ], [ "sym.EGifPutExtensionLeader", 18824 ], [ "sym.EGifPutExtensionBlock", 19008 ], [ "sym.EGifPutExtensionTrailer", 19264 ], [ "fcn.00004bf0", 19440 ], [ "sym.EGifPutExtension", 19648 ], [ "sym.EGifPutComment", 20048 ], [ "fcn.00004f2c", 20268 ], [ "sym.EGifGCBToSavedExtension", 20360 ], [ "sym.EGifPutCodeNext", 20708 ], [ "fcn.000051e4", 20964 ], [ "sym.EGifCloseFile", 21004 ], [ "sym.EGifSpew", 21356 ], [ "fcn.00005544", 21828 ], [ "sym.GifMakeMapObject", 21984 ], [ "fcn.000056cc", 22220 ], [ "sym.GifUnionColorMap", 22276 ], [ "fcn.00005988", 22920 ], [ "sym.GifAddExtensionBlock", 22976 ], [ "sym.GifFreeExtensions", 23200 ], [ "fcn.00005b2c", 23340 ], [ "sym.GifMakeSavedImage", 23456 ], [ "fcn.00005d24", 23844 ], [ "fcn.00005de4", 24036 ], [ "fcn.00005f44", 24388 ], [ "fcn.00005fe4", 24548 ], [ "sym.GifDrawRectangle", 24736 ], [ "sym.GifDrawBoxedText8x8", 24896 ], [ "fcn.00006364", 25444 ], [ "sym._InitHashTable", 25456 ], [ "fcn.000063ac", 25516 ], [ "fcn.000063e8", 25576 ], [ "fcn.00006444", 25668 ], [ "sym.GifQuantizeBuffer", 25920 ], [ "fcn.00006d80", 28032 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 3, "note_count": 2, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 88, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 9, "has_debuglink": 1, "little_endian": 1, "dt_flags_1_raw": 1, "pltreloc_count": 58, "build_id_length": 20, "dt_versym_count": 88, "has_aarch64_bti": 1, "has_aarch64_pac": 1, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "program_header_count": 9, "stripped_with_symtab": 0, "has_direct_loader_dep": 1, "executable_segment_count": 1, "load_segment_max_file_size": 34552, "load_segment_max_memory_size": 34552, "section_relocation_group_count": 2, "stripped_metadata_section_count": 8 }, "file": { "size": 67440, "entropy": 3.82 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 1, "basic_blocks": 1082, "code_entropy": 6.29, "data_entropy": 1.29, "overlay_size": 1607, "string_count": 139, "overlay_ratio": 0.02, "avg_complexity": 5.47, "max_complexity": 42, "huge_func_count": 3, "leaf_func_count": 64, "overlay_entropy": 1.46, "tiny_func_count": 60, "avg_basic_blocks": 8.52, "entropy_variance": 3.08, "avg_string_length": 15.37, "max_string_length": 44, "peak_region_bytes": 17408, "code_to_data_ratio": 0.95, "peak_region_entropy": 6.38, "string_length_stddev": 8.75, "largest_section_ratio": 0.31, "sentence_string_count": 18, "sentence_string_ratio": 0.13, "high_entropy_string_count": 0 }, "exports": { "count": 62, "api_count": 62 }, "imports": { "count": 23 }, "strings": { "truncated": 0, "retained_count": 139, "extracted_count": 139 }, "sections": { "count": 25, "code_size": 21616, "entropy_max": 6.37, "entropy_mean": 3.19, "name_entropy": 4.2, "writable_count": 6, "executable_count": 4, "nonstandard_count": 6, "executable_writable_count": 0 }, "functions": { "count": 127 }, "dependencies": { "count": 2 } } }, "traits": [ { "id": "metadata/binary/header/identity::shared-object-type", "conf": 1.0, "crit": 2, "desc": "ELF uses ET_DYN object type" }, { "id": "metadata/binary/linking/runtime::dynamic-loader-needed", "conf": 0.7, "crit": 3, "desc": "ELF needs the Linux dynamic loader" }, { "id": "metadata/binary/linking/runtime::library-loader-dep", "conf": 1.0, "crit": 3, "desc": "ELF directly depends on the dynamic loader" }, { "id": "metadata/binary/symbols/count::many-exports-20", "conf": 1.0, "crit": 2, "desc": "Binary has 20+ exports" }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" } ] } ] } }