{ "ml": { "v": "7", "eng": "2.12.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.03447914, "rte": "az", "prob": 0.03447914 }, { "cls": 0, "raw": 0.003399213, "rte": "az/native", "prob": 0.003399213 }, { "cls": 0, "raw": 0.0054841936, "rte": "az/elf", "prob": 0.0054841936 } ], "prob": 0.03447914, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.03447914123535156, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-30T23:56:32Z" }, "path": "vicar.so", "raw": { "v": "8", "rev": "c1ea9", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000%2!g0rr910000000000kMy=:00000c\u003c6FI0000000000kMA+z2()i\u003c8VQ=R0rr911POJ500000000000000000000000000000004!fJ0000004!f", "ln": 0 }, { "b": "i95ud000000SSi2hVJ*T0rr911][S600000bMFIUhVJ*Th#\u0026{UbMeo$Rm+CG000000000000000000000000000000000000@@Vd01]ni000000000000000000000@%8pHYELS000000000000000Jrf7W5=.[i00000000000000000000Arugv5=.[", "ln": 632 }, { "b": "bM!2D5=-sukQDEh00000wb(Pf00000tMT%a5=-suQ:u6w000005c8Xg000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib08drvvqGHIlVl*Xvrb]VuTE\u003c", "ln": 2000 }, { "b": "lU{WZwKpiKvGo8uxh8/Ex\u003e7{EC4CMk090SLz*a]:xk7\u003c\u003emr\u0026rNAcb/jzua3JB97\u00262yHpN+yHpWZx(0=RuTX1%wPz)1w)]y\u002606$amB.L(cnO})GwDkRtvpRYvz^(4UBy+CVuT[h6AaJx=uU\u003cT\u003c08drvvqGHxz/6D4A+bkHwPQHXvp%duCYWImBo2lJBv*sTxjTCGy\u0026o", "ln": 2360 }, { "b": "e]$}-f!-Pzx\u003c$N8B8JV?0bMf$y?W^fCR9ujA:@=vg+J\u0026/e?)uHx\u003e7N(e]$}hm[=GvlTIP3f/G85oI4MruOTk\u0026h#\u0026{U0000000ic30096200962009620096200ri40096200962009620096200ri40096200ri40096500962009620096200ic300ri", "ln": 2969 }, { "b": "[bJET5Mg)\u00265p%$CaoAUo[bJET5MRf)5txk*aoAUo[bJET5N4D}5w!HhaoAUo[bJET5NE-#5Ai+NaoAUo[bJET5N[335cq@@aoAUo[bJET5Osr75f.jsaoAUo[bJET5O:Pb5jcFYaoAUo[bJET5Pf(f5mL:7aoAUo[bJET5PQej5p$1DaoAUo[bJET5Q3Cn5txn?aoAUo[bJET5QD.r", "ln": 4992 }, { "b": "nM[K.pd!tRf?zuBp^!k?rZ/[+nL-8*nKJKUe?O!fe?ZZMwmY!5flR5tvr9#g00000x(do\u003ewNxd?w]w!njS(d.z/fSraw3AUxjTULw]w!wdiIw=oItA^x(do\u003ewNxd?w]xm+", "ln": 9940 }, { "b": "wDhYg0035lwmYW4nO})GwGTuUzeBAkx\u003e7N[x(v(il2HiQqE%@\u003cx\u003eqD@yYEHclQsPI0038vx()]!nKC^wnO})GwDk!Lx()]!nKC^wnO})GwDkRtvpSzglQsQwzdd5", "ln": 10634 }, { "b": "000000000000000000000000000000000000000000000000000000000000kO:t100000(\u003eGH2000000rr9100000H64zQ000000rr9100000PAte]000000rr9100000SSJk3000004GDFe00000ZYKMp000003\u0026*nc0000001]ni000004fcwd00000V)C+M0000082%Tp00000", "ln": 64888 }, { "b": "vR]K^x\u003e7{*z/Pzvh.G88hz3Tqe[wK5B.pW*\u003eE]rc}++8Ju(G@Y1Mr.!!eRY[vk.L9gC*^uf\u003eK%ah!s)8gb*)xhdOH1i50a0gbQ\u003cEh8WoCwJ8kLwNY^{00000Ioz\u003e}04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaK6iC(PEmz//LyxkR\u0026AvS=y3wg.Ia04}]4BUmuoB7+Lawo\u00266lD2iKlwo\u00266lBAdvlxkR\u0026AC4CYnx(v\u003e?", "ln": 65976 } ], "mol": "Md₃(BiBkHe₂)", "sha": "7b11dfd7d44916877b52a540b0f543ac638ecbc7e7ee82bdcf42e5e80b9040de", "path": "vicar.so", "risk": 4, "size": 68072, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "RegisterVICARImage" ], [ "UnregisterVICARImage" ] ], "imp": [ [ "", "isoc23_strtoul" ], [ "", "UnregisterMagickInfo" ], [ "", "SyncAuthenticPixels" ], [ "", "ReadBlobByte" ], [ "", "EOFBlob" ], [ "", "FormatLocaleString" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "SetImageProperty" ], [ "", "SetQuantumFormat" ], [ "", "GetQuantumPixels" ], [ "", "cxa_finalize" ], [ "", "SetQuantumImageType" ], [ "", "ExportQuantumPixels" ], [ "", "IsEventLogging" ], [ "", "DestroyString" ], [ "", "LocaleCompare" ], [ "", "SetImageProgress" ], [ "", "AcquireMagickInfo" ], [ "", "QueueAuthenticPixels" ], [ "", "GetExceptionMessage" ], [ "", "memset" ], [ "", "DestroyImage" ], [ "", "DestroyQuantumInfo" ], [ "", "LogMagickEvent" ], [ "", "stack_chk_fail" ], [ "", "SetImageColorspace" ], [ "", "gmon_start__" ], [ "", "stack_chk_guard" ], [ "", "GetVirtualPixels" ], [ "", "RegisterMagickInfo" ], [ "", "TransformImageColorspace" ], [ "", "ReadBlobStream" ], [ "", "TellBlob" ], [ "", "AcquireImage" ], [ "", "isoc23_strtol" ], [ "", "CopyMagickString" ], [ "", "ctype_b_loc" ], [ "", "WriteBlob" ], [ "", "LocaleNCompare" ], [ "", "ImportQuantumPixels" ], [ "", "ThrowMagickException" ], [ "", "SetImageExtent" ], [ "", "AcquireQuantumInfo" ], [ "", "OpenBlob" ], [ "", "GetFirstImageInList" ], [ "", "GetQuantumExtent" ], [ "", "CloseBlob" ], [ "", "ITM_registerTMCloneTable" ], [ "", "DestroyImageList" ], [ "", "assert_fail" ], [ "", "errno_location" ], [ "", "LocaleLower" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.69, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.19, "alloc" ], [ ".gnu.hash", 640, 40, 2.52, "alloc" ], [ ".dynsym", 680, 1368, 1.05, "alloc" ], [ ".dynstr", 2048, 991, 5.0, "alloc" ], [ ".gnu.version", 3040, 114, 1.4, "alloc" ], [ ".gnu.version_r", 3160, 80, 2.49, "alloc" ], [ ".rela.dyn", 3240, 192, 1.87, "alloc" ], [ ".rela.plt", 3432, 1176, 1.64, "alloc,info_link" ], [ ".init", 4608, 28, 3.8, "alloc,executable" ], [ ".plt", 4640, 816, 4.37, "alloc,executable" ], [ ".text", 5472, 4436, 6.13, "alloc,executable" ], [ ".fini", 9908, 24, 3.72, "alloc,executable" ], [ ".rodata", 9936, 815, 5.21, "alloc" ], [ ".eh_frame_hdr", 10752, 84, 3.43, "alloc" ], [ ".eh_frame", 10840, 680, 5.21, "alloc" ], [ ".init_array", 64936, 8, 1.06, "write,alloc" ], [ ".fini_array", 64944, 8, 1.06, "write,alloc" ], [ ".dynamic", 64952, 512, 1.52, "write,alloc" ], [ ".got", 65464, 48, 0.44, "write,alloc" ], [ ".got.plt", 65512, 416, 1.02, "write,alloc" ], [ ".data", 65928, 8, 1.55, "write,alloc" ], [ ".gnu_debugaltlink", 65936, 87, 5.31, "" ], [ ".gnu_debuglink", 66024, 52, 4.3, "" ], [ ".shstrtab", 66076, 264, 4.26, "" ] ], "tgt": [ "entry0", "fcn.00001580", "sym.imp.AcquireImage", "sym.imp.AcquireMagickInfo", "sym.imp.AcquireQuantumInfo", "sym.imp.CloseBlob", "sym.imp.CopyMagickString", "sym.imp.DestroyImage", "sym.imp.DestroyImageList", "sym.imp.DestroyQuantumInfo", "sym.imp.DestroyString", "sym.imp.EOFBlob", "sym.imp.ExportQuantumPixels", "sym.imp.FormatLocaleString", "sym.imp.GetExceptionMessage", "sym.imp.GetFirstImageInList", "sym.imp.GetQuantumExtent", "sym.imp.GetQuantumPixels", "sym.imp.GetVirtualPixels", "sym.imp.ImportQuantumPixels", "sym.imp.IsEventLogging", "sym.imp.LocaleCompare", "sym.imp.LocaleLower", "sym.imp.LocaleNCompare", "sym.imp.LogMagickEvent", "sym.imp.OpenBlob", "sym.imp.QueueAuthenticPixels", "sym.imp.ReadBlobByte", "sym.imp.ReadBlobStream", "sym.imp.RegisterMagickInfo", "sym.imp.SetImageColorspace", "sym.imp.SetImageExtent", "sym.imp.SetImageProgress", "sym.imp.SetImageProperty", "sym.imp.SetQuantumFormat", "sym.imp.SetQuantumImageType", "sym.imp.SyncAuthenticPixels", "sym.imp.TellBlob", "sym.imp.ThrowMagickException", "sym.imp.TransformImageColorspace", "sym.imp.WriteBlob", "sym.imp.__assert_fail", "sym.imp.__ctype_b_loc", "sym.imp.__cxa_finalize", "sym.imp.__errno_location", "sym.imp.__isoc23_strtol", "sym.imp.__isoc23_strtoul", "sym.imp.__stack_chk_fail", "sym.imp.memset" ], "funcs": [ [ "fcn.00001204", 4612 ], [ "fcn.00001224", 4644 ], [ "sym.imp.__isoc23_strtoul", 4672 ], [ "sym.imp.UnregisterMagickInfo", 4688 ], [ "sym.imp.SyncAuthenticPixels", 4704 ], [ "sym.imp.ReadBlobByte", 4720 ], [ "sym.imp.EOFBlob", 4736 ], [ "sym.imp.FormatLocaleString", 4752 ], [ "sym.imp.SetImageProperty", 4768 ], [ "sym.imp.SetQuantumFormat", 4784 ], [ "sym.imp.GetQuantumPixels", 4800 ], [ "sym.imp.__cxa_finalize", 4816 ], [ "sym.imp.SetQuantumImageType", 4832 ], [ "sym.imp.ExportQuantumPixels", 4848 ], [ "sym.imp.IsEventLogging", 4864 ], [ "sym.imp.DestroyString", 4880 ], [ "sym.imp.LocaleCompare", 4896 ], [ "sym.imp.SetImageProgress", 4912 ], [ "sym.imp.AcquireMagickInfo", 4928 ], [ "sym.imp.QueueAuthenticPixels", 4944 ], [ "sym.imp.GetExceptionMessage", 4960 ], [ "sym.imp.memset", 4976 ], [ "sym.imp.DestroyImage", 4992 ], [ "sym.imp.DestroyQuantumInfo", 5008 ], [ "sym.imp.LogMagickEvent", 5024 ], [ "sym.imp.__stack_chk_fail", 5040 ], [ "sym.imp.SetImageColorspace", 5056 ], [ "sym.imp.GetVirtualPixels", 5088 ], [ "sym.imp.RegisterMagickInfo", 5104 ], [ "sym.imp.TransformImageColorspace", 5120 ], [ "sym.imp.ReadBlobStream", 5136 ], [ "sym.imp.TellBlob", 5152 ], [ "sym.imp.AcquireImage", 5168 ], [ "sym.imp.__isoc23_strtol", 5184 ], [ "sym.imp.CopyMagickString", 5200 ], [ "sym.imp.__ctype_b_loc", 5216 ], [ "sym.imp.WriteBlob", 5232 ], [ "sym.imp.LocaleNCompare", 5248 ], [ "sym.imp.ImportQuantumPixels", 5264 ], [ "sym.imp.ThrowMagickException", 5280 ], [ "sym.imp.SetImageExtent", 5296 ], [ "sym.imp.AcquireQuantumInfo", 5312 ], [ "sym.imp.OpenBlob", 5328 ], [ "sym.imp.GetFirstImageInList", 5344 ], [ "sym.imp.GetQuantumExtent", 5360 ], [ "sym.imp.CloseBlob", 5376 ], [ "sym.imp.DestroyImageList", 5392 ], [ "sym.imp.__assert_fail", 5408 ], [ "sym.imp.__errno_location", 5424 ], [ "sym.imp.LocaleLower", 5440 ], [ "entry0", 5472 ], [ "fcn.00001580", 5504 ], [ "entry.fini0", 5612 ], [ "entry.init0", 5696 ], [ "fcn.00001664", 5732 ], [ "fcn.000016e4", 5860 ], [ "fcn.00001af4", 6900 ], [ "sym.RegisterVICARImage", 9792 ], [ "sym.UnregisterVICARImage", 9892 ], [ "fcn.000026b8", 9912 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 3, "note_count": 2, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 57, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 8, "has_debuglink": 1, "little_endian": 1, "pltreloc_count": 49, "build_id_length": 20, "dt_versym_count": 57, "has_aarch64_bti": 1, "has_aarch64_pac": 1, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "program_header_count": 9, "stripped_with_symtab": 0, "has_direct_loader_dep": 1, "executable_segment_count": 1, "load_segment_max_file_size": 11520, "load_segment_max_memory_size": 11520, "section_relocation_group_count": 2, "stripped_metadata_section_count": 8 }, "file": { "size": 68072, "entropy": 1.39 }, "binary": { "is_pie": 0, "is_stripped": 1, "basic_blocks": 241, "code_entropy": 5.83, "data_entropy": 1.25, "string_count": 111, "avg_complexity": 3.08, "max_complexity": 86, "huge_func_count": 1, "leaf_func_count": 53, "tiny_func_count": 53, "avg_basic_blocks": 4.02, "entropy_variance": 2.83, "avg_string_length": 17.04, "max_string_length": 164, "peak_region_bytes": 6144, "code_to_data_ratio": 0.84, "peak_region_entropy": 6.11, "string_length_stddev": 17.04, "largest_section_ratio": 0.07, "sentence_string_count": 8, "sentence_string_ratio": 0.07, "high_entropy_string_count": 0 }, "exports": { "count": 2, "api_count": 2 }, "imports": { "count": 52 }, "strings": { "truncated": 0, "retained_count": 111, "extracted_count": 111 }, "sections": { "count": 27, "code_size": 5304, "entropy_max": 6.13, "entropy_mean": 2.97, "name_entropy": 4.22, "writable_count": 7, "executable_count": 4, "nonstandard_count": 7, "executable_writable_count": 0 }, "functions": { "count": 60 }, "dependencies": { "count": 3 } } }, "traits": [ { "id": "metadata/binary/linking/runtime::dynamic-loader-needed", "conf": 0.7, "crit": 3, "desc": "ELF needs the Linux dynamic loader" }, { "id": "metadata/binary/linking/runtime::library-loader-dep", "conf": 1.0, "crit": 3, "desc": "ELF directly depends on the dynamic loader" }, { "id": "metadata/hardening/mitigation::partial-relro", "conf": 0.8, "crit": 3, "desc": "Partial RELRO (GOT partially protected)" }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" } ] } ] } }