{ "ml": { "v": "7", "eng": "2.12.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.03834297, "rte": "az", "prob": 0.03834297 }, { "cls": 0, "raw": 0.003656447, "rte": "az/native", "prob": 0.003656447 }, { "cls": 0, "raw": 0.00892051, "rte": "az/elf", "prob": 0.00892051 } ], "prob": 0.03834297, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.03834297135472298, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-10-01T00:35:11Z" }, "path": "ps3.so", "raw": { "v": "8", "rev": "c1ea9", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000%2!g0rr910000000000kMy=:00000PAth{0000000000kMA+z2()i\u003c8VQ=R0rr911POJ5000000000000000000000000000000D$\u0026SY00000D$\u0026S", "ln": 0 }, { "b": "ttp4G000000SSi2mGrz*0rr911][S6nb@R\u0026Fb/YLmGrz*m/SI?HIPGG.!Ez*000000000000000000000000000000000000@@VdXd[#z000000000000000000000@%8p00ii4000000000000000S@Jb15=.[i00000000000000000000x8?]i5=.[", "ln": 632 }, { "b": "m*5!(5=-suPI2m+00000ec2UI000000T5G65=-su=}jor00000=\u0026s4C000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0af8OBywV{uT)++uUsH\u0026A+2d", "ln": 2360 }, { "b": "A=lj{zdd6*nP5cU09shPBy^^Pz^\u0026YAwO=6#ADL#pxIz]Fx\u003e7{MwO(vaC(RhUB97\u00262yHpN+yHpWZx(0=vB47m-zGFM\u003cxj\u003e{@x8\u003e\u003ewBv*sTxjT!QzF%2#A=k/a06$amB.L(cr+VO@BZY8XwO(vaC(QuCBxi9@BAI2do\u003ewfWA^o#/z^\u0026YpwPQ%!A==Cjy/1?\u003cwO=z/q!k", "ln": 2583 }, { "b": "f/yU9z.r:#0bMvUv\u003eI?ve\u0026AYCwg.RizGQgQvpsg^xF}X1B8JV=0c00ne]$}hm[=GvlTIP3f/G7j00000000310rrc20rrc20rrc20rrc20rrc20rrc20SSl30rrc20rrc20rrc20rrc20rrc20rrc20SSl30rrc20rrf30rrc20rri40rrc20rrc20rrc", "ln": 3560 }, { "b": "[bJET5PQej5p$1DaoAUo[bJET5Q3Cn5txn?aoAUo[bJET5QD.r5w!KiaoAUo[bJET5Q)1v5Ai!OaoAUo[bJET5Rrpz5cq#%aoAUo[bJET5R-ND5f.mtaoAUo[bJET5Se\u003cH5jcIZaoAUo[bJET5SPcL5mL^8aoAUo[bJET5T2AP5p$4EaoAUo[bJET5TCYT5txq\u0026aoAUo[bJET5T\u003e#X", "ln": 6080 }, { "b": "00000m]Ab.p=7ikm]Ab.p=5dL0000000000e?O!fe?ZZMwmY!5fk$$*e[j\u003eY00000x(do\u003ewGScVasG/#vp%c]dK=Gnrzl6^x(do\u003ewI38!x\u003eIr(BAIRnau.\u003ego\u003c}WGv@1CI", "ln": 19436 }, { "b": "3lQEoaBb8KA:-\u003cby*?A%3lQDqaw3AUxjSibx)KtkvqYP#w]zNeaAImywIarjay/LmA+fcgw[=6)ayYF9w[u09A+eV\u0026y?W=#aAhmr3lQEkz!\u0026{4aAhmratm%ZwQ4X", "ln": 24449 }, { "b": "v%8*jwO#Q4x(4u6vS=o{wPw]lwNPa=x(mG8AbPX5arU=AyH}xaAbPXrfjO*bB8@EnCW\u003ezfwmYu}AbPX5arR%MlVl*XA+frkx(v(iBA}?pe^-Zzv%8*jwO#Q4x(4u6vG", "ln": 25252 }, { "b": "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 50520 }, { "b": "000000000000000000000000000000000000000000000000000000000000\u00262hN}00000J2zV@000000rr9100000zV*4u000000rr9100000I39!U000000rr9100000Llp\u003c=000004GDFe00000Srrh3000003\u0026*nc00000Xd[#z000004fcwd00000+U4{o0000082%Tp00000", "ln": 64888 }, { "b": "vR]K^x\u003e7{*z/Pzvh.G88hz3Tqe[wK5B.pW*\u003eE]rc}++8Ju(G@Y1Mr.!!eRY[vLzq6w[B1Ti503Chzw-Khd!TNvL?QLv{}8Ih-S:8g?nNPw\u0026hhKwNY^{00000MXDqI04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaK6iC(PEmz//LyxkR\u0026AvS=y3wg.Ia04}]4BUmuoB7+Lawo\u00266lD2iKlwo\u00266lBAdvlxkR\u0026AC4CYnx(v\u003e?", "ln": 66096 } ], "mol": "Md₃(BiBkHe₂)", "sha": "a88615c3fcc3c0c852f1fd935f3fc58e19f16cd6017e1e51bbc4d65f06ca1973", "path": "/data/samples/incoming/forager/raspios/raspberrypi.org/osimage/arm64-img/2026-09-15-raspios-trixie-arm64.img/2026-09-15-raspios-trixie-arm64.img.d/1.img.d/usr/lib/aarch64-linux-gnu/ImageMagick-7.1.1/modules-Q16/coders/ps3.so", "risk": 4, "size": 68192, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "UnregisterPS3Image" ], [ "RegisterPS3Image" ] ], "imp": [ [ "", "DestroyImageInfo" ], [ "", "CloneImage" ], [ "", "Ascii85Encode" ], [ "", "ParseGeometry" ], [ "", "UnregisterMagickInfo" ], [ "", "SetGeometry" ], [ "", "FormatLocaleString" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "ImageToBlob" ], [ "", "IdentifyImageGray" ], [ "", "StringToList" ], [ "", "WriteBlobByte" ], [ "", "SeparateImage" ], [ "", "cxa_finalize" ], [ "", "LZWEncodeImage" ], [ "", "InjectImageBlob" ], [ "", "ConcatenateMagickString" ], [ "", "IsEventLogging" ], [ "", "DestroyString" ], [ "", "ZLIBEncodeImage" ], [ "", "LocaleCompare" ], [ "", "SetImageProgress" ], [ "", "SetImageMonochrome" ], [ "", "ParseAbsoluteGeometry" ], [ "", "AcquireMagickInfo" ], [ "", "SeekBlob" ], [ "", "Ascii85Flush" ], [ "", "memset" ], [ "", "Ascii85Initialize" ], [ "", "DestroyImage" ], [ "", "PackbitsEncodeImage" ], [ "", "LogMagickEvent" ], [ "", "stack_chk_fail" ], [ "", "IsStringFalse" ], [ "", "GetNextImageInList" ], [ "", "gmon_start__" ], [ "", "stack_chk_guard" ], [ "", "GetVirtualPixels" ], [ "", "RegisterMagickInfo" ], [ "", "AcquireVirtualMemory" ], [ "", "SyncNextImageInList" ], [ "", "TellBlob" ], [ "", "RelinquishVirtualMemory" ], [ "", "CopyMagickString" ], [ "", "WriteBlob" ], [ "", "LocaleNCompare" ], [ "", "ThrowMagickException" ], [ "", "GetMagickTime" ], [ "", "MultilineCensus" ], [ "", "OpenBlob" ], [ "", "SetImageType" ], [ "", "CloneImageInfo" ], [ "", "ParseMetaGeometry" ], [ "", "ConstantString" ], [ "", "WriteBlobString" ], [ "", "CloseBlob" ], [ "", "ParseGravityGeometry" ], [ "", "HuffmanEncodeImage" ], [ "", "GetVirtualMemoryBlob" ], [ "", "ITM_registerTMCloneTable" ], [ "", "RelinquishMagickMemory" ], [ "", "assert_fail" ], [ "", "errno_location" ], [ "", "GetImageProperty" ], [ "", "FormatMagickTime" ], [ "", "GetImageListLength" ], [ "", "GetImageOption" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.69, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.25, "alloc" ], [ ".gnu.hash", 640, 40, 2.62, "alloc" ], [ ".dynsym", 680, 1728, 1.07, "alloc" ], [ ".dynstr", 2408, 1211, 4.96, "alloc" ], [ ".gnu.version", 3620, 144, 1.23, "alloc" ], [ ".gnu.version_r", 3768, 64, 2.34, "alloc" ], [ ".rela.dyn", 3832, 192, 1.79, "alloc" ], [ ".rela.plt", 4024, 1536, 1.7, "alloc,info_link" ], [ ".init", 5560, 28, 3.99, "alloc,executable" ], [ ".plt", 5600, 1056, 4.41, "alloc,executable" ], [ ".text", 6656, 12748, 6.4, "alloc,executable" ], [ ".fini", 19404, 24, 3.72, "alloc,executable" ], [ ".rodata", 19440, 6422, 4.97, "alloc" ], [ ".eh_frame_hdr", 25864, 84, 3.58, "alloc" ], [ ".eh_frame", 25952, 1308, 5.35, "alloc" ], [ ".init_array", 64936, 8, 1.06, "write,alloc" ], [ ".fini_array", 64944, 8, 1.06, "write,alloc" ], [ ".dynamic", 64952, 512, 1.55, "write,alloc" ], [ ".got", 65464, 48, 0.44, "write,alloc" ], [ ".got.plt", 65512, 536, 1.03, "write,alloc" ], [ ".data", 66048, 8, 0.81, "write,alloc" ], [ ".gnu_debugaltlink", 66056, 87, 5.31, "" ], [ ".gnu_debuglink", 66144, 52, 4.29, "" ], [ ".shstrtab", 66196, 264, 4.26, "" ] ], "tgt": [ "entry0", "fcn.00001a20", "fcn.00001b00", "fcn.00001c24", "sym.imp.AcquireMagickInfo", "sym.imp.AcquireVirtualMemory", "sym.imp.Ascii85Encode", "sym.imp.Ascii85Flush", "sym.imp.Ascii85Initialize", "sym.imp.CloneImage", "sym.imp.CloneImageInfo", "sym.imp.CloseBlob", "sym.imp.ConcatenateMagickString", "sym.imp.ConstantString", "sym.imp.CopyMagickString", "sym.imp.DestroyImage", "sym.imp.DestroyImageInfo", "sym.imp.DestroyString", "sym.imp.FormatLocaleString", "sym.imp.FormatMagickTime", "sym.imp.GetImageListLength", "sym.imp.GetImageOption", "sym.imp.GetImageProperty", "sym.imp.GetMagickTime", "sym.imp.GetNextImageInList", "sym.imp.GetVirtualMemoryBlob", "sym.imp.GetVirtualPixels", "sym.imp.HuffmanEncodeImage", "sym.imp.IdentifyImageGray", "sym.imp.ImageToBlob", "sym.imp.InjectImageBlob", "sym.imp.IsEventLogging", "sym.imp.IsStringFalse", "sym.imp.LZWEncodeImage", "sym.imp.LocaleCompare", "sym.imp.LocaleNCompare", "sym.imp.LogMagickEvent", "sym.imp.MultilineCensus", "sym.imp.OpenBlob", "sym.imp.PackbitsEncodeImage", "sym.imp.ParseAbsoluteGeometry", "sym.imp.ParseGeometry", "sym.imp.ParseGravityGeometry", "sym.imp.ParseMetaGeometry", "sym.imp.RegisterMagickInfo", "sym.imp.RelinquishMagickMemory", "sym.imp.RelinquishVirtualMemory", "sym.imp.SeekBlob", "sym.imp.SeparateImage", "sym.imp.SetGeometry", "sym.imp.SetImageMonochrome", "sym.imp.SetImageProgress", "sym.imp.SetImageType", "sym.imp.StringToList", "sym.imp.SyncNextImageInList", "sym.imp.TellBlob", "sym.imp.ThrowMagickException", "sym.imp.UnregisterMagickInfo", "sym.imp.WriteBlob", "sym.imp.WriteBlobByte", "sym.imp.WriteBlobString", "sym.imp.ZLIBEncodeImage", "sym.imp.__assert_fail", "sym.imp.__cxa_finalize", "sym.imp.__errno_location", "sym.imp.__stack_chk_fail", "sym.imp.memset" ], "funcs": [ [ "fcn.000015bc", 5564 ], [ "fcn.000015e4", 5604 ], [ "sym.imp.DestroyImageInfo", 5632 ], [ "sym.imp.CloneImage", 5648 ], [ "sym.imp.Ascii85Encode", 5664 ], [ "sym.imp.ParseGeometry", 5680 ], [ "sym.imp.UnregisterMagickInfo", 5696 ], [ "sym.imp.SetGeometry", 5712 ], [ "sym.imp.FormatLocaleString", 5728 ], [ "sym.imp.ImageToBlob", 5744 ], [ "sym.imp.IdentifyImageGray", 5760 ], [ "sym.imp.StringToList", 5776 ], [ "sym.imp.WriteBlobByte", 5792 ], [ "sym.imp.SeparateImage", 5808 ], [ "sym.imp.__cxa_finalize", 5824 ], [ "sym.imp.LZWEncodeImage", 5840 ], [ "sym.imp.InjectImageBlob", 5856 ], [ "sym.imp.ConcatenateMagickString", 5872 ], [ "sym.imp.IsEventLogging", 5888 ], [ "sym.imp.DestroyString", 5904 ], [ "sym.imp.ZLIBEncodeImage", 5920 ], [ "sym.imp.LocaleCompare", 5936 ], [ "sym.imp.SetImageProgress", 5952 ], [ "sym.imp.SetImageMonochrome", 5968 ], [ "sym.imp.ParseAbsoluteGeometry", 5984 ], [ "sym.imp.AcquireMagickInfo", 6000 ], [ "sym.imp.SeekBlob", 6016 ], [ "sym.imp.Ascii85Flush", 6032 ], [ "sym.imp.memset", 6048 ], [ "sym.imp.Ascii85Initialize", 6064 ], [ "sym.imp.DestroyImage", 6080 ], [ "sym.imp.PackbitsEncodeImage", 6096 ], [ "sym.imp.LogMagickEvent", 6112 ], [ "sym.imp.__stack_chk_fail", 6128 ], [ "sym.imp.IsStringFalse", 6144 ], [ "sym.imp.GetNextImageInList", 6160 ], [ "sym.imp.GetVirtualPixels", 6192 ], [ "sym.imp.RegisterMagickInfo", 6208 ], [ "sym.imp.AcquireVirtualMemory", 6224 ], [ "sym.imp.SyncNextImageInList", 6240 ], [ "sym.imp.TellBlob", 6256 ], [ "sym.imp.RelinquishVirtualMemory", 6272 ], [ "sym.imp.CopyMagickString", 6288 ], [ "sym.imp.WriteBlob", 6304 ], [ "sym.imp.LocaleNCompare", 6320 ], [ "sym.imp.ThrowMagickException", 6336 ], [ "sym.imp.GetMagickTime", 6352 ], [ "sym.imp.MultilineCensus", 6368 ], [ "sym.imp.OpenBlob", 6384 ], [ "sym.imp.SetImageType", 6400 ], [ "sym.imp.CloneImageInfo", 6416 ], [ "sym.imp.ParseMetaGeometry", 6432 ], [ "sym.imp.ConstantString", 6448 ], [ "sym.imp.WriteBlobString", 6464 ], [ "sym.imp.CloseBlob", 6480 ], [ "sym.imp.ParseGravityGeometry", 6496 ], [ "sym.imp.HuffmanEncodeImage", 6512 ], [ "sym.imp.GetVirtualMemoryBlob", 6528 ], [ "sym.imp.RelinquishMagickMemory", 6544 ], [ "sym.imp.__assert_fail", 6560 ], [ "sym.imp.__errno_location", 6576 ], [ "sym.imp.GetImageProperty", 6592 ], [ "sym.imp.FormatMagickTime", 6608 ], [ "sym.imp.GetImageListLength", 6624 ], [ "sym.imp.GetImageOption", 6640 ], [ "entry0", 6656 ], [ "fcn.00001a20", 6688 ], [ "entry.fini0", 6796 ], [ "entry.init0", 6880 ], [ "fcn.00001b00", 6912 ], [ "fcn.00001c24", 7204 ], [ "fcn.00002044", 8260 ], [ "sym.RegisterPS3Image", 19152 ], [ "sym.UnregisterPS3Image", 19360 ], [ "fcn.00004bd0", 19408 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 3, "note_count": 2, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 72, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 8, "has_debuglink": 1, "little_endian": 1, "pltreloc_count": 64, "build_id_length": 20, "dt_versym_count": 72, "has_aarch64_bti": 1, "has_aarch64_pac": 1, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "program_header_count": 9, "stripped_with_symtab": 0, "has_direct_loader_dep": 1, "executable_segment_count": 1, "load_segment_max_file_size": 27260, "load_segment_max_memory_size": 27260, "section_relocation_group_count": 2, "stripped_metadata_section_count": 8 }, "file": { "size": 68192, "entropy": 3.17 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 1, "basic_blocks": 525, "code_entropy": 6.24, "data_entropy": 1.24, "overlay_size": 1732, "string_count": 269, "overlay_ratio": 0.03, "avg_complexity": 4.69, "max_complexity": 239, "huge_func_count": 1, "leaf_func_count": 67, "overlay_entropy": 1.43, "tiny_func_count": 68, "avg_basic_blocks": 7, "entropy_variance": 3.04, "avg_string_length": 34.46, "max_string_length": 2891, "peak_region_bytes": 9216, "code_to_data_ratio": 0.93, "peak_region_entropy": 6.39, "string_length_stddev": 186.31, "largest_section_ratio": 0.19, "sentence_string_count": 73, "sentence_string_ratio": 0.27, "high_entropy_string_count": 0 }, "exports": { "count": 2, "api_count": 2 }, "imports": { "count": 67 }, "strings": { "truncated": 0, "retained_count": 269, "extracted_count": 269 }, "sections": { "count": 27, "code_size": 13856, "entropy_max": 6.4, "entropy_mean": 2.96, "name_entropy": 4.22, "writable_count": 7, "executable_count": 4, "nonstandard_count": 7, "executable_writable_count": 0 }, "functions": { "count": 75 }, "dependencies": { "count": 3 } } }, "traits": [ { "id": "metadata/binary/linking/runtime::dynamic-loader-needed", "conf": 0.7, "crit": 3, "desc": "ELF needs the Linux dynamic loader" }, { "id": "metadata/binary/linking/runtime::library-loader-dep", "conf": 1.0, "crit": 3, "desc": "ELF directly depends on the dynamic loader" }, { "id": "metadata/hardening/mitigation::partial-relro", "conf": 0.8, "crit": 3, "desc": "Partial RELRO (GOT partially protected)" }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" } ] } ] } }