{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.0028972518630325794,
        "class": 0
      }
    ],
    "prob": 0.0028972519,
    "class": 0,
    "models": [
      {
        "m": "az",
        "prob": 0.0011991817,
        "class": 0
      },
      {
        "m": "az/native",
        "prob": 0.0028972519,
        "class": 0
      },
      {
        "m": "az/elf",
        "prob": 0.0003564077,
        "class": 0
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9953178,
      0.9991311
    ],
    "analyzed_at": "2026-05-03T08:01:22Z"
  },
  "path": "gcrt1.o",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(AsEr)Md₂(Bi₄He)",
        "x": 3,
        "id": 0,
        "ms": {
          "elf": {
            "e_type": 1.0,
            "has_note": true,
            "e_machine": 62.0,
            "class_bits": 64.0,
            "note_count": 2.0,
            "has_eh_frame": true,
            "symtab_count": 36.0,
            "little_endian": true,
            "section_header_count": 15.0,
            "section_relocation_group_count": 2.0
          },
          "binary": {
            "code_size": 133.0,
            "file_size": 3288.0,
            "has_overlay": true,
            "code_entropy": 4.15,
            "data_entropy": 0.75,
            "export_count": 3.0,
            "overlay_size": 961.0,
            "string_count": 44.0,
            "overlay_ratio": 0.29,
            "section_count": 13.0,
            "avg_complexity": 1.67,
            "function_count": 3.0,
            "max_complexity": 3.0,
            "string_density": 338.77,
            "overall_entropy": 2.28,
            "overlay_entropy": 1.0,
            "avg_basic_blocks": 1.67,
            "avg_section_size": 173.54,
            "entropy_variance": 1.36,
            "function_density": 23.1,
            "avg_function_size": 36.67,
            "avg_string_length": 13.2,
            "complexity_per_kb": 12.83,
            "max_string_length": 26.0,
            "avg_string_entropy": 2.89,
            "code_to_data_ratio": 0.06,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.11,
            "total_basic_blocks": 5.0,
            "string_length_stddev": 5.31,
            "largest_section_ratio": 0.26,
            "sentence_string_count": 1.0,
            "sentence_string_ratio": 0.02,
            "function_analysis_depth": 2.0,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            81,
            "PTE1"
          ],
          [
            345,
            "GCC: (GNU) 15.2.1 20260209"
          ],
          [
            1441,
            "__abi_tag"
          ],
          [
            1451,
            "called.0"
          ],
          [
            1460,
            "__stack_chk_fail_local"
          ],
          [
            1483,
            "__GI___vsprintf_chk"
          ],
          [
            1503,
            "__monstartup"
          ],
          [
            1516,
            "__GI___memmove_chk"
          ],
          [
            1535,
            "__GI_memset"
          ],
          [
            1547,
            "__GI___memset_chk"
          ],
          [
            1565,
            "_dl_relocate_static_pie"
          ],
          [
            1589,
            "__executable_start"
          ],
          [
            1608,
            "__GI___memcpy_chk"
          ],
          [
            1626,
            "__GI_strcat"
          ],
          [
            1638,
            "__GI_memmove"
          ],
          [
            1651,
            "etext"
          ],
          [
            1657,
            "__GI_memcpy"
          ],
          [
            1669,
            "__GI_strncpy"
          ],
          [
            1682,
            "__GI_strcpy"
          ],
          [
            1694,
            "__GI___strcpy_chk"
          ],
          [
            1712,
            "__GI___stpcpy_chk"
          ],
          [
            1730,
            "atexit"
          ],
          [
            1737,
            "__GI___vfprintf_chk"
          ],
          [
            1757,
            "_mcleanup"
          ],
          [
            1767,
            "__GI___mempcpy_chk"
          ],
          [
            1786,
            "_GLOBAL_OFFSET_TABLE_"
          ],
          [
            1808,
            "__GI___vsyslog_chk"
          ],
          [
            1827,
            "_IO_stdin_used"
          ],
          [
            1842,
            "__libc_start_main"
          ],
          [
            1860,
            "__data_start"
          ],
          [
            1873,
            "__GI_strlen"
          ],
          [
            1885,
            "__gmon_start__"
          ],
          [
            2193,
            ".symtab"
          ],
          [
            2201,
            ".strtab"
          ],
          [
            2209,
            ".shstrtab"
          ],
          [
            2219,
            ".rela.text"
          ],
          [
            2230,
            ".rela.eh_frame"
          ],
          [
            2245,
            ".data"
          ],
          [
            2251,
            ".bss"
          ],
          [
            2256,
            ".comment"
          ],
          [
            2265,
            ".note.gnu.property"
          ],
          [
            2284,
            ".note.GNU-stack"
          ],
          [
            2300,
            ".note.ABI-tag"
          ],
          [
            2314,
            ".rodata.cst4"
          ]
        ],
        "sz": 3288,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 2.89"
            ],
            "i": "metadata/binary/metrics::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Tiny ELF binary (\u003c 4KB)",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics::tiny-elf",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "binary.file_size = 3288.00"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.function_count = 3.00"
            ],
            "i": "metadata/binary/metrics::few-functions-3",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF imports zero needed libraries",
            "e": [
              "binary.dependency_count = 0.00"
            ],
            "i": "metadata/binary/linking::elf-needed-libs-zero",
            "l": 2
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 3.00"
            ],
            "i": "metadata/binary/symbols::has-exports",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics::elf64-class",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 1.67"
            ],
            "i": "metadata/binary/metrics::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.28"
            ],
            "i": "metadata/binary/metrics::low-overall-entropy-binary",
            "l": 1
          },
          {
            "d": "Few detected functions (stub-like or analysis-limited)",
            "e": [
              "binary.function_count = 3.00"
            ],
            "i": "metadata/binary/metrics::no-functions",
            "l": 2
          },
          {
            "a": "T1106",
            "c": 0.949999988079071,
            "d": "ELF ET_DYN binary type",
            "e": [
              "elf.e_type = 1.00"
            ],
            "i": "objectives/evasion/anti-av/syscall::elf-et-dyn",
            "l": 1,
            "m": "B0009"
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "gcrt1.o"
            ],
            "i": "metadata/binary/metrics::small-elf-binary",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Sparse visible string surface",
            "e": [
              "binary.string_count = 44.00"
            ],
            "i": "objectives/anti-static/obfuscation/control-flow/native::sparse-strings",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is not position-independent (fixed load address)",
            "e": [
              "binary.is_pie = 0.00"
            ],
            "i": "metadata/hardening::no-pie",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "Low average code complexity",
            "e": [
              "binary.avg_complexity = 1.67"
            ],
            "i": "metadata/binary/metrics::low-average-complexity",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Very few basic blocks (analysis-limited or sparse)",
            "e": [
              "binary.total_basic_blocks = 5.00"
            ],
            "i": "metadata/binary/metrics::few-basic-blocks",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Binary not position-independent (no ASLR)",
            "e": [
              "elf.e_type = 1.00"
            ],
            "i": "metadata/hardening::no-pie-struct",
            "l": 3
          },
          {
            "c": 0.75,
            "d": "ELF lacks dynamic linker sections",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/linking::static-linked-heuristic",
            "l": 3
          },
          {
            "c": 0.75,
            "d": "ELF lacks dynamic linker sections",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/hardening::static-linked-heuristic",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Statically linked binary",
            "e": [
              "elf.class_bits = 64.00",
              "binary.dependency_count = 0.00"
            ],
            "i": "metadata/binary/linking::static-linked",
            "l": 3
          }
        ],
        "sha": "cb92e4562583a65523b67abf650b2ae0bfe80887bacb9b52ab74e44c1ca8d35b",
        "path": "gcrt1.o",
        "type": "elf"
      }
    ],
    "tv": "b2c18"
  }
}