{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.912993311882019,
        "class": 0
      }
    ],
    "prob": 0.9129933,
    "class": 0,
    "version": "v16.16",
    "thresholds": [
      0.9815004,
      0.99404883
    ],
    "analyzed_at": "2026-04-30T09:04:06Z"
  },
  "path": "librumpdev_fss.so.0.0",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(CI)Md₂(HeBi₃)",
        "x": 3,
        "id": 0,
        "is": [
          "",
          "rumpns_bufq_put",
          "rumpns_disk_destroy",
          "rumpns_mutex_init",
          "rumpns_minphys",
          "rumpns_vfs_hooks_detach",
          "rumpns_physio",
          "rumpns_device_lookup_private",
          "rumpns_device_xname",
          "deregister_frame_info",
          "rumpns_schedppq",
          "rumpns_disk_busy",
          "rumpns_namei_simple_user",
          "rumpns_pmf_device_register1",
          "rumpns_memset",
          "rumpns_bufq_drain",
          "rumpns_vrele_flush",
          "rumpns_kthread_exit",
          "rumpns_vrele",
          "Jv_RegisterClasses",
          "rumpns_cv_wait_sig",
          "rumpns_copyinstr",
          "rumpns_vn_open",
          "rumpns_cv_init",
          "rumpns_config_cfdriver_attach",
          "rumpns_bufq_free",
          "rumpns_x86_curlwp",
          "rumpns_seltrue",
          "rumpns_fscow_disestablish",
          "rumpns_kmem_alloc",
          "rumpns_bufq_alloc",
          "rumpns_cv_broadcast",
          "rumpns_vfs_hooks_attach",
          "rumpns_vn_rdwr",
          "rumpns_config_detach",
          "rumpns_panic",
          "rumpns_mutex_exit",
          "rumpns_spec_node_lookup_by_mount",
          "rumpns_putiobuf",
          "rumpns_device_private",
          "rumpns_seltrue_kqfilter",
          "rumpns_getiobuf",
          "rumpns_mutex_destroy",
          "rumpns_rw_enter",
          "rumpns_vn_close",
          "rumpns_disk_init",
          "rumpns_aprint_debug_dev",
          "rump_vfs_makedevnodes",
          "rumpns_VFS_SNAPSHOT",
          "rumpns_devsw_detach",
          "rumpns_VOP_UNLOCK",
          "rumpns_kern_assert",
          "rumpns_uvm",
          "cxa_finalize",
          "rumpns_biodone",
          "register_frame_info",
          "rumpns_mutex_owned",
          "rumpns_biowait",
          "rumpns_vfs_resume",
          "rumpns_cv_signal",
          "rumpns_microtime",
          "rumpns_pathbuf_copyin",
          "rumpns_config_attach_pseudo",
          "rumpns_disk_detach",
          "rumpns_devsw_attach",
          "rumpns_vn_lock",
          "rumpns_kthread_join",
          "rumpns_vfs_suspend",
          "rumpns_bdev_strategy",
          "rumpns_nommap",
          "rumpns_VFS_SYNC",
          "rumpns_devenodev",
          "rumpns_disk_unbusy",
          "rumpns_aprint_error_dev",
          "rumpns_config_cfdriver_detach",
          "rumpns_config_cfattach_attach",
          "rumpns_aprint_error",
          "rumpns_mutex_enter",
          "rumpns_kmem_zalloc",
          "rumpns_device_cfdata",
          "rumpns_bufq_get",
          "rumpns_pathbuf_destroy",
          "rumpns_bounds_check_with_mediasize",
          "rumpns_ttyvenodev",
          "rumpns_getdisksize",
          "rumpns_do_sys_unlink",
          "rumpns_bdevsw_lookup_major",
          "rumpns_disk_attach",
          "rumpns_NSM_FOLLOW_NOEMULROOT",
          "rumpns_VOP_PUTPAGES",
          "rumpns_memcpy",
          "rumpns_config_cfattach_detach",
          "rumpns_pmf_device_deregister",
          "rumpns_cv_wait",
          "rumpns_cdevsw_lookup_major",
          "rumpns_kmem_free",
          "rumpns_nestiobuf_setup",
          "rumpns_fscow_establish",
          "rumpns_cv_destroy",
          "rumpns_kthread_create"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 62.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "entry_point": 11488.0,
            "needed_libs": 1.0,
            "dynsym_count": 126.0,
            "has_eh_frame": true,
            "symtab_count": 191.0,
            "dynrela_count": 46.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 86.0,
            "debuglink_present": true,
            "program_header_count": 7.0,
            "section_header_count": 34.0,
            "load_segment_max_p_memsz": 23544.0,
            "load_segment_max_p_filesz": 23544.0,
            "section_relocation_group_count": 2.0
          },
          "binary": {
            "code_size": 11421.0,
            "file_size": 36376.0,
            "entry_point": 11488.0,
            "has_overlay": true,
            "code_entropy": 4.01,
            "data_entropy": 2.06,
            "export_count": 26.0,
            "import_count": 100.0,
            "overlay_size": 2176.0,
            "string_count": 226.0,
            "overlay_ratio": 0.06,
            "section_count": 33.0,
            "avg_complexity": 4.0,
            "function_count": 63.0,
            "import_density": 8.97,
            "max_complexity": 62.0,
            "string_density": 20.26,
            "aliased_exports": 7.0,
            "overall_entropy": 2.74,
            "overlay_entropy": 1.46,
            "avg_basic_blocks": 6.49,
            "avg_section_size": 1014.09,
            "dependency_count": 1.0,
            "entropy_variance": 1.67,
            "function_density": 5.65,
            "avg_function_size": 160.54,
            "avg_string_length": 18.76,
            "complexity_per_kb": 0.36,
            "max_string_length": 65.0,
            "avg_string_entropy": 3.36,
            "code_to_data_ratio": 0.52,
            "data_to_file_ratio": 0.01,
            "text_to_file_ratio": 0.27,
            "total_basic_blocks": 409.0,
            "string_length_stddev": 10.76,
            "debug_reference_count": 1.0,
            "largest_section_ratio": 0.27,
            "sentence_string_count": 20.0,
            "sentence_string_ratio": 0.09,
            "function_analysis_depth": 2.0,
            "high_complexity_functions": 1.0,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            4391,
            "__cxa_finalize"
          ],
          [
            4406,
            "__deregister_frame_info"
          ],
          [
            4430,
            "__register_frame_info"
          ],
          [
            4452,
            "_Jv_RegisterClasses"
          ],
          [
            4472,
            "rumpns_fss_bdevsw"
          ],
          [
            4490,
            "rumpns_bdevsw_lookup_major"
          ],
          [
            4517,
            "rumpns_fss_bmajor"
          ],
          [
            4535,
            "rumpns_fss_cdevsw"
          ],
          [
            4553,
            "rumpns_cdevsw_lookup_major"
          ],
          [
            4580,
            "rumpns_fss_cmajor"
          ],
          [
            4598,
            "rumpns_devsw_attach"
          ],
          [
            4618,
            "rump_vfs_makedevnodes"
          ],
          [
            4640,
            "rumpns_devsw_detach"
          ],
          [
            4660,
            "rumpns_panic"
          ],
          [
            4673,
            "rumpns_fss_size"
          ],
          [
            4689,
            "rumpns_fss_dump"
          ],
          [
            4705,
            "rumpns_device_private"
          ],
          [
            4727,
            "rumpns_mutex_enter"
          ],
          [
            4746,
            "rumpns_mutex_exit"
          ],
          [
            4764,
            "rumpns_pmf_device_deregister"
          ],
          [
            4793,
            "rumpns_mutex_destroy"
          ],
          [
            4814,
            "rumpns_cv_destroy"
          ],
          [
            4832,
            "rumpns_bufq_drain"
          ],
          [
            4850,
            "rumpns_bufq_free"
          ],
          [
            4867,
            "rumpns_disk_destroy"
          ],
          [
            4887,
            "rumpns_kmem_free"
          ],
          [
            4904,
            "rumpns_vfs_hooks_detach"
          ],
          [
            4928,
            "rumpns_x86_curlwp"
          ],
          [
            4946,
            "rumpns_uvm"
          ],
          [
            4957,
            "rumpns_cv_wait"
          ],
          [
            4972,
            "rumpns_getiobuf"
          ],
          [
            4988,
            "rumpns_nestiobuf_setup"
          ],
          [
            5011,
            "rumpns_bdev_strategy"
          ],
          [
            5032,
            "rumpns_biowait"
          ],
          [
            5047,
            "rumpns_putiobuf"
          ],
          [
            5063,
            "rumpns_cv_broadcast"
          ],
          [
            5083,
            "rumpns_cv_signal"
          ],
          [
            5100,
            "rumpns_memset"
          ],
          [
            5114,
            "rumpns_mutex_init"
          ],
          [
            5132,
            "rumpns_cv_init"
          ],
          [
            5147,
            "rumpns_bufq_alloc"
          ],
          [
            5165,
            "rumpns_kmem_zalloc"
          ],
          [
            5184,
            "rumpns_device_xname"
          ],
          [
            5204,
            "rumpns_disk_init"
          ],
          [
            5221,
            "rumpns_pmf_device_register1"
          ],
          [
            5249,
            "rumpns_aprint_error_dev"
          ],
          [
            5273,
            "rumpns_vfs_hooks_attach"
          ],
          [
            5297,
            "rumpns_fss_open"
          ],
          [
            5313,
            "rumpns_fss_cd"
          ],
          [
            5327,
            "rumpns_device_lookup_private"
          ],
          [
            5356,
            "rumpns_config_attach_pseudo"
          ],
          [
            5384,
            "rumpns_fss_strategy"
          ],
          [
            5404,
            "rumpns_biodone"
          ],
          [
            5419,
            "rumpns_bounds_check_with_mediasize"
          ],
          [
            5454,
            "rumpns_bufq_put"
          ],
          [
            5470,
            "rumpns_fss_read"
          ],
          [
            5486,
            "rumpns_minphys"
          ],
          [
            5501,
            "rumpns_physio"
          ],
          [
            5515,
            "rumpns_fss_write"
          ],
          [
            5532,
            "rumpns_schedppq"
          ],
          [
            5548,
            "rumpns_kthread_create"
          ],
          [
            5570,
            "rumpns_disk_attach"
          ],
          [
            5589,
            "rumpns_kmem_alloc"
          ],
          [
            5607,
            "rumpns_vn_lock"
          ],
          [
            5622,
            "rumpns_vn_rdwr"
          ],
          [
            5637,
            "rumpns_VOP_UNLOCK"
          ],
          [
            5655,
            "rumpns_rw_enter"
          ],
          [
            5671,
            "rumpns_VOP_PUTPAGES"
          ],
          [
            5691,
            "rumpns_bufq_get"
          ],
          [
            5707,
            "rumpns_kthread_exit"
          ],
          [
            5727,
            "rumpns_mutex_owned"
          ],
          [
            5746,
            "rumpns_disk_busy"
          ],
          [
            5763,
            "rumpns_disk_unbusy"
          ],
          [
            5782,
            "rumpns_memcpy"
          ],
          [
            5796,
            "rumpns_fscow_disestablish"
          ],
          [
            5822,
            "rumpns_kern_assert"
          ],
          [
            5841,
            "rumpns_kthread_join"
          ],
          [
            5861,
            "rumpns_disk_detach"
          ],
          [
            5880,
            "rumpns_fss_ca"
          ],
          [
            5894,
            "rumpns_config_cfattach_detach"
          ],
          [
            5924,
            "rumpns_config_cfdriver_attach"
          ],
          [
            5954,
            "rumpns_config_cfattach_attach"
          ],
          [
            5984,
            "rumpns_config_cfdriver_detach"
          ],
          [
            6014,
            "rumpns_fss_ioctl"
          ],
          [
            6031,
            "rumpns_copyinstr"
          ],
          [
            6048,
            "rumpns_cv_wait_sig"
          ],
          [
            6067,
            "rumpns_NSM_FOLLOW_NOEMULROOT"
          ],
          [
            6096,
            "rumpns_namei_simple_user"
          ],
          [
            6121,
            "rumpns_vrele"
          ],
          [
            6134,
            "rumpns_spec_node_lookup_by_mount"
          ],
          [
            6167,
            "rumpns_getdisksize"
          ],
          [
            6186,
            "rumpns_pathbuf_copyin"
          ],
          [
            6208,
            "rumpns_vn_open"
          ],
          [
            6223,
            "rumpns_pathbuf_destroy"
          ],
          [
            6246,
            "rumpns_vfs_suspend"
          ],
          [
            6265,
            "rumpns_microtime"
          ],
          [
            6282,
            "rumpns_vrele_flush"
          ],
          [
            6301,
            "rumpns_VFS_SYNC"
          ],
          [
            6317,
            "rumpns_vfs_resume"
          ],
          [
            6335,
            "rumpns_do_sys_unlink"
          ],
          [
            6356,
            "rumpns_vn_close"
          ],
          [
            6372,
            "rumpns_VFS_SNAPSHOT"
          ],
          [
            6392,
            "rumpns_fscow_establish"
          ],
          [
            6415,
            "rumpns_aprint_debug_dev"
          ],
          [
            6439,
            "rumpns_fss_close"
          ],
          [
            6456,
            "rumpns_device_cfdata"
          ],
          [
            6477,
            "rumpns_config_detach"
          ],
          [
            6498,
            "rumpns_fssattach"
          ],
          [
            6515,
            "rumpns_aprint_error"
          ],
          [
            6535,
            "rumpns_ttyvenodev"
          ],
          [
            6553,
            "rumpns_seltrue"
          ],
          [
            6568,
            "rumpns_nommap"
          ],
          [
            6582,
            "rumpns_seltrue_kqfilter"
          ],
          [
            6606,
            "rumpns_devenodev"
          ],
          [
            6623,
            "libc.so.12"
          ],
          [
            6634,
            "__start_link_set_modules"
          ],
          [
            6659,
            "__stop_link_set_modules"
          ],
          [
            6683,
            "__start_link_set_rump_components"
          ],
          [
            6716,
            "__stop_link_set_rump_components"
          ],
          [
            6748,
            "__start_link_set_evcnts"
          ],
          [
            6772,
            "__stop_link_set_evcnts"
          ],
          [
            6795,
            "__start_link_set_sysctl_funcs"
          ],
          [
            6825,
            "__stop_link_set_sysctl_funcs"
          ],
          [
            6859,
            "librumpdev_fss.so.0"
          ],
          [
            11680,
            "AWAVAUATSH"
          ],
          [
            11958,
            "AUATSH"
          ],
          [
            13288,
            "ATSI"
          ],
          [
            13516,
            "AVAUATSH"
          ],
          [
            13760,
            "AVAUATSI"
          ],
          [
            17071,
            "AUAT"
          ],
          [
            21488,
            "cannot attach fss: %d"
          ],
          [
            21510,
            "/dev/fss"
          ],
          [
            21519,
            "/dev/rfss"
          ],
          [
            21536,
            "cannot create cooked fss dev nodes: %d"
          ],
          [
            21576,
            "cannot create raw fss dev nodes: %d"
          ],
          [
            21618,
            "cowwait"
          ],
          [
            21626,
            "cowwait1"
          ],
          [
            21638,
            "mutex_owned(\u0026sc-\u003esc_slock)"
          ],
          [
            21665,
            "diagnostic"
          ],
          [
            21677,
            "write error on backing store"
          ],
          [
            21706,
            "snapshot invalid: %s"
          ],
          [
            21728,
            "snapwait"
          ],
          [
            21737,
            "forced by unmount"
          ],
          [
            21755,
            "sc-\u003esc_state == FSS_CREATING"
          ],
          [
            21784,
            "%s snapshot active"
          ],
          [
            21804,
            "sc-\u003esc_state == FSS_ACTIVE"
          ],
          [
            21831,
            "sc-\u003esc_state == FSS_IDLE"
          ],
          [
            21856,
            "%s: unable to register"
          ],
          [
            21880,
            "bufq_fcfs"
          ],
          [
            21896,
            "couldn't establish power handler"
          ],
          [
            21936,
            "/usr/src/sys/rump/dev/lib/libfss/../../../../dev/fss.c"
          ],
          [
            21992,
            "kernel %sassertion \"%s\" failed: file \"%s\", line %d"
          ],
          [
            22048,
            "%u clusters of %u, %u cache slots, %u indir clusters"
          ],
          [
            22104,
            "(sc-\u003esc_flags \u0026 (FSS_CDEV_OPEN|FSS_BDEV_OPEN)) == mflag"
          ],
          [
            25720,
            "GCC: (NetBSD nb3 20231008) 10.5.0"
          ],
          [
            25754,
            "$NetBSD: crti.S,v 1.1 2010/08/07 18:01:35 joerg Exp $"
          ],
          [
            25808,
            "$NetBSD: crtbegin.S,v 1.2 2010/11/30 18:37:59 joerg Exp $"
          ],
          [
            25866,
            "$NetBSD: fss_component.c,v 1.4 2016/07/30 23:07:23 pgoyette Exp $"
          ],
          [
            25932,
            "$NetBSD: fss.c,v 1.113.4.1 2023/03/23 12:11:03 martin Exp $"
          ],
          [
            25992,
            "$NetBSD: crtend.S,v 1.1 2010/08/07 18:01:34 joerg Exp $"
          ],
          [
            26048,
            "$NetBSD: crtn.S,v 1.1 2010/08/07 18:01:35 joerg Exp $"
          ],
          [
            26149,
            "*** No Label Provided ***"
          ],
          [
            26248,
            "librumpdev_fss.so.0.0.debug"
          ],
          [
            30865,
            "__CTOR_LIST__"
          ],
          [
            30879,
            "__DTOR_LIST__"
          ],
          [
            30893,
            "__EH_FRAME_LIST__"
          ],
          [
            30911,
            "__JCR_LIST__"
          ],
          [
            30924,
            "__dwarf_eh_object"
          ],
          [
            30942,
            "__initialized"
          ],
          [
            30956,
            "__finished"
          ],
          [
            30967,
            "__do_global_dtors_aux"
          ],
          [
            30989,
            "__do_global_ctors_aux"
          ],
          [
            31011,
            "rumpcompinitRUMP_COMPONENT_DEV"
          ],
          [
            31042,
            "__link_set_rump_components_sym_rumpcompRUMP_COMPONENT_DEV"
          ],
          [
            31100,
            "fss_match"
          ],
          [
            31110,
            "fss_detach"
          ],
          [
            31121,
            "fss_num_attached"
          ],
          [
            31138,
            "fss_vfs_hooks"
          ],
          [
            31152,
            "fss_copy_on_write"
          ],
          [
            31170,
            "fss_attach"
          ],
          [
            31181,
            "fss_device_lock"
          ],
          [
            31197,
            "fss_softc_alloc"
          ],
          [
            31213,
            "fss_bs_thread"
          ],
          [
            31227,
            "fss_bs_io"
          ],
          [
            31237,
            "fss_bs_indir"
          ],
          [
            31250,
            "fss_softc_free"
          ],
          [
            31265,
            "fss_modcmd"
          ],
          [
            31276,
            "fss_device_cv"
          ],
          [
            31290,
            "fss_unmount_hook"
          ],
          [
            31307,
            "fss_creating"
          ],
          [
            31320,
            "__link_set_modules_sym_fss_modinfo"
          ],
          [
            31355,
            "_DYNAMIC"
          ],
          [
            31364,
            "__CTOR_LIST_END__"
          ],
          [
            31382,
            "__GNU_EH_FRAME_HDR"
          ],
          [
            31401,
            "_GLOBAL_OFFSET_TABLE_"
          ],
          [
            31423,
            "__dso_handle"
          ],
          [
            33900,
            ".symtab"
          ],
          [
            33908,
            ".strtab"
          ],
          [
            33916,
            ".shstrtab"
          ],
          [
            33926,
            ".hash"
          ],
          [
            33932,
            ".dynsym"
          ],
          [
            33940,
            ".dynstr"
          ],
          [
            33948,
            ".rela.dyn"
          ],
          [
            33958,
            ".rela.plt"
          ],
          [
            33968,
            ".init"
          ],
          [
            33974,
            ".plt.got"
          ],
          [
            33983,
            ".text"
          ],
          [
            33989,
            ".fini"
          ],
          [
            33995,
            ".rodata"
          ],
          [
            34003,
            ".eh_frame_hdr"
          ],
          [
            34017,
            ".eh_frame"
          ],
          [
            34027,
            ".note.netbsd.ident"
          ],
          [
            34046,
            ".note.netbsd.pax"
          ],
          [
            34063,
            ".ctors"
          ],
          [
            34070,
            ".dtors"
          ],
          [
            34077,
            ".jcr"
          ],
          [
            34082,
            ".data.rel.ro"
          ],
          [
            34095,
            ".dynamic"
          ],
          [
            34104,
            ".got.plt"
          ],
          [
            34113,
            ".data"
          ],
          [
            34119,
            "link_set_modules"
          ],
          [
            34136,
            "link_set_rump_components"
          ],
          [
            34161,
            ".bss"
          ],
          [
            34166,
            ".comment"
          ],
          [
            34175,
            ".SUNW_ctf"
          ],
          [
            34185,
            ".gnu_debuglink"
          ]
        ],
        "sz": 36376,
        "ts": [
          {
            "c": 1.0,
            "d": "ELF SONAME present",
            "e": [
              "librumpdev_fss.so.0"
            ],
            "i": "metadata/binary/linking::elf-soname",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF needed library",
            "e": [
              "libc.so.12"
            ],
            "i": "metadata/binary/linking::elf-needed-lib",
            "l": 2
          },
          {
            "c": 1.0,
            "d": ".gnu_debuglink reference present",
            "e": [
              "librumpdev_fss.so.0.0.debug"
            ],
            "i": "metadata/build/debug::elf-debuglink",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.function_count = 63.00"
            ],
            "i": "metadata/binary/metrics::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.36"
            ],
            "i": "metadata/binary/metrics::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "Compact C type format section",
            "e": [
              ".SUNW_ctf"
            ],
            "i": "metadata/binary/section/content::sunw-ctf-section",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking::elf-dynstr-section-name",
            "l": 2
          },
          {
            "a": "T1082",
            "c": 0.6000000238418579,
            "d": "Query or modify kernel state via sysctl",
            "e": [
              "stop_link_set_sysctl_funcs",
              "start_link_set_sysctl_funcs"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysctl",
            "l": 2,
            "m": "E1082"
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 26.00"
            ],
            "i": "metadata/binary/symbols::has-exports",
            "l": 1
          },
          {
            "a": "T1071.001",
            "d": "Port 23 (telnet)",
            "e": [
              ":23"
            ],
            "i": "objectives/command-and-control/infrastructure/ip::port-23",
            "l": 1,
            "m": "C0002"
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "librumpdev_fss.so.0.0"
            ],
            "i": "metadata/binary/metrics::small-elf-binary",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics::elf64-class",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "NetBSD-style /usr/src source path",
            "e": [
              "/usr/src/sys/rump/dev/lib/libfss/../../../../dev/fss.c"
            ],
            "i": "metadata/binary/provenance::netbsd-source-tree-path",
            "l": 2
          },
          {
            "d": ".so extension reference",
            "e": [
              ".so",
              ".so",
              ".so"
            ],
            "i": "micro-behaviors/fs/path/extension::so",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 100.00"
            ],
            "i": "metadata/binary/metrics::many-imports-40",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 26.00"
            ],
            "i": "metadata/binary/metrics::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 33.00"
            ],
            "i": "metadata/binary/metrics::many-sections-20",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.function_count = 63.00"
            ],
            "i": "metadata/binary/metrics::many-functions",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 26.00"
            ],
            "i": "metadata/binary/metrics::many-exports-20",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 26.00"
            ],
            "i": "metadata/binary/metrics::many-exports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 100.00"
            ],
            "i": "metadata/binary/metrics::many-imports-20",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 100.00"
            ],
            "i": "metadata/binary/metrics::many-imports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.function_count = 63.00"
            ],
            "i": "metadata/binary/metrics::many-functions-50",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.74"
            ],
            "i": "metadata/binary/metrics::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 100.00"
            ],
            "i": "metadata/binary/metrics::many-imports-100",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "libc version string pattern",
            "e": [
              "libc.so.1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-version-string",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 100.00"
            ],
            "i": "metadata/binary/metrics::many-imports-30",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 100.00"
            ],
            "i": "metadata/binary/metrics::many-imports-50",
            "l": 1
          },
          {
            "a": "T1486",
            "c": 0.75,
            "d": "flock LOCK_EX call bytecode pattern",
            "e": [
              "be 69 f3 ff ff",
              "be 77 e4 ff ff",
              "be 09 db ff ff",
              "be 1f d6 ff ff",
              "be fc d3 ff ff"
            ],
            "i": "objectives/impact/ransom/esxi::flock-lockex",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "NetBSD RCS ident keyword",
            "e": [
              "$NetBSD: fss_component.c,v 1.4 2016/07/30 23:07:23 pgoyette Exp $",
              "$NetBSD: crtbegin.S,v 1.2 2010/11/30 18:37:59 joerg Exp $",
              "$NetBSD: fss.c,v 1.113.4.1 2023/03/23 12:11:03 martin Exp $",
              "$NetBSD: crtend.S,v 1.1 2010/08/07 18:01:34 joerg Exp $",
              "$NetBSD: crti.S,v 1.1 2010/08/07 18:01:35 joerg Exp $",
              "$NetBSD: crtn.S,v 1.1 2010/08/07 18:01:35 joerg Exp $"
            ],
            "i": "metadata/binary/provenance::netbsd-rcs-id",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 100.00"
            ],
            "i": "metadata/binary/metrics::many-imports-25",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 4.00"
            ],
            "i": "metadata/binary/metrics::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "binary.file_size = 36376.00"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF SONAME metadata",
            "e": [
              "librumpdev_fss.so.0"
            ],
            "i": "metadata/binary/linking/runtime::soname",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF external debug artifact reference",
            "e": [
              "librumpdev_fss.so.0.0.debug"
            ],
            "i": "metadata/build/debug::external-debug-reference",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "No stack canary (stack smashing protection absent)",
            "e": [
              "elf.stack_canary = 0.00"
            ],
            "i": "metadata/hardening::no-stack-canary",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "NX/DEP disabled (stack is executable)",
            "e": [
              "elf.nx_enabled = 0.00"
            ],
            "i": "metadata/hardening::nx-disabled",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF needed library metadata",
            "e": [
              "libc.so.12"
            ],
            "i": "metadata/binary/linking/runtime::needed-lib",
            "l": 2
          }
        ],
        "sha": "9dc8a469463aa2ad74c76c5a938cf93982646145210adbbab3dd8681c5590dea",
        "path": "librumpdev_fss.so.0.0",
        "type": "elf"
      }
    ],
    "tv": "f6eaa"
  }
}