{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.030221015, "rte": "az", "prob": 0.030221015 }, { "cls": 0, "raw": 0.00086634356, "rte": "az/native", "prob": 0.00086634356 }, { "cls": 0, "raw": 0.00008832415, "rte": "az/elf", "prob": 0.00008832415 } ], "prob": 0.030221015, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.030221015214920044, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T21:31:42Z" }, "path": "elf.module", "raw": { "v": "8", "rev": "b3dc8", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000rtp-0rr910000000000000000000003zmw0000000000kMy=:002m:3JHIlry?#dk#*iInXt3600000002}*ItHdzI.vRVE[h)9!jtHAp^LchnqVj\u0026%i%+%)q@\u003efXbVHe0000008emr%iNCt0000000015tr#HWu0UusXbVHe0000000", "ln": 0 }, { "b": "wO#PjvrrRCCQmfxCQ%$Ux)KtkfNa)Wy\u003clo!pe%$YaAhmkzGGDgaAg+gB7F(8w]zYjB7/Dlz2^shoIuNFz!T9hwPw]jvrlH3wftG5AV!}fw/$+#vpS}\u00260bls]vqGT*aAIa7BzkVhazts{wmY^7BywS{wGU]6w]?K9azCZowNxH(z!rOYx(n95y?Wz", "ln": 3622 }, { "b": "0000g000000000000000000000002l0000i009742lj-70000a000000002D0000g000000000000000000000002S0000i00961000000000$000000002/0000g", "ln": 4425 } ], "mol": "Md₃(BiBkHe)", "sha": "b3d00d976403e66b7f190dec0ee6787f49374d3d46c99eeb8a20f29ecda5d853", "path": "elf.module", "risk": 4, "size": 8896, "supp": [ { "by": [ { "id": "metrics", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/hardening/mitigation::no-relro", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "grub_elf_is_elf32" ], [ "grub_elf32_load_phdrs" ], [ "grub_elf_file" ], [ "grub_elf64_get_shnum" ], [ "grub_elf32_get_shstrndx" ], [ "grub_elf64_get_phnum" ], [ "grub_elf_is_elf64" ], [ "grub_elf_close" ], [ "grub_elf64_load" ], [ "grub_elf_open" ], [ "grub_elf64_load_phdrs" ], [ "grub_elf32_size" ], [ "grub_elf64_size" ], [ "grub_elf64_get_shstrndx" ], [ "grub_elf32_get_shnum" ], [ "grub_elf32_load" ], [ "grub_elf32_get_phnum" ] ], "imp": [ [ "", "grub_strdup" ], [ "", "grub_file_seek" ], [ "", "grub_errno" ], [ "", "grub_memset" ], [ "", "grub_file_read" ], [ "", "grub_zalloc" ], [ "", "grub_malloc" ], [ "", "grub_file_close" ], [ "", "grub_file_open" ], [ "", "grub_real_dprintf" ], [ "", "grub_error" ], [ "", "grub_free" ] ], "sec": [ [ ".text", 64, 3315, 5.09, "alloc,executable" ], [ ".rela.text", 5408, 2688, 1.6, "info_link" ], [ ".rodata.str1.1", 3379, 737, 4.52, "alloc,merge,strings" ], [ ".module_license", 4120, 15, 3.64, "write,alloc" ], [ ".symtab", 4136, 768, 1.6, "" ], [ ".strtab", 4904, 499, 4.25, "" ], [ ".shstrtab", 8096, 96, 4.1, "" ] ], "funcs": [ [ "sym.grub_elf_close", 134217792 ], [ "sym.grub_elf_file", 134217875 ], [ "sym.grub_elf_open", 134218196 ], [ "sym.grub_elf_is_elf32", 134218282 ], [ "sym.grub_elf32_load_phdrs", 134218292 ], [ "sym.grub_elf32_size", 134218536 ], [ "sym.grub_elf32_load", 134218756 ], [ "sym.grub_elf32_get_shnum", 134219218 ], [ "sym.grub_elf32_get_shstrndx", 134219375 ], [ "sym.grub_elf32_get_phnum", 134219534 ], [ "sym.grub_elf_is_elf64", 134219672 ], [ "sym.grub_elf64_load_phdrs", 134219682 ], [ "sym.grub_elf64_size", 134219927 ], [ "sym.grub_elf64_load", 134220166 ], [ "sym.grub_elf64_get_shnum", 134220642 ], [ "sym.grub_elf64_get_shstrndx", 134220806 ], [ "sym.grub_elf64_get_phnum", 134220967 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 0, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "symtab_count": 32, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "program_header_count": 0, "stripped_with_symtab": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 1, "stripped_metadata_section_count": 6 }, "file": { "size": 8896, "entropy": 4.18 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "basic_blocks": 233, "code_entropy": 5.09, "data_entropy": 3.64, "overlay_size": 704, "string_count": 60, "overlay_ratio": 0.08, "avg_complexity": 8.06, "max_complexity": 16, "huge_func_count": 0, "leaf_func_count": 3, "overlay_entropy": 0.97, "tiny_func_count": 2, "avg_basic_blocks": 13.71, "entropy_variance": 1.67, "avg_string_length": 21.4, "max_string_length": 62, "peak_region_bytes": 4096, "code_to_data_ratio": 1, "peak_region_entropy": 5.19, "string_length_stddev": 14.26, "largest_section_ratio": 0.37, "sentence_string_count": 18, "sentence_string_ratio": 0.3, "high_entropy_string_count": 0 }, "exports": { "count": 17 }, "imports": { "count": 12 }, "sections": { "count": 11, "code_size": 3315, "entropy_max": 5.09, "entropy_mean": 3.54, "name_entropy": 4.01, "writable_count": 3, "executable_count": 1, "nonstandard_count": 5, "executable_writable_count": 0 }, "functions": { "count": 17 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.binary_as_unknown": 1 }, "dependencies": { "count": 0 } } }, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/metrics/structural::few-leaf-functions", "conf": 0.4, "crit": 3, "desc": "Binary has very few leaf functions", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 5 ], "spans": [ [ 0, 25 ] ] } ] } ] } }