{
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.10491574,
        "rte": "az",
        "prob": 0.10491574
      }
    ],
    "prob": 0.10491574,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.10491573810577393,
        "type": "xz"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007728735909040552,
        "type": "elf"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-11T22:11:02Z"
  },
  "path": "rts5208.ko.xz",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "H(Db)Md₂(BiHe)",
        "sha": "82a471173ed1886e2885bc9ff1e3b9fb66c719f059643a2399d3f4247b206092",
        "path": "rts5208.ko.xz",
        "risk": 4,
        "size": 111164,
        "type": "xz",
        "facts": {
          "metrics": {
            "file": {
              "size": 111164,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 111164,
              "peak_region_entropy": 7.84
            }
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/data/parse/payment::managed-card-type-field",
            "conf": 0.7,
            "crit": 3,
            "desc": "Payment-card type field reference",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/binary/linking/static::static-linked",
            "conf": 0.8,
            "crit": 3,
            "desc": "Statically linked binary",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              3,
              8
            ]
          },
          {
            "id": "metadata/file/extension/identity::linux-kernel-module-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "Linux kernel module basename",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/binary/linking/static::elf-needed-libs-zero",
            "conf": 0.9,
            "crit": 2,
            "desc": "ELF imports zero needed libraries",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/hardening/missing::static-linked-heuristic",
            "conf": 0.75,
            "crit": 3,
            "desc": "ELF lacks dynamic linker sections",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              7
            ]
          },
          {
            "id": "metadata/hardening/mitigation::no-pie-struct",
            "conf": 0.6,
            "crit": 3,
            "desc": "Binary not position-independent (no ASLR)"
          },
          {
            "id": "metadata/package/license::gpl-word",
            "conf": 0.7,
            "crit": 2,
            "desc": "References the GPL license",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/binary/layout::binary-format-checked",
            "conf": 1.0,
            "crit": 2,
            "desc": "Binary format is identified",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/binary/linking/static::static-linked-heuristic",
            "conf": 0.75,
            "crit": 3,
            "desc": "ELF lacks dynamic linker sections",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              7
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "E))420S-r400000000000rtp-0rr9100000000000000000000.2sSu0000000000kMy=:002m:k(:dI1onA4fAq7M1POJ5m]04:0SSko1onA40rr91000000rreo1onA40rr91000000SSnp1onA40rr91000001onA46Awak0@@r3m]04:}(@syRE%fqDh",
            "ln": 0
          },
          {
            "b": "000001][S60rr9100961oLFx!CMmZz00000@-}p]sr2*MeubF=tCXhy(A*EnKDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.07+eC00000\u003e(pX-0a]*}4\u003ccD800000KDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.0lf/D0000Af#bKz\u003e(pX-01Qf400000KDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.0d.??00002CniVbHD\u003e\u003eu0lf/00000",
            "ln": 184
          },
          {
            "b": "uVoB]vqPN$wPv+J000000cr9[uUr}(uVQr$BAIT808(l-nG.OYB.\u003eGdx(v(iw]zYjp^W/amr\u0026=(wPI]no\u003c@9:ax9x2A:-P(ay]5bx\u003e7Z}0000003#XEay/80A4Km\u003cB7[#)zxI7+c1FLHAarPlk524SauZ?[wc@qp0cig5CSD%\u0026zEE0\u003cwGV8kazkY",
            "ln": 162663
          },
          {
            "b": "aAz4ax(v)gazbLjash7Kw)]y\u0026wN(}\u003e00000099]BvR/P#Bz\u0026pgy\u0026131vru66BzbkdB7oo9aztXmBp50F0000008ESHxk8l(y-)d%wo8m5B2\u003eA$CQmfJefF$Azddy5wN(](wmPZ(B8%w+fNa)WCNsAJ00000099]BvR/P#Bz\u0026pyByxiiaARpday]3",
            "ln": 163019
          },
          {
            "b": "wo8ycwPz\u0026BB97\u00266x(mMpA==vWgb7WvA==wEe[j\u003eYvrly8uU\u003cp%wO+N8t{8oMfNa($gi+t)vrly8uU\u003cp%wO+N9t{8oMfNa($gi:caAbw@)B97\u0026jwGU]6azb+lv@#B6zxHloiV{b3c3P:%mq^iUAV!p(y?m9#x)a5gq*0e2wO#33q/(C\u0026wG.xXnP2T%B1v",
            "ln": 163272
          },
          {
            "b": "BAIFjaAh15B7FY}vq)tLatw3^fGsp:00000076W:r7f.+uS51JiauPzB6Q*HfNa($gi:]}CQk40CNsAJ0000003#Xec#A)kwGTbUc1FLHw{503uUsy$B-nD^asgLHazb+lv{:s@uVQB9ByO#bjS(4Ydgc4P08l)Dx(e0fay/LmA+fcgay/tcB9htsBzg",
            "ln": 164355
          },
          {
            "b": "AYLr?wgnVe00000002}=uQ!3\u003clTJtYpGpj#f/*B?B-7X@Bz\u003eJcCwheexDPCXfNa($gi-^0000000032ux(mMaq::IvfD+7EB97#4wft/5avFQ}h83d+z/M$0l)bfwv}#zK00000002}=uQ!3\u003clTJtYpGpj#g==:\u003eB-7X@Bz\u003eJcCwheexDPCXfNa($gi-^000000002@wx()\u0026#ay/LmA+fcgaz++ex(\u003eFfx(mTaxK$Y$asFKDdgc4P002Pdash7WaAI72v{%y*eK1k^uVZNjwGTbUfNa)*3ikcTuU\u003cT\u003cyHqd8vru66jS\u003c",
            "ln": 164698
          },
          {
            "b": "AbPMex(mL-c37hvvqfK?wc@qqgxn.xash7\u0026aohB20bM^}ggK:kwlQu\u003ct{8oMfNa($gi:caqDcN%uQvsMqAt{OCQk46CNsBqk#F*NfNa($gi+leatw3^fGsp:05eTzfF(()atw3^fFW\u003eW03%rQCP.6sBrCKtuU1k1vru66Bz\u0026oFwc@rECvbe$zxI7+c1Et.A==vWgb7WGaohB309shPBy=NGCQmOSBz\u0026oQCQi",
            "ln": 168963
          },
          {
            "b": "A=Vtfy\u0026r-)auZ?[wc@rTCva*8Aa9*euVP:2jS(4Y3iiCbx(ChezGxxfBy!#9Cwhejax7W1pAZ5Bv}YN}eK15-wN]d*wPIB8auZ\u00263CQmOSc)-{-3ikcTuVQf$wN]d!A+PDjauZ\u00263CQk46CNsB(wm5??A=L-eByf0cx(w2mjS(C6b}}r63ijNHx(CT/",
            "ln": 169308
          },
          {
            "b": "rz#stqBKI:o*]4QpE!+\u003cmnccqq#/P/m{/g-pe:NYq=DK?aw+-$sUAYvk#4zTml%r:l}HrAaw2r$pF%[Mr7P\u003eX08=lKl)bDbk%[o/nLR-JqCxCRnL-7YqBKIMqDuje",
            "ln": 171147
          },
          {
            "b": "zY*+\u0026fIL8:3ij1Gx()\u0026#ay/kav@0iezY*+(fIL8:3ij1Gx()\u0026#ay/kav@0iezY*!?fIL8:3ijdFz/fhgv{%y*aAR)FwJy}/CQmOw08^xIA^n^9s1CExx=]LYc1FCi0cig5h8l\u003cB08vCPv@Dmbx(n6iB-OWAxKL%[aAg+hxBj-Uvruf!c1HplB97\u0026hBrAZ?c1Et.Aa9\u003c4tp0/=e[F{hauZ?[wc@rQvruf!c1Hply?mGbjS(4Y3ik3NBza(8wl/",
            "ln": 171997
          },
          {
            "b": "auZ?[wc@qz07HWuvqE5@xM4%6zxJ[ivrl0vasgL908(o)l{T^ruSf]\u0026r7e?\u003cfNa($gi:caq::$[p*VN?oGBpICQmOw08(o)l{\u003cWBq^R)\u003eoGBpICQmOw08=]wAa\u0026W3wNxp.A3dp^fNa($icU=gr9gnZxKL%[uU%j\u003cauZ\u00263CQk46CNsBHl[.nelM!-\u003cl)8",
            "ln": 172203
          },
          {
            "b": "atw3^fGsp:08(o)q=D4Zf/*BhCQmOw08(o)lQ\u003cN4iV{b3c3P:%Accb8f\u003cM*.fNa($gi:caAccb8gf({-fNa($gi:caAccb8gHi3:fNa($gi:cal{%]}r9gnZA+cwnB-7+kAa\u0026W3wJy}Wwc@r7q:.:awPI*ezGxwI3ihw4Aa/NUv@(f/C4CXpjS(4Y3ig",
            "ln": 172362
          },
          {
            "b": "aAITyA3fmyvqZd6x(!ufz/b)Zph+e\u0026vqE5@vrb)43ikc\u0026AbY-oByc+Ci3pvbc1Et.k%[vmf/7\u0026$0cqWTv{%y*uVZNjwGTbUfNa($g\u003cxucB7wS/vrb)gk67mwBA}?pauZ\u00263CQmOw0cqZYBz(hv0cqZYBz(g1c389\u0026qE%oEasgLvc37hvA=k!qfNa)*3ihw[iV}HAx()]ec1FbAB0bNyatw3^CNsBCzY\u0026K#A+3q7CXIkvefFIGx(\u003eEzA%.[Cl)a?",
            "ln": 172777
          },
          {
            "b": "zF782az$+may]5bx\u003e7YOAa9^7BA}?pj.ebuvr(j5B7EyPx(n1)y?Wx\u003czGxwLm]h\u003eVwmY*(A+PGmx(v(LqE%oMBy/kgp^W/amr\u0026=(wPI]nv{%y*aAz44wmY^7A==vWgb7WvA==vWgb}lowo8ycwPv=Vy?Ws0j-B[Bi^9hhfFCjnmmgPtfFCgrgb}k",
            "ln": 174636
          }
        ],
        "depth": 1,
        "facts": {
          "sec": [
            [
              ".note.gnu.property",
              64,
              64,
              1.77,
              "alloc"
            ],
            [
              ".note.gnu.build-id",
              128,
              36,
              4.19,
              "alloc"
            ],
            [
              ".note.Linux",
              164,
              48,
              1.97,
              "alloc"
            ],
            [
              ".orc_header",
              212,
              20,
              4.12,
              "alloc"
            ],
            [
              ".text",
              232,
              151314,
              5.56,
              "alloc,executable"
            ],
            [
              ".rela.text",
              323152,
              94416,
              3.07,
              "info_link"
            ],
            [
              ".init.text",
              151552,
              51,
              2.47,
              "alloc,executable"
            ],
            [
              ".rela.init.text",
              417568,
              120,
              1.88,
              "info_link"
            ],
            [
              ".text.unlikely",
              151608,
              2868,
              4.63,
              "alloc,executable"
            ],
            [
              ".rela.text.unlikely",
              417688,
              3624,
              2.64,
              "info_link"
            ],
            [
              ".exit.text",
              154480,
              32,
              2.19,
              "alloc,executable"
            ],
            [
              ".rela.exit.text",
              421312,
              48,
              1.98,
              "info_link"
            ],
            [
              ".rodata",
              154512,
              8183,
              2.34,
              "alloc"
            ],
            [
              ".rela.rodata",
              421360,
              9504,
              1.96,
              "info_link"
            ],
            [
              ".rodata.str1.8",
              162696,
              3877,
              5.05,
              "alloc,merge,strings"
            ],
            [
              "__mcount_loc",
              166573,
              1976,
              0.0,
              "alloc"
            ],
            [
              ".rela__mcount_loc",
              430864,
              5928,
              2.08,
              "info_link"
            ],
            [
              ".rodata.str1.1",
              168549,
              5732,
              5.54,
              "alloc,merge,strings"
            ],
            [
              ".modinfo",
              174281,
              664,
              4.83,
              "alloc"
            ],
            [
              "__param",
              174952,
              240,
              0.5,
              "alloc"
            ],
            [
              ".rela__param",
              436792,
              576,
              1.46,
              "info_link"
            ],
            [
              ".smp_locks",
              175192,
              128,
              0.0,
              "alloc"
            ],
            [
              ".rela.smp_locks",
              437368,
              768,
              1.75,
              "info_link"
            ],
            [
              ".rodata.cst2",
              175320,
              16,
              1.92,
              "alloc,merge"
            ],
            [
              ".retpoline_sites",
              175336,
              12,
              0.0,
              "alloc"
            ],
            [
              ".rela.retpoline_sites",
              438136,
              72,
              1.35,
              "info_link"
            ],
            [
              ".return_sites",
              175348,
              1300,
              0.0,
              "alloc"
            ],
            [
              ".rela.return_sites",
              438208,
              7800,
              2.22,
              "info_link"
            ],
            [
              ".call_sites",
              176648,
              12140,
              0.0,
              "alloc"
            ],
            [
              ".rela.call_sites",
              446008,
              72840,
              2.45,
              "info_link"
            ],
            [
              ".ibt_endbr_seal",
              188788,
              504,
              0.0,
              "alloc"
            ],
            [
              ".rela.ibt_endbr_seal",
              518848,
              3024,
              1.94,
              "info_link"
            ],
            [
              ".orc_unwind",
              189292,
              18780,
              3.06,
              "alloc"
            ],
            [
              ".orc_unwind_ip",
              208072,
              12520,
              0.0,
              "alloc"
            ],
            [
              ".rela.orc_unwind_ip",
              521872,
              75120,
              2.44,
              "info_link"
            ],
            [
              "__bug_table",
              220592,
              12,
              1.42,
              "write,alloc"
            ],
            [
              ".rela__bug_table",
              596992,
              48,
              1.01,
              "info_link"
            ],
            [
              "__jump_table",
              220608,
              4448,
              0.0,
              "write,alloc"
            ],
            [
              ".rela__jump_table",
              597040,
              20016,
              2.39,
              "info_link"
            ],
            [
              "__patchable_function_entries",
              225056,
              1984,
              0.0,
              "write,alloc"
            ],
            [
              ".rela__patchable_function_entries",
              617056,
              5952,
              2.02,
              "info_link"
            ],
            [
              ".data",
              227040,
              1876,
              0.58,
              "write,alloc"
            ],
            [
              ".rela.data",
              623008,
              3888,
              1.91,
              "info_link"
            ],
            [
              ".exit.data",
              228920,
              8,
              0.0,
              "write,alloc"
            ],
            [
              ".rela.exit.data",
              626896,
              24,
              0.74,
              "info_link"
            ],
            [
              ".init.data",
              228928,
              8,
              0.0,
              "write,alloc"
            ],
            [
              ".rela.init.data",
              626920,
              24,
              0.74,
              "info_link"
            ],
            [
              ".printk_index",
              228936,
              224,
              0.0,
              "write,alloc"
            ],
            [
              ".rela.printk_index",
              626944,
              672,
              1.45,
              "info_link"
            ],
            [
              ".data..percpu",
              229160,
              624,
              0.0,
              "write,alloc"
            ],
            [
              "__dyndbg",
              229784,
              15568,
              0.56,
              "write,alloc"
            ],
            [
              ".rela__dyndbg",
              627616,
              26688,
              2.18,
              "info_link"
            ],
            [
              ".data..once",
              245352,
              1,
              0.0,
              "write,alloc"
            ],
            [
              ".static_call_sites",
              245353,
              8,
              0.0,
              "write,alloc"
            ],
            [
              ".rela.static_call_sites",
              654304,
              48,
              1.03,
              "info_link"
            ],
            [
              ".gnu.linkonce.this_module",
              245368,
              1280,
              0.06,
              "write,alloc"
            ],
            [
              ".rela.gnu.linkonce.this_module",
              654352,
              48,
              1.29,
              "info_link"
            ],
            [
              ".comment",
              246648,
              228,
              3.72,
              "merge,strings"
            ],
            [
              ".BTF",
              246876,
              28015,
              5.14,
              ""
            ],
            [
              ".symtab",
              274896,
              30144,
              2.66,
              ""
            ],
            [
              ".strtab",
              305040,
              18110,
              4.91,
              ""
            ],
            [
              ".shstrtab",
              654400,
              636,
              4.3,
              ""
            ]
          ],
          "metrics": {
            "elf": {
              "bits": 64,
              "entry": 0,
              "has_got": 0,
              "has_plt": 0,
              "has_note": 1,
              "has_symtab": 1,
              "note_count": 3,
              "nx_enabled": 1,
              "dynrel_count": 0,
              "dynsym_count": 0,
              "has_eh_frame": 0,
              "no_gnu_stack": 0,
              "stack_canary": 1,
              "symtab_count": 1256,
              "dynrela_count": 0,
              "little_endian": 1,
              "pltreloc_count": 0,
              "executable_stack": 0,
              "wx_segment_count": 0,
              "comment_entry_count": 12,
              "direct_syscall_count": 1,
              "program_header_count": 0,
              "stripped_with_symtab": 1,
              "comment_distinct_count": 1,
              "load_segment_max_file_size": 0,
              "load_segment_max_memory_size": 0,
              "section_relocation_group_count": 23,
              "stripped_metadata_section_count": 5
            },
            "file": {
              "size": 659200,
              "entropy": 3.97
            },
            "binary": {
              "is_pie": 0,
              "has_overlay": 1,
              "is_stripped": 0,
              "code_entropy": 5.54,
              "data_entropy": 0.38,
              "overlay_size": 4164,
              "string_count": 2173,
              "overlay_ratio": 0.01,
              "overlay_entropy": 1.54,
              "entropy_variance": 2.67,
              "avg_string_length": 17.81,
              "max_string_length": 66,
              "peak_region_bytes": 51200,
              "code_to_data_ratio": 0.86,
              "peak_region_entropy": 5.88,
              "string_length_stddev": 7.94,
              "largest_section_ratio": 0.23,
              "sentence_string_count": 226,
              "sentence_string_ratio": 0.1,
              "high_entropy_string_count": 0
            },
            "sections": {
              "count": 65,
              "code_size": 154265,
              "entropy_max": 5.56,
              "entropy_mean": 1.86,
              "name_entropy": 4.25,
              "writable_count": 13,
              "executable_count": 4,
              "nonstandard_count": 57,
              "executable_writable_count": 0
            },
            "dependencies": {
              "count": 0
            }
          }
        },
        "id": 1,
        "mol": "H(Db)Md₂(BiHe)",
        "path": "rts5208.ko.xz!!rts5208.ko",
        "pid": 0,
        "risk": 4,
        "sha": "37240fda108f6690ea094146c3442cdc3aec109eb59f25330fb9067858a9d823",
        "size": 659200,
        "traits": [
          {
            "id": "metadata/binary/layout::binary-format-checked",
            "conf": 1.0,
            "crit": 2,
            "desc": "Binary format is identified",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/binary/linking/static::elf-needed-libs-zero",
            "conf": 0.9,
            "crit": 2,
            "desc": "ELF imports zero needed libraries",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/extension/identity::linux-kernel-module-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "Linux kernel module basename",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/hardening/mitigation::no-pie-struct",
            "conf": 0.6,
            "crit": 3,
            "desc": "Binary not position-independent (no ASLR)"
          },
          {
            "id": "metadata/package/license::gpl-word",
            "conf": 0.7,
            "crit": 2,
            "desc": "References the GPL license",
            "spans": [
              [
                174684,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/parse/payment::managed-card-type-field",
            "conf": 0.7,
            "crit": 3,
            "desc": "Payment-card type field reference",
            "spans": [
              [
                172061,
                10
              ],
              [
                172841,
                11
              ]
            ]
          },
          {
            "id": "metadata/binary/linking/static::static-linked-heuristic",
            "conf": 0.75,
            "crit": 3,
            "desc": "ELF lacks dynamic linker sections",
            "uses": [
              0
            ],
            "spans": [
              [
                0,
                16
              ]
            ]
          },
          {
            "id": "metadata/hardening/missing::static-linked-heuristic",
            "conf": 0.75,
            "crit": 3,
            "desc": "ELF lacks dynamic linker sections",
            "uses": [
              0
            ],
            "spans": [
              [
                0,
                16
              ]
            ]
          },
          {
            "id": "metadata/binary/linking/static::static-linked",
            "conf": 0.8,
            "crit": 3,
            "desc": "Statically linked binary",
            "uses": [
              1,
              6
            ],
            "spans": [
              [
                0,
                25
              ]
            ]
          }
        ],
        "type": "elf"
      }
    ],
    "rev": "b3dc8",
    "v": "8"
  }
}