{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.0004706401959992945, "class": 0 } ], "prob": 0.0004706402, "class": 0, "models": [ { "m": "az", "prob": 0.00012622554, "class": 0 }, { "m": "az/native", "prob": 0.0004706402, "class": 0 }, { "m": "az/elf", "prob": 0.00003556578, "class": 0 } ], "version": "v16.16", "thresholds": [ 0.9953178, 0.9991311 ], "analyzed_at": "2026-05-03T12:04:58Z" }, "path": "librumpfs_nfs.so.0.0", "raw": { "v": "4", "fs": [ { "f": "O₂(CI)Md₂(HeBi₃)", "x": 3, "id": 0, "is": [ "", "rumpns_spec_bmap", "rumpns_kauth_cred_seteuid", "rumpns_uvm_page_array_fill_and_peek", "rumpns_knote", "rumpns_genfs_node_init", "rumpns_max_datalen", "rumpns_kauth_cred_geteuid", "rumpns_log", "rumpns_vn_knote_attach", "rumpns_m_get", "rumpns_m_prepend", "rumpns_hexdigits", "rumpns__kernel_lock", "rumpns_m_copyback", "rumpns_spec_lookup", "rumpns_spec_fsync", "rumpns_set_statvfs_info", "rumpns_vn_fifo_bypass", "rumpns_vop_kqfilter_desc", "rumpns_mutex_init", "rumpns_evcnt_attach_dynamic", "rumpns_vop_default_desc", "rumpns_spec_pathconf", "rumpns_so_setsockopt", "rumpns_spec_mmap", "rumpns_genfs_pathconf", "rumpns_iostat_unbusy", "rumpns_getmicrotime", "rumpns_vop_revoke_desc", "rumpns_psignal", "rumpns_spec_node_init", "rumpns_device_xname", "deregister_frame_info", "rumpns_vgone", "rumpns_uiomove", "rumpns_soclose", "rumpns_rtrequest", "rumpns_mtsleep", "rumpns_vop_setattr_desc", "rumpns_vop_fallocate_desc", "rumpns_tsleep", "rumpns_callout_destroy", "rumpns_genfs_can_access", "rumpns_memset", "rumpns_genfs_node_destroy", "rumpns_vop_lookup_desc", "rumpns_soshutdown", "rumpns_spllower", "rumpns_vop_islocked_desc", "rumpns_uvmexp", "rumpns_getnanotime", "rumpns_mb_cache", "rumpns_kauth_cred_setegid", "rumpns_hostname", "rumpns_workqueue_create", "rumpns_kthread_exit", "rumpns_max_hdr", "rumpns_eopnotsupp", "rumpns_vput", "rumpns_rw_exit", "rumpns_memcmp", "rumpns_vrele", "rumpns_getblk", "Jv_RegisterClasses", "rumpns_splraise", "rumpns_genfs_gop_putrange", "rumpns_copyinstr", "rumpns_cv_init", "rumpns_strncpy", "rumpns_genfs_mmap", "rumpns_x86_curlwp", "rumpns_vttoif_tab", "rumpns_m_free", "rumpns_vfs_vnode_iterator_destroy", "rumpns_vop_mkdir_desc", "rumpns_copyout", "rumpns_genfs_badop", "rumpns_device_class", "rumpns_vop_inactive_desc", "rumpns_kmem_alloc", "rumpns_wakeup", "rumpns_cv_broadcast", "rumpns_vop_ioctl_desc", "rumpns_genfs_gop_write", "rumpns_VOP_FSYNC", "rumpns_vop_symlink_desc", "rumpns_spec_ioctl", "rumpns_ifunit", "rumpns_hashinit", "rumpns_vcache_rekey_enter", "rumpns_vop_abortop_desc", "rumpns_ifreq_setaddr", "rumpns_copyout_vmspace", "rumpns_uvm_page_array_fini", "rumpns_pool_destroy", "rumpns_vop_create_desc", "rumpns_genfs_enoioctl", "rumpns_panic", "rumpns_vop_rename_desc", "rumpns_callout_setfunc", "rumpns_vop_seek_desc", "rumpns_mutex_exit", "rumpns_vop_poll_desc", "rumpns_genfs_suspendctl", "rumpns_m_move_pkthdr", "rumpns_callout_pending", "rumpns_rt_delete_matched_entries", "rumpns_lf_advlock", "rumpns_m_clget", "rumpns_lwp0", "rumpns_genfs_putpages", "rumpns_m_pullup", "rumpns_kauth_cred_setgid", "rumpns_callout_init", "rumpns_vop_link_desc", "rumpns_VOP_SETATTR", "rumpns_mutex_destroy", "rumpns_genfs_unlock", "rumpns_rw_enter", "rumpns_spec_open", "rumpns_setrootfstime", "rumpns_kauth_cred_dup", "rumpns_atomic_cas_32", "rumpns_m_copym", "rumpns_genfs_islocked", "rumpns_pool_get", "rumpns_genfs_seek", "rumpns_rw_lock_op", "rumpns_mountlist_append", "rumpns_vop_getpages_desc", "rumpns_osrelease", "rumpns_soconnect", "rumpns_copy_statvfs_info", "rumpns_atomic_inc_32_nv", "rumpns_kauth_cred_alloc", "rumpns_m_freem", "rumpns_vop_remove_desc", "rumpns_spec_kqfilter", "rumpns_kern_free", "rumpns_vop_mmap_desc", "rumpns_soreserve", "stack_chk_guard", "rumpns_vop_readlink_desc", "rumpns_VOP_UNLOCK", "rumpns_kern_assert", "rumpns_uvm_page_array_advance", "rumpns_vfs_vnode_iterator_init", "rumpns_genfs_fcntl", "rumpns_uvm", "cxa_finalize", "rumpns_VOP_ABORTOP", "rumpns_biodone", "register_frame_info", "rumpns_ifioctl", "rumpns_rw_destroy", "rumpns_workqueue_destroy", "rumpns_cache_lookup_raw", "rumpns_uvm_pageratop", "rumpns_uio_setup_sysspace", "rumpns_uvm_pagemarkdirty", "rumpns_mutex_owned", "rumpns_rw_init", "rumpns_vop_write_desc", "rumpns_uvm_page_array_init", "rumpns_sowait", "rumpns_pool_put", "rumpns_knote_set_eof", "rumpns_snprintf", "rumpns_tprintf", "rumpns_vfs_attach", "rumpns_vfs_rele", "rumpns_uvm_vnp_setsize", "rumpns_vn_knote_detach", "rumpns_kern_malloc", "rumpns_vn_bwrite", "rumpns_vinvalbuf", "rumpns_m_adj", "rumpns_kauth_cred_setsvgid", "rumpns_vop_close_desc", "rumpns_mutex_tryenter", "rumpns_cv_signal", "rumpns_vop_readdir_desc", "rumpns_vop_reclaim_desc", "rumpns_vfs_detach", "rumpns_VOP_ACCESS", "rumpns_spec_vnodeop_p", "rumpns_vop_fdiscard_desc", "rumpns_hostnamelen", "rumpns_genfs_revoke", "rumpns_genfs_node_wrlock", "rumpns_genfs_eopnotsupp", "rumpns_genfs_node_unlock", "rumpns_vop_strategy_desc", "rumpns_vn_lock", "rumpns_kernel_pmap_ptr", "rumpns_kauth_cred_get", "rumpns_sysctl_createv", "rumpns_vop_whiteout_desc", "rumpns_fifo_vnodeop_p", "rumpns_genfs_renamelock_enter", "rumpns_vop_parsepath_desc", "rumpns_iftovt_tab", "rumpns_evcnt_detach", "rumpns_vop_fcntl_desc", "rumpns_kauth_cred_setgroups", "rumpns_kauth_cred_setuid", "rumpns_memmove", "rumpns_sobind", "rumpns_spec_fdiscard", "rumpns_tprintf_close", "rumpns_vop_pathconf_desc", "rumpns_vop_rmdir_desc", "rumpns_rootvp", "rumpns__kernel_unlock", "rumpns_socreate", "rumpns_ubc_uiomove", "rumpns_sigpending1", "rumpns_tc_setclock", "rumpns_iostat_alloc", "rumpns_strlen", "rumpns_vop_bwrite_desc", "rumpns_strchr", "rumpns_mutex_enter", "rumpns_genfs_renamelock_exit", "rumpns_kmem_zalloc", "rumpns_vop_read_desc", "rumpns_vcache_get", "rumpns_kauth_cred_setsvuid", "rumpns_sysctl_lookup", "rumpns_pmap_clear_attrs", "rumpns_cprng_fast32", "rumpns_workqueue_enqueue", "rumpns_vop_lock_desc", "rumpns_vfs_vnode_iterator_next", "rumpns_spec_advlock", "rumpns_vop_accessx_desc", "rumpns_solockretry", "rumpns_hz", "rumpns_vop_fsync_desc", "rumpns_domainnamelen", "rumpns_m_align", "rumpns_proc_lock", "rumpns_vop_open_desc", "rumpns_kauth_cred_getrefcnt", "rumpns_vop_getattr_desc", "rumpns_solocked", "rumpns_cv_timedwait_sig", "rumpns_VOP_PUTPAGES", "rumpns_kauth_accmode_to_action", "rumpns_kauth_cred_free", "rumpns_vop_bmap_desc", "rumpns_time_second", "rumpns_memcpy", "rumpns_genfs_abortop", "rumpns_genfs_lock", "rumpns_VOP_GETATTR", "rumpns_kauth_cred_hold", "rumpns_VOP_READDIR", "rumpns_copyin_vmspace", "rumpns_vrefcnt", "rumpns_callout_halt", "rumpns_pool_cache_put_paddr", "rumpns_vop_mknod_desc", "rumpns_vop_access_desc", "rumpns_vref", "rumpns_kauth_cred_getegid", "rumpns_vfs_rootmountalloc", "rumpns_kauth_cred_group", "rumpns_vattr_null", "rumpns_domainname", "rumpns_cv_wait", "rumpns_genfs_nullop", "rumpns_callout_schedule", "rumpns_pool_allocator_nointr", "rumpns_iostat_free", "rumpns_hashdone", "rumpns_vop_advlock_desc", "rumpns_cv_timedwait", "rumpns_genfs_getpages", "rumpns_m_copydata", "rumpns_kauth_authorize_vnode", "rumpns_time_uptime", "rumpns_vop_print_desc", "rumpns_cache_enter", "rumpns_kmem_free", "rumpns_vflush", "rumpns_kpause", "rumpns_intoa", "rumpns_sockargs", "rumpns_copyin", "rumpns_uvm_vnp_setwritesize", "rumpns_cv_destroy", "rumpns_vop_unlock_desc", "rumpns_cache_purge1", "rumpns_m_gethdr", "rumpns_ostype", "rumpns_vcache_rekey_exit", "rumpns_pool_init", "rumpns_genfs_parsepath", "rumpns_vfs_unbusy", "rumpns_genfs_accessx", "rumpns_kauth_cred_ngroups", "rumpns_spec_strategy", "stack_chk_fail", "rumpns_brelse", "rumpns_kthread_create", "rumpns_printf", "rumpns_spec_poll", "rumpns_vfs_getnewfsid", "rumpns_m_copypacket", "rumpns_root_device", "rumpns_vn_default_error", "rumpns_iostat_busy", "rumpns_genfs_poll", "rumpns_vop_putpages_desc", "rumpns_vfs_stdextattrctl" ], "ms": { "elf": { "relro": "partial", "e_type": 3.0, "needed": [ "libc.so.12" ], "soname": "librumpfs_nfs.so.0", "has_got": true, "has_plt": true, "has_note": true, "e_machine": 62.0, "class_bits": 64.0, "has_soname": true, "note_count": 2.0, "entry_point": 51584.0, "needed_libs": 1.0, "dynsym_count": 546.0, "has_eh_frame": true, "stack_canary": true, "symtab_count": 665.0, "dynrela_count": 422.0, "entry_section": ".text", "little_endian": true, "pltreloc_count": 307.0, "debuglink_present": true, "program_header_count": 7.0, "section_header_count": 34.0, "load_segment_max_p_memsz": 213424.0, "load_segment_max_p_filesz": 213424.0, "section_relocation_group_count": 2.0 }, "binary": { "code_size": 148696.0, "file_size": 256368.0, "entry_point": 51584.0, "has_overlay": true, "code_entropy": 4.15, "data_entropy": 2.06, "export_count": 230.0, "import_count": 317.0, "overlay_size": 2178.0, "string_count": 886.0, "overlay_ratio": 0.01, "section_count": 33.0, "avg_complexity": 12.7, "function_count": 318.0, "import_density": 2.18, "max_complexity": 276.0, "string_density": 6.1, "aliased_exports": 6.0, "overall_entropy": 2.79, "overlay_entropy": 1.57, "avg_basic_blocks": 20.98, "avg_section_size": 7847.52, "dependency_count": 1.0, "entropy_variance": 1.75, "function_density": 2.19, "avg_function_size": 1742.57, "avg_string_length": 20.22, "complexity_per_kb": 0.09, "max_string_length": 99.0, "avg_string_entropy": 3.45, "code_to_data_ratio": 1.35, "data_to_file_ratio": 0.0, "text_to_file_ratio": 0.56, "total_basic_blocks": 6671.0, "string_length_stddev": 10.74, "debug_reference_count": 1.0, "largest_section_ratio": 0.56, "sentence_string_count": 103.0, "sentence_string_ratio": 0.12, "function_analysis_depth": 2.0, "high_complexity_functions": 22.0, "nonstandard_section_name_count": 8.0 } }, "ss": [ [ 17841, "__cxa_finalize" ], [ 17856, "__deregister_frame_info" ], [ 17880, "__register_frame_info" ], [ 17902, "_Jv_RegisterClasses" ], [ 17922, "rumpns_nfs_bootparam" ], [ 17943, "rumpns_nfs_boot_ifupdown" ], [ 17968, "rumpns_printf" ], [ 17982, "rumpns_nfs_boot_flushrt" ], [ 18006, "rumpns_memcmp" ], [ 18020, "rumpns_m_copydata" ], [ 18038, "rumpns_intoa" ], [ 18051, "rumpns_m_pullup" ], [ 18067, "__stack_chk_guard" ], [ 18085, "rumpns_osrelease" ], [ 18102, "rumpns_ostype" ], [ 18116, "rumpns_snprintf" ], [ 18132, "rumpns_strlen" ], [ 18146, "__stack_chk_fail" ], [ 18163, "rumpns_nfs_bootdhcp" ], [ 18183, "rumpns_nfs_boot_setaddress" ], [ 18210, "rumpns_socreate" ], [ 18226, "rumpns_kern_free" ], [ 18243, "rumpns_soclose" ], [ 18258, "rumpns_nfs_boot_deladdress" ], [ 18285, "rumpns_so_setsockopt" ], [ 18306, "rumpns_nfs_boot_enbroadcast" ], [ 18334, "rumpns_nfs_boot_setrecvtimo" ], [ 18362, "rumpns_nfs_boot_sobind_ipport" ], [ 18392, "rumpns_m_gethdr" ], [ 18408, "rumpns_m_clget" ], [ 18423, "rumpns_kern_malloc" ], [ 18442, "rumpns_nfs_boot_sendrecv" ], [ 18467, "rumpns_m_freem" ], [ 18482, "rumpns_hostname" ], [ 18498, "rumpns_strncpy" ], [ 18513, "rumpns_hostnamelen" ], [ 18532, "rumpns_domainname" ], [ 18550, "rumpns_domainnamelen" ], [ 18571, "rumpns_kern_assert" ], [ 18590, "rumpns_panic" ], [ 18603, "rumpns_nfs_bmap" ], [ 18619, "rumpns_nfs_open" ], [ 18635, "rumpns_kauth_cred_free" ], [ 18658, "rumpns_kauth_cred_hold" ], [ 18681, "rumpns_x86_curlwp" ], [ 18699, "rumpns_nfs_flushstalebuf" ], [ 18724, "rumpns_nfs_getattr" ], [ 18743, "rumpns_nfs_delayedtruncate" ], [ 18770, "rumpns_nfs_getattrcache" ], [ 18794, "rumpns_nfsstats" ], [ 18810, "rumpns_nfsm_reqh" ], [ 18827, "rumpns_nfs_request" ], [ 18846, "rumpns_nfsm_loadattrcache" ], [ 18872, "rumpns_m_get" ], [ 18885, "rumpns_nfsm_strtmbuf" ], [ 18906, "rumpns_memcpy" ], [ 18920, "rumpns_nfs_true" ], [ 18936, "rumpns_nfsm_disct" ], [ 18954, "rumpns_nfs_check_wccdata" ], [ 18979, "rumpns_nfs_rmdir" ], [ 18996, "rumpns_cache_purge1" ], [ 19016, "rumpns_vput" ], [ 19028, "rumpns_vrele" ], [ 19041, "rumpns_cache_enter" ], [ 19060, "rumpns_nfs_lookup" ], [ 19078, "rumpns_cache_lookup_raw" ], [ 19102, "rumpns_VOP_ACCESS" ], [ 19120, "rumpns_vref" ], [ 19132, "rumpns_VOP_GETATTR" ], [ 19151, "rumpns_vn_lock" ], [ 19166, "rumpns_nfs_nget1" ], [ 19183, "rumpns_VOP_UNLOCK" ], [ 19201, "rumpns_nfs_read" ], [ 19217, "rumpns_nfs_bioread" ], [ 19236, "rumpns_nfs_readlink" ], [ 19256, "rumpns_mb_cache" ], [ 19272, "rumpns_pool_cache_put_paddr" ], [ 19300, "rumpns_mutex_enter" ], [ 19319, "rumpns_mutex_exit" ], [ 19337, "rumpns_cv_signal" ], [ 19354, "rumpns_nfsspec_read" ], [ 19374, "rumpns_getnanotime" ], [ 19393, "rumpns_vop_read_desc" ], [ 19414, "rumpns_spec_vnodeop_p" ], [ 19436, "rumpns_nfsspec_write" ], [ 19457, "rumpns_vop_write_desc" ], [ 19479, "rumpns_nfsfifo_read" ], [ 19499, "rumpns_fifo_vnodeop_p" ], [ 19521, "rumpns_nfsfifo_write" ], [ 19542, "rumpns_nfs_link" ], [ 19558, "rumpns_VOP_ABORTOP" ], [ 19577, "rumpns_kauth_authorize_vnode" ], [ 19606, "rumpns_VOP_FSYNC" ], [ 19623, "rumpns_nfs_readdir" ], [ 19642, "rumpns_kernel_pmap_ptr" ], [ 19665, "rumpns_nfs_strategy" ], [ 19685, "rumpns_nfs_asyncio" ], [ 19704, "rumpns_nfs_doio" ], [ 19720, "rumpns_nfs_pathconf" ], [ 19740, "rumpns_genfs_pathconf" ], [ 19762, "rumpns_nfs_fsinfo" ], [ 19780, "rumpns_nfs_advlock" ], [ 19799, "rumpns_lf_advlock" ], [ 19817, "rumpns_nfs_print" ], [ 19834, "rumpns_vop_print_desc" ], [ 19856, "rumpns_nfs_unlock" ], [ 19874, "rumpns_genfs_unlock" ], [ 19894, "rumpns_nfsspec_access" ], [ 19916, "rumpns_genfs_can_access" ], [ 19940, "rumpns_kauth_accmode_to_action" ], [ 19971, "rumpns_nfs_access" ], [ 19989, "rumpns_time_uptime" ], [ 20008, "rumpns_kauth_cred_geteuid" ], [ 20034, "rumpns_nfs_attrtimeo" ], [ 20055, "rumpns_nfsspec_close" ], [ 20076, "rumpns_vop_close_desc" ], [ 20098, "rumpns_vrefcnt" ], [ 20113, "rumpns_vattr_null" ], [ 20131, "rumpns_VOP_SETATTR" ], [ 20150, "rumpns_nfsfifo_close" ], [ 20171, "rumpns_nfs_null" ], [ 20187, "rumpns_nfs_setattrrpc" ], [ 20209, "rumpns_nfs_false" ], [ 20226, "rumpns_time_second" ], [ 20245, "rumpns_vttoif_tab" ], [ 20263, "rumpns_nfs_xdrneg1" ], [ 20282, "rumpns_nfs_setattr" ], [ 20301, "rumpns_genfs_node_unlock" ], [ 20326, "rumpns_genfs_node_wrlock" ], [ 20351, "rumpns_uvm_vnp_setsize" ], [ 20374, "rumpns_nfs_vinvalbuf" ], [ 20395, "rumpns_nfs_readlinkrpc" ], [ 20418, "rumpns_nfsm_mbuftouio" ], [ 20440, "rumpns_nfs_readrpc" ], [ 20459, "rumpns_iostat_busy" ], [ 20478, "rumpns_iostat_unbusy" ], [ 20499, "rumpns_nfs_writerpc" ], [ 20519, "rumpns_mutex_init" ], [ 20537, "rumpns_cv_init" ], [ 20552, "rumpns_nfs_zeropad" ], [ 20571, "rumpns_mutex_destroy" ], [ 20592, "rumpns_cv_destroy" ], [ 20610, "rumpns_nfsm_uiotombuf" ], [ 20632, "rumpns_cv_wait" ], [ 20647, "rumpns_nfs_removerpc" ], [ 20668, "rumpns_nfs_removeit" ], [ 20688, "rumpns_nfs_renamerpc" ], [ 20709, "rumpns_nfs_renameit" ], [ 20729, "rumpns_nfs_readdirrpc" ], [ 20751, "rumpns_nfs_adv" ], [ 20766, "rumpns_nfs_readdirplusrpc" ], [ 20792, "rumpns_nfs_loadattrcache" ], [ 20817, "rumpns_nfs_lookitup" ], [ 20837, "rumpns_kmem_alloc" ], [ 20855, "rumpns_vcache_rekey_enter" ], [ 20881, "rumpns_kmem_free" ], [ 20898, "rumpns_vcache_rekey_exit" ], [ 20923, "rumpns_nfs_mknodrpc" ], [ 20943, "rumpns_nfsv3_type" ], [ 20961, "rumpns_nfs_mknod" ], [ 20978, "rumpns_nfs_create" ], [ 20996, "rumpns_cprng_fast32" ], [ 21016, "rumpns_nfs_symlink" ], [ 21035, "rumpns_nfs_mkdir" ], [ 21052, "rumpns_nfs_sillyrename" ], [ 21075, "rumpns_kauth_cred_dup" ], [ 21097, "rumpns_hexdigits" ], [ 21114, "rumpns_nfs_remove" ], [ 21132, "rumpns_nfs_rename" ], [ 21150, "rumpns_knote" ], [ 21163, "rumpns_nfs_commit" ], [ 21181, "rumpns_nfs_flush" ], [ 21198, "rumpns_rw_enter" ], [ 21214, "rumpns_VOP_PUTPAGES" ], [ 21234, "rumpns_nfs_close" ], [ 21251, "rumpns_nfs_fsync" ], [ 21268, "rumpns_nfs_numasync" ], [ 21288, "rumpns_fifo_nfsv2nodeop_opv_desc" ], [ 21321, "rumpns_fifo_nfsv2nodeop_p" ], [ 21347, "rumpns_fifo_nfsv2nodeop_entries" ], [ 21379, "rumpns_vop_default_desc" ], [ 21403, "rumpns_vn_default_error" ], [ 21427, "rumpns_vop_parsepath_desc" ], [ 21453, "rumpns_genfs_badop" ], [ 21472, "rumpns_vop_lookup_desc" ], [ 21495, "rumpns_vn_fifo_bypass" ], [ 21517, "rumpns_vop_create_desc" ], [ 21540, "rumpns_vop_whiteout_desc" ], [ 21565, "rumpns_vop_mknod_desc" ], [ 21587, "rumpns_vop_open_desc" ], [ 21608, "rumpns_vop_fallocate_desc" ], [ 21634, "rumpns_vop_fdiscard_desc" ], [ 21659, "rumpns_vop_ioctl_desc" ], [ 21681, "rumpns_vop_poll_desc" ], [ 21702, "rumpns_vop_kqfilter_desc" ], [ 21727, "rumpns_vop_revoke_desc" ], [ 21750, "rumpns_vop_mmap_desc" ], [ 21771, "rumpns_vop_seek_desc" ], [ 21792, "rumpns_vop_remove_desc" ], [ 21815, "rumpns_vop_link_desc" ], [ 21836, "rumpns_vop_rename_desc" ], [ 21859, "rumpns_vop_mkdir_desc" ], [ 21881, "rumpns_vop_rmdir_desc" ], [ 21903, "rumpns_vop_symlink_desc" ], [ 21927, "rumpns_vop_readdir_desc" ], [ 21951, "rumpns_vop_readlink_desc" ], [ 21976, "rumpns_vop_abortop_desc" ], [ 22000, "rumpns_vop_bmap_desc" ], [ 22021, "rumpns_vop_pathconf_desc" ], [ 22046, "rumpns_vop_advlock_desc" ], [ 22070, "rumpns_vop_getpages_desc" ], [ 22095, "rumpns_vop_putpages_desc" ], [ 22120, "rumpns_vop_access_desc" ], [ 22143, "rumpns_vop_accessx_desc" ], [ 22167, "rumpns_genfs_accessx" ], [ 22188, "rumpns_vop_getattr_desc" ], [ 22212, "rumpns_vop_setattr_desc" ], [ 22236, "rumpns_vop_fcntl_desc" ], [ 22258, "rumpns_genfs_fcntl" ], [ 22277, "rumpns_vop_fsync_desc" ], [ 22299, "rumpns_vop_inactive_desc" ], [ 22324, "rumpns_nfs_inactive" ], [ 22344, "rumpns_vop_reclaim_desc" ], [ 22368, "rumpns_nfs_reclaim" ], [ 22387, "rumpns_vop_lock_desc" ], [ 22408, "rumpns_genfs_lock" ], [ 22426, "rumpns_vop_unlock_desc" ], [ 22449, "rumpns_vop_strategy_desc" ], [ 22474, "rumpns_vop_islocked_desc" ], [ 22499, "rumpns_genfs_islocked" ], [ 22521, "rumpns_vop_bwrite_desc" ], [ 22544, "rumpns_spec_nfsv2nodeop_opv_desc" ], [ 22577, "rumpns_spec_nfsv2nodeop_p" ], [ 22603, "rumpns_spec_nfsv2nodeop_entries" ], [ 22635, "rumpns_spec_lookup" ], [ 22654, "rumpns_spec_open" ], [ 22671, "rumpns_genfs_eopnotsupp" ], [ 22695, "rumpns_spec_fdiscard" ], [ 22716, "rumpns_spec_ioctl" ], [ 22734, "rumpns_spec_poll" ], [ 22751, "rumpns_spec_kqfilter" ], [ 22772, "rumpns_genfs_revoke" ], [ 22792, "rumpns_spec_mmap" ], [ 22809, "rumpns_genfs_nullop" ], [ 22829, "rumpns_spec_bmap" ], [ 22846, "rumpns_spec_strategy" ], [ 22867, "rumpns_spec_pathconf" ], [ 22888, "rumpns_spec_advlock" ], [ 22908, "rumpns_genfs_getpages" ], [ 22930, "rumpns_genfs_putpages" ], [ 22952, "rumpns_spec_fsync" ], [ 22970, "rumpns_vn_bwrite" ], [ 22987, "rumpns_nfsv2_vnodeop_opv_desc" ], [ 23017, "rumpns_nfsv2_vnodeop_p" ], [ 23040, "rumpns_nfsv2_vnodeop_entries" ], [ 23069, "rumpns_genfs_parsepath" ] ], "sz": 256368, "ts": [ { "c": 1.0, "d": ".gnu_debuglink reference present", "e": [ "librumpfs_nfs.so.0.0.debug" ], "i": "metadata/build/debug::elf-debuglink", "l": 2 }, { "c": 1.0, "d": "Binary is not digitally signed", "i": "metadata/unsigned", "l": 2 }, { "c": 1.0, "d": "Binary has low average complexity", "e": [ "binary.avg_complexity = 12.70" ], "i": "metadata/binary/metrics::avg-complexity-15-max", "l": 2 }, { "c": 0.8999999761581421, "d": "ELF dynsym section name", "e": [ ".dynsym" ], "i": "metadata/binary/linking::elf-dynsym-section-name", "l": 2 }, { "c": 0.800000011920929, "d": "libc version string pattern", "e": [ "libc.so.1" ], "i": "micro-behaviors/dylib/library/libc::libc-version-string", "l": 2 }, { "a": "T1071.001", "d": "Port 23 (telnet)", "e": [ ":23" ], "i": "objectives/command-and-control/infrastructure/ip::port-23", "l": 1, "m": "C0002" }, { "c": 1.0, "d": "Binary has 25+ imports", "e": [ "binary.import_count = 317.00" ], "i": "metadata/binary/metrics::many-imports-25", "l": 1 }, { "c": 0.949999988079071, "d": "Compact C type format section", "e": [ ".SUNW_ctf" ], "i": "metadata/binary/section/content::sunw-ctf-section", "l": 1 }, { "d": ".so extension reference", "e": [ ".so", ".so", ".so" ], "i": "micro-behaviors/fs/path/extension::so", "l": 2 }, { "c": 1.0, "d": "Binary has 200+ exports (large library)", "e": [ "binary.export_count = 230.00" ], "i": "metadata/binary/metrics::many-exports-200", "l": 1 }, { "c": 0.6600000262260437, "d": "Set socket options", "e": [ "rumpns_so_setsockopt", "loc.imp.rumpns_so_setsockopt" ], "i": "micro-behaviors/communications/socket/options::options-set", "l": 2 }, { "c": 1.0, "d": "ELF SONAME metadata", "e": [ "librumpfs_nfs.so.0" ], "i": "metadata/binary/linking/runtime::soname", "l": 2 }, { "c": 0.8399999737739563, "d": "High basic block count in sparse binary", "e": [ "binary.total_basic_blocks = 6671.00" ], "i": "metadata/binary/metrics::dense-basic-blocks", "l": 1 }, { "c": 1.0, "d": "Binary has 20+ imports", "e": [ "binary.import_count = 317.00" ], "i": "metadata/binary/metrics::many-imports-20", "l": 1 }, { "c": 1.0, "d": "Binary has 20+ sections (installer/packer)", "e": [ "binary.section_count = 33.00" ], "i": "metadata/binary/metrics::many-sections-20", "l": 1 }, { "c": 1.0, "d": "File is a compiled binary", "e": [ "binary.file_size = 256368.00" ], "i": "metadata/binary/framework::is-binary", "l": 1 }, { "c": 1.0, "d": "Binary has 50+ functions", "e": [ "binary.function_count = 318.00" ], "i": "metadata/binary/metrics::many-functions-50", "l": 1 }, { "a": "T1082", "c": 0.6000000238418579, "d": "Query or modify kernel state via sysctl", "e": [ "rumpns_sysctl_createv", "rumpns_sysctl_lookup", "rumpns_nfs_sysctl_init", "stop_link_set_sysctl_funcs", "start_link_set_sysctl_funcs", "loc.imp.rumpns_sysctl_createv", "sym.rumpns_nfs_sysctl_init", "sym.sysctl_vfs_nfs_iothreads" ], "i": "micro-behaviors/os/sysinfo/config::sysctl", "l": 2, "m": "E1082" }, { "c": 0.800000011920929, "d": "Binary has many exports (\u003e10)", "e": [ "binary.export_count = 230.00" ], "i": "metadata/binary/metrics::many-exports", "l": 2 }, { "d": "Characteristic system library export __cxa_finalize", "e": [ "cxa_finalize" ], "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "l": 2 }, { "c": 1.0, "d": "Binary has 100+ exports", "e": [ "binary.export_count = 230.00" ], "i": "metadata/binary/metrics::many-exports-100", "l": 1 }, { "c": 1.0, "d": "Binary has 50+ imports", "e": [ "binary.import_count = 317.00" ], "i": "metadata/binary/metrics::many-imports-50", "l": 1 }, { "c": 1.0, "d": "Binary has 40+ imports", "e": [ "binary.import_count = 317.00" ], "i": "metadata/binary/metrics::many-imports-40", "l": 1 }, { "c": 1.0, "d": "Binary format is identified", "e": [ "elf.class_bits = 64.00" ], "i": "metadata/binary::binary-format-checked", "l": 2 }, { "c": 0.8999999761581421, "d": "NetBSD-style /usr/src source path", "e": [ "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_vnops.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_iod.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../sys/socketvar.h", "/usr/src/sys/rump/fs/lib/libnfs/../../../../sys/mbuf.h", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_bio.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_node.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_subs.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_socket.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_kq.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_vfsops.c", "/usr/src/sys/rump/fs/lib/libnfs/../../../../nfs/nfs_clntsocket.c" ], "i": "metadata/binary/provenance::netbsd-source-tree-path", "l": 2 }, { "c": 0.8999999761581421, "d": "ELF dynamic section name", "e": [ ".dynamic" ], "i": "metadata/binary/linking::elf-dynamic-section-name", "l": 2 }, { "c": 0.8999999761581421, "d": "ELF dynstr section name", "e": [ ".dynstr" ], "i": "metadata/binary/linking::elf-dynstr-section-name", "l": 2 }, { "c": 0.800000011920929, "d": "Binary has many functions (\u003e30)", "e": [ "binary.function_count = 318.00" ], "i": "metadata/binary/metrics::many-functions", "l": 2 }, { "a": "T1486", "c": 0.75, "d": "flock LOCK_EX call bytecode pattern", "e": [ "ba d3 f4 ff ff", "bf d3 f4 ff ff", "b9 bb cb ff ff", "be 40 b8 ff ff", "be b2 a9 ff ff", "ba a1 a4 ff ff", "be a2 a3 ff ff", "ba b3 a1 ff ff", "be d3 be fe ff", "be c1 be fe ff", "ba e8 c4 fe ff", "be 0d be fe ff", "be 03 9f fe ff", "bf 07 a8 fe ff", "be 75 7f fe ff", "be 93 68 fe ff" ], "i": "objectives/impact/ransom/esxi::flock-lockex", "l": 1, "m": "C0027" }, { "c": 0.8999999761581421, "d": "ELF overall entropy is low", "e": [ "binary.overall_entropy = 2.79" ], "i": "metadata/binary/metrics::firmware-overall-entropy-low", "l": 1 }, { "c": 1.0, "d": "Binary has 20+ exports", "e": [ "binary.export_count = 230.00" ], "i": "metadata/binary/metrics::many-exports-20", "l": 1 }, { "c": 1.0, "d": "Binary has 30+ imports", "e": [ "binary.import_count = 317.00" ], "i": "metadata/binary/metrics::many-imports-30", "l": 1 }, { "c": 1.0, "d": "Binary has 9+ exports", "e": [ "binary.export_count = 230.00" ], "i": "metadata/binary/metrics::many-exports-9", "l": 1 }, { "c": 0.8999999761581421, "d": "NetBSD RCS ident keyword", "e": [ "$NetBSD: nfs_bootparam.c,v 1.39 2019/06/29 17:42:36 kamil Exp $", "$NetBSD: nfs_socket.c,v 1.200 2018/09/03 16:29:36 riastradh Exp $", "$NetBSD: nfs_clntsubs.c,v 1.6 2022/02/28 08:45:36 hannken Exp $", "$NetBSD: nfs_subs.c,v 1.242 2022/02/09 21:50:24 andvar Exp $", "$NetBSD: nfs_clntsocket.c,v 1.6 2018/01/21 20:36:49 christos Exp $", "$NetBSD: nfs_bio.c,v 1.201 2022/06/24 16:50:00 hannken Exp $", "$NetBSD: nfs_vnops.c,v 1.324.4.1 2023/12/11 12:32:40 martin Exp $", "$NetBSD: crti.S,v 1.1 2010/08/07 18:01:35 joerg Exp $", "$NetBSD: nfs_node.c,v 1.126 2020/05/01 08:43:00 hannken Exp $", "$NetBSD: krpc_subr.c,v 1.42 2016/06/10 13:27:16 ozaki-r Exp $", "$NetBSD: nfs_vfsops.c,v 1.243 2021/06/13 10:25:11 mlelstv Exp $", "$NetBSD: nfs_iod.c,v 1.8 2018/09/03 16:29:36 riastradh Exp $", "$NetBSD: crtbegin.S,v 1.2 2010/11/30 18:37:59 joerg Exp $", "$NetBSD: nfs_kq.c,v 1.32 2021/10/20 03:08:18 thorpej Exp $", "$NetBSD: nfs_bootdhcp.c,v 1.56 2016/06/10 13:27:16 ozaki-r Exp $", "$NetBSD: nfs_boot.c,v 1.89 2022/09/20 02:23:37 knakahara Exp $" ], "i": "metadata/binary/provenance::netbsd-rcs-id", "l": 2 }, { "c": 0.8999999761581421, "d": "Binary has low overall entropy", "e": [ "binary.overall_entropy = 2.79" ], "i": "metadata/binary/metrics::low-overall-entropy-binary", "l": 1 }, { "c": 1.0, "d": "ELF needed library metadata", "e": [ "[libc.so.12] (size: 1 (array))" ], "i": "metadata/binary/linking/runtime::needed-lib", "l": 2 }, { "d": "Binary exports symbols", "e": [ "binary.export_count = 230.00" ], "i": "metadata/binary/symbols::has-exports", "l": 1 }, { "a": "T1055", "c": 0.25, "d": "Repeated 0x07 code constant (possible PROT_RWX)", "e": [ "07 00 00 00", "07 00 00 00", "07 00 00 00", "07 00 00 00", "07 00 00 00", "07 00 00 00", "07 00 00 00", "07 00 00 00", "07 00 00 00" ], "i": "micro-behaviors/mem/protect/modify::rwx-prot-bytes", "l": 1 }, { "c": 0.8999999761581421, "d": "__stack_chk_fail function", "e": [ "stack_chk_fail", "stack_chk_fail", "sym.imp.__stack_chk_fail" ], "i": "metadata/hardening::stack-chk-fail", "l": 2 }, { "c": 0.8999999761581421, "d": "ELF has 500 or more strings", "e": [ "binary.string_count = 886.00" ], "i": "metadata/binary/metrics::firmware-string-count-500-plus", "l": 1 }, { "c": 1.0, "d": "Binary has low average string entropy", "e": [ "binary.avg_string_entropy = 3.45" ], "i": "metadata/binary/metrics::avg-string-entropy-4-max", "l": 2 }, { "c": 0.800000011920929, "d": "High number of imported symbols (\u003e80)", "e": [ "binary.import_count = 317.00" ], "i": "metadata/binary/metrics::many-imports", "l": 2 }, { "c": 1.0, "d": "Binary has 3+ functions", "e": [ "binary.function_count = 318.00" ], "i": "metadata/binary/metrics::few-functions-3", "l": 1 }, { "c": 1.0, "d": "Binary has 100+ imports", "e": [ "binary.import_count = 317.00" ], "i": "metadata/binary/metrics::many-imports-100", "l": 1 }, { "c": 1.0, "d": "ELF64 class marker", "e": [ "elf.class_bits = 64.00" ], "i": "metadata/binary/metrics::elf64-class", "l": 1 }, { "c": 0.8999999761581421, "d": "NX/DEP disabled (stack is executable)", "e": [ "elf.nx_enabled = 0.00" ], "i": "metadata/hardening::nx-disabled", "l": 3 }, { "c": 0.699999988079071, "d": "High function count over 200", "e": [ "binary.function_count = 318.00" ], "i": "metadata/binary/metrics::high-function-count-200", "l": 2 }, { "c": 0.8999999761581421, "d": "ELF dynamic section name", "e": [ ".dynamic" ], "i": "metadata/hardening::elf-dynamic-section-name", "l": 2 }, { "c": 0.8999999761581421, "d": "ELF dynsym section name", "e": [ ".dynsym" ], "i": "metadata/hardening::elf-dynsym-section-name", "l": 2 }, { "c": 1.0, "d": "ELF external debug artifact reference", "e": [ "librumpfs_nfs.so.0.0.debug" ], "i": "metadata/build/debug::external-debug-reference", "l": 2 }, { "c": 0.8999999761581421, "d": "ELF dynstr section name", "e": [ ".dynstr" ], "i": "metadata/hardening::elf-dynstr-section-name", "l": 2 } ], "sha": "9b7ef2932e81d50e95f48c1abf149daeb42a6048679755014a9df9652cf126ad", "path": "librumpfs_nfs.so.0.0", "type": "elf" } ], "tv": "b2c18" } }