{ "ml": { "v": "7", "eng": "2.6.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00042797127, "rte": "az", "prob": 0.00042797127 } ], "prob": 0.00042797127, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00042797127389349043, "type": "apk_alpine" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000007033348083496094, "type": "elf" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000005751848220825195, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-08-09T08:44:17Z" }, "path": "gpg-wks-server-2.4.9-r1.apk", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8000000T3{24[J!\u003enkh=HeH]u63?!Yp^*DIa!jX1m:JNrco?u{f=2H?Deg@xa3GU*XL#^bg7P3C^8jD$\u003cRKyYN6+@aY6{H41?#\u003clHu$J\u003cHRHX-rhzu*uv\u003eY.%gb7TCf!+Evxd#1{gb?d6p]E={11k-NnH%{7G\u003c!G[lQMN*LfzYXtluG2gzd=u7Zhb!=)W6", "n": [ { "c": 3, "d": "Alpine/Wolfi versioned apk package filename", "i": "metadata/package/files/system-package::alpine-versioned-apk-filename", "o": 0, "z": 27, "cf": 0.9 } ], "ln": 0 } ], "mol": "K(Te)H₄(CmF₅Po₃U)Md₂(HePa)", "sha": "abd178c632aa8cd266853ffc8643cb3388d2261810ea27062ce0e5ae31607d3c", "path": "/tmp/promoter-618110428/abd178c632aa8cd266853ffc8643cb3388d2261810ea27062ce0e5ae31607d3c/gpg-wks-server-2.4.9-r1.apk", "risk": 11, "size": 74257, "type": "apk_alpine", "facts": { "metrics": { "file": { "size": 74257.0, "entropy": 7.99, "size_bytes": 74257.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 73233.0, "peak_region_entropy": 7.84 } } }, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package name field", "from": [ { "file": 2 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-readdir", "conf": 0.66, "crit": 3, "desc": "Uses readdir", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/daemonize/detach::setsid-import", "mbc": "F0003", "conf": 0.95, "crit": 3, "desc": "Imports POSIX setsid API", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/watch/inotify::inotify-init", "conf": 0.66, "crit": 3, "desc": "Monitor filesystem events via inotify", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/metrics/threshold::high-string-count-1000", "conf": 0.7, "crit": 2, "desc": "High string count over 1000", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::usage-title", "conf": 0.5, "crit": 2, "desc": "Usage: label (title case)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::usage-title-string", "conf": 0.5, "crit": 1, "desc": "Usage: label in binary strings", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/metrics/threshold::many-imports-50", "conf": 1.0, "crit": 1, "desc": "Binary has 50+ imports", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/delete::remove", "conf": 0.3, "crit": 3, "desc": "Delete files", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/binary::fseek-func", "conf": 0.4, "crit": 2, "desc": "Seeks to position in file", "from": [ { "file": 1 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-closedir", "conf": 0.66, "crit": 3, "desc": "Uses closedir", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-opendir", "conf": 0.66, "crit": 3, "desc": "Uses opendir", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/execv::c-exec-variants", "conf": 0.8, "crit": 3, "desc": "C-style exec family functions", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/write/direct::write--write", "conf": 0.66, "crit": 2, "desc": "References POSIX write API", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::options-title", "conf": 0.5, "crit": 2, "desc": "Options: label", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package origin field", "from": [ { "file": 2 } ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/stat::stat-core", "conf": 0.8, "crit": 3, "desc": "References stat-family file-status API", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::has-help", "conf": 0.85, "crit": 3, "desc": "Contains help or usage information", "from": [ { "off": 107191, "file": 1 } ] }, { "id": "micro-behaviors/fs/file/binary::seek-and-descriptor-io", "conf": 0.8, "crit": 3, "desc": "Reads or writes a seeked file descriptor", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package version field", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/user/query::getpwuid", "atk": "T1033", "mbc": "E1033", "conf": 0.5, "crit": 3, "desc": "Imports UID password-entry lookup API", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/device/special::dev-null", "conf": 1.0, "crit": 2, "desc": "/dev/null (legitimate discard device)", "from": [ { "file": 1 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::usage-lower-string", "conf": 0.5, "crit": 1, "desc": "usage: label in binary strings", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/daemonize/detach::fork-new-session", "conf": 0.75, "crit": 3, "desc": "Forks process into detached session", "from": [ { "off": 6497, "file": 1 } ] }, { "id": "micro-behaviors/process/fork/clone::fork", "conf": 0.86, "crit": 3, "desc": "Process creation via fork or clone", "from": [ { "file": 1 } ] }, { "id": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct", "conf": 0.8, "crit": 1, "desc": "Binary has many sentence-like strings", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/chmod/modify::syscall-chmod", "atk": "T1222", "mbc": "E1222", "conf": 0.66, "crit": 3, "desc": "References chmod permission-change API", "from": [ { "file": 1 } ] }, { "id": "well-known/tool/sysadmin/gnupg::dirmngr-config-socket-marker", "conf": 0.98, "crit": 3, "desc": "GnuPG dirmngr socket/config marker", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::usage-lower", "conf": 0.5, "crit": 2, "desc": "usage: label (lowercase)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::options-title-string", "conf": 0.5, "crit": 1, "desc": "Options: label in binary strings", "from": [ { "file": 1 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/write/direct::write", "conf": 0.66, "crit": 2, "desc": "POSIX file-write capability", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::usage-label", "conf": 0.75, "crit": 1, "desc": "Command line usage text", "from": [ { "off": 107191, "file": 1 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 1 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/binary::file-position-api", "conf": 0.78, "crit": 3, "desc": "References a file-position API", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/watch/inotify::inotify-add-watch", "conf": 0.66, "crit": 3, "desc": "Monitor filesystem events via inotify", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-versioned-apk-filename", "conf": 0.9, "crit": 3, "desc": "Alpine/Wolfi versioned apk package filename", "spans": [ [ 0, 27 ] ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr91S7N9\u003c00000kMy=:00000M@Ba!0000000000kMA+z4feS[8#{]T1][S61onA4kMy=:00000kMy=:00000kMy=:00000/A83M00000/A83", "ln": 0 }, { "b": "1onA40rr91000001onA46Awak0@@r3m]04:KrDCsveJ64vj6f7wt7Th2y[F{fkLuifkLeJzfo]oeQflkuP6.[B8JV=000001POJ5.2KDn0rr911][S60d+aI00Mg3.2KDn.t\u003cMo.VfVp.#G=q00000XSca?iR57Fdiju!(^Lqj00000000000000000000000000000000000]9kl}5=.[i000000000000000000000rr915=.[i000000000000000000002MK\u002685=.[i00000000000000000000(\u003c0H\u003c5=.[", "ln": 828 }, { "b": "m/\u0026U\u003c00008000000001@0SSij02kHbm/\u0026U\u003c0000800000000142MK\u0026q01P7mLk$T-000010000000000B7GDox\u003ediXwO\u003e{]z#:rQz/P}1xjVf@B.Lv^B98CjB8V0%uTEtPA+e($B97#luUjs!zdN6*zF0!!B98CjzeYF@Bz$-eC(RX)zeBimwDl^[A=bx7z#:%3A:%6l0a{p]vrqGRnMnz\u003ewmY^)xk8BewPy:AlU{WUwMi8Ey?iPTCYmFkv}*3(vTqQazVB\u003c2A=Vty0crm5v}Y(.B98CwvSDk:uTEq/vp9RXzEEu}DsW7-uVGZ\u003cx(!xcA:JB0vqPN.x(mK30crm5Bz(qr0aeq%o\u003c.{Lxk8BewPy:AlU{WUwMi8Ey?iP/D2)FlzE@(QuUam#zF@(#z!0i$x(v\u003e?w[b.2yYE)=z!Ph:wPRH3B]VP9A+]r80af8OBywV{uT)++uUi.XyYFJ#A:@K0wN/N@0b2\u003e+B.Lv^xjC$cuVP!2uU\u003cT[uUA\u003e=wnC*$0b2!ZD0+A0uUA\u003e?xKtj\u003ew[CQ{0b2!ZD0+S7CYm2hB7nS@0b2!ZD0+64wNPW(uV6!1v}tTMv@=\u003c4B7GD2w)]^\u0026y?mTcz/Ph#vqYQ(wPv=-v@=\u003c4v@DmbA=k:]xjC$cuVQsfwoz?\u003exjC$cuT)IXy\u0026r!-xjC$cuWcTlA+6ri0b2!ZD0+P6vqG:#v/QdKA^q2pv{%g\u0026z^@=Wv@=\u003c4zddl%z^@=Wv@=\u003c4CX{(9y\u0026r!-xjC$cuVP!2uVg7ez!rG$A+eO", "ln": 5633 }, { "b": "D0+5}Aa\u0026*6uTW+-z^Nx\u003czdJYWv@=\u003c4w].D]0b2!ZD0+z%y\u0026131uVP^*B-I3[B-8niBy/uk0c.\u003c=Bz$@80cA6%w[=6)0b2\u003e+A+]Dbx(\u003ct@ByYrjBo2\u0026]A54Ajx(ER-B98Cyv}Y(.yIvQ30crm5v{%DVzFSV@vqYZ(zF0!!B98Cuv@MX[w]zZ90a*y^v%d\u0026*z!0i(BzkP60b2\u003e+AcDCswb{mNBz#CwvqM0MBy/YhBo3x7wmY!40afqZx(\u003ct@BAhCwzua-?BAqeb0b3m-A=+V2xjVga0b3m-A=+VewNPy\u003ez!0i@A::j[xk?H7Bye)2wnc5:xk?H7Byfljx()[^xk?H7ByeT7A+PSb0b3m-A=+VhB75Y)0b3m-A=+V3wPRo\u003cA=M8sv@DHcBo2@)xl593B7GD2vRGZ*A^mT$Aa:ikuU\u003cT[uUi.*vqC{RAa-J?A=LJdwPRo\u003cA=M5o0b3m-A=+V2v@c78wDlvZxl593B8C@qx(n380b3l", "ln": 6291 }, { "b": "uVP!2uUj1%wN]d?BAh8kxj2H:AbYxe0b3m-uUam#uT[1+wNx4\u0026z/5\u003c5D2)LqA=k%#xk?H7ByeJ\u003ewnc5:xk?H7ByeT3wO2SSxk?H7Bye\u003c5xj2p.Byf9hA+eV@0b3m-A=+VewNPaRy?W=#0b3m-A=+V2Aclnj0b3m-A=+VfwPRp2BAhIBvp%cKxk?H7ByeV(ByPJ90b3m-A=+V2wPz*fASx-\u003exl593w[t))0b3m-A=+V2Aclnz0b3m-A=+VfwPRn", "ln": 7103 }, { "b": "uUjs\u0026wDlvZxl593y\u0026r@[xjVf(Ab]J4x)oR\u003cAa:ikuUjg:zdN6!wPN]+Aa:ikuUi}ZByLq-zffGewNxDTA+eV\u0026wnc5:v@c78wN]H}0bls+Bz2SjB-qy4zEEB3B8kA0z#:@[xk?)fv@kT}yxeA\u0026xj+\u003c]y\u0026:ff0cAc}z*b=k0crm5w]}:7wDljNzeS}+uTEk.B7GxluUi.XyYF9+BzkP60cq\u003c!wO(ydD2)Ls0ch{!x(Th}z/{2rwPv=\u0026B-.hjB]VR#zdNu%0chHZB7Ct(wO(vewDlT/wO#3)ASx/\u003ez//Y9D0+o6x(\u003ct}wNPa=x(mX^B7GDly?W:2Bo3x7A=bw}B7F\u0026#z#:PZz/f-9v@c78wDl:ZzEEx[0cq\u003c!vpKy[z/bL=x\u003ey$0x(dzYxjVgaz!0N2vqPMQuUj1\u0026x-J0=BzkP60bk}YzGV1]v@DmduVf){zuax*z//Y9D0:#\u003cwm6K?ByO$:uTER-vQ\u0026+^ByxiiuU%j=zuaG!vRog\u003eD2N\u003cTB8JV^fAt{6vRoT)eOe%yz/NEKz.rZzy?Wu*e]t-Ly+o(\u003ehEwv0e]$}-f-TZum{!X.qCQg$f!LcWm)*fSp/H^Re\u0026AXf009620096200962009620096200ic50096200ic300ri60096200ri600962009640096400964009630096200", "ln": 7509 }, { "b": "6/^@G0ri!Ce=+@Q.[MiL008n?)eN9Bm/M1?%43UFyRR2.ItoXR%7}=p07-FF0R/uFGB)ih8utA?0!gvM:)fU21HP3C006.u0001!{X)ZJnH.Di:I8f+006+p000", "ln": 72546 }, { "b": "00000000000000000000oH?]MeIX}kePkUYy*?A%ASwu{pe$aXkMAL(g+H=*lVl{?A+Pf1Brz#0diHx1gbQg!f!:.qz!9A4m@qZa07P^:fhc7$B:9).y?m3@wGV28AbP=sayYFaB0bNyauR[To*IuAkT3!c09a8GxjTaDxk?GnCwzmKB7GxnwPw]6z/6u1zE:\u003e]z/x/jz/fS4asF*PazbLjaztt5A47==D2v.jCSD%WAaZ+DyJz7GwPz%9AV!\u003egzeAZ0wft8{Acb/jzGx7\u003cq!o#)wPw]9z/M$xxK@q/wNV=PwQby%wPz%dv}u^4A=l5rv@De\u003c0b3m-eQ7#KePUGzC4CW]B9g@ex(!ufz/ddnwmPZ(B8}s#vqxBYw[=6)zEEx[azb4@y?mc1x(k4tB2\u003eA\u0026A%.[xz/+", "ln": 106480 }, { "b": "04/^hA=2-n04\u0026HJ04/^ywN/B[x\u003eqg7eOnZkwDjqlwO#0#D2N\u003c9wO#0#D2N\u003etz/cXfvqfK?wi7?VA%.[UA=M8sayO+\u0026wPI{bzF77tc37B{ash7o0axzGuVZi[B98Csx(!wsw)]y\u0026wN(]$zxHlDiV].\u00263iki\u0026vp%djash7Ktw[F5x(v)gt{7Cm3ijZTxcqnqvruTkiV].\u0026ash7o0bls]vqGT*ay]zcvqfQ4wmY\u003c]v@#o)asFP-B0\u0026yz051s@vT6Cvz!9AxePM4nwPz*fAV/NDx([6bxcnMFB0\u003c0\u003ec36y[B7/GjBrC^Fx()[^wPz*fAV!\u003edz/YSgxcnMFB0\u003c0\u003ec36y[", "ln": 107069 }, { "b": "wmPZ(B8@Eoz/]@dazbLjaswERcKG\u0026Gz//LKaA.:tzF785wObv[y\u0026*!vwO#3\u0026AV!!3wo8m5B08?RB0?p{lVl\u003c:wO#Pwrc-B]iV}\u003cIAbok#vruj4zzcfJwg?IjB-p$CCwzmblVl\u003c:wO#Pwrb#z+B7P07eK:L!z!9N1xf4d{vRG]\u003e3ikf[AaI6Mv@Dl%x(X60BzkVhePLAxB.bSo3uG=@wmY^xash7ovpS[?wPI]Nash7ow[=c}wPz:gx(n2Nash7ozF%A5wJy}WA%.[pA=k^{rbR+7z/ff3A+#}Az/{7yyH}=lAckSax\u003e7N[x(v\u003e?q/#L:wN//Zs8h\u003c", "ln": 107614 }, { "b": "x(v\u003e?v@Dl%x(X4\u003cs4=Ezp?ToUwDlN\u0026y\u0026\u003cxgvrcDywO#0#D2N\u003epwig]MA=l5rv@DfDb4kCfy?Wx/BzkVhfk$MyeOe*fA^qRCwN($+lVl\u003c:wO#Pwrc-B]0ax?=y?Wx/BzkVhf8", "ln": 107888 }, { "b": "vruj4zzb%wA4McBxkRd1B-I4q0bV\u003c{BzkY5A=-%Kx)si10cz^%Bt4PHvqfPVra]#!az\u003eXhB75Y)azth8ayX[[zxK1izE:(izY\u0026LdzF0Q6z6jaxB-FQBwPq\u003c7B94+hzY\u003c1wvR/+1xDROsB-FQuwQb)Jaw3e/D2E*FwnbM%zF%RtA+flkwPI@ovixt%C)XIkvR/:*vruj4zy=]Kx(d*9C{3*lzF%MbaARphB0bshB8$=5wIaq%o(C8{az\u003eL3y-)!qw]@l9A+cw6vqWi3vqYQ(wGV8dx(+zjx(mD7z!pbewPI{3xjRAUB-.Lsvrui[vqG+9ayPd#aARptB0b:DBS+)DB.\u003eOhzF%RtxKM6}aAIa9zxK4mx(:R#wPI{3xjSXraw3U$B7F{1B0bNrvrrSqz/{7yv@b\u003c\u003czGE1iz!i#jzF%Rtw{4{aC)XRnAbY-oBrCWsx(+zrwPz%dv}vnnaxi2=aA}yaaAg+4wEn+!arR^HarUutBz#pZfe3%QB-p$Cz/PFzw)]WjCwy.wxMO9c3jpu?Abn@%zGu}lz*9sHz/)gjvqWibA=kD0B8@ECxLzJgzdN^fvp%c]vqZvmvr\u0026#fzvf!{w[ufezdds8vqE6cBy/Aje^.O!AbYScv{%E[z/djKzE+wjzGP]he{z8L04/^sz!0i(eP(bCASvWy", "ln": 108078 }, { "b": "B2\u003cTdBA}?piSJVdzF0Q6zddK2z/ddEwPI*ezGxv?A+e-(x)a5#aA.NkCYmk7By!#9CwzmxzdN^fvp%c]cNA*Y3ihC}D2Nsxaz\u003e?lB7]J80chTXwODs0wftP7C42i3wfu8i", "ln": 108723 }, { "b": "eDxo?zyoJGB7GCoAaK6bx(!ufz/fRsz!patc37B{ash7o0bDd\u003eash7KAckSax(^%0wftG5AV=.QB0?p{lVl\u003c:wO#Pwrc-B]iV@JQCYUPTy*?3}j0n3DvrcB2BuK+*w?t$HlVl\u003c:wO#Pwrb#z+B7P07eK:L!z!9N1xf4d{vRG]\u003e3ij:YBz#pZfe3%QB-p$Cz/PE\u003cnm=QNzY]C{ra]?=yH}=lw]zYjD2E?CayO!\u003eA+frkaswERcM)8hB0a}6wO@SfBZ/f3B7/b}3sN*.ay!?$az#awayX[8A+fukx\u003eqE0wftG8z/3RsxK@q/wNV=PwQby^x(W={Bz(hBe^.}Pz/M$qz/Pzix(mK3A=2lbx(v(iz/cXtxLzJgB9R?GwO\u0026MhwO0[f3lQE8BAzFyiXJd0zGP]he]L=yfj[Tjfl.hxe[/uzyZHIowPI@oA+e((A+6j#3lQDYzGO=Cawh", "ln": 109234 }, { "b": "B0\u00268zvriMkz/l+swO+!1wN({5wPzT4B8#5lzGuc+mRN8\u0026vTf8pB-88hzF80Mv}YZ$wft!xA^5SNc37Bv04/^ywN/p=C4yU9eN@*tzual*A=k$vA+eV\u0026x(mMay?W%jaA7\u003cmwn=r[x(m#Mash7o0aZ1+vqfPVv{%l", "ln": 109990 }, { "b": "vqfQ4c389\u0026B9g@5x(Uszc37BRv@=c?By!$\u00260aZ1+vqfQ4c389\u0026Ab](ay?mDaCwhejaAIWmwnc6bcNA*YiV].\u00263ijQPzddc@ash7\u0026aAIWmze16jx(v(ivpS[?wPI]nzF%Rtv@Dl%x\u003eINewN(bFwn=r[x(k4tB2\u003eB.A=kA6wO\u0026Mlx([2hcNA*YiV].\u0026", "ln": 110315 }, { "b": "AbPMbv%Ghex(4uwash7o04/^pzGx]dy?$XswQbz5mOcoxD}3X5m[3rLqB%R.axqueqy$Edt(VDdA+f9aC4AmvwQby#q:\u003cOonKJLgePLACz!\u0026]oyH}=lrz#s:eLetgeIgECwN/G#rz#s:eLeuK03#Xezu", "ln": 110526 }, { "b": "wQan@wO(vewGUz7yH}=lw].*baARpdaxIi70chT]z!\u0026]oyH}+\u003ezddE2ayMydwQbzbB0bHmC5Iecwb[\u003e4pJgz\u0026z/fRS3lPsTwGV5jzdN{8vrrSez/PziADL#bBo2\u0026.vS=q-B7Gl10cqZ?wft#cwGU?#x(1]mB7]J8aAIaiwnL:?yYF\u0026LnLzN2CxdztwGV8dwGU?#x(1]lzY?IvoHO@el}Hp7B-Rapl}Ho0vriMkz/u?fx(W={Bz(hB0a{m\u0026z2!@Hl{%}2B-Rapk$1asayPslBzbkdwmYvYB.?", "ln": 111038 }, { "b": "eIgKUAbP=sePkPIx(v)gj.n\u003eSz/P}KA+eV}v@bZ+zu8muwQ5fjA=-)KAcb/jzGv%LCYmOwBs?0swNPDRlVl\u003c:wO#Pwrc-B]iV}\u003cIAbok#vruj4zzb%wA4L\u003cpD2\u003cr10bDdSA4MiDwizkWjS(4(04/^lCYmOwBs?9sy\u0026\u003cle04/^lCYmOwBo0)ACwhejeN@Znz/fQ@eIgHNC}B5Vzu8mux(d*cA=-)KAcb/jzGv%Pze:AlBs?uzzFr@@y+fpqAbP=sePUPzCk#t]AbP=sazb4@y?mcrasd", "ln": 111449 }, { "b": "wQ5qTash7o04/^tvr:wxB-.OBBuIs5f!+pnfArWRwmYm\u003eD2N\u003c9wmYm\u003eD2N\u003etz/cXfvqfK?wi7?VA%.[^y*?3}By/YsiV]^Ic1u{]vrcD%wmoN*iV]^@e?g]\u00263ik3NA=+V0vrt{sazbt9x(:", "ln": 112834 }, { "b": "w]]eswPz\u003caz/cWMaAz4kB.bSowN(bFAa9^dx(mMawmYm\u003eD2N\u003epwft-2B8$=5wEnAPzY\u003cazx()=)y?j-1vrt{2w]z*fwftP7aARpdaz\u003eXhB75Y)3ii.gC@^5}09q/YiV]^Ive", "ln": 113222 }, { "b": "gh{VxB7D$l0bV^\u0026eK0V!A=L-eBye#}A=.p72[mjwqE%uHx)a5#iSIJ=zGGDcBs*EjvqZc#wPxv\u003ezEWP}x(mL-lVl\u003c:wO#Pwl${ZYz/YSmx(v\u003e?pJf(.07gNvB7CtsvqYN^", "ln": 113421 }, { "b": "D30Rst)ZMTdSX*7z/fV9x(mH5t)ZNGx(dAkzddi\u003eAXp\u00264a.bRseK0V!A=L-eBye#}A=.pcB2\u003eAz4giyw4gizJz/]@dvrcSRa%?pO01xn!eHtD:A$5DRAa9^eeK0SZB-7.#A^mU7vrb{%Brz[SaAg+fwO#Pwk4nCMzE^f@C(QlvBy+Cbe?^nGv@#@Ek4w.QA+fcguVoB]Bs/W]wQ5p%jUn/yfFWe\u003cc38j3jPGLmzE^P)x(1]lz/oCmcNA*YazC)tzu", "ln": 114474 }, { "b": "A%.[LCQk40CMq(dw\u0026KpszGWTx06ZD*zu9{Z05T:n05lecf!\u0026U.g5%3Yiw92^y?Wu\u003ev@=\u003clBo0RdazC)tBz(7uz!@@bc#JQcwfrgtefFRmC4z^xB14B@wPz*fAV/BmBAzkmxcp=6C6mqmash7KBz\u0026oHc37B{ash7o0aPCPcV*Fwx(^Y(y?j-0z/Pziwoz:dB2\u003eA\u0026A%.[2wmY{qzGP=i03#XEaxH\u003cbpdXhJiV@G=vqYQ:A+3qbzG6-uaAz4iAaJ]#wc@q.B2\u003eBBk#HDHpdEt/B97\u0026dwmoH?aA8yAAclmBA+ffdwO#6\u00263ihw[iV}G\u0026qCG!Um(?=lByx5$", "ln": 115054 }, { "b": "Bz\u0026oHc37BRw)]y\u0026wN)?Ac36y[sxFWcsxCMCB7GwmcNA*Yaz#atazbLmzE:7Orz#s:08cfUpc?Py055FoAXzlEv{%gbvRGZvflItRfjFTkiXK@Rzu9H0r7E0Vpe$aXnkz@G0a*g\u003ez/M$yzGxxhBzkS9az2ClC42zlc389\u0026c36y[wPz*fAV/BmBAzkmxcqnrAbYS8zdNQbvrcSoxl4{kAc0dlz/M%Fc37B{ash7o0a*g\u003ez/L", "ln": 115479 }, { "b": "v@=p5Bz(gxc1FcjB0bvsBrC0mB-7]reO5^pvqfQ4B8LM7wPOmVB8LM7wPP5jvqPM#zF%RtAb]JhwO#Pjw]zYjw[=6)ay]58v@=p5Bz(gxc1Et.B8LM7wPP5jvqPM#w]v", "ln": 115737 }, { "b": "ashdV3ijWDx(4u\u003eaARJAvqG:#v{%E\u003caz\u003eXbz/QaCw]zYjzEEx[aA7\u003cmw[i2gwi7?VA%.[@fd{)PB-p%[fk$@Iv\u003eR[my?ttiCX3\u003eBpe$aXuQv::oHJk=pFT{\u0026wPz*fAV/ylvpT7\u0026xcqnvzer{7yAK#JB0\u003c0\u003ec36y[fjFTkfk2lpv@Dl%0cAmbx(mMaw)]H(vQS+ZaswERcKG\u0026%vqH6$aARKuaz+FbxjR5@vRGZkxk?G[z/fetv@#I!wPz*fAV/ptwO}", "ln": 115899 }, { "b": "vScH43ijTTA=k$vCxdztx(mMaBz\u0026oHc37B{ash7o03#XtB-Rbmfc$-vfjVWnfj/lnfk2fBAaYe7B-RNRy?Wu\u0026CX7v+flItRfkLuifk2fBAaYe7y?WtUflItRflp/nA+c[pzGP]h055FoAXzGEvrb{jy\u0026r/(y?iPBe[YcoeN-p6zGC\u003eSe[wWpzeK0b08\u003eH=wQd:6CW{!/z/65@x(U?o03JE$zGP]huU%Z(B.\u003eR@zEEx[uT)IXy?mbSaS$AnB-p#2vS=y3wm5\u003eYA+e:5z/Qa6fjwH8zGEKAAaZ+hxjU$5055z6wg@1lwmo4^z/bLdBz#7Lwg@4zz8bTgwO(v6054\u003e%A=2Yb", "ln": 116418 }, { "b": "wfrxRfFCfXtw!v%wNboZe\u0026mS3b}Z@]eHr28B08+YgikG5e\u00264Gec365.m]grdeIeLaeKz(@nLQxdeIeLaeEzF!hz!#.v\u003eIl\u003ex\u003ehDhjrMDXeIeLaeK-A5aok\u003eeg?pfce[j(\u003ez/f-fA=-{z05cb.gC*%Eh-J/KuO9)svQ\u0026}Ww[L^\u003eyhmT5zF%GlA=VtBC6wgRDo\u003c\u003e+l}6Nnnj=ADoIFnTp/ga?r8($2sxO/caTnlUcmpn[ffIKav0^oHEGg#M0bMvUxjC$cAc9jwA=kA6wO\u003cEJc36y[z/{dAz!pb4z/Pzix(k5mwN/\u003e6wGU\u00263zeTDuaA}Hky?j.$y\u0026131vruj3xcnHpBS+dsBy/H[z/{dAz!pb4z/PziCw7YbwGUz$y\u0026r/(BzkS9asg\u0026DayYRrwPE", "ln": 117179 }, { "b": "x\u003eIr(y\u0026Z.cA+cwhz/^ahy\u0026r*0wN(bFfFLssg=mfIi5@W3vQ\u0026}Ww\u003cF:Jl}6MBiXSozgC*%Eh-J*avQ\u0026}Ww\u003cF:Jl}6MBattJ9gC*%Eh-J*avQ\u0026}Ww\u003cF:Jl}6MBwQ4=@Bz(8le[j)0CxdztBy/tjjuT/%eK15)wNP9Hv\u003ex(*A+PSbA3c.Pv\u003ex(NB.kk%AV^FcaAImywP8f6v\u003ex(NB.kk%ASxP3k5LyLvpQGyjS[/WDs.2bay+", "ln": 117980 }, { "b": "v{:7Yv@=G{B98CpzF787vqfK?wi7?VA%.[:vq]N{Byxo9v{:q0A+PA7B0b76x(4u\u003eiV].\u00263iiH?k$K-IxMOunB2\u003e%cvS=s8e[Y6AAaZ!wA+twxpe$aX07Q{Hp!7HQp!7HQp!aCU07P\u003cQuQmgJpe?i(lQTjeo\u00261H:r8upAl{TmopFH)TnM5nTm]xsSf/5/xf/5/1p!9(GpdtjNp!aFJqucW%000000000000000Rf\u0026jwuWI!LuWI!LuWI!LuWI!LuWI!LuWI!LuWz", "ln": 119048 }, { "b": "sPzh)uSfxXogq$-pdmPtuR\u003c3!q=31.k#QiVq=#/{l}6EvsX@6?pFLm\u0026moGQUmmf%Qp/H1Zpg3N/mO:1Lmmf%Qp/H1Zpg3ERnLzMv07omyqDV*}nL-8*pFi#R08l3-q+o.OuR\u003c3!q=31.k#QhLm]8]GuR\u003c3!q=31.k#QhLm]8]Go*?tGlp11ll{*@yqC{jSlJxXLp!%$*", "ln": 121102 }, { "b": "l}6\u0026Jm]98\u003enMkW^qCP!Xmn)a+q+oF^lScusr7fgPq:\u003cR-nL-8*ogq$-pes?Pr7P\u003eXuRS)Ymf37Ur6:FPpFLm^oHhfE08ur?k#ZAKpg3yPr6ZHXpFstEsZLfboAmZOsZKJ]ml%(", "ln": 121484 }, { "b": "q$(\u00264q4g\u003eCqtJ\u0026WpYQYDp+RVirN!E}ru:9qrm$+Rrl=GhrY9YPr(r3-s2+]\u0026s3Yeul}6Nnnj=ADoIFnTp/ga?r8($2sxO*ovQ\u0026}Ww[L^\u003eyhmT5zF%GlA=VtBC6wgRDn46egC*%Eh-J/Ffp#qB%eGc1%dru(%5-t4%i1Ey%jprK@@ud2@$wGl@$wGl@$wGl@$wGl@#1@s%0g.D@@r300aE\u0026ywmYmTAb](b0000000000000000000000000000000000000", "ln": 123503 }, { "b": "6CRx17-AwN%nSc08xfUp9V(HFa%OuVcmph\u003cdL054e?X[kgbF$g%nSaAvS2Z%w[K8myhmV@Ab*bvBtm]Zx(!PegC*$5h-rWfwQ2$KBAg.%y\u0026131000000000000000000", "ln": 123797 }, { "b": "000000000000000000000000000000000000000000000000000000000000Z!s.d00000u}ZL200000*Qvg-00000TfqQ800000U=[cd00000V-\u003cDg000001FC?@000000000000000W6{5o000000rr9100000.m6BB000000SSi200000+EmGL000000@@r", "ln": 148832 }, { "b": "0000000000000000000000000000000000000000000000000000000000000rr9100000N*n#]000000rr9100000S%wX9000000rr9100000Y:aPr000003\u0026*nc0000006*I:000004fcwd00000V6bg*0000082%Tp00000KvoiJ000008VP\u003cr00000", "ln": 149368 } ], "depth": 1, "facts": { "exp": [ [ "init" ], [ "stderr" ], [ "stdout" ], [ "fini" ] ], "imp": [ [ "", "opendir" ], [ "", "setuid" ], [ "", "memcmp" ], [ "", "remove" ], [ "", "abort" ], [ "", "realloc" ], [ "", "write" ], [ "", "geteuid" ], [ "", "dup2" ], [ "", "exit" ], [ "", "gcry_control" ], [ "", "gpgrt_fgets" ], [ "", "setsid" ], [ "", "iconv_close" ], [ "", "gcry_calloc" ], [ "", "strcspn" ], [ "", "gpgrt_fopen" ], [ "", "gpgrt_getcwd" ], [ "", "pipe" ], [ "", "snprintf" ], [ "", "gpgrt_log_bug" ], [ "", "gpg_err_code_from_errno" ], [ "", "dup" ], [ "", "deregister_frame_info" ], [ "", "inotify_add_watch" ], [ "", "gpgrt_write_sanitized" ], [ "", "strcmp" ], [ "", "gpgrt_rewind" ], [ "", "readdir" ], [ "", "gpgrt_write" ], [ "", "time" ], [ "", "gcry_md_hash_buffer" ], [ "", "stpcpy" ], [ "", "putenv" ], [ "", "gcry_create_nonce" ], [ "", "nl_langinfo" ], [ "", "gpgrt_mopen" ], [ "", "malloc" ], [ "", "fork" ], [ "", "memmove" ], [ "", "gpgrt_logv" ], [ "", "strcat" ], [ "", "gcry_set_outofcore_handler" ], [ "", "fflush" ], [ "", "strncmp" ], [ "", "gcry_malloc" ], [ "", "strcpy" ], [ "", "strrchr" ], [ "", "fstat" ], [ "", "gpgrt_read_line" ], [ "", "closedir" ], [ "", "gpgrt_log" ], [ "", "gpgrt_set_binary" ], [ "", "setenv" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "gpgrt_log_fatal" ], [ "", "sleep" ], [ "", "gpgrt_fopenmem" ], [ "", "gpgrt_feof" ], [ "", "gpgrt_log_printf" ], [ "", "open" ], [ "", "explicit_bzero" ], [ "", "gpgrt_vfprintf" ], [ "", "strstr" ], [ "", "gpgrt_fputc" ], [ "", "kill" ], [ "", "gcry_realloc" ], [ "", "rename" ], [ "", "unsetenv" ], [ "", "gpg_err_set_errno" ], [ "", "getpwnam" ], [ "", "getsockname" ], [ "", "gpgrt_log_error" ], [ "", "iconv" ], [ "", "strchr" ], [ "", "strncasecmp" ], [ "", "gpgrt_set_strusage" ], [ "", "chmod" ], [ "", "gpg_err_code_from_syserror" ], [ "", "gpgrt_log_set_socket_dir_cb" ], [ "", "strspn" ], [ "", "strpbrk" ], [ "", "gpgrt_fflush" ], [ "", "timegm" ], [ "", "getpwuid" ], [ "", "gcry_xcalloc" ], [ "", "waitpid" ], [ "", "libc_start_main" ], [ "", "gcry_check_version" ], [ "", "gpgrt_fname_get" ], [ "", "gpgrt_log_set_prefix" ], [ "", "gpgrt_vasprintf" ], [ "", "readlink" ], [ "", "strncpy" ], [ "", "sigemptyset" ], [ "", "cxa_finalize" ], [ "", "setrlimit" ], [ "", "register_frame_info" ], [ "", "exit" ], [ "", "raise" ], [ "", "gpgrt_set_fixed_string_mapper" ], [ "", "gpgrt_log_info" ], [ "", "gpg_strerror" ], [ "", "fprintf" ], [ "", "gpgrt_read" ], [ "", "gpgrt_snprintf" ], [ "", "gpgrt_argparse" ], [ "", "gpgrt_fclose_snatch" ], [ "", "gpgrt_log_get_prefix" ], [ "", "gpgrt_usage" ], [ "", "ferror" ], [ "", "gpgrt_log_assert" ], [ "", "strtoul" ], [ "", "gcry_free" ], [ "", "close" ], [ "", "assert_fail" ], [ "", "gmtime" ], [ "", "ITM_registerTMCloneTable" ], [ "", "sysconf" ], [ "", "gcry_sexp_sscan" ], [ "", "calloc" ], [ "", "gpgrt_fgetc" ], [ "", "getrlimit" ], [ "", "gpgrt_getline" ], [ "", "gpgrt_strusage" ], [ "", "initgroups" ], [ "", "gcry_malloc_secure" ], [ "", "rmdir" ], [ "", "sigprocmask" ], [ "", "gpgrt_ftello" ], [ "", "gpgrt_printf" ], [ "", "gcry_sexp_sprint" ], [ "", "gpgrt_get_std_stream" ], [ "", "gcry_set_log_handler" ], [ "", "errno_location" ], [ "", "gpgrt_get_errorcount" ], [ "", "fcntl" ], [ "", "gpg_err_init" ], [ "", "gpgrt_mkdir" ], [ "", "gpgrt_ferror" ], [ "", "fputs" ], [ "", "chdir" ], [ "", "atexit" ], [ "", "gpgrt_fputs" ], [ "", "tolower" ], [ "", "nanosleep" ], [ "", "localtime" ], [ "", "gpgrt_free" ], [ "", "gcry_set_fatalerror_handler" ], [ "", "execv" ], [ "", "gpgrt_set_usage_outfnc" ], [ "", "free" ], [ "", "strftime" ], [ "", "toupper" ], [ "", "gpgrt_inc_errorcount" ], [ "", "gpgrt_set_alloc_func" ], [ "", "atoi" ], [ "", "stat" ], [ "", "gpgrt_fseek" ], [ "", "iconv_open" ], [ "", "mktime" ], [ "", "gpgrt_fread" ], [ "", "gcry_strdup" ], [ "", "tmpfile" ], [ "", "strerror" ], [ "", "gpgrt_poll" ], [ "", "gpgrt_fprintf" ], [ "", "gpgrt_log_get_stream" ], [ "", "gmtime_r" ], [ "", "putc" ], [ "", "gpgrt_chdir" ], [ "", "sprintf" ], [ "", "getenv" ], [ "", "gpgrt_reallocarray" ], [ "", "sigaction" ], [ "", "gpgrt_fwrite" ], [ "", "sigfillset" ], [ "", "gpg_err_code_to_errno" ], [ "", "gcry_xstrdup" ], [ "", "gpgrt_log_debug" ], [ "", "gpgrt_fdopen" ], [ "", "strlen" ], [ "", "gpgrt_fclose" ], [ "", "stack_chk_fail" ], [ "", "inotify_init" ], [ "", "gpgrt_bsprintf" ], [ "", "gcry_cipher_algo_name" ], [ "", "strcasecmp" ], [ "", "getuid" ], [ "", "gcry_xmalloc" ], [ "", "difftime" ], [ "", "gpgrt_access" ] ], "sec": [ [ ".note.gnu.property", 792, 48, 1.94, "alloc" ], [ ".note.gnu.build-id", 840, 36, 4.25, "alloc" ], [ ".interp", 876, 25, 4.05, "alloc" ], [ ".gnu.hash", 904, 60, 3.11, "alloc" ], [ ".dynsym", 968, 4728, 1.16, "alloc" ], [ ".dynstr", 5696, 2284, 4.36, "alloc" ], [ ".gnu.version", 7980, 394, 1.66, "alloc" ], [ ".gnu.version_r", 8376, 64, 2.44, "alloc" ], [ ".rela.dyn", 8440, 4632, 1.81, "alloc" ], [ ".rela.plt", 13072, 24, 0.98, "alloc,info_link" ], [ ".relr.dyn", 13096, 40, 3.24, "alloc" ], [ ".init", 16384, 3, 1.58, "alloc,executable" ], [ ".plt", 16400, 32, 3.34, "alloc,executable" ], [ ".text", 16432, 86913, 6.35, "alloc,executable" ], [ ".fini", 103345, 3, 1.58, "alloc,executable" ], [ ".rodata", 106496, 17861, 5.86, "alloc" ], [ ".eh_frame_hdr", 124360, 3492, 5.44, "alloc" ], [ ".eh_frame", 127856, 17660, 4.97, "alloc" ], [ ".init_array", 148880, 8, 1.06, "write,alloc" ], [ ".fini_array", 148888, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 148896, 520, 2.07, "write,alloc" ], [ ".dynamic", 149416, 576, 1.53, "write,alloc" ], [ ".got", 149992, 1560, 0.04, "write,alloc" ], [ ".data", 151552, 884, 1.9, "write,alloc" ], [ ".comment", 152436, 28, 3.99, "merge,strings" ], [ ".shstrtab", 152464, 262, 4.18, "" ] ], "tgt": [ "fcn.00004bf0", "fcn.00004d75", "fcn.00005333", "fcn.00006d8f", "fcn.00006e0c", "fcn.00007049", "fcn.00007073", "fcn.0000732f", "fcn.000078f8", "fcn.00007cb4", "fcn.000081c3", "fcn.00008385", "fcn.0000852b", "fcn.0000876f", "fcn.00008a15", "fcn.00009c54", "fcn.00009c6d", "fcn.00009c94", "fcn.00009cd4", "fcn.00009d25", "fcn.00009d3f", "fcn.00009d5f", "fcn.00009dc9", "fcn.00009ea5", "fcn.00009f0b", "fcn.0000a037", "fcn.0000a0ac", "fcn.0000a0d3", "fcn.0000a24b", "fcn.0000a69f", "fcn.0000a6aa", "fcn.0000a76e", "fcn.0000a7d6", "fcn.0000b3e7", "fcn.0000b599", "fcn.0000b5d3", "fcn.0000b600", "fcn.0000b620", "fcn.0000b625", "fcn.0000b62a", "fcn.0000b62f", "fcn.0000b634", "fcn.0000b639", "fcn.0000b643", "fcn.0000b9c9", "fcn.0000ba02", "fcn.0000ba3c", "fcn.0000ba48", "fcn.0000ba9f", "fcn.0000bb6a", "fcn.0000bc17", "fcn.0000bd86", "fcn.0000be43", "fcn.0000be87", "fcn.0000c057", "fcn.0000c12f", "fcn.0000c160", "fcn.0000c774", "fcn.0000c84e", "fcn.0000ca88", "fcn.0000cc91", "fcn.0000ce51", "fcn.0000d310", "fcn.0000d34a", "fcn.0000d38c", "fcn.0000d44c", "fcn.0000d694", "fcn.0000d750", "fcn.0000d8ce", "fcn.0000d903", "fcn.0000d9ac", "fcn.0000da73", "fcn.0000db1c", "fcn.0000dc7e", "fcn.0000dd66", "fcn.0000de31", "fcn.0000dfc6", "fcn.0000dfd0", "fcn.0000dfd7", "fcn.0000e4d0", "fcn.0000e559", "fcn.0000e573", "fcn.0000e5ef", "fcn.0000e672", "fcn.0000e973", "fcn.0000ea34", "fcn.0000edb5", "fcn.0000edbd", "fcn.0000f454", "fcn.0000fa9b", "fcn.0000ff16", "fcn.0000ffcf", "fcn.0000ffe1", "fcn.00010204", "fcn.0001020a", "fcn.00010210", "fcn.0001021e", "fcn.00010271", "fcn.00010346", "fcn.000107cc", "fcn.0001081f", "fcn.000108cf", "fcn.00010e73", "fcn.00010eae", "fcn.00010efc", "fcn.00011111", "fcn.0001114f", "fcn.000114be", "fcn.00011b79", "fcn.00011d90", "fcn.00011da7", "fcn.00011eeb", "fcn.00011f32", "fcn.00011fbd", "fcn.00012732", "fcn.00012c10", "fcn.000131fc", "fcn.000138bc", "fcn.00013b8f", "fcn.00013c7a", "fcn.00014073", "fcn.00014531", "fcn.00014626", "fcn.00014644", "fcn.00014869", "fcn.00014a23", "fcn.00014d24", "fcn.0001543a", "fcn.00015510", "fcn.00015555", "fcn.0001561a", "fcn.000159d3", "fcn.0001618b", "fcn.000161ac", "fcn.000162a1", "fcn.00016428", "fcn.000166c1", "fcn.000166ed", "fcn.00016fc4", "fcn.0001705c", "fcn.000170be", "fcn.000170df", "fcn.0001721c", "fcn.00017421", "fcn.0001743d", "fcn.0001744e", "fcn.000175d4", "fcn.0001760e", "fcn.00017dca", "fcn.00017deb", "fcn.00017ee0", "fcn.00017fb8", "fcn.0001801e", "fcn.000182ee", "fcn.00018315", "fcn.000186d7", "fcn.00018ad3", "fcn.00018c3b", "fcn.000192aa" ], "funcs": [ [ "sym._init", 16384 ], [ "sym.imp.__libc_start_main", 16416 ], [ "entry0", 19368 ], [ "fcn.00004bf0", 19440 ], [ "entry.fini0", 19552 ], [ "entry.init0", 19648 ], [ "fcn.00004d75", 19829 ], [ "fcn.00004d81", 19841 ], [ "fcn.00004f3b", 20283 ], [ "fcn.00005132", 20786 ], [ "fcn.000052d6", 21206 ], [ "fcn.00005333", 21299 ], [ "fcn.00005467", 21607 ], [ "fcn.00006d8f", 28047 ], [ "fcn.00006e0c", 28172 ], [ "fcn.00007049", 28745 ], [ "fcn.00007073", 28787 ], [ "fcn.0000732f", 29487 ], [ "fcn.000078f8", 30968 ], [ "fcn.00007cb4", 31924 ], [ "fcn.00007e66", 32358 ], [ "fcn.00007f35", 32565 ], [ "fcn.000081a2", 33186 ], [ "fcn.000081c3", 33219 ], [ "fcn.00008385", 33669 ], [ "fcn.0000852b", 34091 ], [ "fcn.0000876f", 34671 ], [ "fcn.00008a15", 35349 ], [ "fcn.00008ec4", 36548 ], [ "fcn.000090d6", 37078 ], [ "fcn.000098b0", 39088 ], [ "fcn.00009c54", 40020 ], [ "fcn.00009c6d", 40045 ], [ "fcn.00009c94", 40084 ], [ "fcn.00009cd4", 40148 ], [ "fcn.00009d25", 40229 ], [ "fcn.00009d3f", 40255 ], [ "fcn.00009d5f", 40287 ], [ "fcn.00009dc9", 40393 ], [ "fcn.00009e99", 40601 ], [ "fcn.00009ea5", 40613 ], [ "fcn.00009f0b", 40715 ], [ "fcn.0000a037", 41015 ], [ "fcn.0000a0ac", 41132 ], [ "fcn.0000a0d3", 41171 ], [ "fcn.0000a11a", 41242 ], [ "fcn.0000a24b", 41547 ], [ "fcn.0000a69f", 42655 ], [ "fcn.0000a6aa", 42666 ], [ "fcn.0000a76e", 42862 ], [ "fcn.0000a7d6", 42966 ], [ "fcn.0000b3e7", 46055 ], [ "fcn.0000b599", 46489 ], [ "fcn.0000b5d3", 46547 ], [ "fcn.0000b600", 46592 ], [ "fcn.0000b620", 46624 ], [ "fcn.0000b625", 46629 ], [ "fcn.0000b62a", 46634 ], [ "fcn.0000b62f", 46639 ], [ "fcn.0000b634", 46644 ], [ "fcn.0000b639", 46649 ], [ "fcn.0000b63e", 46654 ], [ "fcn.0000b643", 46659 ], [ "fcn.0000b9c9", 47561 ], [ "fcn.0000ba02", 47618 ], [ "fcn.0000ba3c", 47676 ], [ "fcn.0000ba48", 47688 ], [ "fcn.0000ba9f", 47775 ], [ "fcn.0000bb6a", 47978 ], [ "fcn.0000bc17", 48151 ], [ "fcn.0000bd86", 48518 ], [ "fcn.0000be43", 48707 ], [ "fcn.0000be87", 48775 ], [ "fcn.0000c057", 49239 ], [ "fcn.0000c12f", 49455 ], [ "fcn.0000c160", 49504 ], [ "fcn.0000c20a", 49674 ], [ "fcn.0000c243", 49731 ], [ "fcn.0000c295", 49813 ], [ "fcn.0000c449", 50249 ], [ "fcn.0000c471", 50289 ], [ "fcn.0000c4e6", 50406 ], [ "fcn.0000c638", 50744 ], [ "fcn.0000c695", 50837 ], [ "fcn.0000c6e0", 50912 ], [ "fcn.0000c774", 51060 ], [ "fcn.0000c84e", 51278 ], [ "fcn.0000ca88", 51848 ], [ "fcn.0000cac0", 51904 ], [ "fcn.0000cc91", 52369 ], [ "fcn.0000ce51", 52817 ], [ "fcn.0000d310", 54032 ], [ "fcn.0000d34a", 54090 ], [ "fcn.0000d38c", 54156 ], [ "fcn.0000d44c", 54348 ], [ "fcn.0000d483", 54403 ], [ "fcn.0000d5d5", 54741 ], [ "fcn.0000d694", 54932 ], [ "fcn.0000d750", 55120 ], [ "fcn.0000d8ce", 55502 ], [ "fcn.0000d903", 55555 ], [ "fcn.0000d968", 55656 ], [ "fcn.0000d9ac", 55724 ], [ "fcn.0000da27", 55847 ], [ "fcn.0000da73", 55923 ], [ "fcn.0000db1c", 56092 ], [ "fcn.0000dc7e", 56446 ], [ "fcn.0000dd66", 56678 ], [ "fcn.0000de31", 56881 ], [ "fcn.0000dfc6", 57286 ], [ "fcn.0000dfd0", 57296 ], [ "fcn.0000dfd7", 57303 ], [ "fcn.0000e4d0", 58576 ], [ "fcn.0000e4de", 58590 ], [ "fcn.0000e559", 58713 ], [ "fcn.0000e573", 58739 ], [ "fcn.0000e5aa", 58794 ], [ "fcn.0000e5ef", 58863 ], [ "fcn.0000e672", 58994 ], [ "fcn.0000e695", 59029 ], [ "fcn.0000e775", 59253 ], [ "fcn.0000e973", 59763 ], [ "fcn.0000ea34", 59956 ], [ "fcn.0000ebe3", 60387 ], [ "fcn.0000edb5", 60853 ], [ "fcn.0000edbd", 60861 ], [ "fcn.0000f454", 62548 ], [ "fcn.0000f4f9", 62713 ], [ "fcn.0000f9ec", 63980 ], [ "fcn.0000fa9b", 64155 ], [ "fcn.0000fabc", 64188 ], [ "fcn.0000fd55", 64853 ], [ "fcn.0000ff16", 65302 ], [ "fcn.0000ffcf", 65487 ], [ "fcn.0000ffe1", 65505 ], [ "fcn.00010204", 66052 ], [ "fcn.0001020a", 66058 ], [ "fcn.00010210", 66064 ], [ "fcn.0001021e", 66078 ], [ "fcn.00010271", 66161 ], [ "fcn.00010346", 66374 ], [ "fcn.000107cc", 67532 ], [ "fcn.0001081f", 67615 ], [ "fcn.000108cf", 67791 ], [ "fcn.00010e73", 69235 ], [ "fcn.00010eae", 69294 ], [ "fcn.00010efc", 69372 ], [ "fcn.00011111", 69905 ], [ "fcn.0001114f", 69967 ], [ "fcn.00011459", 70745 ], [ "fcn.000114be", 70846 ], [ "fcn.000116a8", 71336 ], [ "fcn.00011b79", 72569 ], [ "fcn.00011bdf", 72671 ], [ "fcn.00011d90", 73104 ], [ "fcn.00011da7", 73127 ], [ "fcn.00011eeb", 73451 ], [ "fcn.00011f32", 73522 ], [ "fcn.00011fbd", 73661 ], [ "fcn.000120e2", 73954 ], [ "fcn.0001244e", 74830 ], [ "fcn.00012732", 75570 ], [ "fcn.00012c10", 76816 ], [ "fcn.00012cc9", 77001 ], [ "fcn.000131fc", 78332 ], [ "fcn.00013222", 78370 ], [ "fcn.0001322f", 78383 ], [ "fcn.0001356c", 79212 ], [ "fcn.00013877", 79991 ], [ "fcn.000138bc", 80060 ], [ "fcn.00013b8f", 80783 ], [ "fcn.00013c7a", 81018 ], [ "fcn.00014073", 82035 ], [ "fcn.00014238", 82488 ], [ "fcn.00014249", 82505 ], [ "fcn.00014531", 83249 ], [ "fcn.00014626", 83494 ], [ "fcn.00014644", 83524 ], [ "fcn.00014869", 84073 ], [ "fcn.000148a1", 84129 ], [ "fcn.0001498f", 84367 ], [ "fcn.00014a23", 84515 ], [ "fcn.00014bc2", 84930 ], [ "fcn.00014d24", 85284 ], [ "fcn.00014f54", 85844 ], [ "fcn.0001543a", 87098 ], [ "fcn.00015510", 87312 ], [ "fcn.00015555", 87381 ], [ "fcn.0001561a", 87578 ], [ "fcn.0001566c", 87660 ], [ "fcn.00015920", 88352 ], [ "fcn.0001599c", 88476 ], [ "fcn.000159d3", 88531 ], [ "fcn.0001618b", 90507 ], [ "fcn.000161ac", 90540 ], [ "fcn.000162a1", 90785 ], [ "fcn.00016428", 91176 ], [ "fcn.000166c1", 91841 ], [ "fcn.000166ed", 91885 ], [ "fcn.00016fc4", 94148 ], [ "fcn.0001705c", 94300 ], [ "fcn.000170be", 94398 ], [ "fcn.000170df", 94431 ], [ "fcn.0001721c", 94748 ], [ "fcn.00017421", 95265 ], [ "fcn.0001743d", 95293 ], [ "fcn.0001744e", 95310 ], [ "fcn.000174a4", 95396 ], [ "fcn.00017572", 95602 ], [ "fcn.000175d4", 95700 ], [ "fcn.0001760e", 95758 ], [ "fcn.00017a2c", 96812 ], [ "fcn.00017d41", 97601 ], [ "fcn.00017d52", 97618 ], [ "fcn.00017dca", 97738 ], [ "fcn.00017deb", 97771 ], [ "fcn.00017ee0", 98016 ], [ "fcn.00017fb8", 98232 ], [ "fcn.0001801e", 98334 ], [ "fcn.000182ee", 99054 ], [ "fcn.00018315", 99093 ], [ "fcn.000186d7", 100055 ], [ "fcn.00018ad3", 101075 ], [ "fcn.00018c3b", 101435 ], [ "fcn.00018c4c", 101452 ], [ "fcn.00019025", 102437 ], [ "fcn.000190af", 102575 ], [ "fcn.00019180", 102784 ], [ "fcn.000192aa", 103082 ], [ "fcn.000192ff", 103167 ], [ "sym._fini", 103345 ] ], "metrics": { "elf": { "bits": 64, "entry": 19368, "has_got": 1, "has_plt": 1, "has_note": 1, "note_count": 2, "nx_enabled": 1, "has_dt_relr": 1, "dynrel_count": 0, "dynsym_count": 197, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 193, "little_endian": 1, "dt_flags_1_raw": 134217729, "pltreloc_count": 1, "build_id_length": 20, "dt_versym_count": 197, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "comment_entry_count": 1, "program_header_count": 13, "stripped_with_symtab": 0, "comment_distinct_count": 1, "executable_segment_count": 1, "load_segment_max_file_size": 86964, "load_segment_max_memory_size": 86964, "section_relocation_group_count": 2, "stripped_metadata_section_count": 7 }, "file": { "size": 154520, "entropy": 5.93 }, "binary": { "is_pie": 1, "has_overlay": 1, "is_stripped": 1, "basic_blocks": 3855, "code_entropy": 6.35, "data_entropy": 1.04, "overlay_size": 1794, "string_count": 877, "overlay_ratio": 0.01, "avg_complexity": 12.66, "max_complexity": 173, "huge_func_count": 17, "leaf_func_count": 25, "overlay_entropy": 1.56, "tiny_func_count": 33, "avg_basic_blocks": 16.69, "entropy_variance": 2.78, "avg_string_length": 18.98, "max_string_length": 445, "peak_region_bytes": 1024, "code_to_data_ratio": 0.96, "peak_region_entropy": 7.25, "string_length_stddev": 21.02, "largest_section_ratio": 0.56, "sentence_string_count": 239, "sentence_string_ratio": 0.27, "high_entropy_string_count": 1 }, "exports": { "count": 4, "api_count": 4 }, "imports": { "count": 192 }, "strings": { "truncated": 0, "retained_count": 877, "extracted_count": 877 }, "sections": { "count": 28, "code_size": 86951, "entropy_max": 6.35, "entropy_mean": 2.84, "name_entropy": 4.13, "writable_count": 7, "executable_count": 4, "nonstandard_count": 6, "executable_writable_count": 0 }, "functions": { "count": 231 }, "dependencies": { "count": 3 } } }, "id": 1, "mol": "K(Te)H₄(CmF₈Po₄U)Md₃(BiHePa)", "path": "/tmp/promoter-618110428/abd178c632aa8cd266853ffc8643cb3388d2261810ea27062ce0e5ae31607d3c/gpg-wks-server-2.4.9-r1.apk!!usr/bin/gpg-wks-server", "pid": 0, "risk": 15, "sha": "de4ab4c3bed0b3018e4ef195bf21263932a4b218d36e843443525b4aae3de87d", "size": 154520, "traits": [ { "id": "metadata/binary/code/complexity::many-huge-functions", "conf": 0.9, "crit": 3, "desc": "4+ functions with 50+ block control-flow graphs" }, { "id": "metadata/binary/header/identity::shared-object-type", "conf": 1.0, "crit": 2, "desc": "ELF uses ET_DYN object type" }, { "id": "metadata/binary/section/prose::few-high-entropy-strings-20", "conf": 1.0, "crit": 2, "desc": "Binary has at most 20 high-entropy strings", "spans": [ [ 117292, 66 ] ] }, { "id": "metadata/binary/section/prose::rich-sentence-strings-20pct", "conf": 0.8, "crit": 2, "desc": "Binary has many sentence-like strings" }, { "id": "metadata/binary/symbols/count::many-imports", "conf": 0.8, "crit": 2, "desc": "High number of imported symbols (\u003e80)" }, { "id": "metadata/binary/symbols/count::many-imports-50", "conf": 1.0, "crit": 2, "desc": "Binary has 50+ imports" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 106711, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 108335, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 108392, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 108358, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 109501, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 110363, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 108126, 0 ] ] }, { "id": "metadata/package/files/dependency::os-image-root-file-path", "conf": 0.94, "crit": 3, "desc": "Root-level OS directory path" }, { "id": "micro-behaviors/communications/http/header/content-type::content-type-header", "conf": 0.5, "crit": 3, "desc": "References an HTTP Content-Type header", "spans": [ [ 107678, 71 ], [ 109298, 71 ], [ 111513, 34 ] ] }, { "id": "micro-behaviors/communications/http/header/custom::boundary-param", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 2, "desc": "Contains an HTTP multipart boundary parameter", "spans": [ [ 114538, 0 ] ] }, { "id": "micro-behaviors/communications/socket/create::static-socket-api-marker", "conf": 0.8, "crit": 1, "desc": "Static ELF contains socket API marker", "spans": [ [ 115769, 0 ] ] }, { "id": "micro-behaviors/fs/file/binary::fseek-func", "conf": 0.4, "crit": 2, "desc": "Seeks to position in file", "spans": [ [ 7167, 0 ] ] }, { "id": "micro-behaviors/fs/link/symlink::readlink", "conf": 0.8, "crit": 3, "desc": "Read symbolic link target path", "spans": [ [ 7752, 8 ] ] }, { "id": "micro-behaviors/fs/path/device/special::dev-null", "conf": 1.0, "crit": 2, "desc": "/dev/null (legitimate discard device)", "spans": [ [ 115213, 0 ] ] }, { "id": "micro-behaviors/fs/proc/info/path::proc-exe-fragment-cluster", "conf": 0.78, "crit": 3, "desc": "Procfs executable path fragments", "spans": [ [ 115963, 14 ] ] }, { "id": "micro-behaviors/fs/write/file/descriptor::write--write", "conf": 0.66, "crit": 2, "desc": "References POSIX write API", "spans": [ [ 6553, 0 ] ] }, { "id": "micro-behaviors/os/privilege/query::geteuid", "conf": 0.5, "crit": 2, "desc": "Get effective user ID", "spans": [ [ 5717, 0 ] ] }, { "id": "micro-behaviors/process/create/direct::pipe-import", "atk": "T1106", "conf": 0.72, "crit": 2, "desc": "References POSIX pipe API", "spans": [ [ 6386, 0 ] ] }, { "id": "micro-behaviors/process/daemonize/detach::setsid-import", "mbc": "F0003", "conf": 0.95, "crit": 3, "desc": "Imports POSIX setsid API", "spans": [ [ 6497, 6 ] ] }, { "id": "micro-behaviors/process/fd/dup::dup2", "conf": 0.5, "crit": 2, "desc": "Duplicate file descriptor (I/O redirection)", "spans": [ [ 6381, 0 ] ] }, { "id": "micro-behaviors/process/fork/clone::fork", "conf": 0.86, "crit": 3, "desc": "Process creation via fork or clone", "spans": [ [ 6431, 4 ] ] }, { "id": "micro-behaviors/process/identity/setuid::drop-privs--setuid", "conf": 0.8, "crit": 2, "desc": "Drop privileges (setuid)", "spans": [ [ 5697, 0 ] ] }, { "id": "micro-behaviors/ui/help::options-title", "conf": 0.5, "crit": 2, "desc": "Options: label", "spans": [ [ 111102, 0 ] ] }, { "id": "micro-behaviors/ui/help::usage-lower", "conf": 0.5, "crit": 2, "desc": "usage: label (lowercase)", "spans": [ [ 107191, 0 ] ] }, { "id": "micro-behaviors/ui/help::usage-title", "conf": 0.5, "crit": 2, "desc": "Usage: label (title case)", "spans": [ [ 106605, 0 ] ] }, { "id": "well-known/tool/sysadmin/gnupg::dirmngr-config-socket-marker", "conf": 0.98, "crit": 3, "desc": "GnuPG dirmngr socket/config marker", "spans": [ [ 116557, 9 ] ] }, { "id": "metadata/binary/code/complexity::high-function-count-200", "conf": 0.7, "crit": 2, "desc": "High function count over 200" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "spans": [ [ 108468, 18 ], [ 109372, 17 ], [ 119112, 22 ] ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-symbol", "atk": "T1222", "mbc": "E1222", "conf": 0.66, "crit": 3, "desc": "References chmod permission-change API", "spans": [ [ 7651, 5 ] ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-text-reference", "conf": 0.86, "crit": 1, "desc": "References chmod in file text", "spans": [ [ 110022, 0 ] ] }, { "id": "micro-behaviors/fs/delete/file/library::remove", "conf": 0.3, "crit": 3, "desc": "Delete files", "spans": [ [ 7724, 6 ] ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-closedir", "conf": 0.66, "crit": 3, "desc": "Uses closedir", "spans": [ [ 7581, 8 ] ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-opendir", "conf": 0.66, "crit": 3, "desc": "Uses opendir", "spans": [ [ 7731, 7 ] ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-readdir", "conf": 0.66, "crit": 3, "desc": "Uses readdir", "spans": [ [ 7573, 7 ] ] }, { "id": "micro-behaviors/fs/file/stat::stat-core", "conf": 0.8, "crit": 3, "desc": "References stat-family file-status API", "spans": [ [ 5794, 5 ], [ 5795, 4 ] ] }, { "id": "micro-behaviors/fs/proc/exe::process-self-ex-fragment", "conf": 0.58, "crit": 2, "desc": "Read own executable path fragment (self/ex)", "spans": [ [ 115963, 0 ] ] }, { "id": "micro-behaviors/fs/proc/exe::process-self-exe-path", "conf": 0.66, "crit": 3, "desc": "References own executable procfs path", "spans": [ [ 115963, 14 ] ] }, { "id": "micro-behaviors/fs/watch/inotify::inotify-add-watch", "conf": 0.66, "crit": 3, "desc": "Adds an inotify watch on a path", "spans": [ [ 7863, 17 ] ] }, { "id": "micro-behaviors/fs/watch/inotify::inotify-init", "conf": 0.66, "crit": 3, "desc": "Creates an inotify instance", "spans": [ [ 7739, 12 ] ] }, { "id": "micro-behaviors/os/env/read::getenv", "conf": 0.3, "crit": 2, "desc": "getenv function (read environment variable)", "spans": [ [ 5972, 0 ] ] }, { "id": "micro-behaviors/process/create/execv::c-exec-variants", "conf": 0.8, "crit": 3, "desc": "C-style exec family functions", "spans": [ [ 6436, 5 ] ] }, { "id": "micro-behaviors/process/user/query::getpwuid", "atk": "T1033", "mbc": "E1033", "conf": 0.5, "crit": 3, "desc": "Imports UID password-entry lookup API", "spans": [ [ 6452, 8 ] ] }, { "id": "micro-behaviors/communications/http/header/custom::multipart-upload", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Multipart form data upload", "uses": [ 15 ], "spans": [ [ 114538, 13 ] ] }, { "id": "micro-behaviors/fs/file/binary::file-position-api", "conf": 0.78, "crit": 3, "desc": "References a file-position API", "uses": [ 17 ], "spans": [ [ 7167, 11 ] ] }, { "id": "micro-behaviors/fs/write/file/descriptor::write", "conf": 0.66, "crit": 2, "desc": "CRT or POSIX file-write capability", "uses": [ 21 ], "spans": [ [ 6553, 0 ] ] }, { "id": "micro-behaviors/process/create/direct::pipe-api-import", "atk": "T1106", "conf": 0.72, "crit": 2, "desc": "References a POSIX pipe API", "uses": [ 23 ], "spans": [ [ 6386, 0 ] ] }, { "id": "micro-behaviors/process/daemonize/detach::full-daemon", "conf": 0.9, "crit": 2, "desc": "Full daemon behavior (fork + setsid + devnull)", "uses": [ 19, 24, 26 ], "spans": [ [ 6431, 0 ], [ 115213, 0 ] ] }, { "id": "micro-behaviors/process/fork/clone::process-creation-primitive", "conf": 0.88, "crit": 3, "desc": "Process creation via fork or clone evidence", "uses": [ 26 ], "spans": [ [ 6431, 4 ] ] }, { "id": "micro-behaviors/ui/help::has-help", "conf": 0.85, "crit": 3, "desc": "Contains help or usage information", "uses": [ 28, 29, 30 ], "spans": [ [ 106605, 53 ], [ 107191, 22 ], [ 111102, 8 ] ] }, { "id": "micro-behaviors/ui/help::usage-label", "conf": 0.75, "crit": 1, "desc": "Command line usage text", "uses": [ 28, 29, 30 ], "spans": [ [ 106605, 0 ] ] }, { "id": "micro-behaviors/fs/file/binary::seek-and-descriptor-io", "conf": 0.8, "crit": 3, "desc": "Reads or writes a seeked file descriptor", "uses": [ 50, 51 ], "spans": [ [ 6553, 5 ], [ 7167, 11 ] ] }, { "id": "micro-behaviors/process/create/direct::fork-execl-piped-stdio", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Fork-execl with piped stdio", "uses": [ 25, 26, 47, 52 ], "spans": [ [ 6381, 4 ], [ 6386, 4 ], [ 6431, 4 ], [ 6436, 5 ] ] }, { "id": "micro-behaviors/process/create/exec::binary-process-execution", "atk": "T1106", "mbc": "C0017", "conf": 0.85, "crit": 1, "desc": "Native binary process execution capability", "uses": [ 47 ], "spans": [ [ 6436, 0 ] ] }, { "id": "micro-behaviors/process/daemonize/detach::fork-new-session", "conf": 0.75, "crit": 3, "desc": "Forks process into detached session", "uses": [ 24, 26 ], "spans": [ [ 6431, 4 ], [ 6497, 6 ] ] }, { "id": "micro-behaviors/process/daemonize/detach::self-exe-session-detach", "conf": 0.75, "crit": 3, "desc": "Reads own executable while detaching process session", "uses": [ 24, 26, 43 ], "spans": [ [ 6431, 4 ], [ 6497, 6 ], [ 115963, 14 ] ] }, { "id": "micro-behaviors/process/identity/setuid::setuid-dup", "conf": 0.6, "crit": 3, "desc": "Set user ID (capability)", "uses": [ 27 ], "spans": [ [ 5697, 6 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "wfrVXf/HZsuVGTiePJJLboRbIx(mMaw)]E^A=k(raA?spB7]MgatCG8h.D\u0026)Abf97vqPM#jS[xRxdXsyB1IDAA=#2m3uf=[C4CXpjS(Hjg+H^uAXN]uyIdf?B7lsQav/gbaw^8)C41)aav*M.A+3pFat1ZqwNV=PwQby%wPz%dv}u^7wPz%9ATD@fy-\u003e\u003e-xMOunB2\u003e%cCxXl-xkR\u003chxd!ayxd\u003cQ3B.LV5wmoN\u003eauY", "n": [ { "c": 2, "d": "Alpine/Wolfi package info metadata", "i": "metadata/package/files/system-package::alpine-apk-pkginfo", "o": 68, "z": 24, "cf": 0.97 }, { "c": 1, "d": "Alpine/Wolfi package version field", "i": "metadata/package/files/system-package::alpine-pkginfo-version-field", "o": 93, "z": 17, "cf": 0.9 } ], "ln": 20, "col": 21, "line": 1 }, { "b": "BAo6yy\u0026B9awO=6#B:bJSA+vMyB7]@iauZ\u00264h8EfCfBzlev}V#FaB2\u003e7uP6.Fz/PM8x(k4RazkOmAaYI/z/6u9BrAZ?wh=kNwmWUSh.W6Gi59v5iws@Li5CkUh!1HMgbgWyfGg%FvL]]M3t\u003ci=zGGr3zE)\u0026hjS)HdByx5}wO-FRz/xbcjz[UEAa81uy\u0026B9awO=6#B:bJSA+vMyy?Wx\u003czGxwijS)l\u003eoF54MfFdi-eO[\u003cqwPwb#wPhD]v}xZ7jS[xPB-p$2wmYZ\u003ezE:\u003eMazkUajU!SDe\u0026+I7f:.D5AaJ]$auZ\u0026WAaZ+hxjU$5jU!SDe\u0026+I7f:YcFvrDWgzddK2v{%g\u0026C(", "n": [ { "c": 2, "d": "References the GPL license", "i": "metadata/package/license::gpl-word", "o": 430, "z": 3, "cf": 0.7 }, { "c": 1, "d": "Alpine/Wolfi package origin field", "i": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "o": 304, "z": 14, "cf": 0.9 } ], "ln": 256, "col": 39, "line": 8 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 747.0, "entropy": 5.17, "size_bytes": 747.0 }, "binary": { "overall_entropy": 5.17, "peak_region_bytes": 747.0, "peak_region_entropy": 5.17 } } }, "id": 2, "path": "/tmp/promoter-618110428/abd178c632aa8cd266853ffc8643cb3388d2261810ea27062ce0e5ae31607d3c/gpg-wks-server-2.4.9-r1.apk!!.PKGINFO", "pid": 0, "risk": 1, "sha": "383bff947fafbbf729e7b1df1942da6e06dce86b1069a342909f2814d60eb5e8", "size": 747, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package version field", "spans": [ [ 93, 0 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package origin field", "spans": [ [ 304, 0 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.9, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 68, 0 ] ] }, { "id": "metadata/package/license::gpl-word", "conf": 0.7, "crit": 2, "desc": "References the GPL license", "spans": [ [ 430, 0 ] ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.97, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "spans": [ [ 304, 0 ] ] } ], "type": "text" } ], "rev": "46d16", "v": "8" } }