{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.029975384, "rte": "az", "prob": 0.029975384 }, { "cls": 0, "raw": 0.00096244615, "rte": "az/native", "prob": 0.00096244615 }, { "cls": 0, "raw": 0.00010243058, "rte": "az/elf", "prob": 0.00010243058 } ], "prob": 0.029975384, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.02997538447380066, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T21:33:34Z" }, "path": "elf.module", "raw": { "v": "8", "rev": "b3dc8", "files": [ { "id": 0, "ctx": [ { "b": "E))420rAi300000000000rri40rr910000000000fCKM/00000gYNHQ001zE3JHIlrF/*rq\u0026ezIfPeg:\u003e\u003e$FX%bfln\u003e\u003e$FX%b2y(@qV/%H4YP[Isx:b%nSa)00000tv7QMrF/*sr-sUq42J2Y/0[xN008lX%nSaMZZ(ai0001Q.?*uc^Ln\u003e2{#}UQ%nLAd2s5/MJq", "ln": 0 }, { "b": "wO#PjvrrRCCQmfxCQ%$Ux)KtkfNa)Wy\u003clo!pe%$YaAhmkzGGDgaAg+gB7F(8w]zYjB7/Dlz2^shoIuNFz!T9hwPw]jvrlH3wftG5AV!}fw/$+#vpS}\u00260bls]vqGT*aAIa7BzkVhazts{wmY^7BywS{wGU]6w]?K9azCZowNxH(z!rOYx(n95y?Wz", "ln": 2924 } ], "mol": "Md₃(BiBkHe)", "sha": "b4d779da31a102148ce757d287b3d17d5cbb1d698e6407fcff28e013c0be904d", "path": "elf.module", "risk": 4, "size": 5864, "supp": [ { "by": [ { "id": "metrics", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/hardening/mitigation::no-relro", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "grub_elf_is_elf32" ], [ "grub_elf32_load_phdrs" ], [ "grub_elf_file" ], [ "grub_elf64_get_shnum" ], [ "grub_elf32_get_shstrndx" ], [ "grub_elf64_get_phnum" ], [ "grub_elf_is_elf64" ], [ "grub_elf_close" ], [ "grub_elf64_load" ], [ "grub_elf_open" ], [ "grub_elf64_load_phdrs" ], [ "grub_elf32_size" ], [ "grub_elf64_size" ], [ "grub_elf64_get_shstrndx" ], [ "grub_elf32_get_shnum" ], [ "grub_elf32_load" ], [ "grub_elf32_get_phnum" ] ], "imp": [ [ "", "grub_strdup" ], [ "", "grub_file_seek" ], [ "", "grub_errno" ], [ "", "grub_memset" ], [ "", "grub_file_read" ], [ "", "grub_zalloc" ], [ "", "grub_malloc" ], [ "", "grub_file_close" ], [ "", "grub_file_open" ], [ "", "grub_real_dprintf" ], [ "", "grub_error" ], [ "", "grub_free" ] ], "sec": [ [ ".text", 52, 2629, 6.2, "alloc,executable" ], [ ".rel.text", 4448, 880, 3.22, "info_link" ], [ ".rodata.str1.1", 2681, 739, 4.52, "alloc,merge,strings" ], [ ".module_license", 3420, 15, 3.64, "write,alloc" ], [ ".symtab", 3436, 512, 2.2, "" ], [ ".strtab", 3948, 499, 4.25, "" ], [ ".shstrtab", 5328, 95, 4.1, "" ] ], "tgt": [ "sym.grub_elf32_load_phdrs", "sym.grub_elf64_load_phdrs", "sym.grub_elf_file" ], "funcs": [ [ "sym.grub_elf_close", 134217780 ], [ "sym.grub_elf_file", 134217832 ], [ "sym.grub_elf_open", 134218064 ], [ "sym.grub_elf_is_elf32", 134218114 ], [ "sym.grub_elf32_load_phdrs", 134218125 ], [ "sym.grub_elf32_size", 134218286 ], [ "sym.grub_elf32_load", 134218491 ], [ "sym.grub_elf32_get_shnum", 134218835 ], [ "sym.grub_elf32_get_shstrndx", 134218957 ], [ "sym.grub_elf32_get_phnum", 134219078 ], [ "sym.grub_elf_is_elf64", 134219182 ], [ "sym.grub_elf64_load_phdrs", 134219193 ], [ "sym.grub_elf64_size", 134219352 ], [ "sym.grub_elf64_load", 134219654 ], [ "sym.grub_elf64_get_shnum", 134220013 ], [ "sym.grub_elf64_get_shstrndx", 134220172 ], [ "sym.grub_elf64_get_phnum", 134220299 ] ], "metrics": { "elf": { "bits": 32, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 0, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "symtab_count": 32, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "program_header_count": 0, "stripped_with_symtab": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 1, "stripped_metadata_section_count": 6 }, "file": { "size": 5864, "entropy": 5.72 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "basic_blocks": 258, "code_entropy": 6.2, "data_entropy": 3.64, "overlay_size": 441, "string_count": 60, "overlay_ratio": 0.08, "avg_complexity": 8.29, "max_complexity": 18, "huge_func_count": 0, "leaf_func_count": 2, "overlay_entropy": 1.41, "tiny_func_count": 2, "avg_basic_blocks": 15.18, "entropy_variance": 1.31, "avg_string_length": 21.43, "max_string_length": 63, "peak_region_bytes": 3072, "code_to_data_ratio": 0.99, "peak_region_entropy": 6.17, "string_length_stddev": 14.35, "largest_section_ratio": 0.45, "sentence_string_count": 18, "sentence_string_ratio": 0.3, "high_entropy_string_count": 0 }, "exports": { "count": 17 }, "imports": { "count": 12 }, "sections": { "count": 11, "code_size": 2629, "entropy_max": 6.2, "entropy_mean": 4.02, "name_entropy": 4.02, "writable_count": 3, "executable_count": 1, "nonstandard_count": 5, "executable_writable_count": 0 }, "functions": { "count": 17 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.binary_as_unknown": 1 }, "dependencies": { "count": 0 } } }, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/metrics/structural::few-leaf-functions", "conf": 0.4, "crit": 3, "desc": "Binary has very few leaf functions", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 5 ], "spans": [ [ 0, 16 ] ] } ] } ] } }