{ "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.03431937, "rte": "az", "prob": 0.03431937 }, { "cls": 0, "raw": 0.003399213, "rte": "az/native", "prob": 0.003399213 }, { "cls": 0, "raw": 0.0054830313, "rte": "az/elf", "prob": 0.0054830313 } ], "prob": 0.03431937, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.03431937098503113, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-30T23:09:19Z" }, "path": "rla.so", "raw": { "v": "8", "rev": "c1ea9", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000%2!g0rr910000000000kMy=:00000R#=#10000000000kMA+z2()i\u003c8VQ=R0rr911POJ5000000000000000000000000000000bQ0c/00000bQ0c", "ln": 0 }, { "b": "}3gJ@000000SSi2cJBbD0rr911][S60fzZh00000cJBbDc\u0026:kE4wLa@=.WbP000000000000000000000000000000000000@@VdXd5Ar000000000000000000000@%8p2MT#b000000000000000y61wn5=.[i000000000000000000009033t5=.[", "ln": 632 }, { "b": "aP.Sz5=-suZ-isO00000q#=)#00000r@@v45=-suarpBZ000005c8Xg000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0af8OBywV{uT)++uUsH\u0026A+2d", "ln": 1616 }, { "b": "zF@(#z!0i$x(v\u003e?m}D^hCW\u003er7BzkVho\u003ewx!vp%cKl$HBYA=lk4BAh8kx8(pCB97\u00262yHpN+yHpWZx(0=RuTX1%wPz)1w)]y\u002608^xvx(!xcA-bN%nO})GwDk2aADL#owLDPCx\u003e7{IzF0!!qE%GPB97#lo\u003c}WGv@1UNw]vVHzGor3x(!xcA-bN%nO})GwDk.FA+e($B94", "ln": 2132 }, { "b": "f/yU9z.r:#0bMvUv\u003eI?ve\u0026AYCwg.RizGQgQvpsg^xF}X1B8JV=0ch):e]$}hm[=GvlTIP3f/G7j00000000310rrc20rrc20rrf30rrc20rrc20rrc20rrc20SSl30rrf30rri40rrc20rrc20rrc20rrc20rrc20rrc20SSo40rrc20rr910rrc2Qxgz", "ln": 2320 }, { "b": "5ch=)5JShM5w!EgaoAUo5ch=)5K5FQ5Ai.MaoAUo5ch=)5KF+U5cq]}aoAUo5ch=)5K]4Y5f.graoAUo5ch=)5Lts:5jcCXaoAUo5ch=)5L+Q!5mLZ6aoAUo5ch=)5Mg)\u00265p%$CaoAUo5ch=)5MRf)5txk*aoAUo5ch=)5N4D}5w!HhaoAUo5ch=)5NE-#5Ai+NaoAUo5ch=)5N[33", "ln": 3808 }, { "b": "ht)E\u003cko*oX@D(qU@r04Z@D(wVZAS\u003chZYN@{e?O!fe?ZZMwmY!5flg(qe[j\u003eY00000x(do\u003ewNxd?w]w!njS(d.z/fSraw3AUxjTULw]w!wdiIw=oItA^x(do\u003ewNxd?w]xm+", "ln": 7468 }, { "b": "00000000000000000000000000000000000000000000000000000000000001/hh00000TpLvi000000rr9100000E/YPI000000rr9100000Nf0u*000000rr9100000Qxgz}000004GDFe00000XDh:h000003\u0026*nc00000Xd5Ar000004fcwd00000fDyb[0000082%Tp00000", "ln": 64888 }, { "b": "vR]K^x\u003e7{*z/Pzvh.G88hz3Tqe[wK5B.pW*\u003eE]rc}++8Ju(G@Y1Mr.!!eRY[vkoU$w?U}$vLP?@gCyWvh-9AGh8O#8vLxVKf/-\u0026afGg)FwJqwNwNY^{00000[3!)!04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaK6iC(PEmz//LyxkR\u0026AvS=y3wg.Ia04}]4BUmuoB7+Lawo\u00266lD2iKlwo\u00266lBAdvlxkR\u0026AC4CYnx(v\u003e?", "ln": 65848 } ], "mol": "Md₃(BiBkHe₂)", "sha": "87ae32dcfe58149b7d24e466f2ec4f91147a2d33abdd85b314ec60720a74fb06", "path": "rla.so", "risk": 4, "size": 67944, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "RegisterRLAImage" ], [ "UnregisterRLAImage" ] ], "imp": [ [ "", "UnregisterMagickInfo" ], [ "", "SyncAuthenticPixels" ], [ "", "ReadBlobByte" ], [ "", "EOFBlob" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "SetImageProperty" ], [ "", "cxa_finalize" ], [ "", "ReadBlobMSBShort" ], [ "", "IsEventLogging" ], [ "", "DestroyString" ], [ "", "SetImageProgress" ], [ "", "AcquireMagickInfo" ], [ "", "SeekBlob" ], [ "", "GetExceptionMessage" ], [ "", "ReadBlobMSBSignedLong" ], [ "", "memset" ], [ "", "LogMagickEvent" ], [ "", "AcquireQuantumMemory" ], [ "", "stack_chk_fail" ], [ "", "gmon_start__" ], [ "", "stack_chk_guard" ], [ "", "RegisterMagickInfo" ], [ "", "AcquireImage" ], [ "", "ReadBlobMSBSignedShort" ], [ "", "ThrowMagickException" ], [ "", "SetImageExtent" ], [ "", "ReadBlob" ], [ "", "OpenBlob" ], [ "", "GetFirstImageInList" ], [ "", "CloseBlob" ], [ "", "ITM_registerTMCloneTable" ], [ "", "DestroyImageList" ], [ "", "RelinquishMagickMemory" ], [ "", "assert_fail" ], [ "", "errno_location" ], [ "", "GetAuthenticPixels" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.69, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.19, "alloc" ], [ ".gnu.hash", 640, 40, 2.52, "alloc" ], [ ".dynsym", 680, 984, 1.03, "alloc" ], [ ".dynstr", 1664, 715, 5.0, "alloc" ], [ ".gnu.version", 2380, 82, 1.34, "alloc" ], [ ".gnu.version_r", 2464, 64, 2.29, "alloc" ], [ ".rela.dyn", 2528, 192, 1.82, "alloc" ], [ ".rela.plt", 2720, 792, 1.53, "alloc,info_link" ], [ ".init", 3512, 28, 3.9, "alloc,executable" ], [ ".plt", 3552, 560, 4.42, "alloc,executable" ], [ ".text", 4128, 3344, 6.14, "alloc,executable" ], [ ".fini", 7472, 24, 3.72, "alloc,executable" ], [ ".rodata", 7496, 461, 4.8, "alloc" ], [ ".eh_frame_hdr", 7960, 68, 3.38, "alloc" ], [ ".eh_frame", 8032, 452, 5.01, "alloc" ], [ ".init_array", 64936, 8, 0.54, "write,alloc" ], [ ".fini_array", 64944, 8, 1.06, "write,alloc" ], [ ".dynamic", 64952, 512, 1.54, "write,alloc" ], [ ".got", 65464, 48, 0.44, "write,alloc" ], [ ".got.plt", 65512, 288, 1.01, "write,alloc" ], [ ".data", 65800, 8, 1.55, "write,alloc" ], [ ".gnu_debugaltlink", 65808, 87, 5.31, "" ], [ ".gnu_debuglink", 65896, 52, 4.2, "" ], [ ".shstrtab", 65948, 264, 4.26, "" ] ], "tgt": [ "entry0", "fcn.00001040", "sym.imp.AcquireImage", "sym.imp.AcquireMagickInfo", "sym.imp.AcquireQuantumMemory", "sym.imp.CloseBlob", "sym.imp.DestroyImageList", "sym.imp.DestroyString", "sym.imp.EOFBlob", "sym.imp.GetAuthenticPixels", "sym.imp.GetExceptionMessage", "sym.imp.GetFirstImageInList", "sym.imp.IsEventLogging", "sym.imp.LogMagickEvent", "sym.imp.OpenBlob", "sym.imp.ReadBlob", "sym.imp.ReadBlobByte", "sym.imp.ReadBlobMSBShort", "sym.imp.ReadBlobMSBSignedLong", "sym.imp.ReadBlobMSBSignedShort", "sym.imp.RegisterMagickInfo", "sym.imp.RelinquishMagickMemory", "sym.imp.SeekBlob", "sym.imp.SetImageExtent", "sym.imp.SetImageProgress", "sym.imp.SetImageProperty", "sym.imp.SyncAuthenticPixels", "sym.imp.ThrowMagickException", "sym.imp.__assert_fail", "sym.imp.__cxa_finalize", "sym.imp.__errno_location", "sym.imp.__stack_chk_fail", "sym.imp.memset" ], "funcs": [ [ "fcn.00000dbc", 3516 ], [ "fcn.00000de4", 3556 ], [ "sym.imp.UnregisterMagickInfo", 3584 ], [ "sym.imp.SyncAuthenticPixels", 3600 ], [ "sym.imp.ReadBlobByte", 3616 ], [ "sym.imp.EOFBlob", 3632 ], [ "sym.imp.SetImageProperty", 3648 ], [ "sym.imp.__cxa_finalize", 3664 ], [ "sym.imp.ReadBlobMSBShort", 3680 ], [ "sym.imp.IsEventLogging", 3696 ], [ "sym.imp.DestroyString", 3712 ], [ "sym.imp.SetImageProgress", 3728 ], [ "sym.imp.AcquireMagickInfo", 3744 ], [ "sym.imp.SeekBlob", 3760 ], [ "sym.imp.GetExceptionMessage", 3776 ], [ "sym.imp.ReadBlobMSBSignedLong", 3792 ], [ "sym.imp.memset", 3808 ], [ "sym.imp.LogMagickEvent", 3824 ], [ "sym.imp.AcquireQuantumMemory", 3840 ], [ "sym.imp.__stack_chk_fail", 3856 ], [ "sym.imp.RegisterMagickInfo", 3888 ], [ "sym.imp.AcquireImage", 3904 ], [ "sym.imp.ReadBlobMSBSignedShort", 3920 ], [ "sym.imp.ThrowMagickException", 3936 ], [ "sym.imp.SetImageExtent", 3952 ], [ "sym.imp.ReadBlob", 3968 ], [ "sym.imp.OpenBlob", 3984 ], [ "sym.imp.GetFirstImageInList", 4000 ], [ "sym.imp.CloseBlob", 4016 ], [ "sym.imp.DestroyImageList", 4032 ], [ "sym.imp.RelinquishMagickMemory", 4048 ], [ "sym.imp.__assert_fail", 4064 ], [ "sym.imp.__errno_location", 4080 ], [ "sym.imp.GetAuthenticPixels", 4096 ], [ "entry0", 4128 ], [ "fcn.00001040", 4160 ], [ "entry.fini0", 4268 ], [ "entry.init0", 4356 ], [ "fcn.00001124", 4388 ], [ "fcn.00001138", 4408 ], [ "sym.RegisterRLAImage", 7360 ], [ "fcn.00001d24", 7460 ], [ "fcn.00001d34", 7476 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 3, "note_count": 2, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 41, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 8, "has_debuglink": 1, "little_endian": 1, "pltreloc_count": 33, "build_id_length": 20, "dt_versym_count": 41, "has_aarch64_bti": 1, "has_aarch64_pac": 1, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "program_header_count": 9, "stripped_with_symtab": 0, "has_direct_loader_dep": 1, "executable_segment_count": 1, "load_segment_max_file_size": 8484, "load_segment_max_memory_size": 8484, "section_relocation_group_count": 2, "stripped_metadata_section_count": 8 }, "file": { "size": 67944, "entropy": 1.09 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 1, "basic_blocks": 150, "code_entropy": 5.86, "data_entropy": 1.29, "overlay_size": 1732, "string_count": 85, "overlay_ratio": 0.03, "avg_complexity": 2.56, "max_complexity": 59, "huge_func_count": 1, "leaf_func_count": 38, "overlay_entropy": 1.45, "tiny_func_count": 38, "avg_basic_blocks": 3.49, "entropy_variance": 2.86, "avg_string_length": 16.08, "max_string_length": 66, "peak_region_bytes": 4096, "code_to_data_ratio": 0.82, "peak_region_entropy": 6.18, "string_length_stddev": 10.17, "largest_section_ratio": 0.05, "sentence_string_count": 5, "sentence_string_ratio": 0.06, "high_entropy_string_count": 0 }, "exports": { "count": 2, "api_count": 2 }, "imports": { "count": 36 }, "strings": { "truncated": 0, "retained_count": 85, "extracted_count": 85 }, "sections": { "count": 27, "code_size": 3956, "entropy_max": 6.14, "entropy_mean": 2.91, "name_entropy": 4.22, "writable_count": 7, "executable_count": 4, "nonstandard_count": 7, "executable_writable_count": 0 }, "functions": { "count": 43 }, "dependencies": { "count": 3 } } }, "traits": [ { "id": "metadata/binary/linking/runtime::dynamic-loader-needed", "conf": 0.7, "crit": 3, "desc": "ELF needs the Linux dynamic loader" }, { "id": "metadata/binary/linking/runtime::library-loader-dep", "conf": 1.0, "crit": 3, "desc": "ELF directly depends on the dynamic loader" }, { "id": "metadata/hardening/mitigation::partial-relro", "conf": 0.8, "crit": 3, "desc": "Partial RELRO (GOT partially protected)" }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" } ] } ] } }