{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00010737777, "rte": "az", "prob": 0.00010737777 } ], "prob": 0.00010737777, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00010737776756286621, "type": "xz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000006119410045357654, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T23:12:36Z" }, "path": "hid-sensor-incl-3d.ko.xz", "raw": { "files": [ { "id": 0, "mol": "Md₂(BiHe)", "sha": "9e93dd3fb424979e2bb3003fe535d5866afdd9f936b8f3bc3484cd45adf7a1e3", "path": "hid-sensor-incl-3d.ko.xz", "risk": 3, "size": 21732, "type": "xz", "facts": { "metrics": { "file": { "size": 21732, "entropy": 7.99 }, "binary": { "peak_region_bytes": 21504, "peak_region_entropy": 7.84 } } }, "traits": [ { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 6 ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "from": [ { "file": 1 } ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "from": [ { "file": 1 } ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "from": [ { "file": 1 } ], "uses": [ 0, 1 ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "from": [ { "file": 1 } ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "from": [ { "file": 1 } ], "uses": [ 6 ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000i70YD0000000000kMy=:002m:gxofgKDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.09c:/03znunq\u003c9@0000\u0026I[:=x002MFTagoL0o:y.002MD?@\u003e4u002MHBTP!q?=\u003cyJ00000KDtM=KDtM=KDtM=KDtM=]a8]s\u003eL$O.07\u002690HYvzPq+h?lFcb=KF=pi6aolH\u0026CpwaxE/{\u003e]ByoX0Fcl$", "ln": 0 }, { "b": "003%vaol\u0026[aol(]aol]{aol@}aola)AbP=suV6{FnL8Y+nj=hHy?Wx\u003czGxwLm]h\u003eVvrDW9z/O0tA+PA9C42Cmp*[lLA=(LlwmlPyB8\u003e#jx)9{ae]Ulpwo8*ovpS!iy?W^fCRiYFBy/nvv@DiF0aYUZv@=p5BzkVhjXedjax8\u0026?B8M7wnP53Ox(m?", "ln": 3614 }, { "b": "v{%g+uVp3%uU0.Tzeoh[v{%g+uVo}8ByeM\u0026v@l2ZB7nS{wNxy%wN/B}x(v\u003e?x(mD}z^N3^B]Vh\u0026wm64*v@bHdwm6p(vrua1A=2e]A+PYdA:Jy5x(\u003ct*x\u003egN+zEWG\u0026gH%\u003ciy*?A$z/PW", "ln": 71245 } ], "depth": 1, "facts": { "sec": [ [ ".text", 64, 1580, 5.22, "alloc,executable" ], [ ".rela.text", 75592, 1440, 2.39, "info_link" ], [ ".init.text", 1648, 44, 2.4, "alloc,executable" ], [ ".rela.init.text", 77032, 96, 1.66, "info_link" ], [ ".exit.text", 1696, 32, 2.19, "alloc,executable" ], [ ".rela.exit.text", 77128, 48, 1.57, "info_link" ], [ ".text.unlikely", 1728, 179, 3.18, "alloc,executable" ], [ ".rela.text.unlikely", 77176, 456, 1.94, "info_link" ], [ "__mcount_loc", 1907, 56, 0.0, "alloc" ], [ ".rela__mcount_loc", 77632, 168, 1.22, "info_link" ], [ ".rodata.str1.8", 1968, 85, 4.31, "alloc,merge,strings" ], [ ".rodata.str1.1", 2053, 213, 4.55, "alloc,merge,strings" ], [ ".rodata", 2272, 1364, 0.94, "alloc" ], [ ".rela.rodata", 77800, 768, 1.42, "info_link" ], [ ".modinfo", 3636, 329, 4.98, "alloc" ], [ ".note.gnu.property", 3968, 64, 1.77, "alloc" ], [ ".note.gnu.build-id", 4032, 36, 4.25, "alloc" ], [ ".note.Linux", 4068, 48, 1.97, "alloc" ], [ ".orc_header", 4116, 20, 4.12, "alloc" ], [ ".return_sites", 4136, 28, 0.0, "alloc" ], [ ".rela.return_sites", 78568, 168, 1.32, "info_link" ], [ ".call_sites", 4164, 144, 0.0, "alloc" ], [ ".rela.call_sites", 78736, 864, 1.56, "info_link" ], [ ".orc_unwind", 4308, 438, 2.94, "alloc" ], [ ".orc_unwind_ip", 4746, 292, 0.0, "alloc" ], [ ".rela.orc_unwind_ip", 79600, 1752, 1.62, "info_link" ], [ "__jump_table", 5040, 32, 0.0, "write,alloc" ], [ ".rela__jump_table", 81352, 144, 1.38, "info_link" ], [ "__patchable_function_entries", 5072, 64, 0.0, "write,alloc" ], [ ".rela__patchable_function_entries", 81496, 192, 1.09, "info_link" ], [ ".data", 5136, 200, 0.0, "write,alloc" ], [ ".rela.data", 81688, 120, 1.17, "info_link" ], [ ".exit.data", 5336, 8, 0.0, "write,alloc" ], [ ".rela.exit.data", 81808, 24, 0.5, "info_link" ], [ ".init.data", 5344, 8, 0.0, "write,alloc" ], [ ".rela.init.data", 81832, 24, 0.5, "info_link" ], [ ".printk_index", 5352, 48, 0.0, "write,alloc" ], [ ".rela.printk_index", 81856, 144, 1.18, "info_link" ], [ "__dyndbg", 5400, 112, 0.35, "write,alloc" ], [ ".rela__dyndbg", 82000, 192, 1.18, "info_link" ], [ ".gnu.linkonce.this_module", 5512, 1280, 0.16, "write,alloc" ], [ ".rela.gnu.linkonce.this_module", 82192, 48, 1.05, "info_link" ], [ ".comment", 6792, 57, 3.72, "merge,strings" ], [ ".BTF", 6849, 64634, 4.07, "" ], [ ".symtab", 71488, 2400, 1.73, "" ], [ ".strtab", 73888, 1701, 4.65, "" ], [ ".shstrtab", 82240, 504, 4.34, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 3, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "symtab_count": 100, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "comment_entry_count": 3, "program_header_count": 0, "stripped_with_symtab": 1, "comment_distinct_count": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 17, "stripped_metadata_section_count": 5 }, "file": { "size": 86008, "entropy": 3.88 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 4.9, "data_entropy": 0.14, "overlay_size": 3264, "string_count": 435, "overlay_ratio": 0.04, "overlay_entropy": 1.34, "entropy_variance": 2.54, "avg_string_length": 17.6, "max_string_length": 76, "peak_region_bytes": 3072, "code_to_data_ratio": 0.51, "peak_region_entropy": 5.14, "string_length_stddev": 8.65, "largest_section_ratio": 0.75, "sentence_string_count": 11, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0 }, "sections": { "count": 51, "code_size": 1835, "entropy_max": 5.22, "entropy_mean": 1.8, "name_entropy": 4.28, "writable_count": 10, "executable_count": 4, "nonstandard_count": 43, "executable_writable_count": 0 }, "dependencies": { "count": 0 } } }, "id": 1, "mol": "Md₂(BiHe)", "path": "hid-sensor-incl-3d.ko.xz!!hid-sensor-incl-3d.ko", "pid": 0, "risk": 3, "sha": "03793e0ea6a8cd7bb31f8d7af6940d85f97cb3d5e4cd2d1f47ed7ceb325ac6bc", "size": 86008, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/extension/identity::linux-kernel-module-basename", "conf": 0.95, "crit": 2, "desc": "Linux kernel module basename", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 3662, 0 ] ] }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 5 ], "spans": [ [ 0, 25 ] ] } ], "type": "elf" } ], "rev": "b3dc8", "v": "8" } }