{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9147961139678955,
        "class": 0
      }
    ],
    "prob": 0.9147961,
    "class": 0,
    "version": "v16.16",
    "thresholds": [
      0.9815004,
      0.99404883
    ],
    "analyzed_at": "2026-05-01T19:41:30Z"
  },
  "path": "x86__64__lsb__unix-system-v__gcc-5.1.0__Os__no-obf__unstripped__coreutils-8.30__basename",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O(C)Md₂(HeBi₂)",
        "x": 3,
        "id": 0,
        "is": [
          "",
          "free",
          "abort",
          "errno_location",
          "strncmp",
          "exit",
          "fpending",
          "textdomain",
          "fclose",
          "bindtextdomain",
          "dcgettext",
          "ctype_get_mb_cur_max",
          "getopt_long",
          "mbrtowc",
          "strrchr",
          "lseek",
          "fputs",
          "strndup",
          "libc_start_main",
          "memcmp",
          "fputs_unlocked",
          "ferror_unlocked",
          "calloc",
          "strcmp",
          "gmon_start__",
          "putchar_unlocked",
          "fileno",
          "malloc",
          "fflush",
          "nl_langinfo",
          "freading",
          "realloc",
          "setlocale",
          "printf_chk",
          "error",
          "fseeko",
          "cxa_atexit",
          "exit",
          "fprintf_chk",
          "mbsinit",
          "iswprint",
          "ctype_b_loc"
        ],
        "ms": {
          "elf": {
            "e_type": 2.0,
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 62.0,
            "class_bits": 64.0,
            "note_count": 1.0,
            "nx_enabled": true,
            "entry_point": 4199408.0,
            "needed_libs": 1.0,
            "dynsym_count": 50.0,
            "has_eh_frame": true,
            "symtab_count": 223.0,
            "dynrela_count": 7.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 40.0,
            "has_interpreter": true,
            "fini_array_count": 1.0,
            "init_array_count": 1.0,
            "program_header_count": 8.0,
            "section_header_count": 30.0,
            "load_segment_max_p_memsz": 21124.0,
            "load_segment_max_p_filesz": 21124.0,
            "section_relocation_group_count": 2.0
          },
          "binary": {
            "code_size": 10436.0,
            "file_size": 32728.0,
            "entry_point": 4199408.0,
            "has_overlay": true,
            "code_entropy": 4.0,
            "data_entropy": 2.86,
            "export_count": 119.0,
            "import_count": 42.0,
            "overlay_size": 1926.0,
            "string_count": 338.0,
            "overlay_ratio": 0.06,
            "section_count": 29.0,
            "avg_complexity": 3.5,
            "function_count": 125.0,
            "import_density": 4.12,
            "max_complexity": 170.0,
            "string_density": 33.17,
            "aliased_exports": 39.0,
            "overall_entropy": 2.71,
            "overlay_entropy": 1.57,
            "avg_basic_blocks": 5.42,
            "avg_section_size": 1056.93,
            "dependency_count": 1.0,
            "entropy_variance": 1.62,
            "function_density": 12.27,
            "avg_function_size": 79.56,
            "avg_string_length": 17.39,
            "complexity_per_kb": 0.34,
            "max_string_length": 200.0,
            "avg_string_entropy": 3.15,
            "code_to_data_ratio": 0.52,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.3,
            "total_basic_blocks": 678.0,
            "string_length_stddev": 18.71,
            "largest_section_ratio": 0.3,
            "sentence_string_count": 37.0,
            "sentence_string_ratio": 0.11,
            "function_analysis_depth": 2.0,
            "high_complexity_functions": 1.0
          }
        },
        "ss": [
          [
            0,
            "textdomain"
          ],
          [
            512,
            "/lib64/ld-linux-x86-64.so.2"
          ],
          [
            2147,
            "putchar_unlocked"
          ],
          [
            2164,
            "fflush"
          ],
          [
            2171,
            "__printf_chk"
          ],
          [
            2184,
            "setlocale"
          ],
          [
            2194,
            "mbrtowc"
          ],
          [
            2202,
            "strncmp"
          ],
          [
            2210,
            "optind"
          ],
          [
            2217,
            "strrchr"
          ],
          [
            2225,
            "dcgettext"
          ],
          [
            2235,
            "error"
          ],
          [
            2241,
            "iswprint"
          ],
          [
            2250,
            "realloc"
          ],
          [
            2258,
            "abort"
          ],
          [
            2270,
            "program_invocation_name"
          ],
          [
            2294,
            "__ctype_get_mb_cur_max"
          ],
          [
            2317,
            "calloc"
          ],
          [
            2324,
            "__errno_location"
          ],
          [
            2341,
            "memcmp"
          ],
          [
            2348,
            "strndup"
          ],
          [
            2356,
            "__fprintf_chk"
          ],
          [
            2370,
            "stdout"
          ],
          [
            2383,
            "lseek"
          ],
          [
            2389,
            "fclose"
          ],
          [
            2396,
            "malloc"
          ],
          [
            2403,
            "mbsinit"
          ],
          [
            2411,
            "nl_langinfo"
          ],
          [
            2423,
            "__ctype_b_loc"
          ],
          [
            2437,
            "optarg"
          ],
          [
            2444,
            "__freading"
          ],
          [
            2455,
            "stderr"
          ],
          [
            2462,
            "getopt_long"
          ],
          [
            2474,
            "fileno"
          ],
          [
            2481,
            "__fpending"
          ],
          [
            2492,
            "ferror_unlocked"
          ],
          [
            2508,
            "program_invocation_short_name"
          ],
          [
            2538,
            "bindtextdomain"
          ],
          [
            2560,
            "__libc_start_main"
          ],
          [
            2578,
            "fseeko"
          ],
          [
            2585,
            "fputs_unlocked"
          ],
          [
            2600,
            "free"
          ],
          [
            2605,
            "__progname"
          ],
          [
            2616,
            "__progname_full"
          ],
          [
            2632,
            "__cxa_atexit"
          ],
          [
            2645,
            "__gmon_start__"
          ],
          [
            4704,
            "AVAUE1"
          ],
          [
            5350,
            "ATUI"
          ],
          [
            5501,
            "ATUA"
          ],
          [
            6136,
            "USRH"
          ],
          [
            6677,
            "ATUS"
          ],
          [
            7299,
            "AWAVE"
          ],
          [
            7306,
            "AUATI"
          ],
          [
            10362,
            "AWAVAUATLc"
          ],
          [
            10735,
            "ATUSH"
          ],
          [
            11047,
            "AWAV"
          ],
          [
            11893,
            "AWAVAUATM"
          ],
          [
            12362,
            "AUATL"
          ],
          [
            12509,
            "AWAVAUH"
          ],
          [
            12787,
            "QAWH"
          ],
          [
            12793,
            "AVAUATL"
          ],
          [
            13396,
            "TUUUUUUUI"
          ],
          [
            14272,
            "AWAVA"
          ],
          [
            14468,
            "basename"
          ],
          [
            14477,
            "Try '%s --help' for more information."
          ],
          [
            14516,
            "Usage: %s NAME [SUFFIX]\n  or:  %s OPTION... NAME..."
          ],
          [
            14540,
            "or:  %s OPTION... NAME..."
          ],
          [
            14569,
            "Print NAME with any leading directory components removed.\nIf specified, also remove a trailing SUFFIX."
          ],
          [
            14627,
            "If specified, also remove a trailing SUFFIX."
          ],
          [
            14673,
            "Mandatory arguments to long options are mandatory for short options too."
          ],
          [
            14748,
            "-a, --multiple       support multiple arguments and treat each as a NAME"
          ],
          [
            14823,
            "-s, --suffix=SUFFIX  remove a trailing SUFFIX; implies -a"
          ],
          [
            14883,
            "-z, --zero           end each output line with NUL, not newline"
          ],
          [
            14950,
            "--help     display this help and exit"
          ],
          [
            14995,
            "--version  output version information and exit"
          ],
          [
            15049,
            "Examples:\n  %s /usr/bin/sort          -\u003e \"sort\"\n  %s include/stdio.h .h     -\u003e \"stdio\"\n  %s -s .h include/stdio.h  -\u003e \"stdio\"\n  "
          ],
          [
            15098,
            "%s include/stdio.h .h     -\u003e \"stdio\""
          ],
          [
            15137,
            "%s -s .h include/stdio.h  -\u003e \"stdio\""
          ],
          [
            15176,
            "%s -a any/str1 any/str2   -\u003e \"str1\" followed by \"str2\""
          ],
          [
            15234,
            "%s online help: \u003c%s\u003e"
          ],
          [
            15257,
            "https://www.gnu.org/software/coreutils/"
          ],
          [
            15297,
            "GNU coreutils"
          ],
          [
            15315,
            "Report %s translation bugs to \u003chttps://translationproject.org/team/\u003e"
          ],
          [
            15385,
            "Full documentation at: \u003c%s%s\u003e"
          ],
          [
            15416,
            "or available locally via: info '(coreutils) %s%s'"
          ],
          [
            15469,
            "test invocation"
          ],
          [
            15485,
            "Multi-call invocation"
          ],
          [
            15507,
            "sha224sum"
          ],
          [
            15517,
            "sha2 utilities"
          ],
          [
            15532,
            "sha256sum"
          ],
          [
            15542,
            "sha384sum"
          ],
          [
            15552,
            "sha512sum"
          ],
          [
            15562,
            "/tmp/coreutils/_out/share/locale"
          ],
          [
            15601,
            "David MacKenzie"
          ],
          [
            15617,
            "missing operand"
          ],
          [
            15633,
            "extra operand %s"
          ],
          [
            15650,
            "multiple"
          ],
          [
            15659,
            "suffix"
          ],
          [
            15666,
            "zero"
          ],
          [
            15676,
            "version"
          ],
          [
            16032,
            "8.30"
          ],
          [
            16037,
            "write error"
          ],
          [
            16056,
            "A NULL argv[0] was passed through an exec system call."
          ],
          [
            16112,
            "/.libs/"
          ],
          [
            16149,
            "GB18030"
          ],
          [
            16159,
            "literal"
          ],
          [
            16173,
            "shell-always"
          ],
          [
            16186,
            "shell-escape"
          ],
          [
            16199,
            "shell-escape-always"
          ],
          [
            16221,
            "c-maybe"
          ],
          [
            16229,
            "clocale"
          ],
          [
            16504,
            "%s (%s) %s"
          ],
          [
            16527,
            "License GPLv3+: GNU GPL version 3 or later \u003chttps://gnu.org/licenses/gpl.html\u003e.\nThis is free software: you are free to change an"
          ],
          [
            16528,
            "License GPLv3+: GNU GPL version 3 or later \u003chttps://gnu.org/licenses/gpl.html\u003e."
          ],
          [
            16608,
            "This is free software: you are free to change and redistribute it."
          ],
          [
            16675,
            "There is NO WARRANTY, to the extent permitted by law."
          ],
          [
            16731,
            "Written by %s."
          ],
          [
            16747,
            "Written by %s and %s."
          ],
          [
            16770,
            "Written by %s, %s, and %s."
          ],
          [
            16798,
            "Written by %s, %s, %s,"
          ],
          [
            16821,
            "and %s."
          ],
          [
            16853,
            "%s, and %s."
          ],
          [
            16889,
            "%s, %s, and %s."
          ],
          [
            16929,
            "%s, %s, %s, and %s."
          ],
          [
            17089,
            "%s, %s, and others."
          ],
          [
            17110,
            "Report bugs to: %s"
          ],
          [
            17131,
            "bug-coreutils@gnu.org"
          ],
          [
            17153,
            "%s home page: \u003c%s\u003e"
          ],
          [
            17173,
            "General help using GNU software: \u003chttps://www.gnu.org/gethelp/\u003e"
          ],
          [
            17344,
            "Copyright %s %d Free Software Foundation, Inc."
          ],
          [
            17391,
            "memory exhausted"
          ],
          [
            17410,
            "POSIX"
          ],
          [
            17416,
            "ASCII"
          ],
          [
            22100,
            "GCC: (GNU) 5.1.0"
          ],
          [
            27473,
            "crtstuff.c"
          ],
          [
            27484,
            "__JCR_LIST__"
          ],
          [
            27497,
            "deregister_tm_clones"
          ],
          [
            27518,
            "__do_global_dtors_aux"
          ],
          [
            27540,
            "completed.6944"
          ],
          [
            27555,
            "__do_global_dtors_aux_fini_array_entry"
          ],
          [
            27594,
            "frame_dummy"
          ],
          [
            27606,
            "__frame_dummy_init_array_entry"
          ],
          [
            27637,
            "basename.c"
          ],
          [
            27648,
            "perform_basename"
          ],
          [
            27665,
            "longopts"
          ],
          [
            27674,
            "closeout.c"
          ],
          [
            27685,
            "basename-lgpl.c"
          ],
          [
            27701,
            "stripslash.c"
          ],
          [
            27714,
            "progname.c"
          ],
          [
            27725,
            "quotearg.c"
          ],
          [
            27736,
            "quoting_options_from_style"
          ],
          [
            27763,
            "strcaseeq1"
          ],
          [
            27774,
            "gettext_quote"
          ],
          [
            27788,
            "quotearg_buffer_restyled"
          ],
          [
            27813,
            "quotearg_n_options"
          ],
          [
            27832,
            "slotvec"
          ],
          [
            27840,
            "nslots"
          ],
          [
            27847,
            "slotvec0"
          ],
          [
            27856,
            "slot0"
          ],
          [
            27862,
            "default_quoting_options"
          ],
          [
            27886,
            "version-etc.c"
          ],
          [
            27900,
            "xmalloc.c"
          ],
          [
            27910,
            "xalloc-die.c"
          ],
          [
            27923,
            "xstrndup.c"
          ],
          [
            27934,
            "mbrtowc.c"
          ],
          [
            27944,
            "c-strcasecmp.c"
          ],
          [
            27959,
            "close-stream.c"
          ],
          [
            27974,
            "hard-locale.c"
          ],
          [
            27988,
            "localcharset.c"
          ],
          [
            28003,
            "fclose.c"
          ],
          [
            28012,
            "fflush.c"
          ],
          [
            28021,
            "fseeko.c"
          ],
          [
            28030,
            "nl_langinfo.c"
          ],
          [
            28044,
            "version.c"
          ],
          [
            28054,
            "exitfail.c"
          ],
          [
            28065,
            "version-etc-fsf.c"
          ],
          [
            28083,
            "__FRAME_END__"
          ],
          [
            28097,
            "__JCR_END__"
          ],
          [
            28109,
            "__init_array_end"
          ],
          [
            28126,
            "_DYNAMIC"
          ],
          [
            28135,
            "__init_array_start"
          ],
          [
            28154,
            "__GNU_EH_FRAME_HDR"
          ],
          [
            28173,
            "_GLOBAL_OFFSET_TABLE_"
          ],
          [
            28195,
            "quotearg_n_mem"
          ],
          [
            28210,
            "base_len"
          ],
          [
            28219,
            "__libc_csu_fini"
          ],
          [
            28235,
            "quotearg_char"
          ],
          [
            28249,
            "__progname@@GLIBC_2.2.5"
          ],
          [
            28273,
            "free@@GLIBC_2.2.5"
          ],
          [
            28291,
            "version_etc"
          ],
          [
            28303,
            "quote_quoting_options"
          ],
          [
            28325,
            "abort@@GLIBC_2.2.5"
          ],
          [
            28344,
            "__errno_location@@GLIBC_2.2.5"
          ],
          [
            28374,
            "quotearg_alloc_mem"
          ],
          [
            28393,
            "strncmp@@GLIBC_2.2.5"
          ],
          [
            28414,
            "_ITM_deregisterTMCloneTable"
          ],
          [
            28442,
            "stdout@@GLIBC_2.2.5"
          ],
          [
            28481,
            "set_quoting_flags"
          ],
          [
            28499,
            "rpl_mbrtowc"
          ],
          [
            28511,
            "__fpending@@GLIBC_2.2.5"
          ],
          [
            28535,
            "quotearg_n_style"
          ],
          [
            28552,
            "quotearg_buffer"
          ],
          [
            28568,
            "set_program_name"
          ],
          [
            28585,
            "quotearg_n_custom"
          ],
          [
            28603,
            "atexit"
          ],
          [
            28610,
            "quotearg_n_custom_mem"
          ],
          [
            28632,
            "quotearg_style"
          ],
          [
            28647,
            "_edata"
          ],
          [
            28654,
            "fclose@@GLIBC_2.2.5"
          ],
          [
            28674,
            "optind@@GLIBC_2.2.5"
          ],
          [
            28694,
            "bindtextdomain@@GLIBC_2.2.5"
          ],
          [
            28722,
            "quotearg_n_style_colon"
          ],
          [
            28745,
            "dcgettext@@GLIBC_2.2.5"
          ],
          [
            28804,
            "x2realloc"
          ],
          [
            28814,
            "getopt_long@@GLIBC_2.2.5"
          ],
          [
            28839,
            "mbrtowc@@GLIBC_2.2.5"
          ],
          [
            28860,
            "xrealloc"
          ],
          [
            28869,
            "strrchr@@GLIBC_2.2.5"
          ],
          [
            28890,
            "lseek@@GLIBC_2.2.5"
          ],
          [
            28909,
            "Version"
          ],
          [
            28917,
            "fputs@@GLIBC_2.2.5"
          ],
          [
            28936,
            "rpl_fflush"
          ],
          [
            28947,
            "xmalloc"
          ],
          [
            28955,
            "quotearg_mem"
          ],
          [
            28968,
            "xstrdup"
          ],
          [
            28976,
            "base_name"
          ],
          [
            28986,
            "version_etc_ar"
          ],
          [
            29001,
            "close_stdout"
          ],
          [
            29014,
            "last_component"
          ],
          [
            29029,
            "strndup@@GLIBC_2.2.5"
          ],
          [
            29050,
            "__libc_start_main@@GLIBC_2.2.5"
          ],
          [
            29081,
            "memcmp@@GLIBC_2.2.5"
          ],
          [
            29101,
            "xnrealloc"
          ],
          [
            29111,
            "xcharalloc"
          ],
          [
            29122,
            "hard_locale"
          ],
          [
            29134,
            "quotearg_custom"
          ],
          [
            29150,
            "fputs_unlocked@@GLIBC_2.2.5"
          ],
          [
            29178,
            "quotearg_colon_mem"
          ],
          [
            29197,
            "ferror_unlocked@@GLIBC_2.2.5"
          ],
          [
            29226,
            "calloc@@GLIBC_2.2.5"
          ],
          [
            29246,
            "__data_start"
          ],
          [
            29259,
            "set_quoting_style"
          ],
          [
            29277,
            "strcmp@@GLIBC_2.2.5"
          ],
          [
            29297,
            "quote_n_mem"
          ],
          [
            29309,
            "clone_quoting_options"
          ],
          [
            29331,
            "quotearg_free"
          ],
          [
            29345,
            "optarg@@GLIBC_2.2.5"
          ],
          [
            29365,
            "xalloc_die"
          ],
          [
            29391,
            "rpl_nl_langinfo"
          ],
          [
            29407,
            "__dso_handle"
          ],
          [
            29420,
            "close_stdout_set_ignore_EPIPE"
          ],
          [
            29450,
            "_IO_stdin_used"
          ],
          [
            29465,
            "x2nrealloc"
          ],
          [
            29476,
            "putchar_unlocked@@GLIBC_2.2.5"
          ],
          [
            29506,
            "program_invocation_name@@GLIBC_2.2.5"
          ],
          [
            29543,
            "fileno@@GLIBC_2.2.5"
          ]
        ],
        "sz": 32728,
        "ts": [
          {
            "c": 1.0,
            "d": "ELF program interpreter present",
            "e": [
              "/lib64/ld-linux-x86-64.so.2"
            ],
            "i": "metadata/binary/linking::elf-interpreter",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF needed library",
            "e": [
              "libc.so.6"
            ],
            "i": "metadata/binary/linking::elf-needed-lib",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.function_count = 125.00"
            ],
            "i": "metadata/binary/metrics::many-functions",
            "l": 2
          },
          {
            "d": ".so extension reference",
            "e": [
              ".so"
            ],
            "i": "micro-behaviors/fs/path/extension::so",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 119.00"
            ],
            "i": "metadata/binary/metrics::many-exports",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "x86__64__lsb__unix-system-v__gcc-5.1.0__Os__no-obf__unstripped__coreutils-8.30__basename"
            ],
            "i": "metadata/binary/metrics::small-elf-binary",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 42.00"
            ],
            "i": "metadata/binary/metrics::many-imports-40",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /lib64",
            "e": [
              "/lib64/ld-linux-x86-64.so.2"
            ],
            "i": "micro-behaviors/fs/path/system::system-lib64",
            "l": 2
          },
          {
            "d": "Characteristic system library exports",
            "e": [
              "libc_start_main"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-symbols",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "GNU coreutils reference",
            "e": [
              "GNU coreutils"
            ],
            "i": "micro-behaviors/dylib/library::gnu-coreutils-ref",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is not position-independent (fixed load address)",
            "e": [
              "binary.is_pie = 0.00"
            ],
            "i": "metadata/hardening::no-pie",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 3.50"
            ],
            "i": "metadata/binary/metrics::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.15"
            ],
            "i": "metadata/binary/metrics::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "GPL license reference",
            "e": [
              "GPL",
              "GPL"
            ],
            "i": "metadata/package/license::gpl-word",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "binary.file_size = 32728.00"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseeko",
              "fseeko@@GLIBC_2.2.5",
              "rpl_fseeko",
              "sym.imp.fseeko",
              "sym.rpl_fseeko"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.71"
            ],
            "i": "metadata/binary/metrics::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "CLI help or usage text",
            "e": [
              "Try '%s --help' for more information."
            ],
            "i": "metadata/binary/metrics::help-usage-string",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 119.00"
            ],
            "i": "metadata/binary/metrics::many-exports-100",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "/tmp/ path component",
            "e": [
              "/tmp/coreutils/_out/share/locale"
            ],
            "i": "micro-behaviors/fs/path/temp::tmp-path-content",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 42.00"
            ],
            "i": "metadata/binary/metrics::many-imports-25",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "libc version string pattern",
            "e": [
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC",
              "GLIBC"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-version-string",
            "l": 2
          },
          {
            "a": "T1059.006",
            "c": 0.6000000238418579,
            "d": "Named /tmp execution path",
            "e": [
              "/tmp/coreutils"
            ],
            "i": "objectives/command-and-control/dropper::tmp-path",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "output keyword",
            "e": [
              "--version  output version information and exit",
              "-z, --zero           end each output line with NUL, not newline"
            ],
            "i": "micro-behaviors/data/text/keywords::output",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/binary/linking::elf-interpreter-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 119.00"
            ],
            "i": "metadata/binary/metrics::many-exports-20",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Version information string",
            "e": [
              "--version"
            ],
            "i": "metadata/package/help::version-text",
            "l": 2
          },
          {
            "d": "Characteristic system library export __errno_location",
            "e": [
              "errno_location"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-errno",
            "l": 2
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 119.00"
            ],
            "i": "metadata/binary/symbols::has-exports",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 119.00"
            ],
            "i": "metadata/binary/metrics::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.function_count = 125.00"
            ],
            "i": "metadata/binary/metrics::many-functions-50",
            "l": 1
          },
          {
            "c": 0.6000000238418579,
            "d": "Copyright notice",
            "e": [
              "Copyright"
            ],
            "i": "metadata/package/license::copyright-word",
            "l": 2
          },
          {
            "d": "Usage: label in binary strings",
            "e": [
              "Usage: %s NAME [SUFFIX]\n  or:  %s OPTION... NAME..."
            ],
            "i": "metadata/package/help::usage-title-string",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit",
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 42.00"
            ],
            "i": "metadata/binary/metrics::many-imports-20",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Unix /tmp/ path reference",
            "e": [
              "/tmp/coreutils/_out/share/locale"
            ],
            "i": "micro-behaviors/fs/path/temp::unix-temp",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.function_count = 125.00"
            ],
            "i": "metadata/binary/metrics::few-functions-3",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics::elf64-class",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 42.00"
            ],
            "i": "metadata/binary/metrics::many-imports-30",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 29.00"
            ],
            "i": "metadata/binary/metrics::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "No stack canary (stack smashing protection absent)",
            "e": [
              "elf.stack_canary = 0.00"
            ],
            "i": "metadata/hardening::no-stack-canary",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Binary not position-independent (no ASLR)",
            "e": [
              "elf.e_type = 2.00"
            ],
            "i": "metadata/hardening::no-pie-struct",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF needed library metadata",
            "e": [
              "libc.so.6"
            ],
            "i": "metadata/binary/linking/runtime::needed-lib",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/hardening::elf-interpreter-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF program interpreter metadata",
            "e": [
              "/lib64/ld-linux-x86-64.so.2"
            ],
            "i": "metadata/binary/linking/runtime::interpreter",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "No RELRO (GOT writable after load)",
            "e": [
              "elf.relro = 0.00"
            ],
            "i": "metadata/hardening::no-relro",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /tmp",
            "e": [
              "/tmp/coreutils/_out/share/locale",
              "/tmp/coreutils/_out/share/locale"
            ],
            "i": "micro-behaviors/fs/path/temp::temp-tmp",
            "l": 2
          }
        ],
        "sha": "ae826bbebe9895ca0e77dcdea75de398ce2210932e823f8a3cac415bc65822f7",
        "path": "x86__64__lsb__unix-system-v__gcc-5.1.0__Os__no-obf__unstripped__coreutils-8.30__basename",
        "type": "elf"
      }
    ],
    "tv": "feb13"
  }
}