{ "ml": { "v": "7", "eng": "2.12.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.028282354, "rte": "az", "prob": 0.028282354 }, { "cls": 0, "raw": 0.00036032996, "rte": "az/native", "prob": 0.00036032996 }, { "cls": 0, "raw": 0.0006957948, "rte": "az/elf", "prob": 0.0006957948 } ], "prob": 0.028282354, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.028282353654503822, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-30T23:27:04Z" }, "path": "fax.so", "raw": { "v": "8", "rev": "c1ea9", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000%2!g0rr910000000000kMy=:00000?#S]V0000000000kMA+z2()i\u003c8VQ=R0rr911POJ5000000000000000000000000000000ef\u003eh}00000ef\u003eh", "ln": 0 }, { "b": "()BK]000000SSi2e=U\u003eK0rr911][S600BzA0fvfXe=U\u003eKf8$$LT*mH{z):wN000000000000000000000000000000000000@@VdPBR25000000000000000000000@%8pkMH]^0000000000000001owG55=.[i00000000000000000000IVA!T5=.[", "ln": 632 }, { "b": "Nf0u*5=-sul(Vgb00000(\u0026m1=00000?u0VS5=-sufDyb[00000h#\u0026{U000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib07?l2C4CMkoMaMRx(mL-pJf\u003e", "ln": 1784 }, { "b": "B-H#607QQxmRM):Bv*sTxjTULoLFM\u0026090SLz*a]:xk7\u003c\u003emr\u0026rNAcb/jzua3JB97\u00262yHpN+yHpWZx(0=nv@VT9A+d*Vvp%cKl1s[Sx(W=Rzdd6*lVl^VA=2l708)DJnO})GwKQ\u0026=wO#O\u0026oMaAHy?k$Lze-{7wDknzw[C)*zBw5Cz!9AJzdd6*07xWMltQNH07pytBAd", "ln": 2261 }, { "b": "f/yU9z.r:#0bMvUv\u003eI?ve\u0026AYCwg.RizGQgQvpsg^xF}X1B8JV=0a]U:e]$}hm[=GvlTIP3f/G7j00000009620096200962009630096200962009620096200ic30096400962009620096200962009620096200962009620096200ic4009620096", "ln": 2623 }, { "b": "[bJET5I=SE5p%}BaoAUo[bJET5Jh]I5txh/aoAUo[bJET5JShM5w!EgaoAUo[bJET5K5FQ5Ai.MaoAUo[bJET5KF+U5cq]}aoAUo[bJET5K]4Y5f.graoAUo[bJET5Lts:5jcCXaoAUo[bJET5L+Q!5mLZ6aoAUo[bJET5Mg)\u00265p%$CaoAUo[bJET5MRf)5txk*aoAUo[bJET5N4D}", "ln": 4256 }, { "b": "R#lMhko*oX@D(qU@r04Z@D(wVZAS\u003chZYN@{e?O!fe?ZZMwmY!5fj[Tqe[j\u003eY00000x(do\u003ewNxd?w]w!njS(d.z/fSraw3AUxjTULw]w!wdiIw=oItA^x(do\u003ewNxd?w]xm+", "ln": 7524 }, { "b": "000000000000000000000000000000000000000000000000000000000000kOBa$00000(\u003efo#000000rr91000001{j\u00269000000rr9100000aoIPz000000rr9100000dGYUJ000004GDFe00000kMZ#^000003\u0026*nc00000PBR25000004fcwd00000xDm6M0000082%Tp00000", "ln": 64888 }, { "b": "vR]K^x\u003e7{*z/Pzvh.G88hz3Tqe[wK5B.pW*\u003eE]rc}++8Ju(G@Y1Mr.!!eRY[vL](LwhvZIh-Uwag=n-JgH\u003c\u003c7wh#C3gCQZwfLa*9gb?0AfGpW}wNY^{00000RXr\u003c\u003e04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaK6iC(PEmz//LyxkR\u0026AvS=y3wg.Ia04}]4BUmuoB7+Lawo\u00266lD2iKlwo\u00266lBAdvlxkR\u0026AC4CYnx(v\u003e?", "ln": 65904 } ], "mol": "Md₃(BiBkHe₂)", "sha": "93c3a88e0ffbcce5401968ff3949adda0c466155e2c896ac72f05d1ce81fa4f6", "path": "fax.so", "risk": 4, "size": 68000, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "RegisterFAXImage" ], [ "UnregisterFAXImage" ] ], "imp": [ [ "", "DestroyImageInfo" ], [ "", "ReadImage" ], [ "", "UnregisterMagickInfo" ], [ "", "ImageToFile" ], [ "", "EOFBlob" ], [ "", "FormatLocaleString" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "cxa_finalize" ], [ "", "IsEventLogging" ], [ "", "DestroyString" ], [ "", "LocaleCompare" ], [ "", "SetImageProgress" ], [ "", "AcquireMagickInfo" ], [ "", "GetExceptionMessage" ], [ "", "DestroyImage" ], [ "", "LogMagickEvent" ], [ "", "stack_chk_fail" ], [ "", "GetNextImageInList" ], [ "", "gmon_start__" ], [ "", "stack_chk_guard" ], [ "", "RegisterMagickInfo" ], [ "", "TransformImageColorspace" ], [ "", "SyncNextImageInList" ], [ "", "AcquireImage" ], [ "", "RelinquishUniqueFileResource" ], [ "", "CopyMagickString" ], [ "", "LocaleNCompare" ], [ "", "ThrowMagickException" ], [ "", "SetImageExtent" ], [ "", "OpenBlob" ], [ "", "GetFirstImageInList" ], [ "", "SetImageInfoBlob" ], [ "", "CloneImageInfo" ], [ "", "ConstantString" ], [ "", "CloseBlob" ], [ "", "HuffmanEncodeImage" ], [ "", "ITM_registerTMCloneTable" ], [ "", "DestroyImageList" ], [ "", "assert_fail" ], [ "", "errno_location" ], [ "", "HuffmanDecodeImage" ], [ "", "AcquireImageColormap" ], [ "", "GetImageListLength" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.69, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.12, "alloc" ], [ ".gnu.hash", 640, 40, 2.67, "alloc" ], [ ".dynsym", 680, 1152, 1.06, "alloc" ], [ ".dynstr", 1832, 850, 4.94, "alloc" ], [ ".gnu.version", 2682, 96, 1.27, "alloc" ], [ ".gnu.version_r", 2784, 64, 2.25, "alloc" ], [ ".rela.dyn", 2848, 192, 1.85, "alloc" ], [ ".rela.plt", 3040, 960, 1.59, "alloc,info_link" ], [ ".init", 4000, 28, 3.9, "alloc,executable" ], [ ".plt", 4032, 672, 4.36, "alloc,executable" ], [ ".text", 4704, 2824, 6.03, "alloc,executable" ], [ ".fini", 7528, 24, 3.72, "alloc,executable" ], [ ".rodata", 7552, 842, 4.99, "alloc" ], [ ".eh_frame_hdr", 8396, 92, 3.62, "alloc" ], [ ".eh_frame", 8488, 772, 5.33, "alloc" ], [ ".init_array", 64936, 8, 1.06, "write,alloc" ], [ ".fini_array", 64944, 8, 1.06, "write,alloc" ], [ ".dynamic", 64952, 512, 1.55, "write,alloc" ], [ ".got", 65464, 48, 0.44, "write,alloc" ], [ ".got.plt", 65512, 344, 1.02, "write,alloc" ], [ ".data", 65856, 8, 1.55, "write,alloc" ], [ ".gnu_debugaltlink", 65864, 87, 5.31, "" ], [ ".gnu_debuglink", 65952, 52, 4.3, "" ], [ ".shstrtab", 66004, 264, 4.26, "" ] ], "tgt": [ "entry0", "fcn.00001280", "sym.imp.AcquireImage", "sym.imp.AcquireImageColormap", "sym.imp.AcquireMagickInfo", "sym.imp.CloneImageInfo", "sym.imp.CloseBlob", "sym.imp.ConstantString", "sym.imp.CopyMagickString", "sym.imp.DestroyImage", "sym.imp.DestroyImageInfo", "sym.imp.DestroyImageList", "sym.imp.DestroyString", "sym.imp.EOFBlob", "sym.imp.FormatLocaleString", "sym.imp.GetExceptionMessage", "sym.imp.GetFirstImageInList", "sym.imp.GetImageListLength", "sym.imp.GetNextImageInList", "sym.imp.HuffmanDecodeImage", "sym.imp.HuffmanEncodeImage", "sym.imp.ImageToFile", "sym.imp.IsEventLogging", "sym.imp.LocaleCompare", "sym.imp.LocaleNCompare", "sym.imp.LogMagickEvent", "sym.imp.OpenBlob", "sym.imp.ReadImage", "sym.imp.RegisterMagickInfo", "sym.imp.RelinquishUniqueFileResource", "sym.imp.SetImageExtent", "sym.imp.SetImageInfoBlob", "sym.imp.SetImageProgress", "sym.imp.SyncNextImageInList", "sym.imp.ThrowMagickException", "sym.imp.TransformImageColorspace", "sym.imp.UnregisterMagickInfo", "sym.imp.__assert_fail", "sym.imp.__cxa_finalize", "sym.imp.__errno_location", "sym.imp.__stack_chk_fail" ], "funcs": [ [ "fcn.00000fa4", 4004 ], [ "fcn.00000fc4", 4036 ], [ "sym.imp.DestroyImageInfo", 4064 ], [ "sym.imp.ReadImage", 4080 ], [ "sym.imp.UnregisterMagickInfo", 4096 ], [ "sym.imp.ImageToFile", 4112 ], [ "sym.imp.EOFBlob", 4128 ], [ "sym.imp.FormatLocaleString", 4144 ], [ "sym.imp.__cxa_finalize", 4160 ], [ "sym.imp.IsEventLogging", 4176 ], [ "sym.imp.DestroyString", 4192 ], [ "sym.imp.LocaleCompare", 4208 ], [ "sym.imp.SetImageProgress", 4224 ], [ "sym.imp.AcquireMagickInfo", 4240 ], [ "sym.imp.GetExceptionMessage", 4256 ], [ "sym.imp.DestroyImage", 4272 ], [ "sym.imp.LogMagickEvent", 4288 ], [ "sym.imp.__stack_chk_fail", 4304 ], [ "sym.imp.GetNextImageInList", 4320 ], [ "sym.imp.RegisterMagickInfo", 4352 ], [ "sym.imp.TransformImageColorspace", 4368 ], [ "sym.imp.SyncNextImageInList", 4384 ], [ "sym.imp.AcquireImage", 4400 ], [ "sym.imp.RelinquishUniqueFileResource", 4416 ], [ "sym.imp.CopyMagickString", 4432 ], [ "sym.imp.LocaleNCompare", 4448 ], [ "sym.imp.ThrowMagickException", 4464 ], [ "sym.imp.SetImageExtent", 4480 ], [ "sym.imp.OpenBlob", 4496 ], [ "sym.imp.GetFirstImageInList", 4512 ], [ "sym.imp.SetImageInfoBlob", 4528 ], [ "sym.imp.CloneImageInfo", 4544 ], [ "sym.imp.ConstantString", 4560 ], [ "sym.imp.CloseBlob", 4576 ], [ "sym.imp.HuffmanEncodeImage", 4592 ], [ "sym.imp.DestroyImageList", 4608 ], [ "sym.imp.__assert_fail", 4624 ], [ "sym.imp.__errno_location", 4640 ], [ "sym.imp.HuffmanDecodeImage", 4656 ], [ "sym.imp.AcquireImageColormap", 4672 ], [ "sym.imp.GetImageListLength", 4688 ], [ "entry0", 4704 ], [ "fcn.00001280", 4736 ], [ "entry.fini0", 4844 ], [ "entry.init0", 4928 ], [ "fcn.00001364", 4964 ], [ "fcn.000017e4", 6116 ], [ "fcn.00001c10", 7184 ], [ "sym.RegisterFAXImage", 7236 ], [ "sym.UnregisterFAXImage", 7472 ], [ "fcn.00001d6c", 7532 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 3, "note_count": 2, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 48, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 8, "has_debuglink": 1, "little_endian": 1, "pltreloc_count": 40, "build_id_length": 20, "dt_versym_count": 48, "has_aarch64_bti": 1, "has_aarch64_pac": 1, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "program_header_count": 9, "stripped_with_symtab": 0, "has_direct_loader_dep": 1, "executable_segment_count": 1, "load_segment_max_file_size": 9260, "load_segment_max_memory_size": 9260, "section_relocation_group_count": 2, "stripped_metadata_section_count": 8 }, "file": { "size": 68000, "entropy": 1.14 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 1, "basic_blocks": 129, "code_entropy": 5.69, "data_entropy": 1.28, "overlay_size": 1732, "string_count": 100, "overlay_ratio": 0.03, "avg_complexity": 2.14, "max_complexity": 28, "huge_func_count": 0, "leaf_func_count": 43, "overlay_entropy": 1.46, "tiny_func_count": 45, "avg_basic_blocks": 2.53, "entropy_variance": 2.82, "avg_string_length": 19.57, "max_string_length": 232, "peak_region_bytes": 4096, "code_to_data_ratio": 0.79, "peak_region_entropy": 5.92, "string_length_stddev": 24.41, "largest_section_ratio": 0.04, "sentence_string_count": 10, "sentence_string_ratio": 0.1, "high_entropy_string_count": 0 }, "exports": { "count": 2, "api_count": 2 }, "imports": { "count": 43 }, "strings": { "truncated": 0, "retained_count": 100, "extracted_count": 100 }, "sections": { "count": 27, "code_size": 3548, "entropy_max": 6.03, "entropy_mean": 2.96, "name_entropy": 4.22, "writable_count": 7, "executable_count": 4, "nonstandard_count": 7, "executable_writable_count": 0 }, "functions": { "count": 51 }, "dependencies": { "count": 3 } } }, "traits": [ { "id": "metadata/binary/linking/runtime::dynamic-loader-needed", "conf": 0.7, "crit": 3, "desc": "ELF needs the Linux dynamic loader" }, { "id": "metadata/binary/linking/runtime::library-loader-dep", "conf": 1.0, "crit": 3, "desc": "ELF directly depends on the dynamic loader" }, { "id": "metadata/hardening/mitigation::partial-relro", "conf": 0.8, "crit": 3, "desc": "Partial RELRO (GOT partially protected)" }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" } ] } ] } }