{
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000011881192,
        "rte": "az",
        "prob": 0.000011881192
      },
      {
        "cls": 0,
        "raw": 0.000036597252,
        "rte": "az/native",
        "prob": 0.000036597252
      },
      {
        "cls": 0,
        "raw": 0.0000027517478,
        "rte": "az/elf",
        "prob": 0.0000027517478
      }
    ],
    "prob": 0.000011881192,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000011881192222062964,
        "type": "elf"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-11T22:13:59Z"
  },
  "path": "sleep_test.module",
  "raw": {
    "v": "8",
    "rev": "c7f7e",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "E))420S-r400000000000rtp-0rr9100000000000000000000S0JC70000000000kMy=:002m:3\u0026*UnnvOT19@[w5s].L[ItoY0\u003cV#\u003cAnq3m.nqP^/w@w(AXoF1u0jq*R07.@n\u00267gxH01/k=0zSU^IacS/MY}jA%46Tw93ljz9V(E{IabSyZ@F)[9V(BBw}x/n01T\u0026b0rr9/IEuMLJz}h6FCGS:HyBm:01VMVmgV\u0026Zm2+4yli2aWWfDWilbAy0o\u003eh{zF:hR6002uB6QnT#001E{54ksqlo4{++YsLNZZ(aA0001hFQ4p#9s)\u003eu0002+2.ZRpGTQ{Y07mvanD.tf}4\u003cM%R#M!$l\u003euZ(1WNXli$Eam0001RnD%.vjp^jb0000/y0}INH6ICBFhuc+",
            "ln": 0
          },
          {
            "b": "xjVf(wmoN\u003eBzkP6asFNFzyCMSzGYD8x\u003eet%vru5Xxl5c7uU0O!wPRT6wIOyCx)s-lzdK?rcuBnWasqeKBTWr6A=\u003e?#wmoN\u003eBzkP6giEFGCYWUpwGSxFwO%4wcs}7qdf8}SBy/GovqE68B-X:Aw/#b5zF9Jwasg\u0026m0bh",
            "ln": 1029
          }
        ],
        "mol": "Md₂(BiBk)",
        "sha": "c0499d5262f080cc6d06e151e94ea4e111a11053f3153c4555c084fb6bfdc492",
        "path": "/data/samples/incoming/forager/nixos/nixos.org/osimage/minimal-x86-64/nixos-minimal-25.05.813814.ac62194c3917-x86_64-linux/nix-store.squashfs.d/ki1cfmlv5wxcca1xr7gpjpf60969czfw-grub-2.12/lib/grub/x86_64-efi/sleep_test.module",
        "risk": 2,
        "size": 3240,
        "supp": [
          {
            "by": [
              {
                "id": "metadata/binary/metrics/structural::elf-relocatable-object"
              }
            ],
            "id": "metadata/binary/linking/static::static-linked-heuristic",
            "crit": "notable",
            "kind": "unless"
          },
          {
            "by": [
              {
                "id": "metrics",
                "spans": [
                  [
                    0,
                    25
                  ]
                ]
              }
            ],
            "id": "metadata/build/artifact::elf-stripped-but-symtab-present",
            "crit": "notable",
            "kind": "unless"
          },
          {
            "by": [
              {
                "id": "metadata/binary/linking/static::elf-needed-libs-zero",
                "spans": [
                  [
                    0,
                    25
                  ]
                ]
              }
            ],
            "id": "metadata/hardening/mitigation::no-relro",
            "crit": "notable",
            "kind": "unless"
          }
        ],
        "type": "elf",
        "facts": {
          "imp": [
            [
              "",
              "grub_millisleep"
            ],
            [
              "",
              "grub_get_datetime"
            ],
            [
              "",
              "grub_test_register"
            ],
            [
              "",
              "grub_test_unregister"
            ],
            [
              "",
              "grub_test_assert_helper"
            ]
          ],
          "sec": [
            [
              ".text",
              64,
              844,
              5.24,
              "alloc,executable"
            ],
            [
              ".rela.text",
              1768,
              600,
              1.49,
              "info_link"
            ],
            [
              ".rodata",
              912,
              11,
              2.66,
              "alloc"
            ],
            [
              ".rodata.str1.1",
              923,
              257,
              4.52,
              "alloc,merge,strings"
            ],
            [
              ".module_license",
              1184,
              15,
              3.64,
              "write,alloc"
            ],
            [
              ".symtab",
              1200,
              360,
              1.08,
              ""
            ],
            [
              ".strtab",
              1560,
              208,
              4.3,
              ""
            ],
            [
              ".shstrtab",
              2368,
              104,
              4.07,
              ""
            ]
          ],
          "funcs": [
            [
              "sym.grub_datetime2unixtime.constprop.0",
              134217792
            ],
            [
              "sym.sleep_test",
              134218187
            ],
            [
              "sym.grub_mod_init",
              134218582
            ],
            [
              "sym.grub_mod_fini",
              134218614
            ]
          ],
          "metrics": {
            "elf": {
              "bits": 64,
              "entry": 0,
              "has_got": 0,
              "has_plt": 0,
              "has_note": 1,
              "has_symtab": 1,
              "note_count": 0,
              "nx_enabled": 1,
              "dynrel_count": 0,
              "dynsym_count": 0,
              "has_eh_frame": 0,
              "no_gnu_stack": 0,
              "symtab_count": 15,
              "dynrela_count": 0,
              "little_endian": 1,
              "pltreloc_count": 0,
              "executable_stack": 0,
              "wx_segment_count": 0,
              "program_header_count": 0,
              "stripped_with_symtab": 1,
              "load_segment_max_file_size": 0,
              "load_segment_max_memory_size": 0,
              "section_relocation_group_count": 1,
              "stripped_metadata_section_count": 6
            },
            "file": {
              "size": 3240,
              "entropy": 3.81
            },
            "binary": {
              "is_pie": 0,
              "has_overlay": 1,
              "is_stripped": 0,
              "basic_blocks": 21,
              "code_entropy": 5.24,
              "data_entropy": 3.64,
              "overlay_size": 768,
              "string_count": 33,
              "overlay_ratio": 0.24,
              "avg_complexity": 4.25,
              "max_complexity": 14,
              "huge_func_count": 0,
              "leaf_func_count": 3,
              "overlay_entropy": 0.94,
              "tiny_func_count": 3,
              "avg_basic_blocks": 5.25,
              "entropy_variance": 1.94,
              "avg_string_length": 16.45,
              "max_string_length": 34,
              "peak_region_bytes": 1024,
              "code_to_data_ratio": 0.98,
              "peak_region_entropy": 5.39,
              "string_length_stddev": 8.49,
              "largest_section_ratio": 0.26,
              "sentence_string_count": 5,
              "sentence_string_ratio": 0.15,
              "high_entropy_string_count": 0
            },
            "imports": {
              "count": 5
            },
            "sections": {
              "count": 12,
              "code_size": 844,
              "entropy_max": 5.24,
              "entropy_mean": 3.38,
              "name_entropy": 3.99,
              "writable_count": 3,
              "executable_count": 1,
              "nonstandard_count": 5,
              "executable_writable_count": 0
            },
            "functions": {
              "count": 4
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.binary_as_unknown": 1
            },
            "dependencies": {
              "count": 0
            }
          }
        },
        "traits": [
          {
            "id": "metadata/binary/metrics/size::tiny-elf",
            "conf": 1.0,
            "crit": 3,
            "desc": "Tiny ELF binary (\u003c 4KB)",
            "spans": [
              [
                0,
                16
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/structural::few-functions",
            "conf": 0.4,
            "crit": 3,
            "desc": "Very few functions detected",
            "spans": [
              [
                0,
                22
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/structural::few-leaf-functions",
            "conf": 0.4,
            "crit": 3,
            "desc": "Binary has very few leaf functions",
            "spans": [
              [
                0,
                29
              ]
            ]
          },
          {
            "id": "metadata/build/artifact::stripped-toolchain-comment",
            "conf": 1.0,
            "crit": 3,
            "desc": "ELF omits compiler metadata (.comment)"
          }
        ]
      }
    ]
  }
}